Function at 0x4a789c
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe40
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
call fcn.00404d80
xor eax, eax
push ebp
push 0x4a7d4b
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 8], eax
cmp dword [0x4b3af8], 0
je 0x4a7d28
xor edx, edx
push ebp
push 0x4a7d0b
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
push ebp
push 0x4a7cfa
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x416de4]
call fcn.00403acc
mov dword [ebp - 0xc], eax
mov dl, 1
mov eax, dword [0x416de4]
call fcn.00403acc
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
call fcn.004095ec
cmp al, 1
jne 0x4a7cdc
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00409810
lea eax, [ebp - 0x1c]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00404df0
lea eax, [ebp - 0x20]
push eax
mov ecx, 6
mov edx, 3
mov eax, dword [ebp - 0x18]
call fcn.00404df0
mov edx, 0x4a7d68
mov eax, dword [ebp - 0x1c]
call fcn.00408bb0
cmp al, 1
je 0x4a7994
mov edx, 0x4a7d74
mov eax, dword [ebp - 0x1c]
call fcn.00408bb0
cmp al, 1
jne 0x4a7cdc
mov edx, 0x4a7d68
mov eax, dword [ebp - 0x1c]
call fcn.00408bb0
cmp al, 1
jne 0x4a7a00
push dword [0x4b3af8]
push 0x4a7d80
push dword [ebp - 0x20]
push 0x4a7d9c
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00404c50
push dword [0x4b3af8]
push 0x4a7d80
push dword [ebp - 0x20]
push 0x4a7dac
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.00404c50
lea eax, [ebp - 0x24]
mov edx, 0x4a7dbc
call fcn.00404968
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
call fcn.00404bdc
mov edx, 0x4a7d74
mov eax, dword [ebp - 0x1c]
call fcn.00408bb0
cmp al, 1
jne 0x4a7a6c
push dword [0x4b3af8]
push 0x4a7dc8
push dword [ebp - 0x20]
push 0x4a7d9c
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00404c50
push dword [0x4b3af8]
push 0x4a7dc8
push dword [ebp - 0x20]
push 0x4a7dac
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.00404c50
lea eax, [ebp - 0x24]
mov edx, 0x4a7de4
call fcn.00404968
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
call fcn.00404bdc
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4a7df0
mov edx, 0x4a7e00
mov eax, dword [ebp - 4]
call fcn.00433404
cmp byte [ebp + 8], 0
jne 0x4a7aa6
mov eax, dword [ebp - 0x2c]
call fcn.004095ec
cmp al, 1
jne 0x4a7aa6
call fcn.00404334
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a7d28
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
call fcn.0041ba78
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x4a7ac6
cmp eax, 0x80
jae 0x4a7ada
jmp 0x4a7ac8
jge 0x4a7ada
call fcn.00404334
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a7d28
push 0
push 0
mov eax, dword [ebp - 0xc]
call fcn.0041b2c8
push 0
push 0
mov eax, dword [ebp - 0x10]
call fcn.0041b2c8
xor ebx, ebx
mov eax, dword [0x4a7e08]
mov dword [ebp - 0xc0], eax
mov eax, dword [0x4a7e0c]
mov dword [ebp - 0xbc], eax
mov word [ebp - 0xb8], 0x101
mov word [ebp - 0xb6], 0
xor eax, eax
mov dword [ebp - 0xb4], eax
jmp 0x4a7c7b
cmp byte [0x4b3ac8], 1
je 0x4a7ca7
lea edx, [ebp - 0xb0]
mov ecx, 0x80
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp eax, 0x80
jne 0x4a7c7b
inc ebx
mov word [ebp - 0xb6], bx
cmp ebx, 1
jne 0x4a7b8f
push 0
mov eax, dword [ebp - 0x30]
call fcn.00404d90
push eax
mov eax, dword [ebp - 0x14]
call fcn.00404d90
push eax
call sub.kernel32.dll_CopyFileA
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
call dword [esi + 0x10]
mov byte [ebp - 0x1c0], 0
mov word [ebp - 0x1bf], 1
xor edx, edx
mov eax, dword [ebp - 0xa4]
call fcn.004903bc
mov dword [ebp - 0x1bd], eax
xor edx, edx
mov eax, dword [ebp - 0xa4]
call fcn.00490298
mov dword [ebp - 0x1b9], eax
lea eax, [ebp - 0x1b5]
xor ecx, ecx
mov edx, 0x40
call fcn.00403444
lea edx, [ebp - 0x7e]
lea eax, [ebp - 0x1b5]
mov ecx, 0x40
call fcn.004099c0
lea eax, [ebp - 0x175]
xor ecx, ecx
mov edx, 0x50
call fcn.00403444
lea eax, [ebp - 0x175]
mov ecx, 0x50
mov edx, dword [ebp - 0x30]
call fcn.00409a18
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x125], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x121], eax
lea eax, [ebp - 0x11d]
xor ecx, ecx
mov edx, 9
call fcn.00403444
lea eax, [ebp - 0x11d]
mov ecx, 9
mov edx, dword [ebp - 0x28]
call fcn.00409a18
mov esi, 0x4a7e10
lea edi, [ebp - 0x114]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0xc1], 0
lea edx, [ebp - 0x1c0]
mov ecx, pe_nt_image_headers32
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
call dword [esi + 0x10]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [ebp - 0xc]
call fcn.0041b2a8
cmp edx, dword [esp + 4]
jne 0x4a7c9f
cmp eax, dword [esp]
pop edx
pop eax
jb 0x4a7b2b
jmp 0x4a7ca7
pop edx
pop eax
jl 0x4a7b2b
test ebx, ebx
jle 0x4a7cdc
mov word [ebp - 0xb6], bx
push 0
push 0
mov eax, dword [ebp - 0x10]
call fcn.0041b2c8
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
call fcn.0041b9a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a7d01
mov eax, dword [ebp - 0xc]
call fcn.00403afc
mov eax, dword [ebp - 0x10]
call fcn.00403afc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a7d52
lea eax, [ebp - 0x30]
mov edx, 8
call fcn.004048f4
lea eax, [ebp - 4]
call fcn.004048d0
ret