Function at 0x4d9e0c
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x4d9e14
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
call fcn.00409ecc
xor eax, eax
push ebp
push 0x4da464
push dword fs:[eax]
mov dword fs:[eax], esp
cmp ebx, 0xa
jge 0x4d9e45
mov byte [ebp - 0x21], 1
jmp 0x4da424
mov byte [ebp - 0x21], 0
lea edx, [ebp - 0x18]
mov eax, dword [ebp + 0xc]
call fcn.00428fa8
mov dl, 1
mov eax, dword [ebp - 0x18]
call fcn.00421844
test al, al
je 0x4da424
push ebx
push ebx
lea eax, [ebp - 0x20]
push eax
call fcn.004d5efc
test al, al
je 0x4da424
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx + 0xa]
call fcn.0040ac6c
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x14]
call fcn.00428f60
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x18]
call fcn.00421bc0
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0x18]
mov ecx, 0x4da484
call fcn.0040ade0
mov dl, 1
mov eax, dword [ebp - 0x14]
call fcn.00421844
test al, al
je 0x4da424
mov dl, 1
mov eax, dword [ebp - 0x18]
call fcn.004217ac
test al, al
je 0x4da424
lea eax, [ebp - 0x1c]
mov ecx, 0x4da4c0
mov edx, dword [ebp - 0x14]
call fcn.0040ade0
mov dl, 1
mov eax, dword [ebp - 0x1c]
call fcn.004217ac
test al, al
jne 0x4d9f2d
mov dl, 1
mov eax, dword [ebp - 0x18]
call fcn.004217ac
test al, al
je 0x4d9f1a
push 0
mov eax, dword [ebp - 0x1c]
call fcn.0040ab94
push eax
mov eax, dword [ebp - 0x18]
call fcn.0040ab94
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
jne 0x4d9f1e
xor eax, eax
jmp 0x4d9f20
mov al, 1
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x4da424
mov dl, 1
mov eax, dword [0x483a54]
call fcn.00407f88
mov dword [ebp - 0x28], eax
mov dl, 1
mov eax, dword [0x480374]
call fcn.004a6e3c
mov ebx, eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
call fcn.004a9470
push 0
push 0
mov eax, dword [ebp - 0x28]
call fcn.004a7070
mov edx, dword [ebp - 0x28]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [ebp - 0x28]
call fcn.004a9408
mov dword [ebp - 0x2c], 0xffffffff
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4d9fe8
inc eax
mov dword [ebp - 0x30], eax
xor esi, esi
lea ecx, [ebp - 0x3c]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x3c]
mov ecx, 1
mov edx, eax
mov eax, 0x4da508
call fcn.0040aff4
test eax, eax
jle 0x4d9fb5
mov dword [ebp - 0x2c], esi
jmp 0x4d9fdc
lea ecx, [ebp - 0x40]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x40]
mov ecx, 1
mov edx, eax
mov eax, 0x4da550
call fcn.0040aff4
test eax, eax
jle 0x4d9fdc
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], 0
jg 0x4d9fe8
inc esi
dec dword [ebp - 0x30]
jne 0x4d9f8c
cmp dword [ebp - 0x2c], 0
jge 0x4da411
lea eax, [ebp - 0xc]
mov edx, 0x4da590
call fcn.0040a210
lea eax, [ebp - 0x10]
mov edx, 0x4da5c8
call fcn.0040a210
lea eax, [ebp - 4]
mov edx, 0x4da508
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da5f4
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da634
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da678
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da6bc
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da700
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da738
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da784
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da7c4
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da810
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da854
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da898
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da8c8
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da90c
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da94c
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4da994
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da9f4
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4daa38
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4daa84
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4daacc
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4dab00
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4dab4c
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4dab94
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4dabe0
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 4]
mov edx, 0x4da550
call fcn.0040a210
lea eax, [ebp - 8]
mov edx, 0x4dac34
call fcn.0040a210
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x28]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x88]
push 0
push 0
mov eax, dword [ebp - 0x28]
call fcn.004a7070
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
call fcn.004a9384
mov byte [ebp - 0x21], 1
mov eax, dword [ebp - 0x28]
call fcn.00407fb8
mov eax, ebx
call fcn.00407fb8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4da46b
lea eax, [ebp - 0x40]
mov edx, 4
call fcn.00409e38
lea eax, [ebp - 0x20]
mov edx, dword [0x4d3eb4]
call fcn.0040cec8
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00409e38
lea eax, [ebp + 0xc]
call fcn.00409dd8
pop eax
jmp eax