Function at 0x429394
Capabilities:
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x42939c
push ebx
push esi
mov eax, dword [0x42a9f4]
mov byte [eax], 1
mov eax, 0x429254
call fcn.004061d4
xor eax, eax
push ebp
push 0x4297b2
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, 5
call fcn.00429024
mov edx, dword [ebp - 0x14]
mov eax, 0x42bb48
mov ecx, 0x4297c8
call fcn.004044c0
push dword [0x42bb48]
push 0x4297d4
lea edx, [ebp - 0x1c]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408088
push dword [ebp - 0x18]
mov eax, 0x42bb4c
mov edx, 3
call fcn.00404534
lea edx, [ebp - 0x24]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.0040801c
mov eax, dword [ebp - 0x20]
mov edx, dword [0x42bb48]
call fcn.004045c0
je 0x4294f4
mov eax, dword [0x42bb48]
call fcn.00404674
mov edx, eax
lea eax, [ebp - 0x28]
call fcn.004043d0
mov eax, dword [ebp - 0x28]
call fcn.00407d80
test al, al
jne 0x42948e
push 0x10
lea eax, [ebp - 0x2c]
mov ecx, dword [0x42bb48]
mov edx, 0x4297e0
call fcn.004044c0
mov eax, dword [ebp - 0x2c]
call fcn.00404674
push eax
push 0x4297fc
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x429797
lea eax, [ebp - 0x30]
mov ecx, dword [0x42bb4c]
mov edx, dword [0x42bb48]
call fcn.004044c0
mov eax, dword [ebp - 0x30]
call fcn.00407d28
test al, al
jne 0x4294d3
push 0
mov eax, dword [0x42bb4c]
call fcn.00404674
push eax
lea edx, [ebp - 0x34]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x34]
call fcn.00404674
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x42bb48]
call fcn.00408190
push 1
mov eax, dword [0x42bb4c]
call fcn.00404674
push eax
call sub.kernel32.dll_WinExec
jmp 0x429797
push 0x10
push 0x429820
lea edx, [ebp - 0x3c]
xor eax, eax
call fcn.004029c0
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x38]
mov edx, 0x42982c
call fcn.004044c0
mov eax, dword [ebp - 0x38]
call fcn.00404674
push eax
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, 0x42984c
call fcn.00428ed4
test al, al
je 0x429541
mov eax, 0x429860
call fcn.00428ed4
test al, al
jne 0x429560
push 1
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x40]
call fcn.00404674
push eax
call sub.kernel32.dll_WinExec
jmp 0x429797
mov eax, 0x42baec
mov edx, 0x429874
call fcn.0040422c
mov eax, 0x42baf0
mov edx, 0x429894
call fcn.0040422c
mov eax, 0x42baf4
mov edx, 0x4298b8
call fcn.0040422c
mov eax, 0x42baf8
mov edx, 0x4298dc
call fcn.0040422c
mov eax, 0x42bafc
mov edx, 0x4298f8
call fcn.0040422c
mov eax, 0x42bb00
mov edx, 0x429914
call fcn.0040422c
mov eax, 0x42bb04
mov edx, 0x429934
call fcn.0040422c
mov eax, 0x42bb08
mov edx, 0x429958
call fcn.0040422c
mov eax, 0x42bb0c
mov edx, 0x429980
call fcn.0040422c
mov eax, 0x42bb10
mov edx, 0x4299a0
call fcn.0040422c
mov eax, 0x42bb14
mov edx, 0x4299cc
call fcn.0040422c
mov eax, 0x42bb18
mov edx, 0x4299e4
call fcn.0040422c
mov eax, 0x42bb1c
mov edx, 0x429a04
call fcn.0040422c
mov esi, 0xd
mov ebx, 0x42baec
push 0x42bb40
mov edx, dword [ebx]
mov eax, 0x429a20
call fcn.0040475c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebx]
call fcn.004046d4
lea edx, [ebp - 0x44]
mov eax, 5
call fcn.00429024
push dword [ebp - 0x44]
push 0x429a2c
lea eax, [ebp - 0x48]
push eax
mov edx, dword [ebx]
mov eax, 0x429a20
call fcn.0040475c
mov edx, eax
inc edx
mov ecx, 0x64
mov eax, dword [ebx]
call fcn.004046d4
push dword [ebp - 0x48]
mov eax, 0x42bb44
mov edx, 3
call fcn.00404534
lea edx, [ebp - 0x50]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.00407fdc
lea eax, [ebp - 0x4c]
mov edx, dword [0x42bb44]
call fcn.0040447c
mov eax, dword [ebp - 0x4c]
call fcn.00407d28
test al, al
jne 0x42974c
push 0x429a3c
push dword [0x42bb44]
push 0x429a50
lea eax, [ebp - 0x54]
mov edx, 3
call fcn.00404534
mov edx, dword [ebp - 0x54]
mov eax, dword [0x42a8e4]
call fcn.00404834
call fcn.00402d88
call fcn.00402800
lea edx, [ebp - 0x5c]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
call fcn.00407fdc
lea eax, [ebp - 0x58]
mov edx, dword [0x42bb44]
call fcn.0040447c
mov eax, dword [ebp - 0x58]
push eax
lea eax, [ebp - 0x60]
mov ecx, dword [0x42bb40]
mov edx, 0x429a60
call fcn.004044c0
mov eax, dword [ebp - 0x60]
pop edx
call fcn.00427534
mov eax, dword [0x42a8e4]
call fcn.004030a0
call fcn.00402800
add ebx, 4
dec esi
jne 0x42962d
mov edx, 0x429a70
mov eax, 0x429a80
call fcn.00429074
push 1
lea edx, [ebp - 0x68]
xor eax, eax
call fcn.004029c0
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00407fdc
lea eax, [ebp - 0x64]
mov edx, 0x429a98
call fcn.0040447c
mov eax, dword [ebp - 0x64]
call fcn.00404674
push eax
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4297b9
lea eax, [ebp - 0x68]
mov edx, 0x16
call fcn.004041fc
ret