Function at 0x408980
Capabilities:
Copy file
Get common file path
Set file attributes

Disassembly:
push ebx
push esi
push edi
push 0x429ba0
push 0x50
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x429ba0
call edi
cmp eax, 3
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push 0x429ba0
jle 0x4089c4
push 0x41e0d4
push 0x43c100
call esi
add esp, 0xc
jmp 0x4089cb
push 0x43c100
call ebx
cmp dword [0x43915c], 0
jle 0x4089e2
cmp byte [0x43c100], 0x61
je 0x4089e2
call fcn.00407f30
push 0x43c100
call edi
cmp eax, 3
jne 0x4089f5
mov byte [0x43c102], 0
push 0x439020
push 0x429ba0
call ebx
push 0x429ba0
call fcn.0040a5e1
add esp, 4
cmp dword [0x439760], 5
jle 0x408a1c
call fcn.00402430
inc dword [0x439154]
push ebp
call fcn.00408400
mov eax, dword [0x43ccc4]
mov ecx, dword [0x439154]
push eax
push ecx
call fcn.004023a0
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 8
push 0x32
call ebp
cmp byte [esp + 0x14], 0
jne 0x408b28
push 0x439020
push str._schenznw6.exe
push 0x43c240
call esi
mov edi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
add esp, 0xc
push 0x20
push 0x43c240
call edi
push 0x43c240
call fcn.00403a00
push 0x439020
push str._schenznwb.exe
push 0x43c240
call esi
add esp, 0x10
push 0x20
push 0x43c240
call edi
push 0x43c240
call fcn.00403a00
mov edx, dword [0x42cc58]
mov eax, dword [0x439130]
push edx
push eax
call fcn.00407960
add esp, 0xc
test eax, eax
jne 0x408ae1
push 0x41e070
push 0x43c860
call ebx
push 0
push 0x41c44c
push 0x43c860
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x408b28
cmp dword [0x439744], 1
jne 0x408b28
push 0x439640
push 0x439020
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
push 4
push 0x41de44
test eax, eax
je 0x408b0c
push 0x41e03c
jmp 0x408b11
push 0x41e000
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x408b28
mov dword [0x439744], 2
inc dword [0x439154]
call fcn.00408400
mov ecx, dword [0x43ccc4]
mov edx, dword [0x439154]
push ecx
push edx
call fcn.004023a0
push 0x439020
push str._schencyzk.bak
push 0x439540
call esi
push 0x439020
push str._schencyzk.dat
push 0x43c240
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x20
push 0
push 0x43c240
push 0x439540
call edi
push 0x439020
push str._schenpyck.bak
push 0x439540
call esi
push 0x439020
push str._schenpyck.dat
push 0x43c240
call esi
add esp, 0x18
push 0
push 0x43c240
push 0x439540
call edi
push 0x32
call ebp
mov eax, dword [0x439154]
mov ecx, dword [0x43ccc4]
add eax, 2
push ecx
push eax
mov dword [0x439154], eax
call fcn.004023a0
add esp, 8
mov edi, 1
pop ebp
push 0x439020
cmp dword [0x43c5b8], edi
jne 0x408df3
push str._schen320.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schen321.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schen640.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schen641.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
add esp, 0x40
push 0x439020
push str._schenhu4.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schenhu64.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schenhu32.ime
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
add esp, 0x30
push 0x439020
cmp dword [0x43c98c], edi
jne 0x408d7a
push str._scsrf732.dll
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._scsrf764.dll
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
add esp, 0x20
cmp dword [0x43c3ac], edi
je 0x408e5d
push 0x439020
push str._schensrf.dll
push 0x439540
call esi
push 0x439020
push str._schsrf10.dll
push 0x43c240
call esi
push 0x439540
call fcn.0040a5b1
push 0x439540
push 0x43c240
call fcn.0040acfe
push 0x439020
push str._schensrf6.dll
push 0x439540
call esi
push 0x439020
push str._schsrf610.dll
push 0x43c240
call esi
push 0x439540
call fcn.0040a5b1
add esp, 0x40
push 0x439540
push 0x43c240
call fcn.0040acfe
add esp, 8
jmp 0x408e5d
push str._schensrf.dll
push 0x439540
call esi
push 0x439020
push str._scsrf732.dll
push 0x43c240
call esi
push 0x439540
call fcn.0040a5b1
push 0x439540
push 0x43c240
call fcn.0040acfe
push 0x439020
push str._schensrf6.dll
push 0x439540
call esi
push 0x439020
push str._scsrf764.dll
push 0x43c240
call esi
push 0x439540
call fcn.0040a5b1
add esp, 0x40
push 0x439540
push 0x43c240
call fcn.0040acfe
add esp, 8
jmp 0x408e5d
push str._scsrf732.dll
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._scsrf764.dll
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schensrf.dll
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
push 0x439020
push str._schensrf6.dll
push 0x439540
call esi
push 0x439540
call fcn.0040a5b1
add esp, 0x40
push 0xc8
push 0x43c780
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov eax, dword [0x439154]
mov edx, dword [0x43ccc4]
add eax, edi
push edx
push eax
mov dword [0x439154], eax
call fcn.004023a0
add esp, 8
cmp dword [0x43c5b8], edi
jne 0x408eef
cmp dword [0x439620], 0x20
jne 0x408eb0
push 3
push str.chensrf.dll
push str.chensrf.dll
call fcn.00407ec0
add esp, 0xc
jmp 0x408f01
push edi
push str.chensrf.dll
push str.chensrf.dll
call fcn.00407ec0
mov eax, dword [0x439154]
mov ecx, dword [0x43ccc4]
add eax, edi
push ecx
push eax
mov dword [0x439154], eax
call fcn.004023a0
push 2
push str.chensrf6.dll
push str.chensrf6.dll
call fcn.00407ec0
add esp, 0x20
jmp 0x408f01
mov ebx, dword [esp + 0x10]
push ebx
call fcn.00408690
add esp, 4
cmp bl, 1
je 0x408f65
mov eax, dword [0x439154]
mov edx, dword [0x43ccc4]
add eax, edi
push edx
push eax
mov dword [0x439154], eax
call fcn.004023a0
push 0
push str.chendel8.exe
push str.chendel8.exe
call fcn.00407ec0
mov eax, dword [0x439154]
mov ecx, dword [0x43ccc4]
add eax, edi
push ecx
push eax
mov dword [0x439154], eax
call fcn.004023a0
call fcn.00402cb0
mov eax, dword [0x439154]
mov edx, dword [0x43ccc4]
add eax, edi
push edx
push eax
mov dword [0x439154], eax
call fcn.004023a0
add esp, 0x24
pop edi
pop esi
pop ebx
ret