Function at 0x424a0b
Capabilities:
Copy file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
inc dword [0x89021c]
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], esi
mov byte [ebp - 1], 1
call fcn.0047cfd9
mov ecx, esi
call fcn.004a342e
test eax, eax
je 0x424a53
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x424a47
push 0x512e38
call fcn.004a101e
call fcn.0047cff8
xor al, al
jmp 0x424d75
mov eax, dword [ebp + 8]
xor edi, edi
cmp dword [0x88de2c], edi
sete byte [ebp + 0xf]
and eax, 0x200
mov dword [ebp - 0x14], eax
je 0x424af0
cmp dword [esi + 0x2c4], edi
je 0x424af0
xor edx, edx
xor ecx, ecx
call fcn.0048245f
lea ecx, [ebp - 0x40]
mov ebx, eax
call fcn.004015ef
push 0x10
pop ecx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], ebx
call fcn.00479b81
mov ecx, dword [ebp - 0xc]
mov esi, eax
xor eax, eax
mov edi, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [esi + 4], ebx
call fcn.0049e64a
mov ecx, eax
call fcn.0042897a
mov dword [esi], eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x10]
call fcn.00401966
xor edi, edi
push edi
push edi
push edi
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x2c4]
push 0x424665
mov edx, esi
call fcn.00453c64
mov ecx, dword [ebp - 0x10]
cmp ecx, edi
je 0x424aed
call fcn.00401728
mov esi, dword [ebp - 8]
cmp dword [ebp - 0x14], 0
jne 0x424c90
test byte [esi + 0x1cc], 1
jne 0x424c90
call fcn.004a2796
mov ecx, eax
call fcn.004a26ed
mov edi, eax
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x424b18
sub eax, edx
sar eax, 1
test dword [ebp + 8], 0x100
mov ebx, eax
jne 0x424b58
push ebx
push edi
push dword [ebp - 0xc]
call sub.msvcrt.dll_wcsncmp
add esp, 0xc
test eax, eax
jne 0x424b58
mov ecx, dword [ebp - 0xc]
call fcn.004b696a
sub eax, dword [ebp - 0xc]
sar eax, 1
inc ebx
cmp eax, ebx
jbe 0x424c90
cmp byte [ebp - 1], 0
je 0x424b67
mov byte [ebp - 1], 0
call fcn.0047cff8
push edi
lea eax, [ebp - 8]
push eax
mov ecx, esi
call fcn.0040f56a
push 0
lea ecx, [ebp - 8]
call fcn.004a0ff9
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileW]
push eax
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x424c55
lea ecx, [ebp - 8]
call fcn.004a0ff9
mov ecx, eax
call fcn.004b9537
test al, al
je 0x424bbc
push 0
lea ecx, [ebp - 8]
call fcn.004a0ff9
push eax
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x424c55
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [0x896260]
mov edi, eax
mov ecx, edi
call fcn.0047d0ac
push eax
push edi
lea ecx, [ebp - 8]
call fcn.004a0ff9
push eax
push dword [ebp - 0xc]
push ebx
call fcn.004263e6
add esp, 0x14
test byte [ebp + 8], 4
jne 0x424c1a
mov edi, dword [0x89625c]
lea ecx, [ebp - 8]
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x30], 0x35
call fcn.004a0ff9
push eax
lea eax, [ebp - 0x34]
push edi
push eax
call fcn.00477c73
add esp, 0xc
jmp 0x424c1d
push 2
pop eax
cmp eax, 2
je 0x424c3e
cmp byte [ebp - 1], 0
jne 0x424c31
mov byte [ebp - 1], 1
call fcn.0047cfd9
lea ecx, [ebp - 8]
call fcn.004a0c7d
jmp 0x424afa
lea ecx, [ebp - 8]
call fcn.004a0c7d
cmp byte [ebp - 1], 0
je 0x424a4c
jmp 0x424a47
push 0x80
lea ecx, [ebp - 8]
call fcn.004a0ff9
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 8]
call fcn.004a0ff9
push eax
mov ecx, esi
call fcn.0040dada
cmp byte [ebp - 1], 0
jne 0x424c88
mov byte [ebp - 1], 1
call fcn.0047cfd9
lea ecx, [ebp - 8]
call fcn.004a0c7d
inc dword [0x8901d0]
mov ebx, dword [esi + 0x47c]
xor edi, edi
cmp ebx, edi
je 0x424cdf
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x88ddec
call fcn.00409044
mov ecx, dword [ebp - 0x14]
push ebx
lea eax, [ebp - 0x10]
push eax
call fcn.0040863b
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
push eax
call fcn.00408315
push 7
mov edx, esi
pop ecx
call fcn.0049d888
mov ecx, dword [ebp - 0x10]
cmp ecx, edi
je 0x424cdf
call fcn.00406bc3
mov edx, dword [ebp + 8]
shr edx, 1
and dl, 1
mov ecx, esi
call fcn.004a3088
cmp byte [ebp + 0xf], 0
je 0x424d07
push edi
push edi
push 0x8066
push dword [0x890598]
call dword [sym.imp.USER32.dll_PostMessageW]
test byte [ebp + 8], 0x40
je 0x424d16
mov ecx, esi
call fcn.0042092d
jmp 0x424d38
test byte [esi + 0x1cc], 1
jne 0x424d29
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.0041b516
push 0xffffffffffffffff
push dword [0x88f96c]
mov ecx, esi
call fcn.00414736
test byte [ebp + 8], 0x10
je 0x424d4e
or dword [esi + 0x1d8], 0xffffffff
push edi
push edi
mov ecx, esi
call fcn.0040f0bd
test dword [ebp + 8], 0x400
je 0x424d5e
or byte [esi + 0x1cc], 0x10
push edi
xor edx, edx
xor ecx, ecx
call fcn.004a42be
cmp byte [ebp - 1], 0
je 0x424d73
call fcn.0047cff8
mov al, 1
pop edi
pop esi
pop ebx
leave
ret 8