Function at 0x4d02de
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
push edi
xor ebx, ebx
push ebx
lea eax, [ebp - 1]
push eax
push ebx
mov dword [ebp - 8], edx
mov edi, ecx
mov byte [ebp - 1], bl
call fcn.0049e64a
push eax
lea ecx, [ebp - 0x4c]
call fcn.00483188
mov esi, dword [ebp + 8]
mov eax, 0x535204
mov ecx, esi
cmp esi, ebx
jne 0x4d0315
mov ecx, eax
cmp dword [ebp - 8], ebx
je 0x4d031d
mov eax, dword [ebp - 8]
push ecx
push eax
push edi
push 0x5351b0
call fcn.00466ca2
add esp, 0x10
mov edx, 0x532b58
mov ecx, edi
call fcn.0049fbbd
test al, al
je 0x4d04fa
cmp esi, ebx
je 0x4d0355
mov edx, 0x50faa0
mov ecx, esi
call fcn.0049fbbd
test al, al
jne 0x4d036b
cmp byte [ebp - 1], bl
je 0x4d038f
mov ecx, dword [ebp - 0x44]
mov edx, 0x5101bc
call fcn.0049fb01
test al, al
je 0x4d038f
push dword [ebp + 0xc]
mov edx, edi
push 0xa0
push 4
push dword [ebp + 0x1c]
mov ecx, 0x4ca499
push dword [ebp + 0x18]
push dword [ebp - 8]
call fcn.004cc01b
jmp 0x4d06da
cmp esi, ebx
je 0x4d03a3
mov edx, 0x535198
mov ecx, esi
call fcn.0049fc6f
test al, al
jne 0x4d03b9
cmp byte [ebp - 1], bl
je 0x4d03c0
mov ecx, dword [ebp - 0x44]
mov edx, 0x5101d0
call fcn.0049fb01
test al, al
je 0x4d03c0
mov ecx, 0x4cbffb
jmp 0x4d03ef
cmp esi, ebx
je 0x4d03d4
mov edx, 0x53518c
mov ecx, esi
call fcn.0049fc6f
test al, al
jne 0x4d03ea
cmp byte [ebp - 1], bl
je 0x4d040a
mov ecx, dword [ebp - 0x44]
mov edx, 0x535184
call fcn.0049fb01
test al, al
je 0x4d040a
mov ecx, 0x4ca554
push ebx
push 0xa0
push 4
push ebx
push dword [ebp + 0x18]
mov edx, edi
push dword [ebp - 8]
call fcn.004cc01b
jmp 0x4d06ed
cmp esi, ebx
je 0x4d041e
mov edx, 0x51e0e8
mov ecx, esi
call fcn.0049fc6f
test al, al
jne 0x4d0434
cmp byte [ebp - 1], bl
je 0x4d0482
mov ecx, dword [ebp - 0x44]
mov edx, 0x5101dc
call fcn.0049fb01
test al, al
je 0x4d0482
push 0x10
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x4d0451
push esi
push edi
push dword [ebp + 0x14]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.004c9dd7
jmp 0x4d0453
xor eax, eax
push 0x4cd6e9
push eax
push ebx
push dword [ebp - 8]
mov ecx, edi
call fcn.0049e64a
mov edx, eax
xor ecx, ecx
call fcn.004dcf73
mov esi, eax
mov ecx, esi
call fcn.004cd6b5
push esi
push ebx
push 0x801d
jmp 0x4d06e1
cmp esi, ebx
je 0x4d0496
mov edx, 0x512be0
mov ecx, esi
call fcn.0049fc6f
test al, al
jne 0x4d04ac
cmp byte [ebp - 1], bl
je 0x4d04e5
mov ecx, dword [ebp - 0x44]
mov edx, 0x5101e8
call fcn.0049fb01
test al, al
je 0x4d04e5
push 0x10
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x4d04c9
push esi
push edi
push dword [ebp + 0x14]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.004c9dd7
jmp 0x4d04cb
xor eax, eax
push 0x4cd6e9
push eax
push ebx
