Function at 0x618984
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x61898c
push ecx
push ebx
push esi
mov eax, 0x60d6c4
call fcn.0040b434
xor eax, eax
push ebp
push 0x618d2a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x62ba5c]
cmp byte [eax], 0
mov eax, dword [0x62b8e0]
setne byte [eax]
mov edx, dword [0x62be34]
xor eax, eax
call fcn.0040467c
lea edx, [ebp - 0x14]
mov eax, dword [0x62be34]
mov eax, dword [eax]
call fcn.00470934
mov edx, dword [ebp - 0x14]
mov eax, dword [0x62b868]
call fcn.00407768
lea edx, [ebp - 0x18]
mov eax, dword [0x62be34]
mov eax, dword [eax]
call fcn.00470934
mov edx, dword [ebp - 0x18]
mov eax, dword [0x62b868]
call fcn.00407768
lea edx, [ebp - 0x1c]
mov eax, dword [0x62be34]
mov eax, dword [eax]
call fcn.00470970
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x62be98]
call fcn.00407768
mov dl, 1
mov eax, dword [0x556ba0]
call fcn.00405408
mov edx, dword [0x62bbcc]
mov dword [edx], eax
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040467c
mov edx, dword [ebp - 0x20]
mov eax, dword [0x62bbcc]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00556fe4
mov dl, 1
mov eax, dword [0x48ab58]
call fcn.00405408
mov dword [0x632f18], eax
mov eax, dword [0x62bbcc]
mov eax, dword [eax]
mov ecx, dword [0x632f18]
mov edx, 0x618d44
call fcn.005574a0
test al, al
je 0x618b30
mov dl, 1
mov eax, dword [0x60bc98]
call fcn.0060c1dc
mov edx, dword [0x62b9c4]
mov dword [edx], eax
mov eax, dword [0x62b9c4]
mov eax, dword [eax]
mov edx, dword [0x632f18]
call fcn.0060bfac
test al, al
jne 0x618b86
push 0
push 0x618d4c
mov eax, dword [0x62b9c4]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x18]
inc eax
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x28]
call fcn.0046fe18
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
mov edx, 0x618d74
call fcn.00407c4c
mov eax, dword [ebp - 0x24]
call fcn.004077f4
push eax
push 0
call sub.user32.dll_MessageBoxW
mov eax, dword [0x632f18]
xor edx, edx
mov dword [0x632f18], edx
call fcn.00405438
mov eax, dword [0x62bbcc]
mov eax, dword [eax]
mov edx, dword [0x62bbcc]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00405438
mov eax, dword [0x62b9c4]
mov eax, dword [eax]
mov edx, dword [0x62b9c4]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00405438
jmp 0x618d02
push 0
push 0x618d4c
push 0x618db8
push 0
call sub.user32.dll_MessageBoxW
mov eax, dword [0x632f18]
xor edx, edx
mov dword [0x632f18], edx
call fcn.00405438
mov eax, dword [0x62bbcc]
mov eax, dword [eax]
mov edx, dword [0x62bbcc]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00405438
mov eax, dword [0x62b9c4]
mov eax, dword [eax]
mov edx, dword [0x62b9c4]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00405438
jmp 0x618d02
lea edx, [ebp - 0x2c]
mov eax, 1
call fcn.0040467c
mov eax, dword [ebp - 0x2c]
mov edx, 0x618e08
call fcn.00407ef0
jne 0x618c86
lea edx, [ebp - 0x30]
mov eax, 2
call fcn.0040467c
cmp dword [ebp - 0x30], 0
je 0x618c86
mov bl, 0xb
lea edx, [ebp - 0x38]
mov eax, 2
call fcn.0040467c
mov ecx, dword [ebp - 0x38]
mov edx, dword [0x62b868]
mov edx, dword [edx]
lea eax, [ebp - 0x34]
call fcn.00407c4c
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x3c]
call fcn.004077f4
push eax
call sub.kernel32.dll_DeleteFileW
cmp eax, 1
sbb eax, eax
inc eax
push 0
lea edx, [ebp - 0x44]
mov eax, 2
call fcn.0040467c
mov ecx, dword [ebp - 0x44]
mov edx, dword [0x62b868]
mov edx, dword [edx]
lea eax, [ebp - 0x40]
call fcn.00407c4c
mov eax, dword [ebp - 0x40]
call fcn.004077f4
push eax
mov eax, dword [0x62be34]
mov eax, dword [eax]
call fcn.004077f4
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
jne 0x618c4c
push 0x3e8
call sub.kernel32.dll_Sleep_2
dec bl
jne 0x618bbf
push 0x618e24
mov eax, dword [0x62b868]
push dword [eax]
lea edx, [ebp - 0x4c]
mov eax, 2
call fcn.0040467c
push dword [ebp - 0x4c]
push 0x618e34
lea eax, [ebp - 0x48]
mov edx, 4
call fcn.00407d30
mov eax, dword [ebp - 0x48]
xor edx, edx
call fcn.0060c72c
jmp 0x618cc4
mov eax, dword [0x62bbf8]
mov eax, dword [eax]
call fcn.0051dcd0
mov eax, dword [0x62bbf8]
mov eax, dword [eax]
mov dl, 1
call fcn.0051fa0c
mov ecx, dword [0x62b99c]
mov eax, dword [0x62bbf8]
mov eax, dword [eax]
mov edx, dword [0x60a540]
call fcn.0051dce8
mov eax, dword [0x62bbf8]
mov eax, dword [eax]
call fcn.0051de38
mov eax, dword [0x632f18]
xor edx, edx
mov dword [0x632f18], edx
call fcn.00405438
mov eax, dword [0x62bbcc]
mov eax, dword [eax]
mov edx, dword [0x62bbcc]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00405438
mov eax, dword [0x62b9c4]
mov eax, dword [eax]
mov edx, dword [0x62b9c4]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00405438
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x618d31
lea eax, [ebp - 0x4c]
mov edx, 4
call fcn.00407760
lea eax, [ebp - 0x38]
mov edx, 0xa
call fcn.00407760
ret