Function at 0x4e6d58
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 6
push 0
push 0
dec ecx
jne 0x4e6d60
push ecx
push ebx
mov eax, 0x4e4d54
call fcn.00406e7c
xor eax, eax
push ebp
push 0x4e7044
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x4bd878]
call fcn.00403cf8
mov edx, dword [0x4f4c90]
mov dword [edx], eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.00403310
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4f4c90]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004bda78
mov eax, dword [0x4f4c90]
mov eax, dword [eax]
cmp dword [eax + 0x10], 0
jne 0x4e6de9
mov eax, 0x4e705c
call fcn.004e01c8
push 0
push 0x4e7070
push 0x4e708c
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x4f4c90]
call fcn.0040f7b4
jmp 0x4e7029
mov dl, 1
mov eax, dword [0x41827c]
call fcn.00403cf8
mov ebx, eax
mov eax, dword [0x4f4c90]
mov eax, dword [eax]
mov ecx, ebx
mov edx, 0x4e70ec
call fcn.004bdf2c
test al, al
jne 0x4e6e26
push 0
push 0x4e70f4
push 0x4e7104
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x4e7029
mov ecx, ebx
mov dl, 1
mov eax, dword [0x4e0acc]
call fcn.004e3298
mov edx, dword [0x4f4b08]
mov dword [edx], eax
mov eax, dword [0x4f4b08]
mov eax, dword [eax]
call fcn.004e31ec
mov eax, 0x4e7124
call fcn.004e01c8
mov eax, dword [0x4f4838]
mov edx, dword [0x4f4b08]
mov edx, dword [edx]
mov edx, dword [edx + 0xb4]
call fcn.00404c80
mov eax, ebx
call fcn.0041d28c
mov eax, dword [0x4f4c90]
mov eax, dword [eax]
mov ecx, ebx
mov edx, 0x4e713c
call fcn.004bdf2c
test al, al
je 0x4e6eb7
mov ecx, ebx
mov dl, 1
mov eax, dword [0x4e4764]
call fcn.004be188
mov dword [0x4fb560], eax
mov edx, dword [0x4f4b08]
mov edx, dword [edx]
mov eax, dword [0x4fb560]
call fcn.004e4ce8
mov eax, 0x4fb560
call fcn.0040f7b4
mov eax, ebx
call fcn.00403d28
mov edx, dword [0x4f4e40]
xor eax, eax
call fcn.00403310
lea edx, [ebp - 0x18]
mov eax, dword [0x4f4e40]
mov eax, dword [eax]
call fcn.00409f9c
mov edx, dword [ebp - 0x18]
mov eax, dword [0x4f4a18]
call fcn.00404c80
lea edx, [ebp - 0x1c]
mov eax, dword [0x4f4e40]
mov eax, dword [eax]
call fcn.00409fd0
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x4f4e90]
call fcn.00404c80
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.00403310
mov eax, dword [ebp - 0x20]
mov edx, 0x4e714c
call fcn.00405054
jne 0x4e6fcd
lea edx, [ebp - 0x24]
mov eax, 2
call fcn.00403310
cmp dword [ebp - 0x24], 0
je 0x4e6fcd
mov bl, 0xb
push 0
lea edx, [ebp - 0x2c]
mov eax, 2
call fcn.00403310
mov ecx, dword [ebp - 0x2c]
mov edx, dword [0x4f4a18]
mov edx, dword [edx]
lea eax, [ebp - 0x28]
call fcn.00404f44
mov eax, dword [ebp - 0x28]
call fcn.004050bc
push eax
mov eax, dword [0x4f4e40]
mov eax, dword [eax]
call fcn.004050bc
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
jne 0x4e6f8b
push 0x3e8
call sub.kernel32.dll_Sleep_2
dec bl
jne 0x4e6f3c
push 0x4e715c
mov eax, dword [0x4f4a18]
push dword [eax]
lea edx, [ebp - 0x34]
mov eax, 2
call fcn.00403310
push dword [ebp - 0x34]
push 0x4e7168
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.00404fc0
mov eax, dword [ebp - 0x30]
xor edx, edx
call fcn.004dfca8
mov eax, dword [0x4f4780]
mov byte [eax], 1
jmp 0x4e7011
mov eax, dword [0x4f4cac]
mov eax, dword [eax]
call fcn.00461d30
mov edx, dword [0x4f4838]
mov edx, dword [edx]
mov eax, dword [0x4f4cac]
mov eax, dword [eax]
call fcn.00461800
mov ecx, dword [0x4f4b04]
mov eax, dword [0x4f4cac]
mov eax, dword [eax]
mov edx, dword [0x4dba74]
call fcn.00461d48
mov eax, dword [0x4f4cac]
mov eax, dword [eax]
call fcn.00461dc8
mov eax, dword [0x4f4c90]
mov eax, dword [eax]
call fcn.00403d28
mov eax, dword [0x4f4b08]
mov eax, dword [eax]
call fcn.00403d28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e704b
lea eax, [ebp - 0x34]
mov edx, 9
call fcn.00404c50
ret