Function at 0x48bee1
Capabilities:
Copy file
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49fbb8
mov eax, dword fs:[0]
push eax
sub esp, 0x504
mov eax, dword [0x4d2a20]
xor eax, ebp
mov dword [ebp - 0x3c], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ebp + 8], 0
je 0x48bf19
cmp dword [ebp + 0xc], 0
jne 0x48bf20
xor eax, eax
jmp 0x48c391
push dword [ebp + 8]
call fcn.0042918e
pop ecx
test eax, eax
jne 0x48bf34
xor eax, eax
jmp 0x48c391
mov dword [ebp - 0x1c], 0x100
mov dword [ebp - 0x20], 1
push dword [ebp + 8]
lea ecx, [ebp - 0x10]
call fcn.004018ae
and dword [ebp - 4], 0
lea eax, [ebp - 0x10]
push eax
call fcn.0048bca2
pop ecx
push eax
lea ecx, [ebp - 0x10]
call fcn.00401000
push dword [ebp + 0xc]
lea ecx, [ebp - 0x14]
call fcn.004018ae
mov byte [ebp - 4], 1
lea eax, [ebp - 0x14]
push eax
call fcn.0048bca2
pop ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.00401000
lea ecx, [ebp - 0x10]
call fcn.00413706
push eax
lea ecx, [ebp - 0x14]
call fcn.00413706
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x48bfcc
and dword [ebp - 0x4c4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00406df8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00406df8
mov eax, dword [ebp - 0x4c4]
jmp 0x48c391
push 0xa
lea ecx, [ebp - 0x38]
call fcn.00425c98
mov byte [ebp - 4], 2
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x4d0], esp
lea eax, [ebp - 0x10]
push eax
call fcn.00401c6b
lea eax, [ebp - 0x4d8]
push eax
call fcn.0042c76e
add esp, 0xc
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], eax
mov byte [ebp - 4], 3
push dword [ebp - 0x4f8]
lea ecx, [ebp - 0x4cc]
call fcn.0042c7ce
mov byte [ebp - 4], 4
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042c70d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4cc]
call fcn.0040ee85
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4d8]
call fcn.0040ee85
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x38]
call fcn.0042c65e
movzx eax, al
test eax, eax
jne 0x48c35e
cmp dword [ebp - 0x18], 0
jne 0x48c35e
lea ecx, [ebp - 0x38]
call fcn.0042c675
push eax
lea ecx, [ebp - 0x4a8]
call fcn.00401c6b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.0042c675
mov eax, dword [eax + 4]
mov dword [ebp - 0x4ac], eax
lea ecx, [ebp - 0x38]
call fcn.0042c6a9
lea eax, [ebp - 0x4a8]
push eax
call fcn.0048bca2
pop ecx
push eax
lea ecx, [ebp - 0x4a8]
call fcn.00401000
lea ecx, [ebp - 0x4a4]
call fcn.0042b831
mov byte [ebp - 4], 6
push 0x2a
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x4dc]
push eax
call fcn.0042bc89
add esp, 0xc
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x500], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x500]
call fcn.00413706
push eax
lea ecx, [ebp - 0x4a4]
call fcn.0042baa9
mov dword [ebp - 0x4b0], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4dc]
call fcn.00406df8
cmp dword [ebp - 0x4b0], 0
je 0x48c330
cmp dword [ebp - 0x18], 0
jne 0x48c330
lea ecx, [ebp - 0x4a4]
call fcn.0042ba38
test eax, eax
jne 0x48c31a
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.0042b8f4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4b4]
call fcn.00401c57
mov esi, eax
lea ecx, [ebp - 0x10]
call fcn.00401c57
sub esi, eax
push esi
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.00428349
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x508], eax
mov byte [ebp - 4], 9
push dword [ebp - 0x508]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x4b8]
push eax
call fcn.004010eb
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4e0]
call fcn.00406df8
lea ecx, [ebp - 0x4a4]
call fcn.0042ba96
test eax, eax
je 0x48c2a2
push 0
lea ecx, [ebp - 0x4b8]
call fcn.00413706
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0
jne 0x48c235
mov dword [ebp - 0x18], 1
and dword [ebp - 0x20], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4b8]
call fcn.00406df8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4b4]
call fcn.00406df8
jmp 0x48c330
cmp dword [ebp - 0x4ac], 0x100
jae 0x48c2a0
mov eax, dword [ebp - 0x4ac]
inc eax
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x4e4], esp
lea eax, [ebp - 0x4b4]
push eax
call fcn.00401c6b
lea eax, [ebp - 0x4ec]
push eax
call fcn.0042c76e
add esp, 0xc
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x510], eax
mov byte [ebp - 4], 0xc
push dword [ebp - 0x510]
lea ecx, [ebp - 0x38]
call fcn.0042c70d
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4ec]
call fcn.0040ee85
jmp 0x48c2fc
push 0
lea ecx, [ebp - 0x4b8]
call fcn.00413706
push eax
lea ecx, [ebp - 0x4b4]
call fcn.00413706
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
jne 0x48c2fc
mov dword [ebp - 0x18], 1
and dword [ebp - 0x20], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4b8]
call fcn.00406df8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4b4]
call fcn.00406df8
jmp 0x48c330
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4b8]
call fcn.00406df8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4b4]
call fcn.00406df8
lea ecx, [ebp - 0x4a4]
call fcn.0042bbe6
mov dword [ebp - 0x4b0], eax
jmp 0x48c129
lea ecx, [ebp - 0x4a4]
call fcn.0042bc33
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4a4]
call fcn.0042b85d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4a8]
call fcn.00406df8
jmp 0x48c059
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4f0], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.0042c759
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00406df8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00406df8
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x3c]
xor ecx, ebp
call fcn.0047676d
leave
ret