Function at 0x416cc5
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
push ebx
push esi
xor ebx, ebx
push edi
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0040e856
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp byte [ebp - 0x160], 0x5c
jne 0x416e71
cmp byte [ebp - 0x15f], 0x5c
jne 0x416e71
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x263]
mov byte [ebp - 0x264], bl
push str..exe
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x264]
push eax
call fcn.004200c8
pop ecx
pop ecx
push str.CopyFileExA
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push 0x40581a
push ebx
push 0x12
push dword [ebp + 8]
mov dword [ebp - 8], eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, 0x422
push str.Copying_files._Please_wait...
push edi
push eax
mov dword [ebp - 4], eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x5c]
call fcn.004213e7
cmp dword [ebp - 8], ebx
je 0x416dfa
lea eax, [ebp - 0x1c]
push eax
push edi
push dword [ebp - 4]
call esi
mov esi, dword [sym.imp.USER32.dll_GetClientRect]
push eax
call esi
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 4]
call esi
mov esi, dword [ebp - 0x14]
push 0xffffff
sub esi, dword [ebp - 0x1c]
push 0xf
sub esi, 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
mov eax, dword [ebp - 0x20]
push 2
push 0xc56b32
push 0x13
add eax, 0xffffffdd
push esi
push eax
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x5c]
sub eax, esi
sub eax, 0xf
push eax
push dword [ebp - 4]
call fcn.00421531
cmp dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
push ebx
jne 0x416e19
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
jmp 0x416e37
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x264]
push 0x417123
push eax
lea eax, [ebp - 0x160]
push eax
call dword [ebp - 8]
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp esi, ebx
je 0x416e62
lea eax, [ebp - 0x264]
mov edi, 0x481800
push eax
mov ecx, edi
call fcn.0041e314
mov byte [0x4823ee], 1
jmp 0x416e67
mov edi, 0x481800
lea ecx, [ebp - 0x5c]
call fcn.004213f8
jmp 0x416e76
mov edi, 0x481800
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push dword [ebp + 8]
mov esi, 0x481080
mov ecx, esi
call fcn.0041b26c
mov ecx, esi
call fcn.00418032
mov ecx, esi
call fcn.00418889
test eax, eax
jge 0x416ebe
push ebx
push str.Couldnt_read_TOC._Aborting.
push ebx
mov ecx, esi
call fcn.0041d5f5
cmp byte [0x4823ee], bl
je 0x417021
mov ecx, edi
jmp 0x417015
mov ecx, esi
call fcn.0041d3e9
mov ecx, esi
call fcn.0041c203
mov ecx, esi
call fcn.0041c061
test al, al
jne 0x416eab
cmp dword [0x481714], ebx
jne 0x416f1c
mov ecx, esi
call fcn.0041bf1f
test al, al
jne 0x416eab
cmp dword [0x481714], ebx
jne 0x416f1c
mov ecx, esi
call fcn.004177a0
test al, al
je 0x417021
cmp dword [0x481714], ebx
jne 0x416f1c
mov ecx, esi
call fcn.0041deee
test eax, eax
jne 0x416f1c
cmp dword [0x481710], ebx
je 0x416eab
test byte [0x481254], 0x40
je 0x416f35
test byte [0x48125b], 8
je 0x416f35
and byte [0x48125b], 0xf7
cmp dword [0x481714], ebx
jne 0x416f4c
mov ecx, esi
call fcn.0041dfb1
test al, al
je 0x416eab
mov ecx, esi
call fcn.0041a1b4
mov edi, eax
cmp edi, ebx
jge 0x416fba
lea ecx, [ebp - 0x18]
call fcn.0041e1c7
push edi
lea eax, [ebp - 0x18]
push str.Initialization_failed._Aborting._Error_code:__d
push eax
call fcn.0041e869
add esp, 0xc
lea ecx, [ebp - 0x18]
push ebx
call fcn.0041f120
push eax
push ebx
mov ecx, esi
call fcn.0041d5f5
cmp byte [0x4823ee], bl
je 0x416f9e
mov ecx, 0x481800
call fcn.0041f120
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x4823ed], bl
lea ecx, [ebp - 0x18]
setne al
mov esi, eax
call fcn.0041e2fd
mov eax, esi
jmp 0x41711c
cmp dword [0x481228], ebx
je 0x416fe8
call fcn.004208b8
test al, al
jne 0x416fe8
push ebx
mov ecx, 0x48220c
call fcn.0041f120
push eax
push ebx
mov ecx, esi
call fcn.0041d5f5
push 1
mov ecx, esi
call fcn.0041c402
cmp byte [0x48239c], bl
push ebx
je 0x4170ba
mov edi, 0x4819b0
mov ecx, edi
call fcn.00413d5f
cmp al, bl
mov byte [ebp + 0xb], al
jne 0x417031
cmp byte [0x4823ee], bl
je 0x417021
mov ecx, 0x481800
call fcn.0041f120
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x4823ed], bl
setne al
jmp 0x41711c
cmp dword [0x481714], ebx
je 0x417045
mov ecx, esi
call fcn.00417d52
mov byte [ebp + 0xb], al
jmp 0x417086
mov eax, dword [0x481258]
test al, 2
je 0x417057
mov ecx, edi
call fcn.0041362f
jmp 0x417086
test al, 4
je 0x417065
test ah, 0x80
je 0x417065
push 1
pop edx
jmp 0x417067
xor edx, edx
test al, 8
je 0x417075
test ah, 0x40
je 0x417075
push 1
pop ecx
jmp 0x417077
xor ecx, ecx
shr eax, 0x1b
and al, 1
push eax
push edx
push ecx
mov ecx, edi
call fcn.0041467d
cmp byte [0x4823ee], bl
je 0x41709f
mov ecx, 0x481800
call fcn.0041f120
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x4823ed], bl
je 0x4170b4
xor eax, eax
cmp byte [ebp + 0xb], bl
jmp 0x417115
movzx eax, byte [ebp + 0xb]
jmp 0x41711c
mov ecx, esi
call fcn.00419fa9
mov ecx, esi
call fcn.0041c4bd
cmp dword [0x481714], ebx
mov edi, eax
je 0x4170e1
mov ecx, esi
call fcn.00417d52
neg al
sbb eax, eax
neg eax
mov edi, eax
push 1
mov ecx, esi
call fcn.0041d841
cmp byte [0x4823ee], bl
je 0x417103
mov ecx, 0x481800
call fcn.0041f120
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x4823ed], bl
je 0x41711a
xor eax, eax
cmp edi, ebx
sete al
jmp 0x41711c
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10