Function at 0x4b7450
Capabilities:
Copy file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fbfe0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2000
call fcn.004f2630
push ebx
push esi
push edi
lea eax, [ebp - 0x90]
mov dword [ebp - 0x10], esp
xor ebx, ebx
push 0x80
push eax
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea ecx, [ebp - 0x210]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea edi, [ebp - 0x210]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x290]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp - 0x110]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x90]
push ecx
push str._smswsock.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x210]
lea ecx, [ebp - 0x610]
push eax
push str._sexplorer.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x190]
push edx
push str._sdllcachemswsock.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1290]
push ecx
push str._sdllcache_bkexplorer.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x290]
lea ecx, [ebp - 0x1f10]
push eax
push str._sProgram_FilesInternet_Exploreriexplore.exe
push ecx
mov byte [ebp - 0x28e], bl
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x2010]
push edx
push str._sdllcache_bkiexplore.exe
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x290]
lea edx, [ebp - 0x1d10]
push ecx
push str._sProgram_FilesInternet_Explorerieproxy.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1b90]
push eax
push str._sdllcache_bkieproxy.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xe90]
push edx
push str._suserinit.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1190]
push ecx
push str._sdllcache_bkuserinit.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0xa10]
push eax
push str._smsgina.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1790]
push edx
push str._sdllcache_bkmsgina.dll
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0xd10]
push ecx
push str._scmd.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1d90]
push eax
push str._sdllcache_bkcmd.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x510]
push edx
push str._swinlogon.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1010]
push ecx
push str._sdllcache_bkwinlogon.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x210]
lea ecx, [ebp - 0xb10]
push eax
push str._s_notepad.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1890]
push edx
push str._sdllcache_bk_notepad.exe
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x710]
push ecx
push str._s_regedit.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1390]
push eax
push str._sdllcache_bk_regedit.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xf10]
push edx
push str._s_netman.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x1c10]
push str._sdllcache_bk_netman.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x810]
push eax
push str._swscsvc.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1490]
push edx
push str._sdllcache_bkwscsvc.dll
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0xc10]
push ecx
push str._s_browser.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1990]
push eax
push str._sdllcache_bk_browser.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x910]
push edx
push str._sdnsrslvr.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1590]
push ecx
push str._sdllcache_bkdnsrslvr.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0xe10]
push eax
push str._s_audiosrv.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1e10]
push edx
push str._sdllcache_bk_audiosrv.dll
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x410]
push ecx
push str._s_srvsvc.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1690]
push eax
push str._sdllcache_bk_srvsvc.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x490]
push edx
push str._swkssvc.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1a90]
push ecx
push str._sdllcache_bkwkssvc.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x590]
push str._slmhsvc.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1090]
push edx
push str._sdllcache_bklmhsvc.dll
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x690]
push ecx
push str._s_rasmans.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1110]
push eax
push str._sdllcache_bk_rasmans.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x790]
push edx
push str._s_rpcss.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1210]
push ecx
push str._sdllcache_bk_rpcss.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x890]
push eax
push str._s_tapisrv.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1310]
push edx
push str._sdllcache_bk_tapisrv.dll
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x990]
push ecx
push str._s_termsrv.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1410]
push eax
push str._sdllcache_bk_termsrv.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xa90]
push edx
push str._sWMIsvc.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1510]
push ecx
push str._sdllcache_bkWMIsvc.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0xb90]
push eax
push str._s_advapi32.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
push edx
push str._sdllcache_bk_advapi32.dll
lea eax, [ebp - 0x1610]
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0xc90]
push ecx
push str._swuauserv.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1710]
push eax
push str._sdllcache_bkwuauserv.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xd90]
push edx
push str._slogonui.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x1810]
push ecx
push str._sdllcache_bklogonui.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x390]
push eax
push str._s_rundll32.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1910]
push edx
push str._sdllcache_bk_rundll32.exe
push eax
call fcn.004f175f
add esp, 0x48
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0xf90]
push ecx
push str._sdrivers_tcpip.sys
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x310]
push eax
push str._sdllcache_bk_tcpip.sys
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x1a10]
push edx
push str._sdllcache_tcpip.sys
