Function at 0x4c7353
Capabilities:
Contain obfuscated stackstrings
Copy file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5855cf
mov eax, dword fs:[0]
push eax
mov eax, 0x8194
call fcn.004fc580
mov eax, dword [0x602c60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor esi, esi
push esi
push esi
mov dword [ebp - 0x8144], ecx
mov dword [ebp - 0x814c], eax
call fcn.0052b364
mov dword [ebp - 0x8138], esi
mov dword [ebp - 0x8178], esi
mov dword [ebp - 0x8174], esi
mov dword [ebp - 0x8170], esi
mov dword [ebp - 4], esi
mov ecx, dword [0x60642c]
lea eax, [ebp - 0x8178]
push eax
call fcn.004367dc
mov ebx, 0x59a2c0
test al, al
je 0x4c7624
mov eax, dword [ebp - 0x8174]
sub eax, dword [ebp - 0x8178]
mov edi, 0x2528
cdq
mov ecx, edi
idiv ecx
mov dword [ebp - 0x8124], esi
test eax, eax
je 0x4c7624
mov dword [ebp - 0x812c], esi
mov ecx, dword [ebp - 0x812c]
add ecx, dword [ebp - 0x8178]
push edi
push ecx
lea eax, [ebp - 0x2538]
push eax
call fcn.004fbb10
add esp, 0xc
cmp dword [ebp - 0x14], esi
jne 0x4c75fb
push 0x602968
lea ecx, [ebp - 0x8128]
call fcn.00431ef7
mov byte [ebp - 4], 2
lea eax, [ebp - 0x2538]
push eax
lea eax, [ebp - 0x8128]
push str.taskbtn__s
push eax
call fcn.00433c96
mov ecx, dword [ebp - 0x8144]
add esp, 0xc
push dword [ebp - 0x8128]
add ecx, 0x20
call fcn.0052f1b2
cmp eax, esi
je 0x4c75e9
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x3ac]
test al, al
je 0x4c75e9
lea eax, [ebp - 0x2538]
push 0x59ac48
push eax
call fcn.004fa9a7
pop ecx
pop ecx
test eax, eax
jne 0x4c74a5
mov dword [ebp - 0x8138], 1
lea ecx, [ebp - 0x8168]
call fcn.00432a3a
mov byte [ebp - 4], 4
push ecx
lea eax, [ebp - 0x914]
mov ecx, esp
mov dword [ebp - 0x8148], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 5
push ecx
mov eax, esp
mov dword [ebp - 0x8140], esp
push eax
lea ecx, [ebp - 0x8168]
call fcn.004baf0b
mov byte [ebp - 4], 6
lea eax, [ebp - 0x813c]
push eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8168]
call fcn.0049be74
mov byte [ebp - 4], 7
push ebx
push 1
mov eax, edi
lea esi, [ebp - 0x2538]
call fcn.004fc580
mov edi, esp
push ebx
push dword [ebp - 0x813c]
lea eax, [ebp - 0x1914]
push eax
mov ecx, 0x94a
lea eax, [ebp - 0x2538]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x606424]
push eax
call fcn.0049c4da
push ecx
mov ecx, esp
mov dword [ebp - 0x8140], esp
push ebx
call fcn.0043479c
mov byte [ebp - 4], 8
push ecx
lea eax, [ebp - 0x1914]
mov ecx, esp
mov dword [ebp - 0x8148], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 9
push 1
push ecx
lea eax, [ebp - 0x2338]
mov ecx, esp
mov dword [ebp - 0x8150], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0xa
push ecx
lea eax, [ebp - 0x2538]
mov ecx, esp
mov dword [ebp - 0x8134], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0xb
push ecx
lea eax, [ebp - 0x214]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0xc
mov ecx, dword [0x606434]
mov byte [ebp - 4], 7
call fcn.004e6ae5
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x813c]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8168]
call fcn.00432a92
mov edi, 0x2528
xor esi, esi
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x8128]
add ecx, 0xfffffff0
call fcn.004310e3
mov eax, dword [ebp - 0x8174]
sub eax, dword [ebp - 0x8178]
mov ecx, edi
cdq
idiv ecx
inc dword [ebp - 0x8124]
add dword [ebp - 0x812c], edi
cmp dword [ebp - 0x8124], eax
jb 0x4c7401
push dword [ebp - 0x8138]
mov ecx, dword [0x606434]
call fcn.004e5a0b
mov dword [ebp - 0x8188], esi
mov dword [ebp - 0x8184], esi
mov dword [ebp - 0x8180], esi
mov byte [ebp - 4], 0x10
mov ecx, dword [0x60642c]
lea eax, [ebp - 0x8188]
push eax
call fcn.004367f4
mov edi, 0x4088
test al, al
je 0x4c79fb
mov eax, dword [ebp - 0x8184]
sub eax, dword [ebp - 0x8188]
mov ecx, edi
cdq
idiv ecx
mov dword [ebp - 0x8124], esi
test eax, eax
je 0x4c79fb
mov dword [ebp - 0x812c], esi
mov ecx, dword [ebp - 0x812c]
add ecx, dword [ebp - 0x8188]
push edi
push ecx
lea eax, [ebp - 0x4098]
push eax
call fcn.004fbb10
add esp, 0xc
cmp dword [ebp - 0x14], esi
jne 0x4c79d2
lea eax, [ebp - 0x3e98]
push eax
call fcn.004fb22e
pop ecx
test eax, eax
je 0x4c7888
push 0x602968
lea ecx, [ebp - 0x8128]
call fcn.00431ef7
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x4098]
push eax
lea eax, [ebp - 0x8128]
push str.softbtn__s
push eax
call fcn.00433c96
mov ecx, dword [ebp - 0x8144]
