Function at 0x406900
Capabilities:
Access peb ldr_data
Copy file

Disassembly:
push 0xffffffffffffffff
push 0x40fbb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push esi
mov esi, ecx
push edi
push 0x415ae8
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::CString
push 0x415ae8
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0
call sub.MFC42.DLL_CString::CString
push 0x415ae8
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 1
call sub.MFC42.DLL_CString::CString
push 0x415ae8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3c], 2
call sub.MFC42.DLL_CString::CString
push 0x415ae8
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], 3
call sub.MFC42.DLL_CString::CString
push str.SoftwareCorelCorelDraw14.0CorelDRAW
lea ecx, [esp + 0x24]
mov byte [esp + 0x3c], 4
call sub.MFC42.DLL_CString::operator_1
push str.LastWorkspaceUsed
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::operator_1
lea eax, [esp + 0x18]
lea edx, [esp + 0x1c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call sub.MFC42.DLL_CString::CString_1
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x48], 5
call sub.MFC42.DLL_CString::CString_1
push SysReAllocString
mov byte [esp + 0x48], 4
call fcn.00401970
add esp, 0x10
test eax, eax
je 0x406ea1
lea ecx, [esp + 0x18]
lea edx, [esp + 0x28]
push ecx
push edx
call fcn.004012f0
add esp, 8
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3c], 6
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
lea eax, [esp + 0x18]
push str._default
lea ecx, [esp + 0x2c]
push eax
push ecx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3c], 7
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
push str.SoftwareCorelCorelDRAW14.0
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::operator_1
push str.ConfigDir
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::operator_1
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call sub.MFC42.DLL_CString::CString_1
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov byte [esp + 0x48], 8
call sub.MFC42.DLL_CString::CString_1
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [esp + 0x48], 4
call fcn.00401970
add esp, 0x10
test eax, eax
je 0x406ea1
lea eax, [esp + 0x10]
lea ecx, [esp + 0x28]
push eax
push ecx
call fcn.004012f0
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], 9
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
lea edx, [esp + 0x10]
push str.Draw
lea eax, [esp + 0x2c]
push edx
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], 0xa
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
push 0x415ae8
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString
push 0x415ae8
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0xb
call sub.MFC42.DLL_CString::CString
mov eax, dword [esi + 4]
mov bl, 0xc
test eax, eax
mov byte [esp + 0x38], bl
jne 0x406c63
add esi, 0xc
push str.DrawUIConfig_14.xml_CN
lea ecx, [esp + 0x2c]
push esi
push ecx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3c], 0xd
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
lea edx, [esp + 0x18]
push str.DrawUIConfig.xml
lea eax, [esp + 0x2c]
push edx
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0xe
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0
push ecx
push edx
call edi
test eax, eax
je 0x406e85
push str.GlobalMacros_14.gms_CN
lea eax, [esp + 0x2c]
push esi
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3c], 0xf
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
lea ecx, [esp + 0x10]
push str.GlobalMacros.gms
lea edx, [esp + 0x2c]
push ecx
push edx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0x10
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
push 0
push eax
push ecx
call edi
test eax, eax
je 0x406e85
lea edx, [esp + 0x10]
push str.GMSGlobalMacros.gms
lea eax, [esp + 0x2c]
push edx
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0x11
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
jmp 0x406e7f
cmp eax, 1
jne 0x406efe
add esi, 0xc
push str.DrawUIConfig_14.xml
lea eax, [esp + 0x2c]
push esi
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3c], 0x12
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
lea ecx, [esp + 0x18]
push str.DrawUIConfig.xml
lea edx, [esp + 0x2c]
push ecx
push edx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0x13
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0
push eax
push ecx
call edi
test eax, eax
jne 0x406d5c
lea ecx, [esp + 0xc]
mov byte [esp + 0x38], 0xb
call fcn.0040e8b6
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
lea ecx, [esp + 0x10]
mov byte [esp + 0x38], 3
call fcn.0040e8b6
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 2
call fcn.0040e8b6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], 1
call fcn.0040e8b6
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.0040e8b6
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xffffffff
call fcn.0040e8b6
xor eax, eax
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x30
ret
push str.GlobalMacros_14.gms
lea edx, [esp + 0x2c]
push esi
push edx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3c], 0x14
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
lea eax, [esp + 0x10]
push str.GlobalMacros.gms
lea ecx, [esp + 0x2c]
push eax
push ecx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0x15
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
push 0
push edx
push eax
call edi
test eax, eax
jne 0x406e43
lea ecx, [esp + 0xc]
mov byte [esp + 0x38], 0xb
call fcn.0040e8b6
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
lea ecx, [esp + 0x10]
mov byte [esp + 0x38], 3
call fcn.0040e8b6
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 2
call fcn.0040e8b6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], 1
call fcn.0040e8b6
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.0040e8b6
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xffffffff
call fcn.0040e8b6
xor eax, eax
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x30
ret
lea ecx, [esp + 0x10]
push str.GMSGlobalMacros.gms
lea edx, [esp + 0x2c]
push ecx
push edx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0x16
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call fcn.0040e8b6
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
push 0
push eax
push ecx
call edi
test eax, eax
jne 0x406efe
lea ecx, [esp + 0xc]
mov byte [esp + 0x38], 0xb
call fcn.0040e8b6
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
lea ecx, [esp + 0x10]
mov byte [esp + 0x38], 3
call fcn.0040e8b6
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 2
call fcn.0040e8b6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], 1
call fcn.0040e8b6
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.0040e8b6
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xffffffff
call fcn.0040e8b6
xor eax, eax
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x30
ret
lea ecx, [esp + 0xc]
mov byte [esp + 0x38], 0xb
call fcn.0040e8b6
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 4
call fcn.0040e8b6
lea ecx, [esp + 0x10]
mov byte [esp + 0x38], 3
call fcn.0040e8b6
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 2
call fcn.0040e8b6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], 1
call fcn.0040e8b6
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.0040e8b6
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xffffffff
call fcn.0040e8b6
mov ecx, dword [esp + 0x30]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x30
ret