Function at 0x402580
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ac
mov eax, dword [0x42b0c0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x50]
push 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x4ac], 0xfd0
push 0
push eax
movq qword [ebp - 0x10], xmm0
mov byte [ebp - 8], 0
call fcn.00409860
push 0x40
lea eax, [ebp - 0x90]
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0x150]
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0x190]
push 0
push eax
call fcn.00409860
add esp, 0x48
lea eax, [ebp - 0x1d0]
push 0x40
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0x250]
push 0
push eax
call fcn.00409860
push 0x40
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.00409860
add esp, 0x30
lea eax, [ebp - 0x4a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x4a2]
push eax
movzx eax, word [ebp - 0x4a6]
push eax
movzx eax, word [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x10]
push str._hu_2.2hu_2.2hu
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea esi, [edi + 0x114]
add esp, 0x14
lea edx, [ebp - 0x394]
mov ecx, esi
sub edx, esi
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x4026a0
lea ecx, [ebp - 0x394]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x4026b4
mov eax, dword [str.uninstl.exe]
mov dword [ecx], eax
mov eax, dword [0x416ce0]
mov dword [ecx + 4], eax
mov eax, dword [0x416ce4]
mov dword [ecx + 8], eax
mov al, byte [0x416ce8]
mov byte [ecx + 0xc], al
lea eax, [ebp - 0x394]
push 0
push eax
lea eax, [edi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea edx, [ebp - 0x498]
mov ecx, esi
sub edx, esi
nop word [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x402700
lea ecx, [ebp - 0x498]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x402714
mov eax, dword [0x416c50]
mov dword [ecx], eax
mov eax, dword [0x416c54]
mov dword [ecx + 4], eax
mov eax, dword [0x416c58]
mov dword [ecx + 8], eax
mov ax, word [0x416c5c]
mov word [ecx + 0xc], ax
lea ecx, [ebp - 0x498]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402748
lea eax, [ebp - 0x50]
sub ecx, edx
push eax
push 1
push ecx
push str.DisplayIcon
lea eax, [ebp - 0x498]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea eax, [ebp - 0x90]
push eax
push 1
push 0x12
push str.DisplayName
push 0x416388
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea ecx, [ebp - 0x394]
add esp, 0x38
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4027a3
lea eax, [ebp - 0xd0]
sub ecx, edx
push eax
push 1
push ecx
push str.UninstallString
lea eax, [ebp - 0x394]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea eax, [ebp - 0x110]
push eax
push 1
push 0x14
push str.Publisher
push 0x416d68
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea eax, [ebp - 0x150]
push eax
push 1
push 7
push str.DisplayVersion
push str.2023.0a
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea ecx, [ebp - 0x10]
add esp, 0x54
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402822
lea eax, [ebp - 0x190]
sub ecx, edx
push eax
push 1
push ecx
push str.InstallDate
lea eax, [ebp - 0x10]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
mov ecx, esi
add esp, 0x1c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402855
lea eax, [ebp - 0x1d0]
sub ecx, edx
push eax
push 1
push ecx
push str.InstallLocation
push esi
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea eax, [ebp - 0x210]
push eax
push 1
push 0x19
push str.URLInfoAbout
push str.https:__efile_express.com
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
lea eax, [ebp - 0x250]
push eax
push 1
push 0x25
push str.HelpLink
push str.https:__efile_express.com_support.htm
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
add esp, 0x54
lea eax, [ebp - 0x290]
push eax
push 4
push 4
push str.EstimatedSize
lea eax, [ebp - 0x4ac]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalleFile_Express_2023
push 0x80000002
call fcn.00406b30
mov ecx, dword [ebp - 4]
add esp, 0x1c
xor ecx, ebp
pop edi
pop esi
call fcn.00408060
mov esp, ebp
pop ebp
ret