Function at 0x406a54
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc10
push ebx
push esi
push edi
mov ebx, 0x4d35a0
mov eax, 0x4d2ce8
call fcn.0049b8e0
mov dword [ebp - 0x3b8], 1
lea edx, [ebp + 8]
lea eax, [ebp + 8]
call fcn.004a7b10
inc dword [ebp - 0x3b8]
lea edx, [ebp + 8]
mov word [ebp - 0x3c4], 8
mov word [ebp - 0x3c4], 0x14
lea eax, [ebp - 4]
call fcn.004a7b10
inc dword [ebp - 0x3b8]
lea edx, [ebp - 0x7c]
mov word [ebp - 0x3c4], 8
mov word [ebp - 0x3c4], 0x20
mov dword [ebp - 0x13c], edx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x12c], ecx
lea eax, [ebp - 0x7c]
push eax
call fcn.004031a8
pop ecx
lea edx, [ebp - 0x13c]
add dword [ebp - 0x3b8], 7
push 0
push 1
push edx
call fcn.00403214
add esp, 0xc
lea ecx, [ebx + 0xc]
add dword [ebp - 0x3b8], 3
mov dword [ebp - 0x138], ecx
lea eax, [ebx + 0x18]
mov dword [ebp - 0x128], eax
lea edx, [ebx + 0x24]
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x124]
mov dword [ecx], edx
push eax
call fcn.00403384
pop ecx
lea edx, [ebp - 0x124]
add dword [ebp - 0x3b8], 4
push edx
mov ecx, dword [ebp - 0x13c]
push ecx
call fcn.004035ac
add esp, 8
inc dword [ebp - 0x3b8]
mov word [ebp - 0x3c4], 8
mov word [ebp - 0x3c4], 0x38
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x274], eax
lea edx, [ebp - 0x1b4]
mov dword [ebp - 0x264], edx
lea ecx, [ebp - 0x1b4]
push ecx
call fcn.004031a8
pop ecx
lea eax, [ebp - 0x274]
add dword [ebp - 0x3b8], 7
push 0
push 1
push eax
call fcn.00403214
add esp, 0xc
lea edx, [ebx + 0xc]
add dword [ebp - 0x3b8], 3
mov dword [ebp - 0x270], edx
lea ecx, [ebx + 0x18]
mov dword [ebp - 0x260], ecx
lea eax, [ebx + 0x24]
mov edx, dword [ebp - 0x274]
lea ecx, [ebp - 0x25c]
mov dword [edx], eax
push ecx
call fcn.00403384
pop ecx
lea eax, [ebp - 0x25c]
add dword [ebp - 0x3b8], 4
push eax
mov edx, dword [ebp - 0x274]
push edx
call fcn.004035ac
add esp, 8
inc dword [ebp - 0x3b8]
mov word [ebp - 0x3c4], 8
mov word [ebp - 0x3c4], 0x50
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 0x3ac], ecx
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x39c], eax
lea edx, [ebp - 0x2ec]
push edx
call fcn.004031a8
pop ecx
add dword [ebp - 0x3b8], 7
push 0
push 1
lea ecx, [ebp - 0x3ac]
push ecx
call fcn.00403214
add esp, 0xc
lea eax, [ebx + 0xc]
add dword [ebp - 0x3b8], 3
mov dword [ebp - 0x3a8], eax
lea edx, [ebx + 0x18]
mov dword [ebp - 0x398], edx
lea ecx, [ebx + 0x24]
mov eax, dword [ebp - 0x3ac]
lea edx, [ebp - 0x394]
mov dword [eax], ecx
push edx
call fcn.00403384
pop ecx
add dword [ebp - 0x3b8], 4
lea ecx, [ebp - 0x394]
push ecx
mov eax, dword [ebp - 0x3ac]
push eax
call fcn.004035ac
add esp, 8
inc dword [ebp - 0x3b8]
mov word [ebp - 0x3c4], 8
cmp dword [ebp - 4], 0
je 0x406ca7
mov eax, dword [ebp - 4]
jmp 0x406cac
mov eax, 0x4d1734
mov word [ebp - 0x3c4], 0x68
mov ebx, eax
push 0xc
push ebx
lea eax, [ebp - 0xe0]
push eax
call fcn.004ae164
add esp, 0xc
