Function at 0x4d9240
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4d9248
push ecx
push ebx
push esi
push edi
mov esi, 0x5475d0
xor eax, eax
push ebp
push 0x4d9711
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [0x53d314], 0x7de
mov dl, 1
mov eax, dword [0x4707e0]
call fcn.0040377c
mov ebx, eax
mov dword [ebp - 4], 0x5a226334
lea edx, [ebp - 4]
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x18]
mov eax, 0x2a
call fcn.004ab720
mov edx, dword [ebp - 0x18]
mov eax, ebx
call fcn.00470dcc
mov edx, dword [0x53e82c]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x53e3d8]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1c]
mov eax, dword [0x5475e4]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.00470dcc
lea edx, [ebp - 0x20]
mov eax, dword [0x5475ec]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.00470dcc
lea edx, [ebp - 0x24]
mov eax, dword [0x5475f0]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.00470dcc
xor edx, edx
mov eax, ebx
call fcn.00470dcc
xor edx, edx
mov eax, ebx
call fcn.00470dcc
mov edx, 0x53d9b8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d9a8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d998
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d3b8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d3bc
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d3c0
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d394
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x53d3d8]
mov eax, ebx
call fcn.00470dcc
lea edx, [ebp - 0x28]
mov eax, dword [0x5477c8]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x28]
mov eax, ebx
call fcn.00470dcc
mov edx, 0x53d99c
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x4d9728
mov eax, ebx
call fcn.00470dcc
mov edx, dword [0x54776c]
mov eax, ebx
call fcn.00470dcc
mov edx, 0x53d400
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d404
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x2c]
mov eax, 0x9c
call fcn.004ab720
mov eax, dword [ebp - 0x2c]
push eax
lea edx, [ebp - 0x30]
mov eax, 0x11a
call fcn.004ab720
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x53d3d8]
pop edx
call fcn.0046c2e8
cmp byte [0x53d3cc], 2
jne 0x4d9467
mov byte [ebp - 5], 1
jmp 0x4d946b
mov byte [ebp - 5], 0
lea edx, [ebp - 5]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d410
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x11]
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [0x5475f4]
mov eax, ebx
call fcn.00470dcc
mov edx, 0x53d9a4
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 4]
mov ecx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53da2c
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53da30
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53da24
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53da28
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53da20
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d9b0
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d450
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d454
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d458
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d3d4
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d3a0
mov ecx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, 0x53d3a8
mov ecx, 1
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi]
call fcn.0046dd20
test al, al
je 0x4d95f9
mov edx, 0x20
mov eax, dword [esi]
call fcn.0040986c
test eax, eax
jne 0x4d9625
lea eax, [ebp - 0x34]
mov edx, dword [esi]
call fcn.00404e90
mov eax, dword [ebp - 0x34]
push eax
push ebx
call fcn.0046de44
lea eax, [ebp - 0x38]
mov edx, dword [esi]
call fcn.00404e90
mov eax, dword [ebp - 0x38]
mov edx, dword [0x53d3dc]
call fcn.00470ba8
mov eax, ebx
call fcn.004037ac
mov eax, dword [esi]
cmp byte [eax + 1], 0x3a
jne 0x4d9666
mov eax, dword [esi]
mov al, byte [eax]
call fcn.0046b91c
test al, al
je 0x4d9666
mov eax, dword [esi]
mov al, byte [eax]
call fcn.00402b3c
call fcn.004b08a8
test eax, eax
jne 0x4d9666
mov eax, dword [esi]
mov al, byte [eax]
call fcn.00402b3c
lea edx, [ebp - 0x10]
call fcn.004b0aa4
jmp 0x4d966e
lea eax, [ebp - 0x10]
call fcn.004045b8
cmp dword [ebp - 0x10], 0
je 0x4d96cd
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x400
mov edx, 3
mov eax, dword [esi]
call fcn.00404ae4
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.004048d8
mov edx, 0x20
mov eax, dword [ebp - 0xc]
call fcn.0040986c
push 0
lea eax, [ebp - 0xc]
call fcn.00404adc
push eax
mov eax, esi
call fcn.00404adc
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x10]
call fcn.004045b8
mov eax, dword [esi]
mov al, byte [eax]
call fcn.004b0c28
xor eax, eax
mov dword [0x53d314], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d9718
lea eax, [ebp - 0x3c]
call fcn.004045b8
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404d08
lea eax, [ebp - 0x30]
mov edx, 7
call fcn.004045dc
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004045dc
ret