Function at 0x40a2c0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Copy file
Create directory
Get file attributes
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x40e043
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcc
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
push eax
push ecx
mov dword [esp + 0xec], 1
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
je 0x40ae54
mov edx, dword [esp + 0xf0]
mov ebp, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push edx
call ebp
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x40a3fe
call esi
cmp eax, 2
je 0x40a34a
call esi
cmp eax, 3
jne 0x40a3fe
push ecx
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call sub.MFC42.DLL_CString::CString_1
mov ecx, edi
call fcn.00409c90
test eax, eax
jne 0x40a3fe
lea ecx, [esp + 0xec]
lea edx, [esp + 0x1c]
push ecx
push 0x4135d8
push edx
call sub.MFC42.DLL_operator
push 0x4135b8
push eax
lea eax, [esp + 0x1c]
mov byte [esp + 0xec], 2
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe4], 4
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
call sub.MFC42.DLL_AfxMessageBox
lea ecx, [esp + 0x14]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xec]
mov byte [esp + 0xe4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf0]
mov dword [esp + 0xe4], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x40ae84
mov edx, dword [esp + 0xec]
push edx
call ebp
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [esp + 0x20], ebx
jne 0x40a4b1
call esi
cmp eax, 2
je 0x40a420
call esi
lea eax, [esp + 0xec]
lea ecx, [esp + 0x1c]
push eax
push 0x4135d8
push ecx
call sub.MFC42.DLL_operator
push 0x413590
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf0], 5
call sub.MFC42.DLL_operator_2
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe4], 7
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x14]
push 0
push 0
push eax
call sub.MFC42.DLL_AfxMessageBox
lea ecx, [esp + 0x14]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xec]
mov byte [esp + 0xe4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf0]
mov dword [esp + 0xe4], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x40ae84
test bl, 0x10
je 0x40ad53
lea ecx, [esp + 0x28]
call fcn.0040bef0
lea ecx, [esp + 0xec]
push str..
lea edx, [esp + 0x18]
push ecx
push edx
mov byte [esp + 0xf0], 8
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
push 0
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xec], 9
call sub.MFC42.DLL_CFileFind::FindFile
lea ecx, [esp + 0x14]
mov ebx, eax
mov byte [esp + 0xe4], 8
call sub.MFC42.DLL_CString::CString
test ebx, ebx
jne 0x40a5e1
call esi
cmp eax, 5
jne 0x40a554
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CFileFind::Close
push ecx
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call sub.MFC42.DLL_CString::CString_1
mov ecx, edi
call fcn.0040aea0
lea ecx, [esp + 0x28]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CFileFind::CFileFind
jmp 0x40ae54
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [esp + 0xec]
lea edx, [esp + 0x14]
push ecx
push 0x413558
push edx
mov byte [esp + 0xf0], 0xa
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x20]
add esp, 0xc
push 0
push 0
push eax
call sub.MFC42.DLL_AfxMessageBox
mov byte [esp + 0xe4], 8
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CFileFind::CFileFind
lea ecx, [esp + 0xec]
mov byte [esp + 0xe4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf0]
mov dword [esp + 0xe4], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x40ae84
mov edi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ebx, 0xd
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CFileFind::FindNextFileA
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], eax
call sub.MFC42.DLL_CFileFind::IsDots
test eax, eax
jne 0x40acf2
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CFileFind::GetFileName
push eax
lea edx, [esp + 0x18]
push 0x41305c
push edx
mov byte [esp + 0xf0], 0xb
call sub.MFC42.DLL_operator
lea ecx, [esp + 0xa8]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea eax, [esp + 0x14]
lea ecx, [esp + 0xf0]
push eax
lea edx, [esp + 0x88]
push ecx
push edx
call sub.MFC42.DLL_operator_1
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xe8], 0xe
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x84]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], ebx
test al, 1
je 0x40a6aa
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xc0]
and al, 0xfe
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x28]
push 0x10
lea ecx, [esp + 0x2c]
call dword [eax + 0x40]
test eax, eax