test al, al
je 0x406cd5
lea edx, [ebp - 0x124]
jmp 0x406cd7
xor edx, edx
test edx, edx
jne 0x406d08
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebx + 8]
or esi, 4
cmp dword [ebx + 0x6c], 0
je 0x406cf1
mov edi, esi
jmp 0x406cf6
mov edi, esi
or edi, 1
mov dword [ebx + 8], edi
mov eax, dword [ebx + 8]
and eax, dword [ebx + 0x14]
je 0x406d08
push ebx
call fcn.004a9ec4
pop ecx
push 4
push 0
lea edx, [ebp - 0x13c]
push edx
call fcn.00403914
add esp, 0xc
lea ecx, [ebp - 0x13c]
push ecx
lea eax, [ebp - 0x3dc]
push eax
call fcn.00403ae0
add esp, 8
mov edi, dword [ebp - 0x3dc]
mov word [ebp - 0x3c4], 0x68
push 1
push 0
lea eax, [ebp - 0x13c]
push eax
call fcn.00403914
add esp, 0xc
mov edx, 0x4e20d0
lea eax, [ebp - 4]
call fcn.004a7c68
cmp dword [ebp - 4], 0
je 0x406d6b
mov eax, dword [ebp - 4]
jmp 0x406d70
mov eax, 0x4d1735
mov ebx, eax
push 0xc
push ebx
lea eax, [ebp - 0x218]
push eax
call fcn.004ae164
add esp, 0xc
test al, al
je 0x406d90
lea edx, [ebp - 0x25c]
jmp 0x406d92
xor edx, edx
test edx, edx
jne 0x406dcf
mov ebx, dword [ebp - 0x274]
mov esi, dword [ebx + 8]
or esi, 4
cmp dword [ebx + 0x6c], 0
je 0x406dac
mov eax, esi
jmp 0x406db1
mov eax, esi
or eax, 1
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0x3e0]
mov dword [ebx + 8], edx
mov ecx, dword [ebx + 8]
and ecx, dword [ebx + 0x14]
je 0x406dcf
push ebx
call fcn.004a9ec4
pop ecx
push 4
push 0
lea eax, [ebp - 0x274]
push eax
call fcn.00403914
add esp, 0xc
lea edx, [ebp - 0x274]
push edx
lea ecx, [ebp - 0x3ec]
push ecx
call fcn.00403ae0
add esp, 8
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3e4], eax
lea edx, [ebp - 0x274]
push 1
push 0
push edx
call fcn.00403914
mov word [ebp - 0x3c4], 0x74
add esp, 0xc
mov edx, 0x4d1736
lea eax, [ebp - 0x3b0]
call fcn.004a7ad8
inc dword [ebp - 0x3b8]
lea edx, [ebp - 0x3b0]
lea eax, [ebp - 4]
call fcn.004a7c68
dec dword [ebp - 0x3b8]
lea eax, [ebp - 0x3b0]
mov edx, 2
call fcn.004a7c38
cmp dword [ebp - 4], 0
je 0x406e65
mov eax, dword [ebp - 4]
jmp 0x406e6a
mov eax, 0x4d1751
mov ebx, eax
push 0x14
push ebx
lea eax, [ebp - 0x350]
push eax
call fcn.004ae164
add esp, 0xc
test al, al
je 0x406e8a
lea edx, [ebp - 0x394]
jmp 0x406e8c
xor edx, edx
test edx, edx
jne 0x406ec9
mov ebx, dword [ebp - 0x3ac]
mov esi, dword [ebx + 8]
or esi, 4
cmp dword [ebx + 0x6c], 0
je 0x406ea6
mov eax, esi
jmp 0x406eab
mov eax, esi
or eax, 1
mov dword [ebp - 0x3f0], eax
mov edx, dword [ebp - 0x3f0]
mov dword [ebx + 8], edx
mov ecx, dword [ebx + 8]
and ecx, dword [ebx + 0x14]
je 0x406ec9
push ebx
call fcn.004a9ec4
pop ecx
push 4
call fcn.00499954
pop ecx
mov esi, eax
mov word [ebp - 0x3c4], 0x68
xor ebx, ebx
cmp ebx, dword [ebp - 0x3e4]
jge 0x406f13
push 1
push esi
lea eax, [ebp - 0x274]
push eax
call fcn.00403b5c
add esp, 0xc
lea edx, [ebp - 0x39c]
push 1
push esi
push edx
call fcn.00404060
add esp, 0xc
inc ebx
cmp ebx, dword [ebp - 0x3e4]
jl 0x406ee6
xor ebx, ebx
cmp edi, ebx
jle 0x406f42
push 1
push esi
lea eax, [ebp - 0x13c]
push eax
call fcn.00403b5c
add esp, 0xc
lea edx, [ebp - 0x39c]
push 1
push esi
push edx
call fcn.00404060
add esp, 0xc
inc ebx
cmp edi, ebx
jg 0x406f19
lea ecx, [ebp - 0x124]
push ecx
call fcn.004042c8
pop ecx
test eax, eax
jne 0x406f80
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebx + 8]
or esi, 4
cmp dword [ebx + 0x6c], 0
je 0x406f69
mov edi, esi
jmp 0x406f6e
mov edi, esi
or edi, 1
mov dword [ebx + 8], edi
mov eax, dword [ebx + 8]
and eax, dword [ebx + 0x14]
je 0x406f80
push ebx
call fcn.004a9ec4
pop ecx
lea edx, [ebp - 0x25c]
push edx
call fcn.004042c8
pop ecx
test eax, eax
jne 0x406fbe
mov ebx, dword [ebp - 0x274]
mov esi, dword [ebx + 8]
or esi, 4
cmp dword [ebx + 0x6c], 0
je 0x406fa7
mov edi, esi
jmp 0x406fac
mov edi, esi
or edi, 1
mov dword [ebx + 8], edi
mov eax, dword [ebx + 8]
and eax, dword [ebx + 0x14]
je 0x406fbe
push ebx
call fcn.004a9ec4
pop ecx
lea edx, [ebp - 0x394]
push edx
call fcn.004042c8
pop ecx
test eax, eax
jne 0x406ffc
mov ebx, dword [ebp - 0x3ac]
mov esi, dword [ebx + 8]
or esi, 4
cmp dword [ebx + 0x6c], 0
je 0x406fe5
mov edi, esi
jmp 0x406fea
mov edi, esi
or edi, 1
mov dword [ebx + 8], edi
mov eax, dword [ebx + 8]
and eax, dword [ebx + 0x14]
je 0x406ffc
push ebx
call fcn.004a9ec4
pop ecx
mov eax, dword [ebp + 8]
call fcn.004a7a4c
push 1
cmp dword [ebp + 8], 0
je 0x407011
mov edx, dword [ebp + 8]
jmp 0x407016
mov edx, 0x4d176d
push edx
push 0x4d1752
call sub.KERNEL32.DLL_CopyFileA
push str.C:WindowsTempTempek.bin
call sub.KERNEL32.DLL_DeleteFileA
mov word [ebp - 0x3c4], 8
jmp 0x407044
dec dword [ebp - 0x3b8]
sub dword [ebp - 0x3b8], 4
push 2
lea eax, [ebp - 0x394]
push eax
call fcn.004046d8
add esp, 8
sub dword [ebp - 0x3b8], 0xa
push 0
lea ecx, [ebp - 0x3ac]
push ecx
call fcn.00404784
add esp, 8
dec dword [ebp - 0x3b8]
sub dword [ebp - 0x3b8], 6
push 0
lea eax, [ebp - 0x2ec]
push eax
call fcn.004aa150
add esp, 8
dec dword [ebp - 0x3b8]
sub dword [ebp - 0x3b8], 4
push 2
lea edx, [ebp - 0x25c]
push edx
call fcn.004046d8
add esp, 8
sub dword [ebp - 0x3b8], 0xa
push 0
lea ecx, [ebp - 0x274]
push ecx
call fcn.00404784
add esp, 8
dec dword [ebp - 0x3b8]
sub dword [ebp - 0x3b8], 6
push 0
lea eax, [ebp - 0x1b4]
push eax
call fcn.004aa150
add esp, 8
dec dword [ebp - 0x3b8]
sub dword [ebp - 0x3b8], 4
push 2
lea edx, [ebp - 0x124]
push edx
call fcn.004046d8
add esp, 8
sub dword [ebp - 0x3b8], 0xa
push 0
lea ecx, [ebp - 0x13c]
push ecx
call fcn.00404784
add esp, 8
dec dword [ebp - 0x3b8]
sub dword [ebp - 0x3b8], 6
push 0
lea eax, [ebp - 0x7c]
push eax
call fcn.004aa150
add esp, 8
dec dword [ebp - 0x3b8]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004a7c38
dec dword [ebp - 0x3b8]
lea eax, [ebp + 8]
mov edx, 2
call fcn.004a7c38
mov ecx, dword [ebp - 0x3d4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret