Function at 0x54bffc
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x5b
push 0
push 0
dec ecx
jne 0x54c005
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.004051e0
mov eax, dword [ebp - 8]
call fcn.004051e0
mov eax, dword [ebp + 0x28]
call fcn.004051e0
mov eax, dword [ebp + 0x24]
call fcn.004051e0
mov eax, dword [ebp + 0x20]
call fcn.004051e0
mov eax, dword [ebp + 0x1c]
call fcn.004051e0
mov eax, dword [ebp + 0x18]
call fcn.004051e0
mov eax, dword [ebp + 0x14]
call fcn.004051e0
mov eax, dword [ebp + 0x10]
call fcn.004051e0
mov eax, dword [ebp + 0xc]
call fcn.004051e0
xor eax, eax
push ebp
push 0x54d097
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x54d048
push dword fs:[edx]
mov dword fs:[edx], esp
lea edx, [ebp - 0x1ec]
mov eax, dword [0x5a5f50]
mov eax, dword [eax]
call fcn.004a0248
mov eax, dword [ebp - 0x1ec]
lea edx, [ebp - 0x1e8]
call fcn.0040a380
mov edx, dword [ebp - 0x1e8]
lea eax, [ebp - 0x10]
mov ecx, 0x54d0b4
call fcn.0040503c
mov eax, dword [ebp - 0x10]
call fcn.004d9000
test al, al
jne 0x54c15c
mov eax, dword [ebp - 0x10]
call fcn.004d9008
test al, al
jne 0x54c15c
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 0x10]
call fcn.0040940c
mov ecx, dword [ebp - 0x1f4]
lea eax, [ebp - 0x1f0]
mov edx, 0x54d0c8
call fcn.0040503c
mov edx, dword [ebp - 0x1f0]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
push 0x54d0e8
push dword [ebp - 4]
push 0x54d0f8
lea eax, [ebp - 0x1f8]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x1f8]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
mov byte [ebp - 9], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54d052
lea edx, [ebp - 0x200]
mov eax, dword [0x5a5f50]
mov eax, dword [eax]
call fcn.004a0248
mov eax, dword [ebp - 0x200]
lea edx, [ebp - 0x1fc]
call fcn.0040a380
push dword [ebp - 0x1fc]
push 0x54d114
push dword [ebp - 4]
push 0x54d128
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004050b0
mov eax, dword [ebp - 0x14]
call fcn.00409f60
test al, al
je 0x54c3cb
mov eax, dword [0x5a5aa8]
cmp byte [eax], 0
je 0x54c3cb
push 0x54d138
push dword [ebp - 4]
push 0x54d148
lea eax, [ebp - 0x204]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x204]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 1
call fcn.005978d0
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.0054ad34
push edx
push eax
mov eax, dword [0x5a58e4]
mov eax, dword [eax]
shl eax, 0xa
cdq
cmp edx, dword [esp + 4]
jne 0x54c21b
cmp eax, dword [esp]
pop edx
pop eax
jae 0x54c3cb
jmp 0x54c223
pop edx
pop eax
jge 0x54c3cb
mov al, 1
mov edx, dword [0x5a5ba4]
cmp byte [edx], 0
je 0x54c2ff
mov eax, dword [0x5a5c18]
mov eax, dword [eax]
call fcn.004d9000
test al, al
jne 0x54c28c
mov eax, dword [0x5a5c18]
mov eax, dword [eax]
call fcn.004d9008
test al, al
jne 0x54c28c
push 0x54d16c
mov eax, dword [0x5a5c18]
push dword [eax]
push 0x54d17c
lea eax, [ebp - 0x208]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x208]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
lea edx, [ebp - 0x20c]
mov eax, dword [0x5a5c18]
mov eax, dword [eax]
call fcn.0040eca4
push dword [ebp - 0x20c]
push dword [ebp - 4]
push 0x54d1a0
call fcn.0040c0ac
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x210]
mov eax, 0x54d1ac
call fcn.0040cdb0
push dword [ebp - 0x210]
push 0x54d1c8
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.004050b0
push 0
mov eax, dword [ebp - 0x18]
call fcn.004051f0
push eax
mov eax, dword [ebp - 0x14]
call fcn.004051f0
push eax
call sub.kernel32.dll_CopyFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x54c3cb
mov eax, dword [ebp - 0x14]
call fcn.0040a254
test al, al
jne 0x54c3cb
push 0x54d138
push dword [ebp - 4]
push 0x54d1d8
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x214]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.0040a138
mov eax, dword [ebp - 0x14]
call fcn.0040a254
test al, al
jne 0x54c397
push 0x54d138
push dword [ebp - 4]
push 0x54d208
lea eax, [ebp - 0x218]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x218]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
jmp 0x54c3cb
push 0x54d138
push dword [ebp - 4]
push 0x54d244
lea eax, [ebp - 0x21c]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x21c]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
push 0x54d138
push dword [ebp - 4]
push 0x54d264
lea eax, [ebp - 0x220]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x220]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 1
call fcn.005978d0
mov eax, dword [ebp + 8]
dec eax
je 0x54c413
sub eax, 2
je 0x54ca7a
jmp 0x54d03e
xor eax, eax
push ebp
push 0x54c93e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
call fcn.00409f60
test al, al
je 0x54c45a
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.0040a138
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x1e4]
call fcn.00402f9c
lea eax, [ebp - 0x1e4]
call fcn.00402d38
call fcn.00402940
jmp 0x54c51b
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.0040a138
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x1e4]
call fcn.00402f9c
lea eax, [ebp - 0x1e4]
call fcn.00402d2c
call fcn.00402940
mov edx, 0x54d280
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d2cc
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d304
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d338
