Function at 0x4bb828
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffde8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x218], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
mov esi, edx
lea edi, [ebp - 0x108]
xor ecx, ecx
mov cl, byte [esi]
inc ecx
rep movsb byte es:[edi], byte [esi]
xor edx, edx
push ebp
push 0x4bbb46
push dword fs:[edx]
mov dword fs:[edx], esp
xor esi, esi
mov ecx, eax
mov dl, 1
mov eax, dword [0x45031c]
call fcn.004509e0
mov ebx, eax
lea eax, [ebx + 0x68]
mov edx, 0x4bbb60
call fcn.00403d0c
lea eax, [ebx + 0x54]
mov edx, 0x4bbb70
call fcn.00403d0c
mov eax, dword [0x4bbb8c]
mov dword [ebx + 0x50], eax
lea ecx, [ebp - 0x10c]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x21d
call fcn.0045b468
mov edx, dword [ebp - 0x10c]
lea eax, [ebx + 0x64]
call fcn.00403d0c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x3c]
test al, al
je 0x4bbb05
lea edx, [ebp - 0x108]
lea eax, [ebp - 0x20c]
call fcn.00402c18
mov edx, 0x4bbb90
lea eax, [ebp - 0x20c]
call fcn.00402bc0
lea edx, [ebp - 0x20c]
mov eax, dword [0x4582b0]
call fcn.0045841c
mov edi, eax
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
inc esi
jmp 0x4bb919
inc esi
lea edx, [ebp - 0x108]
lea eax, [ebp - 0x20c]
call fcn.00402c18
mov edx, 0x4bbb9c
lea eax, [ebp - 0x20c]
call fcn.00402bc0
lea edx, [ebp - 0x20c]
lea eax, [ebp - 0x210]
call fcn.00403ed8
push dword [ebp - 0x210]
lea edx, [ebp - 0x214]
mov eax, esi
call fcn.004084b4
push dword [ebp - 0x214]
push 0x4bbbac
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00403ff4
mov eax, dword [ebp - 0x10c]
call fcn.0040871c
cmp al, 1
je 0x4bb918
mov dl, 1
mov eax, edi
mov ecx, dword [eax]
call dword [ecx - 4]
lea edx, [ebp - 0x10c]
mov eax, esi
call fcn.004084b4
mov ecx, dword [ebp - 0x10c]
lea eax, [ebp - 4]
mov edx, 0x4bbbbc
call fcn.00403f80
mov dl, 1
mov eax, dword [0x4bb368]
call fcn.00454d60
mov esi, eax
push 1
lea eax, [ebp - 0x20c]
mov edx, dword [ebp - 4]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x20c]
lea ecx, [ebp - 0x108]
mov eax, esi
call fcn.004bb3c0
lea edx, [ebp - 0x108]
lea eax, [ebp - 0x20c]
call fcn.00402c18
mov edx, 0x4bbbc4
lea eax, [ebp - 0x20c]
call fcn.00402bc0
lea edx, [ebp - 0x20c]
lea eax, [ebp - 0x10c]
call fcn.00403ed8
push dword [ebp - 0x10c]
push dword [ebp - 4]
push 0x4bbbac
lea eax, [ebp - 4]
mov edx, 3
call fcn.00403ff4
lea edx, [ebp - 0x218]
mov eax, ebx
call fcn.00451134
mov eax, dword [ebp - 0x218]
call fcn.004040f8
mov edx, eax
lea eax, [ebp - 8]
call fcn.00403e6c
push 0xffffffffffffffff
mov eax, dword [ebp - 4]
call fcn.004040f8
push eax
mov eax, dword [ebp - 8]
call fcn.004040f8
push eax
call sub.kernel32.dll_CopyFileA
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 8]
call fcn.004088e0
push dword [ebp - 0x210]
push 0x4bbbd0
lea ecx, [ebp - 0x214]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x595
call fcn.0045b468
push dword [ebp - 0x214]
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00403ff4
mov ecx, dword [ebp - 0x10c]
mov edx, 0x4bbbdc
mov eax, esi
call fcn.00454aa4
xor ecx, ecx
mov edx, 0x4bbbec
mov eax, esi
call fcn.00454aa4
mov ecx, 0x4bbbfc
mov edx, 0x4bbc0c
mov eax, esi
call fcn.00454aa4
call fcn.00409788
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, 0x4bbc20
mov eax, esi
call fcn.00454c14
mov eax, esi
call fcn.00454cd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bbb4d
lea eax, [ebp - 0x218]
call fcn.00403cb8
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.00403cdc
lea eax, [ebp - 0x10c]
call fcn.00403cb8
lea eax, [ebp - 8]
mov edx, 2
call fcn.00403cdc
ret