Function at 0x49bd64
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed8
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x118], edx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x110], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x49c0e8
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x49c0b3
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x49be68
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a3ad4]
mov eax, dword [eax]
call fcn.00409d24
test al, al
je 0x49be37
mov eax, dword [0x4a3ad4]
mov eax, dword [eax]
xor edx, edx
call fcn.00409e40
mov eax, dword [0x4a3ad4]
mov eax, dword [eax]
call fcn.00405200
mov edx, eax
lea eax, [ebp - 8]
call fcn.00404f38
mov eax, dword [ebp - 8]
call fcn.00409e68
mov eax, dword [0x4a3ad4]
mov eax, dword [eax]
call fcn.00409d24
test al, al
je 0x49be37
xor eax, eax
call fcn.00404c84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49c0bd
push 0
mov eax, dword [0x4a3ad4]
mov eax, dword [eax]
call fcn.00405200
push eax
lea edx, [ebp - 0xc]
xor eax, eax
call fcn.00402f64
mov eax, dword [ebp - 0xc]
call fcn.00405200
push eax
call sub.kernel32.dll_CopyFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49be72
xor eax, eax
push ebp
push 0x49c097
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10c]
mov edx, dword [0x4a3a68]
mov edx, dword [edx]
call fcn.004039f0
lea eax, [ebp - 0x10c]
mov edx, 0x49c0f8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004035f4
jne 0x49bf8d
xor eax, eax
push ebp
push 0x49bee4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x110]
mov edx, dword [0x4a356c]
mov edx, dword [edx]
call fcn.00404f38
mov eax, dword [ebp - 0x110]
call fcn.0045fb04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49beee
push 0x3e8
call sub.kernel32.dll_Sleep_1
xor eax, eax
push ebp
push 0x49bf83
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x114]
mov edx, dword [0x4a3a1c]
mov edx, dword [edx]
call fcn.00404f38
mov eax, dword [ebp - 0x114]
push eax
mov edx, dword [0x4a3ad4]
mov edx, dword [edx]
lea eax, [ebp - 0x118]
mov ecx, 0x49c104
call fcn.0040504c
mov eax, dword [ebp - 0x118]
push eax
lea eax, [ebp - 0x11c]
mov edx, dword [0x4a38c8]
mov edx, dword [edx]
call fcn.00404f38
mov eax, dword [ebp - 0x11c]
push eax
lea eax, [ebp - 0x120]
mov edx, dword [0x4a356c]
mov edx, dword [edx]
call fcn.00404f38
mov eax, dword [ebp - 0x120]
pop edx
pop ecx
call fcn.0045f994
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49bf8d
lea eax, [ebp - 0x10c]
mov edx, dword [0x4a3a68]
mov edx, dword [edx]
call fcn.004039f0
lea eax, [ebp - 0x10c]
mov edx, 0x49c108
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004035f4
jne 0x49c010
xor eax, eax
push ebp
push 0x49c006
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a3ad4]
mov eax, dword [eax]
call fcn.00405200
push eax
lea eax, [ebp - 0x124]
call fcn.004600d0
mov eax, dword [ebp - 0x124]
call fcn.00405200
mov edx, eax
mov ecx, dword [0x4a3704]
mov ecx, dword [ecx]
mov eax, 0x80000002
call fcn.00462298
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49c010
lea eax, [ebp - 0x10c]
mov edx, dword [0x4a36fc]
mov edx, dword [edx]
call fcn.004039f0
lea eax, [ebp - 0x10c]
mov edx, 0x49c108
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004035f4
jne 0x49c07d
lea edx, [ebp - 0x128]
mov eax, 1
call fcn.00402f64
cmp dword [ebp - 0x128], 0
jne 0x49c07d
xor eax, eax
push ebp
push 0x49c073
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.0049ba3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49c07d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49c0bd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49c0ef
lea eax, [ebp - 0x128]
mov edx, 7
call fcn.00404d64
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404d64
ret