Function at 0x4d9d54
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4d9d5c
push ecx
push ebx
push esi
push edi
mov esi, 0x5495f8
xor eax, eax
push ebp
push 0x4da223
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [0x53f320], 0x7de
mov dl, 1
mov eax, dword [0x470804]
call fcn.0040377c
mov ebx, eax
mov dword [ebp - 4], 0x5a226334
lea edx, [ebp - 4]
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x18]
mov eax, 0x2a
call fcn.004ab8e8
mov edx, dword [ebp - 0x18]
mov eax, ebx
call fcn.00470df0
mov edx, dword [0x540854]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x540400]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1c]
mov eax, dword [0x54960c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.00470df0
lea edx, [ebp - 0x20]
mov eax, dword [0x549614]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.00470df0
lea edx, [ebp - 0x24]
mov eax, dword [0x549618]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.00470df0
xor edx, edx
mov eax, ebx
call fcn.00470df0
xor edx, edx
mov eax, ebx
call fcn.00470df0
mov edx, 0x53f9d4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f9c4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f9b4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f3cc
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f3d0
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f3d4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f3ac
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x53f3ec]
mov eax, ebx
call fcn.00470df0
lea edx, [ebp - 0x28]
mov eax, dword [0x549808]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x28]
mov eax, ebx
call fcn.00470df0
mov edx, 0x53f9b8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x4da23c
mov eax, ebx
call fcn.00470df0
mov edx, dword [0x5497ac]
mov eax, ebx
call fcn.00470df0
mov edx, 0x53f414
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f418
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x2c]
mov eax, 0x9c
call fcn.004ab8e8
mov eax, dword [ebp - 0x2c]
push eax
lea edx, [ebp - 0x30]
mov eax, 0x11a
call fcn.004ab8e8
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x53f3ec]
pop edx
call fcn.0046c30c
cmp byte [0x53f3e0], 2
jne 0x4d9f7b
mov byte [ebp - 5], 1
jmp 0x4d9f7f
mov byte [ebp - 5], 0
lea edx, [ebp - 5]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f424
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x54961c]
mov eax, ebx
call fcn.00470df0
mov edx, 0x53f9c0
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53fa48
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53fa4c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53fa40
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53fa44
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53fa3c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f9cc
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f464
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f468
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f46c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f3e8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53f3b8
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi]
call fcn.0046dd44
test al, al
je 0x4da10b
mov edx, 0x20
mov eax, dword [esi]
call fcn.0040986c
test eax, eax
jne 0x4da137
lea eax, [ebp - 0x34]
mov edx, dword [esi]
call fcn.00404e90
mov eax, dword [ebp - 0x34]
push eax
push ebx
call fcn.0046de68
lea eax, [ebp - 0x38]
mov edx, dword [esi]
call fcn.00404e90
mov eax, dword [ebp - 0x38]
mov edx, dword [0x53f3f0]
call fcn.00470bcc
mov eax, ebx
call fcn.004037ac
mov eax, dword [esi]
cmp byte [eax + 1], 0x3a
jne 0x4da178
mov eax, dword [esi]
mov al, byte [eax]
call fcn.0046b940
test al, al
je 0x4da178
mov eax, dword [esi]
mov al, byte [eax]
call fcn.00402b3c
call fcn.004b0a70
test eax, eax
jne 0x4da178
mov eax, dword [esi]
mov al, byte [eax]
call fcn.00402b3c
lea edx, [ebp - 0x10]
call fcn.004b0c6c
jmp 0x4da180
lea eax, [ebp - 0x10]
call fcn.004045b8
cmp dword [ebp - 0x10], 0
je 0x4da1df
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x400
mov edx, 3
mov eax, dword [esi]
call fcn.00404ae4
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.004048d8
mov edx, 0x20
mov eax, dword [ebp - 0xc]
call fcn.0040986c
push 0
lea eax, [ebp - 0xc]
call fcn.00404adc
push eax
mov eax, esi
call fcn.00404adc
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x10]
call fcn.004045b8
mov eax, dword [esi]
mov al, byte [eax]
call fcn.004b0df0
xor eax, eax
mov dword [0x53f320], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4da22a
lea eax, [ebp - 0x3c]
call fcn.004045b8
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404d08
lea eax, [ebp - 0x30]
mov edx, 7
call fcn.004045dc
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004045dc
ret