add esp, 0xc
push dword [ebp - 0x8128]
add ecx, 0x20
call fcn.0052f1b2
cmp eax, esi
je 0x4c7871
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x3ac]
test al, al
je 0x4c7871
lea ecx, [ebp - 0x8168]
call fcn.00432a3a
mov byte [ebp - 4], 0x14
push ecx
lea eax, [ebp - 0x1a18]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x15
push ecx
mov eax, esp
mov dword [ebp - 0x8134], esp
push eax
lea ecx, [ebp - 0x8168]
call fcn.004baf0b
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x8138]
push eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x8168]
call fcn.0049be74
mov byte [ebp - 4], 0x17
push ebx
push 1
mov eax, edi
lea esi, [ebp - 0x4098]
call fcn.004fc580
mov edi, esp
push ebx
push dword [ebp - 0x8138]
lea eax, [ebp - 0x2a18]
push eax
mov ecx, 0x1022
lea eax, [ebp - 0x4098]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x606424]
push eax
call fcn.0049c8e5
push ecx
lea eax, [ebp - 0x3298]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x18
push ecx
lea eax, [ebp - 0x2a18]
mov ecx, esp
mov dword [ebp - 0x8134], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x19
push 1
push ecx
lea eax, [ebp - 0x3498]
mov ecx, esp
mov dword [ebp - 0x8150], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x1a
push ecx
lea eax, [ebp - 0x4098]
mov ecx, esp
mov dword [ebp - 0x8140], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x1b
push ecx
mov ecx, esp
mov dword [ebp - 0x8148], esp
lea eax, [ebp - 0x418]
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x1c
mov ecx, dword [0x606434]
mov byte [ebp - 4], 0x17
call fcn.004e6ae5
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x8138]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8168]
call fcn.00432a92
mov edi, 0x4088
xor esi, esi
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8128]
add ecx, 0xfffffff0
call fcn.004310e3
jmp 0x4c79d2
lea ecx, [ebp - 0x81a0]
call fcn.00432a3a
mov byte [ebp - 4], 0x21
push ecx
lea eax, [ebp - 0x1a18]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x22
push ecx
mov eax, esp
mov dword [ebp - 0x8134], esp
push eax
lea ecx, [ebp - 0x81a0]
call fcn.004baf0b
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x813c]
push eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x81a0]
call fcn.0049be74
mov byte [ebp - 4], 0x24
push ebx
push 1
mov eax, edi
lea esi, [ebp - 0x4098]
call fcn.004fc580
mov edi, esp
push ebx
push dword [ebp - 0x813c]
lea eax, [ebp - 0x2a18]
push eax
mov ecx, 0x1022
lea eax, [ebp - 0x4098]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x606424]
push eax
call fcn.0049c8e5
push ecx
lea eax, [ebp - 0x3298]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x25
push ecx
lea eax, [ebp - 0x2a18]
mov ecx, esp
mov dword [ebp - 0x8134], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x26
push 1
push ecx
lea eax, [ebp - 0x3498]
mov ecx, esp
mov dword [ebp - 0x8150], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x27
push ecx
lea eax, [ebp - 0x4098]
mov ecx, esp
mov dword [ebp - 0x8140], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x8148], esp
lea eax, [ebp - 0x418]
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x29
mov ecx, dword [0x606434]
mov byte [ebp - 4], 0x24
call fcn.004e6ae5
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x813c]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x81a0]
call fcn.00432a92
mov edi, 0x4088
xor esi, esi
mov eax, dword [ebp - 0x8184]
sub eax, dword [ebp - 0x8188]
mov ecx, edi
cdq
idiv ecx
inc dword [ebp - 0x8124]
add dword [ebp - 0x812c], edi
cmp dword [ebp - 0x8124], eax
jb 0x4c768f
mov ecx, dword [0x60642c]
lea eax, [ebp - 0x8120]
push eax
call fcn.00431434
test al, al
je 0x4c7e36
mov ecx, dword [ebp - 0x814c]
mov eax, dword [ecx]
push esi
call dword [eax + 0x18c]
lea ecx, [ebp - 0x8168]
call fcn.00432a3a
mov byte [ebp - 4], 0x2d
push ecx
lea eax, [ebp - 0x7520]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x2e
push ecx
mov eax, esp
mov dword [ebp - 0x8134], esp
push eax
lea ecx, [ebp - 0x8168]
call fcn.0049bc11
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x8128]
push eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x8168]
call fcn.0049be74
mov byte [ebp - 4], 0x30
push ecx
lea eax, [ebp - 0x5aa0]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x31
push ecx
lea eax, [ebp - 0x8128]
mov ecx, esp
mov dword [ebp - 0x8134], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x812c]
push eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x8168]
call fcn.0049be74
mov byte [ebp - 4], 0x33
push ecx
lea eax, [ebp - 0x8128]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x8168]
call fcn.004bb25b
push ecx
lea eax, [ebp - 0x5aa0]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x35
push ecx
mov eax, esp
mov dword [ebp - 0x8134], esp
push eax
lea ecx, [ebp - 0x8168]
call fcn.004baf0b
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x8124]
push eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x8168]
call fcn.0049be74
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x44a0]
push 0x59adc8
push eax
call fcn.004fa9a7
pop ecx
pop ecx
test eax, eax
jne 0x4c7bc0
push ecx
lea eax, [ebp - 0x42a0]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x38
push ecx
mov eax, esp
mov dword [ebp - 0x8134], esp
push eax
lea ecx, [ebp - 0x8168]
call fcn.004baf0b
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x814c]
push eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x8168]
call fcn.0049be74
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x8124]
call fcn.00433c20
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x814c]
add ecx, 0xfffffff0
call fcn.004310e3
push dword [ebp - 0x8124]
call fcn.004a1150
pop ecx
test al, al
je 0x4c7ca8
push esi
push dword [ebp - 0x812c]
push dword [ebp - 0x8124]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x44a0]
push 0x59adc8
push eax
call fcn.004fa9a7
pop ecx
pop ecx
test eax, eax
je 0x4c7c10
lea eax, [ebp - 0x812c]
push eax
lea ecx, [ebp - 0x8124]
call fcn.00433c20
push ebx
mov eax, edi
lea esi, [ebp - 0x8120]
call fcn.004fc580
mov edi, esp
push ebx
push dword [ebp - 0x8124]
lea eax, [ebp - 0x6aa0]
push eax
mov ecx, 0x1022
lea eax, [ebp - 0x8120]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x606424]
push eax
call fcn.00499feb
push ecx
mov ecx, esp
mov dword [ebp - 0x8130], esp
push str._ccdata
call fcn.0043479c
mov byte [ebp - 4], 0x3c
mov ecx, dword [0x606434]
mov byte [ebp - 4], 0x37
call fcn.004e6a25
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x8124]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x812c]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x8128]
add ecx, 0xfffffff0
call fcn.004310e3
jmp 0x4c7e27
push 0x5ab580
lea ecx, [ebp - 0x813c]
call fcn.0043479c
mov byte [ebp - 4], 0x3d
push 0x5ab570
lea ecx, [ebp - 0x8138]
call fcn.0043479c
mov byte [ebp - 4], 0x3e
push 0x14
lea eax, [ebp - 0x813c]
push eax
mov eax, dword [ebp - 0x8144]
push dword [eax + 4]
lea ecx, [ebp - 0x8138]
call fcn.004c64ca
add esp, 0xc
cmp eax, 6
jne 0x4c7dc1
push ebx
push esi
mov eax, edi
lea esi, [ebp - 0x8120]
call fcn.004fc580
mov edi, esp
push ebx
push dword [ebp - 0x8124]
lea eax, [ebp - 0x6aa0]
push eax
mov ecx, 0x1022
lea eax, [ebp - 0x8120]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x606424]
push eax
call fcn.0049c30b
push ecx
lea eax, [ebp - 0x7320]
mov ecx, esp
mov dword [ebp - 0x8130], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x3f
push ecx
lea eax, [ebp - 0x6aa0]
mov ecx, esp
mov dword [ebp - 0x8134], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x40
push 1
push ecx
lea eax, [ebp - 0x7520]
mov ecx, esp
mov dword [ebp - 0x8150], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x41
push ecx
lea eax, [ebp - 0x8120]
mov ecx, esp
mov dword [ebp - 0x8140], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x42
push ecx
lea eax, [ebp - 0x44a0]
mov ecx, esp
mov dword [ebp - 0x8148], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0x43
mov ecx, dword [0x606434]
mov byte [ebp - 4], 0x3e
call fcn.004e6ae5
jmp 0x4c7dcd
mov ecx, dword [ebp - 0x8144]
push esi
call fcn.0052bc5a
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x8138]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x813c]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x8124]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x812c]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x8128]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8168]
call fcn.00432a92
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8188]
call fcn.00433f64
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8178]
call fcn.00433f44
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004fb958
leave
ret 0xc