Function at 0x441710
Capabilities:
Copy file
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17b0
call fcn.004dd690
mov eax, dword [0x60aca0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
push 0x22
push edi
call fcn.004df09a
mov edx, eax
add esp, 8
test edx, edx
je 0x441773
nop dword [eax]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x441745
sub ecx, esi
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [edx + 2]
push eax
push edx
call fcn.004de9c0
push 0x22
push edi
call fcn.004df09a
mov edx, eax
add esp, 0x14
test edx, edx
jne 0x441740
push edi
call fcn.004415a0
add esp, 4
test eax, eax
je 0x44179e
push eax
call fcn.00441340
add esp, 4
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004dcc5c
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x17a0]
mov ecx, 0x6ef2f0
push eax
push str.DeskSoft_License
call fcn.00427fb0
cmp eax, 0x52e
je 0x4418a8
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.004def40
add esp, 0xc
mov ecx, 0x6f0820
push 1
push 0xf00d
call fcn.0042ca60
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004e72b5
add esp, 0x10
mov ecx, 0x6f0820
push str.DeskSoft_License
push 5
push 0xf00e
call fcn.0042ca60
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.004061a0
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004ede81
add esp, 0x1c
push str.DeskSoft_License
push 2
push 0xf00d
mov ecx, 0x6f0820
call fcn.0042ca60
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.004061a0
push 0
push 0x2111
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
push 0x6ef2f0
call fcn.0042bbb0
add esp, 0x28
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004dcc5c
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
lea eax, [ebp - 0x178c]
push eax
push 0x104
push 0x6f1ae8
call fcn.004e72b5
push 0x6f18d4
push 0x5f599c
push 0x6f17d0
call fcn.004061f0
movsx eax, word [ebp - 0x1796]
add esp, 0x1c
cmp dword [0x6f18d4], eax
jge 0x44197d
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.004def40
add esp, 0xc
mov ecx, 0x6f0820
push 1
push 0xf00d
call fcn.0042ca60
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004e72b5
add esp, 0x10
mov ecx, 0x6f0820
push dword [0x6f18d4]
push str.DeskSoft_License
push 6
push 0xf00e
call fcn.0042ca60
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.004061a0
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004ede81
add esp, 0x20
jmp 0x441847
push ebx
lea eax, [ebp - 0x17ac]
push eax
lea eax, [ebp - 0x17a8]
push eax
lea eax, [ebp - 0x17a4]
push eax
push str._d._d._d
push 0x6f18d8
call fcn.004061f0
add esp, 0x14
cmp eax, 3
jne 0x441ab1
mov eax, dword [ebp - 0x17a4]
xorps xmm0, xmm0
mov dword [ebp - 0x1264], eax
mov eax, dword [ebp - 0x17a8]
dec eax
movlpd qword [ebp - 0x1270], xmm0
mov dword [ebp - 0x1260], eax
mov eax, dword [ebp - 0x17ac]
add eax, 0x64
mov dword [ebp - 0x1268], 0
mov dword [ebp - 0x125c], eax
lea eax, [ebp - 0x1270]
push eax
movlpd qword [ebp - 0x1258], xmm0
mov dword [ebp - 0x1250], 0
call fcn.004f0170
push 0
mov ebx, eax
mov esi, edx
call fcn.004e7196
add esp, 8
cmp esi, edx
jg 0x441ab1
jl 0x441a29
cmp ebx, eax
jae 0x441ab1
push 0x513
lea eax, [ebp - 0x61b]
mov byte [ebp - 0x61c], 0
push 0
push eax
call fcn.004def40
add esp, 0xc
mov ecx, 0x6f0820
push 1
push 0xf00d
call fcn.0042ca60
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004e72b5
add esp, 0x10
mov ecx, 0x6f0820
push 7
push 0xf00e
call fcn.0042ca60
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.004061a0
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004ede81
add esp, 0x18
jmp 0x441c9e
cmp word [ebp - 0x1790], 0
jne 0x441afd
push 0x6f19e0
push 0x1a
call fcn.00419610
push str.DeskSoft_License
push str.DeskSoft_s
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.004061a0
lea eax, [ebp - 0x108]
push eax
push 0x104
push 0x6f19e0
call fcn.004ede81
add esp, 0x24
jmp 0x441b70
push 0xffffffffffffffff
lea eax, [ebp - 0x1688]
push eax
push 0x104
push 0x6f19e0
call fcn.004e72b5
add esp, 0x10
cmp word [ebp - 0x178e], 0
je 0x441b70
push 0x581760
push 0x104
push 0x6f19e0
call fcn.004ede81
add esp, 0xc
mov dword [ebp - 0x17b0], 0x104
lea eax, [ebp - 0x17b0]
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x108]
push eax
push 0x104
push 0x6f19e0
call fcn.004ede81
add esp, 0xc
push 0xffffffffffffffff
push 0x6f19e0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.004e72b5
lea eax, [ebp - 0x108]
push eax
call fcn.004185b0
add esp, 0x14
lea eax, [ebp - 0x824]
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x108]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x5c
push edi
call fcn.004df16d
add esp, 8
test eax, eax
jne 0x441bc9
mov eax, edi
jmp 0x441bcc
add eax, 2
push eax
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.004f080e
lea eax, [ebp - 0x824]
push eax
push edi
call fcn.004f070d
add esp, 0x14
test eax, eax
je 0x441d00
push 0
lea eax, [ebp - 0x824]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x441d00
push 0x513
push eax
mov byte [ebp - 0x61c], al
lea eax, [ebp - 0x61b]
push eax
call fcn.004def40
add esp, 0xc
mov ecx, 0x6f0820
push 1
push 0xf00d
call fcn.0042ca60
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004e72b5
add esp, 0x10
mov ecx, 0x6f0820
push str.DeskSoft_License
push 0x6f19e0
push str.DeskSoft_License
push 8
push 0xf00e
call fcn.0042ca60
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.004061a0
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x124c]
push 0xa28
push eax
call fcn.004ede81
add esp, 0x24
push str.DeskSoft_License
push 2
push 0xf00d
mov ecx, 0x6f0820
call fcn.0042ca60
push eax
lea eax, [ebp - 0x61c]
push 0x514
push eax
call fcn.004061a0
push 0
push 0x2111
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
push 0x6ef2f0
call fcn.0042bbb0
add esp, 0x28
mov eax, 1
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004dcc5c
mov esp, ebp
pop ebp
ret
push str.DeskSoft_License
call fcn.00419cb0
mov esi, eax
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, 9
push ecx
call fcn.00441340
xor ecx, ecx
add esp, 8
cmp eax, 6
cmove ecx, esi
test ecx, ecx
je 0x441d50
push 0xffffffffffffffff
push str.DeskSoft_License
call fcn.00418a70
add esp, 8
push eax
push 0x8406
push dword [0x6efc50]
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 4]
xor eax, eax
pop ebx
pop edi
xor ecx, ebp
pop esi
call fcn.004dcc5c
mov esp, ebp
pop ebp
ret