Function at 0x403db7
Capabilities:
Copy file
Create directory
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x490
push esi
mov dword [ebp - 0x10], 0x78ea2189
mov dword [ebp - 0x60], 0x4c56f655
mov dword [ebp - 0x40], 0x67ad96c
mov dword [ebp - 0x58], 0x511b7c29
mov dword [ebp - 0x1c], 0x7f744afb
mov dword [ebp - 0x5c], 0xbc5b5bd
mov dword [ebp - 8], 0x4659ee16
mov dword [ebp - 0x54], 0x7bc6b025
mov dword [ebp - 0x34], 0x37837059
mov dword [ebp - 0x30], 0x17643edc
mov dword [ebp - 0x24], 0x21496f0
mov dword [ebp - 4], 0x4990eca6
mov dword [ebp - 0x6c], 0x4f283546
mov dword [ebp - 0x64], 0x52a213d
mov dword [ebp - 0x2c], 0x1657ccd0
mov dword [ebp - 0x20], 0x6532eef3
mov dword [ebp - 0x68], 0x454f0d39
mov dword [ebp - 0x3c], 0x25acdca
mov dword [ebp - 0x44], 0x36cf089
mov dword [ebp - 0x50], 0x589608e3
mov dword [ebp - 0x38], 0x28d41c48
mov dword [ebp - 0x74], 0xafaa6b9
mov dword [ebp - 0x4c], 0x3a8f33bb
mov dword [ebp - 0x48], 0x4e61e723
mov dword [ebp - 0x14], 0x34c30ae1
mov dword [ebp - 0x70], 0x6c9f9b1
mov dword [ebp - 0x28], 0x3c49d0ec
mov dword [ebp - 0x18], 0x7d1bd07a
mov dword [ebp - 0xc], 0x609d9e1c
sub dword [ebp - 0x10], 0x1dd541ca
sub dword [ebp - 0x10], 0x60b537df
add dword [ebp - 0x10], 0x4427c9c4
sub dword [ebp - 0x10], 0x77253dc2
add dword [ebp - 0x10], 0x38825e74
sub dword [ebp - 0x10], 0x7fae27c9
sub dword [ebp - 0x10], 0x79830353
add dword [ebp - 0x10], 0x22dc48a9
add dword [ebp - 0x40], 0x6ee70e
add dword [ebp - 0x58], 0x4c637722
add dword [ebp - 0x58], 0x2f6d5a07
add dword [ebp - 8], 0x1ee609d3
add dword [ebp - 0x5c], 0x46256eb7
add dword [ebp - 8], 0x52826d60
add dword [ebp - 0x58], 0x2dd64314
sub dword [ebp - 0x5c], 0x15f607e4
add dword [ebp - 8], 0x48443f03
sub dword [ebp - 0x58], 0x71de80c1
add dword [ebp - 8], 0x5f2e6438
sub dword [ebp - 0x34], 0x4487bb7c
add dword [ebp - 0x10], 0x36dd151c
add dword [ebp - 0x60], 0x54c0e364
sub dword [ebp - 0x54], 0x2a58babb
add dword [ebp - 0x58], 0x31c2a688
add dword [ebp - 0x10], 0x23855c12
sub dword [ebp - 0x5c], 0x504654fa
add dword [ebp - 0x40], 0x3dcbbe18
add dword [ebp - 0x54], 0x244fd2fe
add dword [ebp - 8], 0x54a37c2
sub dword [ebp - 0x10], 0x243f1809
add dword [ebp - 0x30], 0x2b6767de
sub dword [ebp - 0x40], 0x53a65a29
add dword [ebp - 0x60], 0x4c3fdb00
sub dword [ebp - 0x5c], 0x546b4ddc
sub dword [ebp - 0x30], 0x8bc3fb4
add dword [ebp - 0x54], 0x75e81eee
sub dword [ebp - 0x10], 0x4255851b
add dword [ebp - 0x1c], 0x6ecd6380
sub dword [ebp - 0x24], 0x2770fb2a
add dword [ebp - 0x20], 0x2c5de5d8
sub dword [ebp - 0x64], 0x22fac472
add dword [ebp - 0x6c], 0x5a1c2bb4
add dword [ebp - 0x54], 0x54d8ecaa
sub dword [ebp - 0x5c], 0x46262e62
add dword [ebp - 0x20], 0x6551053
add dword [ebp - 0x34], 0x4b6fdc04
add dword [ebp - 0x34], 0x3a0dbc85
sub dword [ebp - 0x40], 0x60a44abe
sub dword [ebp - 0x64], 0x616e0a07
add dword [ebp - 0x34], 0xe495d63
sub dword [ebp - 0x60], 0x13487c76
add dword [ebp - 0x6c], 0x56c277e4
add dword [ebp - 0x34], 0x14870e1f
add dword [ebp - 0x3c], 0x4c0de4af
add dword [ebp - 0x64], 0x7bf4d7e8
add dword [ebp - 4], 0x680186e
sub dword [ebp - 0x64], 0x3eea4219
sub dword [ebp - 8], 0xe31d955
sub dword [ebp - 0x54], 0x35f86dd9
sub dword [ebp - 0x54], 0x3dff57fa
add dword [ebp - 0x5c], 0x2b51c3ce
add dword [ebp - 0x58], 0x1befd10f
add dword [ebp - 0x68], 0x484b4049
sub dword [ebp - 0x58], 0x7c1ef2e2
sub dword [ebp - 8], 0x6fb81645
add dword [ebp - 0x2c], 0x4b608e35
add dword [ebp - 0x68], 0x4b5d405c
sub dword [ebp - 0x5c], 0x1a3059ef
