Function at 0x402f8a
Capabilities:
Copy file
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x474
push 0x40a400
lea eax, [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp + 0x14], 1
jne 0x402fbd
push 0x4093ac
lea ecx, [ebp - 0x370]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x370]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffff
je 0x403022
mov eax, dword [ebp - 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.00401855
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
je 0x403022
or eax, 0xffffffff
jmp 0x40325c
push 0x40a2e0
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x474]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x474]
push ecx
call sub.LZ32.dll_LZOpenFileA
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jge 0x403071
or eax, 0xffffffff
jmp 0x40325c
push 0x40a400
lea edx, [ebp - 0x370]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp + 0x14], 1
jne 0x40309b
push 0x4093b8
lea eax, [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x370]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1001
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x370]
push ecx
call sub.LZ32.dll_LZOpenFileA
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jge 0x4030e7
mov edx, dword [ebp - 0x26c]
push edx
call sub.LZ32.dll_LZClose
or eax, 0xffffffff
jmp 0x40325c
mov eax, dword [ebp - 0x268]
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
call sub.LZ32.dll_LZCopy
mov dword [ebp - 0x98], eax
mov edx, dword [ebp - 0x26c]
push edx
call sub.LZ32.dll_LZClose
mov eax, dword [ebp - 0x268]
push eax
call sub.LZ32.dll_LZClose
cmp dword [ebp - 0x98], 0
jge 0x403129
or eax, 0xffffffff
jmp 0x40325c
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x403250
push 0x40a400
lea eax, [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp + 0x14], 1
jne 0x403169
push 0x4093c4
lea ecx, [ebp - 0x370]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x370]
push edx
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x474]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x370]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
lea edx, [ebp - 0x370]
push edx
lea eax, [ebp - 0x474]
push eax
call fcn.00403afe
add esp, 0xc
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jne 0x403231
push 4
push 0
lea ecx, [ebp - 0x370]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
je 0x4031f2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x94], eax
push 4
lea edx, [ebp - 0x370]
push edx
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
je 0x403223
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x94], eax
mov dword [0x40a3e4], 1
xor eax, eax
jmp 0x40325c
cmp dword [ebp - 0x90], 0
jne 0x40324b
lea ecx, [ebp - 0x474]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
jmp 0x40325c
or eax, 0xffffffff
jmp 0x40325c
mov dword [0x40a3e4], 1
xor eax, eax
mov esp, ebp
pop ebp
ret