je 0x40a95b
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], 0x11
test al, 8
je 0x40a6e8
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xd0]
and al, 0xf7
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], 0x10
test al, 4
je 0x40a711
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xd8]
and al, 0xfb
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], ebx
test al, 2
je 0x40a736
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xd4]
and al, 0xfd
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], 0x14
test al, 0x40
je 0x40a75f
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xcc]
and al, 0xbf
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], 0x13
test al, 0x20
je 0x40a788
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xc4]
and al, 0xdf
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x10]
mov dword [esp + 0xe4], ebx
test al, 0x10
je 0x40a7ad
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xc8]
and al, 0xef
mov dword [esp + 0x10], eax
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CFileFind::GetFileName
mov esi, eax
lea edx, [esp + 0xf0]
push 0x41305c
lea eax, [esp + 0x8c]
push edx
push eax
mov byte [esp + 0xf0], 0x16
call sub.MFC42.DLL_operator_2
push esi
lea ecx, [esp + 0x84]
push eax
push ecx
mov byte [esp + 0xf0], 0x17
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll__mkdir]
add esp, 4
lea ecx, [esp + 0x80]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x88]
mov byte [esp + 0xe4], 0x16
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x90]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x5c]
lea ecx, [esp + 0x28]
push edx
call sub.MFC42.DLL_CFileFind::GetFileName
mov esi, eax
lea eax, [esp + 0xf0]
push 0x41305c
lea ecx, [esp + 0xb0]
push eax
push ecx
mov byte [esp + 0xf0], 0x18
call sub.MFC42.DLL_operator_2
push ecx
mov byte [esp + 0xe8], 0x19
mov edx, esp
mov dword [esp + 0x48], esp
push esi
push eax
push edx
call sub.MFC42.DLL_operator_1
lea eax, [esp + 0xbc]
lea ecx, [esp + 0x2c]
push eax
mov byte [esp + 0xec], 0x1a
call sub.MFC42.DLL_CFileFind::GetFileName
mov esi, eax
lea ecx, [esp + 0xf0]
push 0x41305c
lea edx, [esp + 0xc4]
push ecx
push edx
mov byte [esp + 0xf4], 0x1b
call sub.MFC42.DLL_operator_2
push ecx
mov byte [esp + 0xec], 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push esi
push eax
push ecx
call sub.MFC42.DLL_operator_1
mov byte [esp + 0xec], 0x1e
mov ecx, dword [esp + 0x24]
call fcn.0040a2c0
test eax, eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0xe4], 0x1d
sete byte [esp + 0x1b]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xb8]
mov byte [esp + 0xe4], 0x19
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xac]
mov byte [esp + 0xe4], 0x18
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x5c]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x1b]
mov byte [esp + 0xe4], 8
test al, al
lea ecx, [esp + 0x14]
jne 0x40a599
call sub.MFC42.DLL_CString::CString
jmp 0x40acf2
lea edx, [esp + 0xa0]
lea ecx, [esp + 0x28]
push edx
call sub.MFC42.DLL_CFileFind::GetFileName
mov esi, eax
lea eax, [esp + 0xec]
push 0x41305c
lea ecx, [esp + 0x68]
push eax
push ecx
mov byte [esp + 0xf0], 0x1f
call sub.MFC42.DLL_operator_2
push esi
lea edx, [esp + 0xb8]
push eax
push edx
mov byte [esp + 0xf0], 0x20
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push eax
call ebp
lea ecx, [esp + 0xb4]
mov esi, eax
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x64]
mov byte [esp + 0xe4], 0x1f
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa0]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea eax, [esp + 0x74]
lea ecx, [esp + 0x28]
push eax
call sub.MFC42.DLL_CFileFind::GetFileName
mov ebp, eax
lea ecx, [esp + 0xec]
push 0x41305c
lea edx, [esp + 0xb4]
push ecx
push edx
mov byte [esp + 0xf0], 0x21
call sub.MFC42.DLL_operator_2
push ebp
push eax
lea eax, [esp + 0x74]
mov byte [esp + 0xec], 0x22
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0x80
push eax
call edi
lea ecx, [esp + 0x6c]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xb0]
mov byte [esp + 0xe4], 0x21
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x74]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa4]
push ecx
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CFileFind::GetFileName
mov ebp, eax
lea edx, [esp + 0xf0]
push 0x41305c
lea eax, [esp + 0x90]
push edx
push eax
mov byte [esp + 0xf0], 0x23
call sub.MFC42.DLL_operator_2
push ebp
mov byte [esp + 0xe8], 0x24
push eax
lea ecx, [esp + 0xa4]
push ecx
call sub.MFC42.DLL_operator_1
mov ebp, dword [eax]
