Function at 0x485e50
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
xor eax, eax
push ebp
push 0x4861f5
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00482178
lea ebx, [eax + 0x1d8c]
xor eax, eax
mov dword [ebx + 8], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4b0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x485ec8
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 0x1078], 9
xor eax, eax
mov dword [ebx + 0x107c], eax
mov dword [ebx + 0x1090], 1
mov dword [ebx + 0x1084], 1
xor eax, eax
mov dword [ebx + 0x108c], eax
jmp 0x486036
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4b4]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
jne 0x485ef8
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4b8]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x485f33
mov dword [ebx], 1
mov dword [ebx + 0x1078], 9
mov dword [ebx + 0x107c], 2
mov dword [ebx + 0x1090], 1
mov dword [ebx + 0x1084], 1
xor eax, eax
mov dword [ebx + 0x108c], eax
jmp 0x486036
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4bc]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
jne 0x485f63
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4c8]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x485f9a
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 0x1078], 5
xor eax, eax
mov dword [ebx + 0x107c], eax
mov dword [ebx + 0x1090], 1
mov dword [ebx + 0x1084], 1
xor eax, eax
mov dword [ebx + 0x108c], eax
jmp 0x486036
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4cc]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x485fea
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 0x1078], 5
mov dword [ebx + 0x107c], 2
mov dword [ebx + 0x1090], 2
mov dword [ebx + 0x1084], 1
mov dword [ebx + 0x108c], 1
jmp 0x486036
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4c4]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x486036
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 0x1078], 9
mov dword [ebx + 0x107c], 2
mov dword [ebx + 0x1090], 1
mov dword [ebx + 0x1084], 1
xor eax, eax
mov dword [ebx + 0x108c], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x460]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
jne 0x48606a
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4c0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4861da
mov dword [ebx + 8], 1
mov dword [ebx + 0xc], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4c0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x486097
mov bl, 7
jmp 0x48615b
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4b0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4860b6
mov bl, 2
jmp 0x48615b
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4b8]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4860d5
mov bl, 3
jmp 0x48615b
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4bc]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
jne 0x486105
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4c8]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x486109
mov bl, 4
jmp 0x48615b
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4c4]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
jne 0x486139
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4b4]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x48613d
mov bl, 5
jmp 0x48615b
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x4cc]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x486159
mov bl, 6
jmp 0x48615b
mov bl, 1
lea edx, [ebp - 0x10]
mov eax, ebx
call fcn.00485e14
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
mov dl, 1
call fcn.00481a4c
lea edx, [ebp - 0x14]
mov al, 1
call fcn.00485e14
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
xor edx, edx
call fcn.00481a4c
mov eax, dword [ebp - 8]
call fcn.00408cac
test al, al
je 0x4861a2
mov edx, 0x20
mov eax, dword [ebp - 8]
call fcn.00408dec
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00408fe4
mov eax, dword [ebp - 0xc]
call fcn.00408cd0
test al, al
jne 0x4861c1
mov eax, dword [ebp - 0xc]
call fcn.00408cf4
push 0
mov eax, dword [ebp - 8]
call fcn.00404cbc
push eax
mov eax, dword [ebp - 4]
call fcn.00404cbc
push eax
call sub.kernel32.dll_CopyFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4861fc
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.0040481c
ret