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d280
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x224]
mov ecx, dword [ebp - 4]
mov edx, 0x54d378
call fcn.0040503c
mov edx, dword [ebp - 0x224]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
push 0x54d398
call fcn.0040c04c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x22c]
mov eax, 0x54d3b4
call fcn.0040cdb0
push dword [ebp - 0x22c]
push 0x54d3cc
call fcn.0040c078
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x230]
mov eax, 0x54d3d8
call fcn.0040cdb0
push dword [ebp - 0x230]
lea eax, [ebp - 0x228]
mov edx, 4
call fcn.004050b0
mov edx, dword [ebp - 0x228]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x234]
mov ecx, dword [ebp - 8]
mov edx, 0x54d3ec
call fcn.0040503c
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x238]
mov ecx, dword [ebp + 0x28]
mov edx, 0x54d408
call fcn.0040503c
mov edx, dword [ebp - 0x238]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x23c]
mov ecx, dword [ebp + 0x14]
mov edx, 0x54d424
call fcn.0040503c
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x240]
mov ecx, dword [ebp + 0x10]
mov edx, 0x54d440
call fcn.0040503c
mov edx, dword [ebp - 0x240]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x244]
mov ecx, dword [ebp + 0xc]
mov edx, 0x54d45c
call fcn.0040503c
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 0x1e4]
xor eax, eax
push ebp
push 0x54cf07
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
call fcn.00409f60
test al, al
je 0x54cab7
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x1e4]
call fcn.00402f9c
lea eax, [ebp - 0x1e4]
call fcn.00402d38
call fcn.00402940
jmp 0x54cb6e
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x1e4]
call fcn.00402f9c
lea eax, [ebp - 0x1e4]
call fcn.00402d2c
call fcn.00402940
mov edx, 0x54d280
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d2cc
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d304
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d338
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d280
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x288]
mov ecx, dword [ebp - 4]
mov edx, 0x54d378
call fcn.0040503c
mov edx, dword [ebp - 0x288]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
xor edx, edx
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
push 0x54d398
call fcn.0040c04c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x290]
mov eax, 0x54d3b4
call fcn.0040cdb0
push dword [ebp - 0x290]
push 0x54d3cc
call fcn.0040c078
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x294]
mov eax, 0x54d3d8
call fcn.0040cdb0
push dword [ebp - 0x294]
lea eax, [ebp - 0x28c]
mov edx, 4
call fcn.004050b0
mov edx, dword [ebp - 0x28c]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x298]
mov ecx, dword [ebp - 8]
mov edx, 0x54d3ec
call fcn.0040503c
mov edx, dword [ebp - 0x298]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x29c]
mov ecx, dword [ebp + 0x28]
mov edx, 0x54d408
call fcn.0040503c
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x2a0]
mov ecx, dword [ebp + 0x24]
mov edx, 0x54d478
call fcn.0040503c
mov edx, dword [ebp - 0x2a0]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x2a4]
mov ecx, dword [ebp + 0x20]
mov edx, 0x54d494
call fcn.0040503c
mov edx, dword [ebp - 0x2a4]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea edx, [ebp - 0x2a8]
mov eax, dword [ebp + 0x1c]
call fcn.0040967c
cmp dword [ebp - 0x2a8], 0
je 0x54cd57
lea eax, [ebp - 0x2ac]
mov ecx, dword [ebp + 0x1c]
mov edx, 0x54d4b0
call fcn.0040503c
mov edx, dword [ebp - 0x2ac]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x2b0]
mov ecx, dword [ebp + 0x18]
mov edx, 0x54d4cc
call fcn.0040503c
mov edx, dword [ebp - 0x2b0]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
lea eax, [ebp - 0x2b4]
mov ecx, dword [ebp - 0x14]
mov edx, 0x54d4e8
call fcn.0040503c
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
mov edx, 0x54d504
lea eax, [ebp - 0x1e4]
call fcn.0040540c
call fcn.00403968
call fcn.00402940
push 0x54d138
push dword [ebp - 4]
push 0x54d54c
lea eax, [ebp - 0x2b8]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x2b8]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 1
call fcn.005978d0
xor eax, eax
push ebp
push 0x54cef0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1e4]
call fcn.00403118
call fcn.00402940
mov eax, dword [0x5a5a30]
cmp byte [eax], 0
je 0x54cee6
push 0
lea edx, [ebp - 0x2bc]
mov eax, dword [ebp + 0x28]
call fcn.0040eca4
lea eax, [ebp - 0x2bc]
push eax
lea edx, [ebp - 0x2c0]
mov eax, dword [ebp - 0x14]
call fcn.0040a49c
mov edx, dword [ebp - 0x2c0]
pop eax
call fcn.00404ff8
mov eax, dword [ebp - 0x2bc]
call fcn.004051f0
push eax
mov eax, dword [ebp - 0x14]
call fcn.004051f0
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
je 0x54ceb2
push 0x54d138
push dword [ebp - 4]
push 0x54d564
lea eax, [ebp - 0x2c4]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x2c4]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 5
call fcn.005978d0
jmp 0x54cee6
push 0x54d138
push dword [ebp - 4]
push 0x54d584
lea eax, [ebp - 0x2c8]
mov edx, 3
call fcn.004050b0
mov edx, dword [ebp - 0x2c8]
mov eax, dword [0x5a5d58]
mov eax, dword [eax]
mov ecx, 2
call fcn.005978d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54cefa
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54d03e