lea edx, [esp + 0x50]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe8], 0x25
call sub.MFC42.DLL_CFileFind::GetFileName
mov dword [esp + 0x44], eax
lea eax, [esp + 0xec]
push 0x41305c
lea ecx, [esp + 0x9c]
push eax
push ecx
mov byte [esp + 0xf0], 0x26
call sub.MFC42.DLL_operator_2
mov edx, dword [esp + 0x44]
mov byte [esp + 0xe4], 0x27
push edx
push eax
lea eax, [esp + 0x84]
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x7c]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x98]
mov byte [esp + 0xe4], 0x26
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x50]
mov byte [esp + 0xe4], 0x25
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x9c]
mov byte [esp + 0xe4], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x8c]
mov byte [esp + 0xe4], 0x23
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CFileFind::GetFileName
mov ebp, eax
lea edx, [esp + 0xec]
push 0x41305c
lea eax, [esp + 0x58]
push edx
push eax
mov byte [esp + 0xf0], 0x28
call sub.MFC42.DLL_operator_2
push ebp
lea ecx, [esp + 0x98]
push eax
push ecx
mov byte [esp + 0xf0], 0x29
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push esi
push eax
call edi
lea ecx, [esp + 0x94]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x54]
mov byte [esp + 0xe4], 0x28
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x58]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x70]
lea ecx, [esp + 0x28]
push edx
call sub.MFC42.DLL_CFileFind::GetFileName
mov ebp, eax
lea eax, [esp + 0xf0]
push 0x41305c
lea ecx, [esp + 0x6c]
push eax
push ecx
mov byte [esp + 0xf0], 0x2a
call sub.MFC42.DLL_operator_2
push ebp
lea edx, [esp + 0x64]
push eax
push edx
mov byte [esp + 0xf0], 0x2b
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push esi
push eax
call edi
lea ecx, [esp + 0x60]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x68]
mov byte [esp + 0xe4], 0x2a
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x70]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 4]
test eax, eax
jne 0x40ad2c
lea eax, [esp + 0x48]
lea ecx, [esp + 0x28]
push eax
call sub.MFC42.DLL_CFileFind::GetFileName
mov ebp, eax
lea ecx, [esp + 0xec]
push 0x41305c
lea edx, [esp + 0x7c]
push ecx
push edx
mov byte [esp + 0xf0], 0x2c
call sub.MFC42.DLL_operator_2
push ecx
mov byte [esp + 0xe8], 0x2d
mov ecx, esp
mov dword [esp + 0x50], esp
push ebp
push eax
push ecx
call sub.MFC42.DLL_operator_1
mov ecx, esi
call fcn.0040b220
lea ecx, [esp + 0x78]
mov byte [esp + 0xe4], 0x2c
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x48]
mov byte [esp + 0xe4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0xe4], 8
call sub.MFC42.DLL_CString::CString
mov ebp, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x40a5ec
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CFileFind::Close
lea ecx, [esp + 0x28]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CFileFind::CFileFind
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0xf0]
push edx
push eax
call edi
jmp 0x40ae54
lea ecx, [esp + 0x14]
mov byte [esp + 0xe4], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CFileFind::CFileFind
jmp 0x40ae54
mov ecx, dword [esp + 0xec]
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x80
push ecx
call esi
push 0x5c
lea ecx, [esp + 0xf0]
call sub.MFC42.DLL_CString::ReverseFind
lea edx, [esp + 0x24]
push eax
push edx
lea ecx, [esp + 0xf4]
call sub.MFC42.DLL_CString::Mid
push eax
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x24]
push eax
push ecx
mov byte [esp + 0xf0], 0x2e
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
mov edx, dword [esp + 0xec]
push 0
push eax
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0xec]
push ebx
push eax
call esi
push 0x5c
lea ecx, [esp + 0xf0]
call sub.MFC42.DLL_CString::ReverseFind
lea ecx, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0xf4]
call sub.MFC42.DLL_CString::Mid
push eax
lea edx, [esp + 0xf4]
lea eax, [esp + 0x24]
push edx
push eax
mov byte [esp + 0xf0], 0x2f
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push ebx
push eax
call esi
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0xe4], 1
call sub.MFC42.DLL_CString::CString
push ecx
lea edx, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call sub.MFC42.DLL_CString::CString_1
mov ecx, edi
call fcn.0040b220
mov eax, dword [edi + 4]
lea ecx, [esp + 0xec]
mov byte [esp + 0xe4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf0]
mov dword [esp + 0xe4], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 1
mov ecx, dword [esp + 0xdc]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xd8
ret 8