Function at 0x446f50
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x446f58
push ebx
push esi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x44726e
push dword fs:[eax]
mov dword fs:[eax], esp
xor esi, esi
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GlobalFindAtomA
mov word [0x51ff5a], ax
cmp word [0x51ff5a], 0
jne 0x447242
lea edx, [ebp - 0x14]
mov eax, 0x447288
call fcn.0043e0cc
call fcn.00402af0
mov eax, dword [0x51db8c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
call fcn.00403060
mov ebx, eax
lea ecx, [ebp - 0x24]
mov eax, dword [0x51db8c]
mov eax, dword [eax]
mov edx, ebx
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x24]
lea eax, [ebp - 0x28]
call fcn.0043eec0
push dword [ebp - 0x28]
push 0x44729c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004048b8
mov eax, dword [ebp - 0xc]
call fcn.0040870c
test al, al
jne 0x447007
lea eax, [ebp - 0xc]
mov edx, dword [0x51deec]
mov edx, dword [edx]
call fcn.004045d0
lea edx, [ebp - 0x18]
mov eax, dword [0x51dfbc]
mov eax, dword [eax]
call fcn.00408624
mov eax, dword [ebp - 0x18]
call fcn.004047f8
cmp eax, 0x13
jle 0x447030
lea edx, [ebp - 0x18]
mov eax, 0x4472a8
call fcn.0043e0cc
mov eax, dword [ebp - 0x18]
call fcn.004047f8
mov ebx, eax
sub ebx, 3
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.00404844
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.004048b8
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
call fcn.0043ee5c
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x1c]
call fcn.004045d0
lea eax, [ebp - 0x30]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00404a58
mov eax, dword [ebp - 0x30]
push eax
lea edx, [ebp - 0x34]
mov eax, 0x4472bc
call fcn.0043e0cc
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x20]
pop ecx
call fcn.00404844
lea eax, [ebp - 0x38]
push eax
mov edx, ebx
add edx, edx
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
call fcn.00404a58
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
call fcn.00404844
push 0
mov eax, dword [ebp - 0x10]
call fcn.004049f8
mov ebx, eax
push ebx
mov eax, dword [0x51dfbc]
mov eax, dword [eax]
call fcn.004049f8
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
je 0x44720a
push 0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
call fcn.00404844
mov eax, dword [ebp - 0x3c]
call fcn.004049f8
push eax
mov edx, dword [0x51dbac]
mov edx, dword [edx]
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x14]
call fcn.00404844
mov eax, dword [ebp - 0x40]
call fcn.004049f8
push eax
call sub.kernel32.dll_CopyFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x44713f
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x447172
push 0x4472c8
push dword [ebp - 0x10]
push 0x4472d4
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 8]
call fcn.00404730
push dword [ebp - 0x48]
lea eax, [ebp - 0x44]
mov edx, 4
call fcn.004048b8
mov eax, dword [ebp - 0x44]
call fcn.004049f8
mov dword [ebp - 8], eax
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.0043f964
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GlobalAddAtomA
mov word [0x51ff5a], ax
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x10]
call fcn.004085f0
mov eax, dword [ebp - 0x4c]
call fcn.004049f8
push eax
mov eax, ebx
mov edx, dword [ebp - 8]
pop ecx
call fcn.004402ec
test al, al
je 0x4471d2
mov esi, 1
lea edx, [ebp - 0x50]
mov eax, 0x4472e0
call fcn.0043e0cc
mov eax, dword [ebp - 0x50]
call fcn.0043ff2c
call fcn.004043a4
jmp 0x447253
lea edx, [ebp - 0x54]
mov eax, 0x4472fc
call fcn.0043e0cc
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x58]
call fcn.0043fc3c
mov edx, dword [ebp - 0x58]
pop eax
call fcn.00404800
mov eax, dword [ebp - 0x54]
call fcn.0043ff2c
mov ax, word [0x51ff5a]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
jmp 0x447253
lea edx, [ebp - 0x5c]
mov eax, 0x447314
call fcn.0043e0cc
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
call fcn.0043fc3c
mov edx, dword [ebp - 0x60]
pop eax
call fcn.00404800
mov eax, dword [ebp - 0x5c]
call fcn.0043ff2c
mov ax, word [0x51ff5a]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
jmp 0x447253
mov ax, word [0x51ff5a]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
mov esi, 2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x447275
lea eax, [ebp - 0x60]
mov edx, 0x16
call fcn.0040455c
ret