Function at 0x417534
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
push ebx
push esi
xor ebx, ebx
push edi
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0040eb0a
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x263]
mov byte [ebp - 0x264], bl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x264]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp byte [ebp - 0x264], 0x5c
jne 0x4176d5
cmp byte [ebp - 0x263], 0x5c
jne 0x4176d5
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
push str..exe
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
push eax
call fcn.00420ef6
pop ecx
pop ecx
push str.CopyFileExA
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push 0x40581a
push ebx
push 0x12
push dword [ebp + 8]
mov dword [ebp - 8], eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, 0x422
push str.Copying_files._Please_wait...
push edi
push eax
mov dword [ebp - 4], eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x5c]
call fcn.00422215
cmp dword [ebp - 8], ebx
je 0x417669
lea eax, [ebp - 0x1c]
push eax
push edi
push dword [ebp - 4]
call esi
mov esi, dword [sym.imp.USER32.dll_GetClientRect]
push eax
call esi
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 4]
call esi
mov esi, dword [ebp - 0x14]
push 0xffffff
sub esi, dword [ebp - 0x1c]
push 0xf
sub esi, 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
mov eax, dword [ebp - 0x20]
push 2
push 0xc56b32
push 0x13
add eax, 0xffffffdd
push esi
push eax
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x5c]
sub eax, esi
sub eax, 0xf
push eax
push dword [ebp - 4]
call fcn.0042235f
cmp dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
push ebx
jne 0x417688
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
jmp 0x4176a6
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x160]
push 0x417a90
push eax
lea eax, [ebp - 0x264]
push eax
call dword [ebp - 8]
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp esi, ebx
je 0x4176cd
lea eax, [ebp - 0x160]
mov ecx, 0x482bc0
push eax
call fcn.0041f0d8
mov byte [0x4837ae], 1
lea ecx, [ebp - 0x5c]
call fcn.00422226
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push dword [ebp + 8]
mov esi, 0x482408
mov ecx, esi
call fcn.0041bdad
mov ecx, esi
call fcn.00419308
test eax, eax
jge 0x417708
push ebx
push str.Couldnt_read_TOC._Aborting.
push ebx
mov ecx, esi
call fcn.0041e1f3
jmp 0x417975
mov ecx, esi
call fcn.00418a04
cmp dword [0x48298c], ebx
mov dword [ebp + 8], ebx
jle 0x4177c2
push dword [ebp + 8]
mov ecx, 0x482980
call fcn.00421fff
mov edi, eax
cmp edi, ebx
je 0x41775d
lea eax, [edi + 0x14]
mov ecx, esi
push eax
call fcn.00418e4f
lea eax, [edi + 0x20]
mov ecx, esi
push eax
call fcn.00418e4f
lea eax, [edi + 0x2c]
mov ecx, esi
push eax
call fcn.00418e4f
lea eax, [edi + 0x38]
mov ecx, esi
push eax
call fcn.00418e4f
cmp dword [edi + 0x10], 0xffffffff
jne 0x4177b0
cmp dword [edi + 0x48], ebx
jne 0x4177b0
lea eax, [edi + 0x14]
lea ecx, [edi + 0x48]
push eax
call fcn.0041f146
lea ecx, [edi + 0x48]
call fcn.0041ff07
push eax
call fcn.00428e4e
pop ecx
mov dword [edi + 0x54], eax
push 1
push str._IT_Type_
mov ecx, edi
call fcn.0041f3c0
test al, al
je 0x4177b0
mov edi, dword [edi + 0x54]
cmp edi, 1
je 0x4177aa
cmp edi, 2
je 0x4177aa
cmp edi, 4
jne 0x4177b0
mov dword [0x482b1c], edi
