Function at 0x441111
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00441111
xor esi, esi
xor edi, edi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
mov eax, dword [str.SYSTEMCurrentControlSetServicesTPMWMI]
test eax, eax
je 0x441206
mov edi, 0x44
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868d10
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x4411fb
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868d10
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
mov dword [str.SYSTEMCurrentControlSetServicesTPMWMI], 0
mov edx, 0x1868d38
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x441206
inc edi
cmp edi, 0x5a
jle 0x441150
mov eax, dword [0x45fb0c]
test eax, eax
je 0x44134a
mov edi, 0x44
nop
nop
nop
nop
nop
nop
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1862aa4
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x44133f
push 0
mov edx, 0x1863304
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x4412d0
mov ecx, 0x441065
push ecx
mov eax, edi
push eax
push 0x100000
push 0
lea ebx, [ebp - 0x9c]
call fcn.0045173d
mov esi, dword [ebx]
mov eax, esi
lea ebx, [ebp - 0x9c]
call fcn.00451717
mov esi, dword [ebx]
mov dword [0x45fb0c], 0
jmp 0x44133a
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1862aa4
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x44133a
mov edx, 0x1868d4c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fb0c], 0
jmp 0x44134a
inc edi
cmp edi, 0x5a
jle 0x441220
mov eax, dword [0x45fb10]
test eax, eax
je 0x44141e
mov edi, 0x44
nop
nop
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868d68
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441413
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868d68
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x441413
mov edx, 0x1868d7c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fb10], 0
jmp 0x44141e
inc edi
cmp edi, 0x5a
jle 0x441360
mov eax, dword [0x45fae0]
test eax, eax
je 0x4414fe
mov edi, 0x44
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868da0
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x4414f3
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868da0
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x4414f3
mov edx, 0x1868dc0
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fae0], 0
jmp 0x4414fe
inc edi
cmp edi, 0x5a
jle 0x441440
mov eax, dword [0x45fae4]
test eax, eax
je 0x441828
mov edi, 0x44
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1865dfc
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x44181d
fild dword [0x186d6a4]
mov eax, dword [0x45fae8]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x44170d
mov eax, dword [0x45faf0]
test eax, eax
je 0x44170d
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868ddc
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x44170d
push 0
push 2
mov edx, 0x1868df4
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
push 0
push 0
push 0
mov edx, 0x1863028
call fcn.0045d0ba
mov ebx, 0x45fbb4
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1865dfc
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 8]
call fcn.00457d88
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 8
fldcw word [ebp - 0x10]
push 0
push 1
push 0xd
mov edx, 0x1862b00
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
mov edx, 0x1868924
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0043eeb8
push 0
mov edx, 0x1863028
call fcn.0045d0ba
mov ebx, 0x45fbb4
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.004339a3
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441708
mov dword [0x45feb0], 1
mov edx, 0x1868e04
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fae4], 0
jmp 0x441818
push 0
push 0
push 0
mov edx, 0x1863028
call fcn.0045d0ba
mov ebx, 0x45fbb4
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1865dfc
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 8]
call fcn.00457d88
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 8
fldcw word [ebp - 0x10]
push 0
push 1
push 0xd
mov edx, 0x1862b00
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
mov edx, 0x1868924
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0043eeb8
push 0
mov edx, 0x1863028
call fcn.0045d0ba
mov ebx, 0x45fbb4
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.004339a3
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441818
mov dword [0x45feb0], 1
mov edx, 0x1868e24
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fae4], 0
jmp 0x441828
inc edi
cmp edi, 0x5a
jle 0x441520
mov eax, dword [0x45fadc]
test eax, eax
je 0x441d70
mov edi, 0x44
nop
nop
nop
nop
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868e38
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x4418f3
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868e38
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x4418f3
mov edx, 0x1868e58
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fadc], 0
jmp 0x441ce8
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868e70
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
push eax
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868e70
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
and eax, dword [ebp - 0x30]
test eax, eax
jne 0x441a09
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1863e30
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
push eax
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1863e30
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
and eax, dword [ebp - 0x30]
test eax, eax
je 0x441a30
mov edx, 0x1868e90
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fadc], 0
jmp 0x441ce8
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868ea8
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441ae3
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868ea8
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x441ae3
mov edx, 0x1868ec8
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fadc], 0
jmp 0x441ce8
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868ee0
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441be0
push 0
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868f00
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441be0
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868ee0
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x441be0
mov edx, 0x1868f18
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fadc], 0
jmp 0x441ce8
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868f30
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441cdd
push 0
push 0
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868f00
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441cdd
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
push 0
mov eax, edi
call fcn.0045004c
call fcn.0044fffd
mov edx, 0x1868f30
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x441cdd
mov edx, 0x1868f4c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fadc], 0
jmp 0x441ce8
inc edi
cmp edi, 0x5a
jle 0x441840
push 0
mov edx, 0x1868f64
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x441d70
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x1868f64
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x441d70
mov edx, 0x1868f90
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45fadc], 0
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret