Function at 0x456e30
Capabilities:
Copy file
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17b0
call fcn.004ff310
mov eax, dword [0x62acc0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
push 0x22
push edi
call fcn.00500d0a
mov edx, eax
add esp, 8
test edx, edx
je 0x456e93
nop dword [eax]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x456e65
sub ecx, esi
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [edx + 2]
push eax
push edx
call fcn.00500630
push 0x22
push edi
call fcn.00500d0a
mov edx, eax
add esp, 0x14
test edx, edx
jne 0x456e60
push edi
call fcn.00456cc0
add esp, 4
test eax, eax
je 0x456ebe
push eax
call fcn.00456a60
add esp, 4
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004fe8dc
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x17a0]
mov ecx, 0x90fe00
push eax
push str.DeskSoft_License
call fcn.004403b0
cmp eax, 0x52e
je 0x456fc8
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.00500bb0
add esp, 0xc
mov ecx, 0x911330
push 1
push 0xf00d
call fcn.0042f4d0
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00508ec0
add esp, 0x10
mov ecx, 0x911330
push str.DeskSoft_License
push 5
push 0xf00e
call fcn.0042f4d0
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407c70
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.005111bf
add esp, 0x1c
push str.DeskSoft_License
push 2
push 0xf00d
mov ecx, 0x911330
call fcn.0042f4d0
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407c70
push 0
push 0x2111
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
push 0x90fe00
call fcn.00443e50
add esp, 0x28
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004fe8dc
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
lea eax, [ebp - 0x178c]
push eax
push 0x104
push 0x912838
call fcn.00508ec0
push 0x912624
push 0x6143e8
push 0x912520
call fcn.00407cc0
movsx eax, word [ebp - 0x1796]
add esp, 0x1c
cmp dword [0x912624], eax
jge 0x45709d
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.00500bb0
add esp, 0xc
mov ecx, 0x911330
push 1
push 0xf00d
call fcn.0042f4d0
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00508ec0
add esp, 0x10
mov ecx, 0x911330
push dword [0x912624]
push str.DeskSoft_License
push 6
push 0xf00e
call fcn.0042f4d0
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407c70
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.005111bf
add esp, 0x20
jmp 0x456f67
push ebx
lea eax, [ebp - 0x17ac]
push eax
lea eax, [ebp - 0x17a8]
push eax
lea eax, [ebp - 0x17a4]
push eax
push str._d._d._d
push 0x912628
call fcn.00407cc0
add esp, 0x14
cmp eax, 3
jne 0x4571d1
mov eax, dword [ebp - 0x17a4]
xorps xmm0, xmm0
mov dword [ebp - 0x1264], eax
mov eax, dword [ebp - 0x17a8]
dec eax
movlpd qword [ebp - 0x1270], xmm0
mov dword [ebp - 0x1260], eax
mov eax, dword [ebp - 0x17ac]
add eax, 0x64
mov dword [ebp - 0x1268], 0
mov dword [ebp - 0x125c], eax
lea eax, [ebp - 0x1270]
push eax
movlpd qword [ebp - 0x1258], xmm0
mov dword [ebp - 0x1250], 0
call fcn.005123ab
push 0
mov ebx, eax
mov esi, edx
call fcn.0050d930
add esp, 8
cmp esi, edx
jg 0x4571d1
jl 0x457149
cmp ebx, eax
jae 0x4571d1
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.00500bb0
add esp, 0xc
mov ecx, 0x911330
push 1
push 0xf00d
call fcn.0042f4d0
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00508ec0
add esp, 0x10
mov ecx, 0x911330
push 7
push 0xf00e
call fcn.0042f4d0
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407c70
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.005111bf
add esp, 0x18
jmp 0x4573be
cmp word [ebp - 0x1790], 0
jne 0x45721d
push 0x912730
push 0x1a
call fcn.0042d9d0
push str.DeskSoft_License
push str.DeskSoft_s
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.00407c70
lea eax, [ebp - 0x108]
push eax
push 0x104
push 0x912730
call fcn.005111bf
add esp, 0x24
jmp 0x457290
push 0xffffffffffffffff
lea eax, [ebp - 0x1688]
push eax
push 0x104
push 0x912730
call fcn.00508ec0
add esp, 0x10
cmp word [ebp - 0x178e], 0
je 0x457290
push 0x5a074c
push 0x104
push 0x912730
call fcn.005111bf
add esp, 0xc
mov dword [ebp - 0x17b0], 0x104
lea eax, [ebp - 0x17b0]
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x108]
push eax
push 0x104
push 0x912730
call fcn.005111bf
add esp, 0xc
push 0xffffffffffffffff
push 0x912730
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.00508ec0
lea eax, [ebp - 0x108]
push eax
call fcn.0042cad0
add esp, 0x14
lea eax, [ebp - 0x824]
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x108]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x5c
push edi
call fcn.00500ddc
add esp, 8
test eax, eax
jne 0x4572e9
mov eax, edi
jmp 0x4572ec
add eax, 2
push eax
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.00512bea
lea eax, [ebp - 0x824]
push eax
push edi
call fcn.00512ae9
add esp, 0x14
test eax, eax
je 0x457420
push 0
lea eax, [ebp - 0x824]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x457420
push 0x513
push eax
mov byte [ebp - 0x61c], al
lea eax, [ebp - 0x61b]
push eax
call fcn.00500bb0
add esp, 0xc
mov ecx, 0x911330
push 1
push 0xf00d
call fcn.0042f4d0
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00508ec0
add esp, 0x10
mov ecx, 0x911330
push str.DeskSoft_License
push 0x912730
push str.DeskSoft_License
push 8
push 0xf00e
call fcn.0042f4d0
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407c70
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.005111bf
add esp, 0x24
push str.DeskSoft_License
push 2
push 0xf00d
mov ecx, 0x911330
call fcn.0042f4d0
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407c70
push 0
push 0x2111
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
push 0x90fe00
call fcn.00443e50
add esp, 0x28
mov eax, 1
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004fe8dc
mov esp, ebp
pop ebp
ret
push str.DeskSoft_License
call fcn.0042e070
mov esi, eax
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, 9
push ecx
call fcn.00456a60
xor ecx, ecx
add esp, 8
cmp eax, 6
cmove ecx, esi
test ecx, ecx
je 0x457470
push 0xffffffffffffffff
push str.DeskSoft_License
call fcn.0042cf90
add esp, 8
push eax
push 0x8406
push dword [0x910760]
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 4]
xor eax, eax
pop ebx
pop edi
xor ecx, ebp
pop esi
call fcn.004fe8dc
mov esp, ebp
pop ebp
ret