mov ecx, edi
call fcn.0049e64a
mov edx, dword [ebp - 8]
mov ecx, eax
call fcn.004e080b
jmp 0x4d046d
mov edx, dword [ebp + 0xc]
shr edx, 2
and dl, 1
mov ecx, edi
call fcn.004beb5b
jmp 0x4d06ed
mov edx, 0x520558
mov ecx, edi
call fcn.0049fc6f
mov ecx, edi
test al, al
je 0x4d0517
push ebx
call fcn.004cbe2e
jmp 0x4d06ed
mov edx, 0x520698
call fcn.0049fc6f
mov ecx, edi
test al, al
je 0x4d0558
push 0x12e
lea edx, [ebp + 0xc]
call fcn.004b93d7
mov esi, eax
call fcn.0047cfd9
mov edx, dword [ebp + 0xc]
mov ecx, esi
call fcn.004afdad
call fcn.0047cff8
mov dl, 1
mov ecx, esi
call fcn.00479b79
jmp 0x4d06ed
mov edx, 0x51d464
call fcn.0049fbbd
mov ecx, edi
test al, al
je 0x4d0576
mov edx, dword [ebp + 0xc]
or edx, 0x200
jmp 0x4d06c6
mov edx, 0x51e114
call fcn.0049fc6f
test al, al
je 0x4d05e7
push 0x10
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x4d05a1
push esi
push edi
push dword [ebp + 0x14]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.004c9dd7
jmp 0x4d05a3
xor eax, eax
push 0x4cd6e9
push eax
push 1
mov ecx, edi
call fcn.004b696a
mov ecx, eax
call fcn.0049e64a
mov edx, dword [ebp - 8]
mov ecx, eax
call fcn.004e080b
mov esi, eax
push edi
lea ecx, [esi + 0x3c]
call fcn.004a101e
push 0x510d20
lea ecx, [esi + 0x40]
call fcn.004a0eb9
push esi
push ebx
push 0x8023
jmp 0x4d06e1
mov edx, 0x51e0fc
mov ecx, edi
call fcn.0049fc6f
test al, al
je 0x4d0617
push 0x510d20
push dword [ebp + 0x14]
mov edx, edi
push dword [ebp + 0x10]
xor ecx, ecx
push dword [ebp + 0xc]
push esi
push dword [ebp - 8]
call fcn.004d01a7
jmp 0x4d06ed
cmp esi, ebx
je 0x4d062b
mov edx, 0x535174
mov ecx, esi
call fcn.0049fc6f
test al, al
jne 0x4d063f
mov edx, 0x5205cc
mov ecx, edi
call fcn.0049fc6f
test al, al
je 0x4d06c1
mov ecx, 0x519c38
call fcn.0049a53c
test dword [ebp + 0xc], 0x400
mov esi, eax
je 0x4d0663
mov edx, 0x52b514
mov ecx, 0x89040c
call fcn.0049fe6d
push 0x51c5f8
push edi
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
push esi
test eax, eax
jne 0x4d067d
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4d0692
push edi
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
je 0x4d0692
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
call fcn.004cb4b6
call fcn.004d7e8b
mov dl, 1
mov cl, dl
call fcn.004e1c79
call fcn.004c9d55
call fcn.004f1923
mov ecx, dword [0x88f7f8]
call fcn.004ca5bc
call fcn.004314c4
jmp 0x4d06ed
mov edx, dword [ebp + 0xc]
mov ecx, edi
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push fcn.0040f6ea
push ebx
push dword [ebp - 8]
call fcn.00426e8f
push ebx
push ebx
push 0x803e
push dword [0x890598]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x4c]
call fcn.00483177
pop edi
pop esi
pop ebx
leave
ret 0x18