Function at 0x4a8b14
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x4a8b1d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404dc4
mov eax, dword [ebp - 8]
call fcn.00404dc4
mov eax, dword [ebp - 0xc]
call fcn.00404dc4
xor eax, eax
push ebp
push 0x4a8e73
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 1
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4a8e8c
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f194
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4a8e9c
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f194
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4a8ea8
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f194
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4a8eb4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f194
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x4a8ec4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f194
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x34]
mov edx, dword [0x4b224c]
call fcn.00404c20
mov ecx, 0x4a8ed8
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f2a4
test eax, eax
setg bl
mov ecx, 0x4a8eec
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f2a4
test eax, eax
setg byte [ebp - 0x25]
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4a8f00
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f194
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x24]
call fcn.00408c90
lea eax, [ebp - 0x30]
mov ecx, 0x4a8f10
mov edx, dword [0x4b224c]
call fcn.00404c20
cmp dword [ebp - 0x18], 0
je 0x4a8c48
cmp dword [ebp - 0x1c], 0
je 0x4a8c48
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x18]
call fcn.00404d20
jb 0x4a8c60
mov eax, dword [ebp - 0xc]
mov edx, 0x4a8ea8
call fcn.00404d20
je 0x4a8c60
mov byte [ebp - 0xd], 0
jmp 0x4a8e31
mov eax, dword [ebp - 0x30]
call fcn.004095f4
test al, al
jne 0x4a8c79
mov eax, dword [ebp - 0x30]
call fcn.00402b20
call fcn.0040296c
mov eax, dword [ebp - 0x20]
push eax
push 0
mov ecx, ebx
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
call fcn.004a88fc
mov ebx, eax
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
call fcn.004a8858
test bl, bl
je 0x4a8e31
mov eax, dword [ebp - 0x24]
mov edx, 0x4a8f20
call fcn.00404d20
jne 0x4a8cf0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404c20
mov eax, dword [ebp - 0x44]
mov ecx, 0x4000000
mov edx, dword [ebp - 0x14]
call fcn.004a8a7c
cmp byte [ebp - 0x25], 0
je 0x4a8dff
mov byte [0x4b0798], 1
mov eax, dword [0x4b0c18]
mov eax, dword [eax]
call fcn.00461dc4
jmp 0x4a8e31
mov eax, dword [ebp - 0x24]
mov edx, 0x4a8f30
call fcn.00404d20
jne 0x4a8d4d
push 0
push dword [ebp - 0x34]
push 0x4a8f44
push dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00404c94
mov eax, dword [ebp - 0x48]
call fcn.00404dd4
push eax
push dword [ebp - 0x30]
push 0x4a8f44
push dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
mov edx, 3
call fcn.00404c94
mov eax, dword [ebp - 0x4c]
call fcn.00404dd4
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x4a8dff
mov eax, dword [ebp - 0x24]
mov edx, 0x4a8f50
call fcn.00404d20
jne 0x4a8dff
xor ecx, ecx
mov dl, 1
mov eax, dword [0x494c9c]
call fcn.004998a8
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x40]
push dword [ebp - 0x30]
push 0x4a8f44
push dword [ebp - 0x2c]
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.00404c94
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
call fcn.00499fcc
mov eax, dword [ebp - 0x38]
mov byte [eax + 0x40], 1
mov eax, dword [ebp - 0x38]
mov byte [eax + 0x3a], 1
mov eax, dword [ebp - 0x38]
mov byte [eax + 0x39], 1
mov eax, dword [ebp - 0x38]
mov byte [eax + 0x5c], 1
xor eax, eax
push ebp
push 0x4a8ded
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x38]
call fcn.0049ada0
mov eax, dword [ebp - 0x38]
call fcn.0049a834
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a8df7
mov eax, dword [ebp - 0x38]
call fcn.00403a5c
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 8]
call fcn.00408c90
mov edx, dword [ebp - 0x54]
mov eax, 0x4a8f60
call fcn.00404f18
dec eax
cmp byte [ebp - 0x25], 0
je 0x4a8e31
mov byte [0x4b0798], 1
mov eax, dword [0x4b0c18]
mov eax, dword [eax]
call fcn.00461dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a8e7a
lea eax, [ebp - 0x54]
mov edx, 7
call fcn.00404938
lea eax, [ebp - 0x34]
mov edx, 3
call fcn.00404938
lea eax, [ebp - 0x24]
mov edx, 5
call fcn.00404938
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404938
ret