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [0x48298c]
jl 0x41771e
cmp dword [0x482b84], ebx
je 0x4177de
cmp byte [0x48375c], bl
je 0x4177de
cmp byte [0x48375d], bl
je 0x41798e
mov ecx, esi
call fcn.0041dfe7
mov ecx, esi
call fcn.0041cdff
test byte [0x48260c], 0x40
je 0x41782d
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
mov ecx, 0x482c78
push eax
call fcn.0042679a
lea eax, [ebp - 0x160]
mov ecx, 0x482aa0
push eax
call fcn.0041f0d8
mov ecx, esi
call fcn.0041cc57
test al, al
jne 0x417975
cmp dword [0x482acc], ebx
jne 0x417889
mov ecx, esi
call fcn.0041cb15
test al, al
jne 0x417975
cmp dword [0x482acc], ebx
jne 0x417889
mov ecx, esi
call fcn.00418139
test al, al
je 0x41798e
cmp dword [0x482acc], ebx
jne 0x417889
mov ecx, esi
call fcn.0041ec5c
test eax, eax
jne 0x417889
cmp dword [0x482ac8], ebx
je 0x417975
test byte [0x48260c], 0x40
je 0x4178a2
test byte [0x482613], 8
je 0x4178a2
and byte [0x482613], 0xf7
cmp dword [0x482acc], ebx
jne 0x4178b9
mov ecx, esi
call fcn.0041ed1f
test al, al
je 0x417975
mov ecx, esi
call fcn.0041ac11
mov edi, eax
cmp edi, ebx
jge 0x417927
lea ecx, [ebp - 0x18]
call fcn.0041ef35
push edi
lea eax, [ebp - 0x18]
push str.Initialization_failed._Aborting._Error_code:__d
push eax
call fcn.0041f62d
add esp, 0xc
lea ecx, [ebp - 0x18]
push ebx
call fcn.0041ff07
push eax
push ebx
mov ecx, esi
call fcn.0041e1f3
cmp byte [0x4837ae], bl
je 0x41790b
mov ecx, 0x482bc0
call fcn.0041ff07
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x4837ad], bl
lea ecx, [ebp - 0x18]
setne al
mov esi, eax
call fcn.0041f06b
mov eax, esi
jmp 0x417a89
cmp dword [0x4825e0], ebx
je 0x417955
call fcn.004216e6
test al, al
jne 0x417955
push ebx
mov ecx, 0x4835cc
call fcn.0041ff07
push eax
push ebx
mov ecx, esi
call fcn.0041e1f3
push 1
mov ecx, esi
call fcn.0041cffe
cmp byte [0x48375c], bl
push ebx
je 0x417a27
mov edi, 0x482d70
mov ecx, edi
call fcn.004143e6
cmp al, bl
mov byte [ebp + 0xb], al
jne 0x41799e
cmp byte [0x4837ae], bl
je 0x41798e
mov ecx, 0x482bc0
call fcn.0041ff07
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x4837ad], bl
setne al
jmp 0x417a89
cmp dword [0x482acc], ebx
je 0x4179b2
mov ecx, esi
call fcn.00418701
mov byte [ebp + 0xb], al
jmp 0x4179f3
mov eax, dword [0x482610]
test al, 2
je 0x4179c4
mov ecx, edi
call fcn.00413c08
jmp 0x4179f3
test al, 4
je 0x4179d2
test ah, 0x80
je 0x4179d2
push 1
pop edx
jmp 0x4179d4
xor edx, edx
test al, 8
je 0x4179e2
test ah, 0x40
je 0x4179e2
push 1
pop ecx
jmp 0x4179e4
xor ecx, ecx
shr eax, 0x1b
and al, 1
push eax
push edx
push ecx
mov ecx, edi
call fcn.00414da8
cmp byte [0x4837ae], bl
je 0x417a0c
mov ecx, 0x482bc0
call fcn.0041ff07
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x4837ad], bl
je 0x417a21
xor eax, eax
cmp byte [ebp + 0xb], bl
jmp 0x417a82
movzx eax, byte [ebp + 0xb]
jmp 0x417a89
mov ecx, esi
call fcn.0041aa06
mov ecx, esi
call fcn.0041d0b9
cmp dword [0x482acc], ebx
mov edi, eax
je 0x417a4e
mov ecx, esi
call fcn.00418701
neg al
sbb eax, eax
neg eax
mov edi, eax
push 1
mov ecx, esi
call fcn.0041e43f
cmp byte [0x4837ae], bl
je 0x417a70
mov ecx, 0x482bc0
call fcn.0041ff07
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x4837ad], bl
je 0x417a87
xor eax, eax
cmp edi, ebx
sete al
jmp 0x417a89
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10