Function at 0x401000
Capabilities:
Copy file

Disassembly:
push ebp
call fcn.00401fee
push 0
call fcn.004026ec
mov dword [0x40664c], eax
push 0
call fcn.004026ec
mov dword [0x406650], eax
push 0
call fcn.004026ec
mov dword [0x406654], eax
push 0
call fcn.004026ec
mov dword [0x406658], eax
push 0
call fcn.004026ec
mov dword [0x40665c], eax
push 0
call fcn.004026ec
mov dword [0x406660], eax
push 0
call fcn.004026ec
mov dword [0x406664], eax
push 0
call fcn.004026ec
mov dword [0x406668], eax
push 0
call fcn.004026ec
mov dword [0x40666c], eax
push 0
call fcn.004026ec
mov dword [0x406670], eax
push 0
call fcn.004026ec
mov dword [0x406674], eax
push 0
call fcn.004026ec
mov dword [0x406678], eax
push 0
call fcn.004026ec
mov dword [0x40667c], eax
push 0
call fcn.004026ec
mov dword [0x406680], eax
push 0
call fcn.004026ec
mov dword [0x406684], eax
push 0
call fcn.004026ec
mov dword [0x406688], eax
push 0
call fcn.004026ec
mov dword [0x40668c], eax
push 0
call fcn.004026ec
mov dword [0x406690], eax
push 0
call fcn.004026ec
mov dword [0x406694], eax
push 0
call fcn.004026ec
mov dword [0x406698], eax
push 0
call fcn.004026ec
mov dword [0x40669c], eax
push 0
call fcn.004026ec
mov dword [0x4066a0], eax
push 0
call fcn.004026ec
mov dword [0x4066a4], eax
push 0
call fcn.004026ec
mov dword [0x4066a8], eax
push 0
call fcn.004026ec
mov dword [0x4066ac], eax
push 0
call fcn.004026ec
mov dword [0x4066b0], eax
push 0
call fcn.004026ec
mov dword [0x4066b4], eax
push 0
call fcn.004026ec
mov dword [0x4066b8], eax
push 0
call fcn.004026ec
mov dword [0x4066bc], eax
push 0
call fcn.004026ec
mov dword [0x4066c0], eax
push 0
call fcn.004026ec
mov dword [0x4066c4], eax
push 0
call fcn.004026ec
mov dword [0x4066c8], eax
push 0
call fcn.004026ec
mov dword [0x406b74], eax
push 0
call fcn.004026ec
mov dword [0x406b78], eax
push 0
call fcn.004026ec
mov dword [0x406b7c], eax
push 0
call fcn.004026ec
mov dword [0x406b80], eax
push 0
pop eax
and eax, 0xff
push eax
mov eax, 0x20
push eax
mov eax, 0x406b4c
push eax
call dword [sym.imp.KERNEL32.DLL_RtlFillMemory]
push dword [0x406b70]
xor ecx, ecx
pop eax
mov dword [ecx + 0x406b4c], eax
push 1
xor ecx, ecx
add ecx, 0x10
pop eax
and eax, 0xff
push eax
pop eax
mov dword [ecx + 0x406b4c], eax
mov eax, 0x406b4c
push eax
call dword [sym.imp.SHELL32.DLL_SHBrowseForFolderA]
push eax
pop eax
mov dword [0x406b6c], eax
push dword [0x406b6c]
pop eax
cmp eax, 0
je 0x401232
mov eax, 0x406b84
push eax
push dword [0x406b6c]
call dword [sym.imp.SHELL32.DLL_SHGetPathFromIDListA]
jmp 0x401237
call fcn.004026c9
push section..sdata
pop eax
push eax
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
call fcn.004026ec
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push eax
mov ecx, 0x406b74
push ecx
push dword [ecx]
call fcn.00401999
pop ecx
pop dword [ecx]
push 0x405015
mov eax, dword [0x406b74]
push eax
push dword [eax - 4]
call fcn.004026ec
pop ebx
push eax
push dword [eax - 4]
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
pop eax
push eax
mov eax, dword [esp + 4]
push eax
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
call fcn.004026ec
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov dword [esp + 4], eax
call fcn.00402345
push eax
mov ecx, 0x406b78
push ecx
push dword [ecx]
call fcn.00401999
pop ecx
pop dword [ecx]
mov eax, 0x406b84
push eax
pop eax
push eax
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
call fcn.004026ec
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push eax
mov ecx, 0x406b80
push ecx
push dword [ecx]
call fcn.00401999
pop ecx
pop dword [ecx]
mov eax, dword [0x406b80]
push eax
push dword [eax - 4]
call fcn.004026ec
pop ebx
push eax
push dword [eax - 4]
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
pop eax
push eax
push 0x40501d
mov eax, dword [esp]
push eax
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
call fcn.004026ec
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov dword [esp], eax
call fcn.00402345
push eax
mov eax, dword [0x406b74]
push eax
push dword [eax - 4]
call fcn.004026ec
pop ebx
push eax
push dword [eax - 4]
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
pop eax
push eax
call fcn.00402345
push eax
mov ecx, 0x406b7c
push ecx
push dword [ecx]
call fcn.00401999
pop ecx
pop dword [ecx]
push 0
mov eax, 0x406b7c
mov eax, dword [eax]
push eax
mov eax, 0x406b78
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
call fcn.004026c9
call fcn.0040246b
xor eax, eax
pop ebp
ret