add dword [ebp - 0x30], 0x74ab2ddc
sub dword [ebp - 0x20], 0x4ef53f20
add dword [ebp - 0x54], 0x18b94c28
add dword [ebp - 0x4c], 0x1259ec2f
add dword [ebp - 0x10], 0x631684bf
add dword [ebp - 0x40], 0x69a6e271
add dword [ebp - 0x60], 0x78bcde06
add dword [ebp - 0x5c], 0x2b81e20
sub dword [ebp - 0x10], 0x2ef859da
sub dword [ebp - 0x40], 0x77360994
add dword [ebp - 0x6c], 0x1f36cecb
add dword [ebp - 0x54], 0x648c8e6c
add dword [ebp - 0x38], 0x7c750c57
add dword [ebp - 8], 0x79bbe8f9
add dword [ebp - 0x34], 0xdd259f5
sub dword [ebp - 0x2c], 0x431ba4d5
sub dword [ebp - 0x4c], 0x51e22a00
add dword [ebp - 0x4c], 0x7a0974cc
sub dword [ebp - 0x5c], 0x744ad64e
sub dword [ebp - 0x54], 0x10b97c95
sub dword [ebp - 0x48], 0x3491834a
add dword [ebp - 0x14], 0x7d205dc5
add dword [ebp - 0x74], 0x4a01090a
add dword [ebp - 4], 0x72a947b2
add dword [ebp - 0x5c], 0x3ebf96b5
add dword [ebp - 0x58], 0x61b13e54
sub dword [ebp - 4], 0x2b39743e
add dword [ebp - 4], 0xcc4c43a
add dword [ebp - 0x50], 0x4d13fa81
sub dword [ebp - 0x20], 0x2512892e
sub dword [ebp - 0x24], 0x7a567ba1
sub dword [ebp - 0x70], 0x524f2c05
sub dword [ebp - 0x54], 0x17079e47
add dword [ebp - 4], 0x24bd9487
add dword [ebp - 4], 0x73df155c
add dword [ebp - 0x14], 0x7296efd5
add dword [ebp - 0x60], 0x4b7b7bc3
sub dword [ebp - 0x28], 0x487ea33c
sub dword [ebp - 0x58], 0x3f874266
sub dword [ebp - 0x34], 0x73e0e833
add dword [ebp - 0x60], 0x2e7154
add dword [ebp - 0x70], 0x59b53177
add dword [ebp - 0x60], 0x30eefb10
add dword [ebp - 0x64], 0x5e3cc7c5
sub dword [ebp - 0x70], 0x79589b6b
add dword [ebp - 0x4c], 0x301cf8f0
add dword [ebp - 0x34], 0x36a7d5e
add dword [ebp - 0x68], 0x27a2f31c
sub dword [ebp - 0x1c], 0x9702847
sub dword [ebp - 0x18], 0x29a7359
add dword [ebp - 0x34], 0x5954e8ce
add dword [ebp - 0x44], 0x601918f0
add dword [ebp - 0x10], 0xc56aa40
sub dword [ebp - 0xc], 0x5e90bc47
sub dword [ebp - 0x10], 0x1cb5b284
sub dword [ebp - 0x24], 0x7bbadab0
sub dword [ebp - 0x74], 0x260c0b1b
xor esi, esi
cmp dword [0x81b894], 0x9e
jne 0x404256
push esi
push esi
push esi
call fcn.00405997
push esi
push esi
push esi
push esi
call fcn.0040597a
push esi
call fcn.004058c4
add esp, 0x20
lea ecx, [ebp - 0x90]
call fcn.00404b6e
call fcn.004057ad
push esi
call fcn.004057a2
push esi
call fcn.004056c2
push esi
push esi
call fcn.00405633
push esi
call fcn.004055ff
add esp, 0x14
lea ecx, [ebp - 0x90]
call fcn.00404bff
mov eax, dword [0x4182e4]
mov dword [0x81b894], eax
cmp eax, 0x81
jne 0x40432a
push esi
push 0x4013a0
lea eax, [ebp - 0x490]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push dword [ebp - 4]
push esi
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
push 0x4013e4
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push esi
push 0x401404
push 0x40141c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExW]
push 0x40143c
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_ClearCommError]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryA]
push 0x401384
push 0x40144c
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleTitleA]
push esi
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push esi
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push esi
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
push esi
call dword [sym.imp.KERNEL32.dll_AddAtomA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
push 0x401468
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov eax, dword [0x418008]
mov dword [0x81bca8], eax
call fcn.004039c2
xor eax, eax
pop esi
leave
ret 0x10