Function at 0x4a8170
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x6e4770]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
push edi
mov eax, dword [ebx + 0x18]
mov eax, dword [eax]
mov esi, dword [eax]
cmp esi, eax
je 0x4a8243
mov edi, dword [esi + 0x14]
mov eax, dword [edi + 4]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x20c]
push 0x644938
push eax
call fcn.00530563
add esp, 0xc
add edi, 8
mov ecx, edi
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4a81c0
sub ecx, edx
sar ecx, 1
test ecx, ecx
jle 0x4a81f8
cmp dword [ebx + 0xa4], 8
lea eax, [ebx + 0x90]
jb 0x4a81e4
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x20c]
push eax
push edi
push str.Setting
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp byte [esi + 0xd], 0
jne 0x4a8238
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x4a821d
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x4a8238
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x4a8211
jmp 0x4a8238
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4a8236
cmp esi, dword [eax + 8]
jne 0x4a8236
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4a8226
mov esi, eax
mov eax, dword [ebx + 0x18]
cmp esi, dword [eax]
jne 0x4a8197
mov eax, dword [ebx + 0x1c]
mov eax, dword [eax]
mov esi, dword [eax]
cmp esi, eax
je 0x4a82fd
mov edi, dword [esi + 0x14]
mov eax, dword [edi + 4]
push dword [eax]
lea eax, [ebp - 0x20c]
push 0x644938
push eax
call fcn.00530563
add esp, 0xc
add edi, 8
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4a8276
sub ecx, edx
sar ecx, 1
test ecx, ecx
jle 0x4a82ae
cmp dword [ebx + 0xa4], 8
lea eax, [ebx + 0x90]
jb 0x4a829a
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x20c]
push eax
push edi
push str.Setting
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp byte [esi + 0xd], 0
jne 0x4a82f2
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x4a82d3
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x4a82f2
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x4a82c7
jmp 0x4a82f2
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4a82f0
lea esp, [esp]
cmp esi, dword [eax + 8]
jne 0x4a82f0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4a82e0
mov esi, eax
mov eax, dword [ebx + 0x1c]
cmp esi, dword [eax]
jne 0x4a8252
mov eax, dword [ebx + 0x20]
mov eax, dword [eax]
mov esi, dword [eax]
cmp esi, eax
je 0x4a83b5
lea esp, [esp]
mov edi, dword [esi + 0x14]
lea eax, [ebp - 0x20c]
push dword [edi + 4]
push 0x646208
push eax
call fcn.00530563
add esp, 0xc
add edi, 8
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4a8332
sub ecx, edx
sar ecx, 1
test ecx, ecx
jle 0x4a836a
cmp dword [ebx + 0xa4], 8
lea eax, [ebx + 0x90]
jb 0x4a8356
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x20c]
push eax
push edi
push str.Setting
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp byte [esi + 0xd], 0
jne 0x4a83aa
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x4a838f
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x4a83aa
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x4a8383
jmp 0x4a83aa
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4a83a8
cmp esi, dword [eax + 8]
jne 0x4a83a8
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4a8398
mov esi, eax
mov eax, dword [ebx + 0x20]
cmp esi, dword [eax]
jne 0x4a8310
cmp dword [ebx + 0xd4], 8
lea esi, [ebx + 0xc0]
jb 0x4a83c8
mov eax, dword [esi]
jmp 0x4a83ca
mov eax, esi
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push eax
push 0x644628
push str.ModifySetConfig
push str.SetModify
call edi
cmp dword [esi + 0x14], 8
jb 0x4a83ec
mov eax, dword [esi]
jmp 0x4a83ee
mov eax, esi
push eax
push 0x644628
push str.ModifySetConfig64
push str.SetModify
call edi
cmp dword [esi + 0x14], 8
jb 0x4a840a
mov eax, dword [esi]
jmp 0x4a840c
mov eax, esi
push eax
push 0x644628
push str.TempModifySetConfig
push str.SetModify
call edi
cmp dword [esi + 0x14], 8
jb 0x4a8426
mov esi, dword [esi]
push esi
push 0x644628
push str.TempModifySetConfig64
push str.SetModify
call edi
cmp dword [ebx + 0xbc], 8
lea ecx, [ebx + 0xa8]
jb 0x4a8449
mov ecx, dword [ecx]
cmp dword [ebx + 0xa4], 8
lea eax, [ebx + 0x90]
pop edi
pop esi
pop ebx
jb 0x4a845d
mov eax, dword [eax]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [ebp - 4]
mov eax, 1
xor ecx, ebp
call fcn.0052dfa4
mov esp, ebp
pop ebp
ret