Function at 0x4141ec
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0x4141f4
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x4144de
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x40ac7c]
call fcn.00402ad8
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x4144a7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx + 0x1e0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x414491
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xc]
mov eax, dword [ebx + 0x1e0]
mov edx, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xc]
call fcn.004036a4
mov edx, eax
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.004038a8
mov eax, dword [ebp - 0x20]
mov edx, 0x4144f4
call fcn.004037b4
jne 0x414484
lea eax, [ebp - 0x20]
mov ecx, 0x414500
mov edx, dword [ebp - 0xc]
call fcn.004036f0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x58]
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.004034c0
lea ecx, [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x20]
call fcn.004036a4
cmp eax, 2
jle 0x414484
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x24]
mov ecx, 1
mov edx, 1
call fcn.004038a8
mov eax, dword [ebp - 0x20]
mov edx, 0x414514
call fcn.004037b4
jne 0x414484
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x20]
call fcn.004036a4
push eax
lea ecx, [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x24]
mov ecx, 1
pop edx
call fcn.004038a8
mov eax, dword [ebp - 0x20]
mov edx, 0x414520
call fcn.004037b4
jne 0x414484
push 0x41452c
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x20]
call fcn.004036a4
sub eax, 2
push eax
lea ecx, [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x24]
mov edx, 2
pop ecx
call fcn.004038a8
push dword [ebp - 0x20]
push 0x414538
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403764
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004036ac
push 0
mov eax, dword [ebp - 0x18]
call fcn.00403868
push eax
mov eax, dword [ebx + 0x74]
mov edx, dword [eax + 0x30]
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 8]
call fcn.004036f0
mov eax, dword [ebp - 0x20]
call fcn.00403868
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebx + 0x1e0]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x414484
inc eax
mov dword [ebp - 0x1c], eax
xor esi, esi
mov eax, dword [ebx + 0x1dc]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.00405f1c
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
mov edx, 0x414548
call fcn.004036f0
mov edx, dword [ebp - 0x20]
pop eax
call fcn.004037b4
jne 0x41447a
lea ecx, [ebp - 0x10]
mov eax, dword [ebx + 0x1dc]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0040644c
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.004036f0
push 0
mov eax, dword [ebp - 0x18]
call fcn.00403868
push eax
mov eax, dword [ebp - 0x10]
call fcn.00403868
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebx + 0x1e0]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc esi
dec dword [ebp - 0x1c]
jne 0x4143f4
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffff
jne 0x414244
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4144ae
mov eax, dword [ebp - 0x14]
call fcn.00402b00
ret