Function at 0x4475d0
Capabilities:
Copy file
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17b0
call fcn.00481770
mov eax, dword [0x572c40]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
push 0x22
push edi
call fcn.004835a9
mov edx, eax
add esp, 8
test edx, edx
je 0x447633
nop dword [eax]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x447605
sub ecx, esi
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [edx + 2]
push eax
push edx
call fcn.00482d10
push 0x22
push edi
call fcn.004835a9
mov edx, eax
add esp, 0x14
test edx, edx
jne 0x447600
push edi
call fcn.00447460
add esp, 4
test eax, eax
je 0x44765e
push eax
call fcn.00447200
add esp, 4
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x17a0]
mov ecx, 0xb64288
push eax
push str.DeskSoft_License
call fcn.0042b270
cmp eax, 0x52e
je 0x447768
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.00483290
add esp, 0xc
mov ecx, 0xb657b8
push 1
push 0xf00d
call fcn.00427790
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.0048dea4
add esp, 0x10
mov ecx, 0xb657b8
push str.DeskSoft_License
push 5
push 0xf00e
call fcn.00427790
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407090
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00484c83
add esp, 0x1c
push str.DeskSoft_License
push 2
push 0xf00d
mov ecx, 0xb657b8
call fcn.00427790
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407090
push 0
push 0x2111
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
push 0xb64288
call fcn.0042ebc0
add esp, 0x28
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
lea eax, [ebp - 0x178c]
push eax
push 0x104
push 0xb66850
call fcn.0048dea4
push 0xb6663c
push 0x5199e4
push 0xb66538
call fcn.00434440
movsx eax, word [ebp - 0x1796]
add esp, 0x1c
cmp dword [0xb6663c], eax
jge 0x44783d
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.00483290
add esp, 0xc
mov ecx, 0xb657b8
push 1
push 0xf00d
call fcn.00427790
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.0048dea4
add esp, 0x10
mov ecx, 0xb657b8
push dword [0xb6663c]
push str.DeskSoft_License
push 6
push 0xf00e
call fcn.00427790
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407090
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00484c83
add esp, 0x20
jmp 0x447707
push ebx
lea eax, [ebp - 0x17ac]
push eax
lea eax, [ebp - 0x17a8]
push eax
lea eax, [ebp - 0x17a4]
push eax
push str._d._d._d
push 0xb66640
call fcn.00434440
add esp, 0x14
cmp eax, 3
jne 0x447971
mov eax, dword [ebp - 0x17a4]
xorps xmm0, xmm0
mov dword [ebp - 0x1264], eax
mov eax, dword [ebp - 0x17a8]
dec eax
movlpd qword [ebp - 0x1270], xmm0
mov dword [ebp - 0x1260], eax
mov eax, dword [ebp - 0x17ac]
add eax, 0x64
mov dword [ebp - 0x1268], 0
mov dword [ebp - 0x125c], eax
lea eax, [ebp - 0x1270]
push eax
movlpd qword [ebp - 0x1258], xmm0
mov dword [ebp - 0x1250], 0
call fcn.00491b58
push 0
mov ebx, eax
mov esi, edx
call fcn.0048e759
add esp, 8
cmp esi, edx
jg 0x447971
jl 0x4478e9
cmp ebx, eax
jae 0x447971
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.00483290
add esp, 0xc
mov ecx, 0xb657b8
push 1
push 0xf00d
call fcn.00427790
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.0048dea4
add esp, 0x10
mov ecx, 0xb657b8
push 7
push 0xf00e
call fcn.00427790
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407090
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00484c83
add esp, 0x18
jmp 0x447b5e
cmp word [ebp - 0x1790], 0
jne 0x4479bd
push 0xb66748
push 0x1a
call fcn.004329f0
push str.DeskSoft_License
push str.DeskSoft_s
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.00407090
lea eax, [ebp - 0x108]
push eax
push 0x104
push 0xb66748
call fcn.00484c83
add esp, 0x24
jmp 0x447a30
push 0xffffffffffffffff
lea eax, [ebp - 0x1688]
push eax
push 0x104
push 0xb66748
call fcn.0048dea4
add esp, 0x10
cmp word [ebp - 0x178e], 0
je 0x447a30
push 0x51d4a8
push 0x104
push 0xb66748
call fcn.00484c83
add esp, 0xc
mov dword [ebp - 0x17b0], 0x104
lea eax, [ebp - 0x17b0]
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x108]
push eax
push 0x104
push 0xb66748
call fcn.00484c83
add esp, 0xc
push 0xffffffffffffffff
push 0xb66748
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0048dea4
lea eax, [ebp - 0x108]
push eax
call fcn.00431640
add esp, 0x14
lea eax, [ebp - 0x824]
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x108]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x5c
push edi
call fcn.0048367b
add esp, 8
test eax, eax
jne 0x447a89
mov eax, edi
jmp 0x447a8c
add eax, 2
push eax
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.00491dc1
lea eax, [ebp - 0x824]
push eax
push edi
call fcn.00491cc0
add esp, 0x14
test eax, eax
je 0x447bc0
push 0
lea eax, [ebp - 0x824]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x447bc0
push 0x513
push eax
mov byte [ebp - 0x61c], al
lea eax, [ebp - 0x61b]
push eax
call fcn.00483290
add esp, 0xc
mov ecx, 0xb657b8
push 1
push 0xf00d
call fcn.00427790
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.0048dea4
add esp, 0x10
mov ecx, 0xb657b8
push str.DeskSoft_License
push 0xb66748
push str.DeskSoft_License
push 8
push 0xf00e
call fcn.00427790
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407090
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.00484c83
add esp, 0x24
push str.DeskSoft_License
push 2
push 0xf00d
mov ecx, 0xb657b8
call fcn.00427790
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.00407090
push 0
push 0x2111
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
push 0xb64288
call fcn.0042ebc0
add esp, 0x28
mov eax, 1
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret
push str.DeskSoft_License
call fcn.00433090
mov esi, eax
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, 9
push ecx
call fcn.00447200
xor ecx, ecx
add esp, 8
cmp eax, 6
cmove ecx, esi
test ecx, ecx
je 0x447c10
push 0xffffffffffffffff
push str.DeskSoft_License
call fcn.00431b00
add esp, 8
push eax
push 0x8406
push dword [0xb64be8]
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 4]
xor eax, eax
pop ebx
pop edi
xor ecx, ebp
pop esi
call fcn.00481761
mov esp, ebp
pop ebp
ret