push eax
call fcn.004f175f
lea ecx, [ebp - 0x110]
push ecx
call fcn.004bd090
add esp, 0x28
lea edx, [ebp - 0x110]
push edx
call fcn.004bd100
add esp, 4
lea eax, [ebp - 0x110]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7a8f
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x110]
push ebx
lea edx, [ebp - 0x190]
push ecx
push edx
call esi
jmp 0x4b7a95
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea eax, [ebp - 0xe90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7aba
lea ecx, [ebp - 0xe90]
push ebx
lea edx, [ebp - 0x1190]
push ecx
push edx
call esi
lea eax, [ebp - 0xa10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7adf
lea ecx, [ebp - 0xa10]
push ebx
lea edx, [ebp - 0x1790]
push ecx
push edx
call esi
lea eax, [ebp - 0x510]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7b04
lea ecx, [ebp - 0x510]
push ebx
lea edx, [ebp - 0x1010]
push ecx
push edx
call esi
lea eax, [ebp - 0xd10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7b29
lea ecx, [ebp - 0xd10]
push ebx
lea edx, [ebp - 0x1d90]
push ecx
push edx
call esi
lea eax, [ebp - 0x610]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7b4e
lea ecx, [ebp - 0x610]
push ebx
lea edx, [ebp - 0x1290]
push ecx
push edx
call esi
lea eax, [ebp - 0x1f10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7b73
lea ecx, [ebp - 0x1f10]
push ebx
lea edx, [ebp - 0x2010]
push ecx
push edx
call esi
lea eax, [ebp - 0x1d10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7b98
lea ecx, [ebp - 0x1d10]
push ebx
lea edx, [ebp - 0x1b90]
push ecx
push edx
call esi
lea eax, [ebp - 0x1b90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7bbd
lea ecx, [ebp - 0x1b90]
push ebx
lea edx, [ebp - 0x1d10]
push ecx
push edx
call esi
lea eax, [ebp - 0xb10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7be2
lea ecx, [ebp - 0xb10]
push ebx
lea edx, [ebp - 0x1890]
push ecx
push edx
call esi
lea eax, [ebp - 0x710]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7c07
lea ecx, [ebp - 0x710]
push ebx
lea edx, [ebp - 0x1390]
push ecx
push edx
call esi
lea eax, [ebp - 0xf10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7c2c
lea ecx, [ebp - 0xf10]
push ebx
lea edx, [ebp - 0x1c10]
push ecx
push edx
call esi
lea eax, [ebp - 0x810]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7c51
lea ecx, [ebp - 0x810]
push ebx
lea edx, [ebp - 0x1490]
push ecx
push edx
call esi
lea eax, [ebp - 0xc10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7c76
lea ecx, [ebp - 0xc10]
push ebx
lea edx, [ebp - 0x1990]
push ecx
push edx
call esi
lea eax, [ebp - 0x910]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7c9b
lea ecx, [ebp - 0x910]
push ebx
lea edx, [ebp - 0x1590]
push ecx
push edx
call esi
lea eax, [ebp - 0xe10]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7cc0
lea ecx, [ebp - 0xe10]
push ebx
lea edx, [ebp - 0x1e10]
push ecx
push edx
call esi
lea eax, [ebp - 0x410]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7ce5
lea ecx, [ebp - 0x410]
push ebx
lea edx, [ebp - 0x1690]
push ecx
push edx
call esi
lea eax, [ebp - 0x490]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7d0a
lea ecx, [ebp - 0x490]
push ebx
lea edx, [ebp - 0x1a90]
push ecx
push edx
call esi
lea eax, [ebp - 0x590]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7d2f
lea ecx, [ebp - 0x590]
push ebx
lea edx, [ebp - 0x1090]
push ecx
push edx
call esi
lea eax, [ebp - 0x690]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7d54
lea ecx, [ebp - 0x690]
push ebx
lea edx, [ebp - 0x1110]
push ecx
push edx
call esi
lea eax, [ebp - 0x790]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7d79
lea ecx, [ebp - 0x790]
push ebx
lea edx, [ebp - 0x1210]
push ecx
push edx
call esi
lea eax, [ebp - 0x890]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7d9e
lea ecx, [ebp - 0x890]
push ebx
lea edx, [ebp - 0x1310]
push ecx
push edx
call esi
lea eax, [ebp - 0x990]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7dc3
lea ecx, [ebp - 0x990]
push ebx
lea edx, [ebp - 0x1410]
push ecx
push edx
call esi
lea eax, [ebp - 0xa90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7de8
lea ecx, [ebp - 0xa90]
push ebx
lea edx, [ebp - 0x1510]
push ecx
push edx
call esi
lea eax, [ebp - 0xb90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7e0d
lea ecx, [ebp - 0xb90]
push ebx
lea edx, [ebp - 0x1610]
push ecx
push edx
call esi
lea eax, [ebp - 0xc90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7e32
lea ecx, [ebp - 0xc90]
push ebx
lea edx, [ebp - 0x1710]
push ecx
push edx
call esi
lea eax, [ebp - 0xd90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7e57
lea ecx, [ebp - 0xd90]
push ebx
lea edx, [ebp - 0x1810]
push ecx
push edx
call esi
lea eax, [ebp - 0x390]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7e7c
lea ecx, [ebp - 0x390]
push ebx
lea edx, [ebp - 0x1910]
push ecx
push edx
call esi
lea eax, [ebp - 0xf90]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7ea1
lea ecx, [ebp - 0xf90]
push ebx
lea edx, [ebp - 0x310]
push ecx
push edx
call esi
lea eax, [ebp - 0x310]
push eax
call fcn.004abe70
add esp, 4
cmp eax, 0xffffffff
jne 0x4b7ec6
lea ecx, [ebp - 0x310]
push ebx
lea edx, [ebp - 0x1a10]
push ecx
push edx
call esi
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x110]
push eax
push str._smsafd.dll
push ecx
mov byte [ebp - 0x110], bl
mov byte [ebp - 0x190], bl
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x190]
push edx
push str._sdllcachemsafd.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x110]
push ecx
call fcn.004abe70
add esp, 0x1c
cmp eax, 0xffffffff
jne 0x4b7f27
lea edx, [ebp - 0x110]
push ebx
lea eax, [ebp - 0x190]
push edx
push eax
call esi
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x110]
push ecx
push str._smsafd.dll
push edx
mov byte [ebp - 0x110], bl
mov byte [ebp - 0x190], bl
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x190]
push eax
push str._sdllcachemsafd.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x110]
push edx
call fcn.004abe70
add esp, 0x1c
cmp eax, 0xffffffff
jne 0x4b7f88
lea eax, [ebp - 0x110]
push ebx
lea ecx, [ebp - 0x190]
push eax
push ecx
call esi
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret