Function at 0x4f69f0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
mov eax, dword [esi]
push edi
xor edi, edi
cmp eax, edi
jne 0x4f6a28
mov eax, dword [ebx]
lea ecx, [eax - 1]
cmp ecx, 0x3f
ja case.0x4f6a3b.3
movzx ecx, byte [ecx + 0x4f6cf8]
jmp dword [ecx*4 + 0x4f6cdc]
mov dword [esi], eax
mov dword [esi + 4], edi
mov eax, dword [ebx]
dec eax
cmp eax, 0x3f
ja case.0x4f6a3b.3
movzx eax, byte [eax + 0x4f6d50]
jmp dword [eax*4 + 0x4f6d38]
mov ebx, dword [ebx + 4]
mov dword [esi + 4], ebx
mov edx, dword [ebx]
push ebx
call dword [edx + 4]
mov dword [esi], 4
mov eax, 1
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 4]
mov dword [esi + 4], ebx
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
mov dword [esi], 8
mov eax, 1
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebx + 4]
push ecx
push edi
call fcn.004f6860
mov edi, eax
test edi, edi
je case.0x4f6a3b.3
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ebx, eax
mov edx, dword [ebx + 0xc]
push 0
push edx
call dword [sym.imp.GDI32.dll_CopyMetaFileA]
test eax, eax
mov dword [ebx + 0xc], eax
push edi
jne 0x4f6ad0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [esi + 4], edi
mov dword [esi], 0x20
mov eax, 1
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [esi], 0x10
jmp 0x4f6a25
call dword [0x551110]
mov dword [esi], 2
mov eax, dword [ebx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax]
push edi
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
test eax, eax
mov dword [esi + 4], eax
je case.0x4f6a3b.3
mov esi, dword [ebx + 4]
lea ecx, [edi + 2]
mov edx, ecx
shr ecx, 2
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, 1
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebx + 4]
mov edx, dword [esi + 4]
push ecx
push edx
call fcn.004f6860
cmp eax, edi
je case.0x4f6a3b.3
mov dword [esi + 4], eax
mov eax, 1
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ebx + 4]
mov ecx, dword [eax]
push 1
lea edx, [ebp - 0x48]
push edx
push eax
call dword [ecx + 0x30]
test eax, eax
jne case.0x4f6a3b.3
mov eax, dword [esi + 4]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
push edi
push eax
call dword [edx + 0x14]
mov eax, dword [ebx + 4]
mov edx, dword [eax]
push 0
push 0
xor ecx, ecx
push ecx
push edi
push eax
call dword [edx + 0x14]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebx + 4]
mov ecx, dword [eax]
push 0
push 0
push edx
mov edx, dword [ebp - 0x40]
push edx
mov edx, dword [esi + 4]
push edx
push eax
call dword [ecx + 0x1c]
test eax, eax
jne case.0x4f6a3b.3
mov eax, dword [esi + 4]
mov ecx, dword [eax]
push 0
push 0
xor esi, esi
push esi
push edi
push eax
call dword [ecx + 0x14]
mov ebx, dword [ebx + 4]
mov edx, dword [ebx]
push esi
push esi
push esi
push edi
push ebx
call dword [edx + 0x14]
mov eax, 1
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esi + 4]
mov ebx, dword [ebx + 4]
mov eax, dword [ebx]
push ecx
push edi
push edi
push edi
push ebx
call dword [eax + 0x1c]
neg eax
sbb eax, eax
inc eax
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call dword [0x551110]
mov esi, dword [esi + 4]
cmp esi, edi
mov dword [ebp + 0xc], eax
je 0x4f6c52
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and eax, 0xfffffffc
call fcn.004af8b0
mov edx, dword [ebp + 0xc]
mov eax, esp
push edx
push edi
push esi
push eax
call fcn.004010cb
mov edi, eax
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x4f6c70
xor eax, eax
push eax
push edi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.004af8b0
mov ecx, dword [ebp + 0xc]
mov eax, esp
push ecx
push esi
push ebx
push eax
call fcn.004010cb
push 0
push edi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esi + 4], edi
jne case.0x4f6a3b.3
mov edx, dword [ebp + 8]
mov eax, dword [ebx + 4]
push edi
push edx
push eax
call dword [sym.imp.ole32.dll_OleDuplicateData]
xor ecx, ecx
cmp eax, edi
setne cl
mov dword [esi + 4], eax
mov eax, ecx
lea esp, [ebp - 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc