Function at 0x4d9eac
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4d9eb4
push ecx
push ebx
push esi
push edi
mov esi, 0x54a5f8
xor eax, eax
push ebp
push 0x4da37b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [0x540320], 0x7de
mov dl, 1
mov eax, dword [0x47089c]
call fcn.0040377c
mov ebx, eax
mov dword [ebp - 4], 0x5a226334
lea edx, [ebp - 4]
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x18]
mov eax, 0x2a
call fcn.004ab980
mov edx, dword [ebp - 0x18]
mov eax, ebx
call fcn.00470e88
mov edx, dword [0x541854]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x541400]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1c]
mov eax, dword [0x54a60c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.00470e88
lea edx, [ebp - 0x20]
mov eax, dword [0x54a614]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.00470e88
lea edx, [ebp - 0x24]
mov eax, dword [0x54a618]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.00470e88
xor edx, edx
mov eax, ebx
call fcn.00470e88
xor edx, edx
mov eax, ebx
call fcn.00470e88
mov edx, 0x5409d4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5409c4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5409b4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5403cc
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5403d0
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5403d4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5403ac
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x5403ec]
mov eax, ebx
call fcn.00470e88
lea edx, [ebp - 0x28]
mov eax, dword [0x54a808]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x28]
mov eax, ebx
call fcn.00470e88
mov edx, 0x5409b8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x4da394
mov eax, ebx
call fcn.00470e88
mov edx, dword [0x54a7ac]
mov eax, ebx
call fcn.00470e88
mov edx, 0x540414
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540418
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x2c]
mov eax, 0x9c
call fcn.004ab980
mov eax, dword [ebp - 0x2c]
push eax
lea edx, [ebp - 0x30]
mov eax, 0x11a
call fcn.004ab980
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x5403ec]
pop edx
call fcn.0046c3a4
cmp byte [0x5403e0], 2
jne 0x4da0d3
mov byte [ebp - 5], 1
jmp 0x4da0d7
mov byte [ebp - 5], 0
lea edx, [ebp - 5]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540424
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x54a61c]
mov eax, ebx
call fcn.00470e88
mov edx, 0x5409c0
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540a48
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540a4c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540a40
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540a44
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540a3c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5409cc
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540464
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x540468
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x54046c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5403e8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x5403b8
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi]
call fcn.0046dddc
test al, al
je 0x4da263
mov edx, 0x20
mov eax, dword [esi]
call fcn.0040986c
test eax, eax
jne 0x4da28f
lea eax, [ebp - 0x34]
mov edx, dword [esi]
call fcn.00404e90
mov eax, dword [ebp - 0x34]
push eax
push ebx
call fcn.0046df00
lea eax, [ebp - 0x38]
mov edx, dword [esi]
call fcn.00404e90
mov eax, dword [ebp - 0x38]
mov edx, dword [0x5403f0]
call fcn.00470c64
mov eax, ebx
call fcn.004037ac
mov eax, dword [esi]
cmp byte [eax + 1], 0x3a
jne 0x4da2d0
mov eax, dword [esi]
mov al, byte [eax]
call fcn.0046b9d8
test al, al
je 0x4da2d0
mov eax, dword [esi]
mov al, byte [eax]
call fcn.00402b3c
call fcn.004b0b08
test eax, eax
jne 0x4da2d0
mov eax, dword [esi]
mov al, byte [eax]
call fcn.00402b3c
lea edx, [ebp - 0x10]
call fcn.004b0d04
jmp 0x4da2d8
lea eax, [ebp - 0x10]
call fcn.004045b8
cmp dword [ebp - 0x10], 0
je 0x4da337
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x400
mov edx, 3
mov eax, dword [esi]
call fcn.00404ae4
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.004048d8
mov edx, 0x20
mov eax, dword [ebp - 0xc]
call fcn.0040986c
push 0
lea eax, [ebp - 0xc]
call fcn.00404adc
push eax
mov eax, esi
call fcn.00404adc
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x10]
call fcn.004045b8
mov eax, dword [esi]
mov al, byte [eax]
call fcn.004b0e88
xor eax, eax
mov dword [0x540320], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4da382
lea eax, [ebp - 0x3c]
call fcn.004045b8
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404d08
lea eax, [ebp - 0x30]
mov edx, 7
call fcn.004045dc
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004045dc
ret