Function at 0x42b97c
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffea8
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0042b278
add esp, 8
test eax, eax
je 0x42b99f
or eax, 0xffffffff
jmp 0x42bddb
call fcn.0042c014
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x42b9fd
push str.READDEVICETOFILEX
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x14], eax
test eax, eax
je 0x42b9fd
push 0x461cde
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x18], eax
test eax, eax
je 0x42b9fd
push str.READ_MINIT_TOFILEX
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x42b9fd
push 0x461d04
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x20], eax
test eax, eax
jne 0x42ba13
cmp dword [ebp - 0x10], 0
je 0x42ba0b
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_FreeLibrary
or eax, 0xffffffff
jmp 0x42bddb
xor edx, edx
mov dword [0x45e8ac], edx
push dword [ebp + 0xc]
push 0x187e2d4
call fcn.0044435c
add esp, 8
push 0x2e
push 0x187e2d4
call fcn.00444491
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x42ba62
push dword [ebp - 4]
call fcn.0044438c
pop ecx
cmp eax, 4
ja 0x42ba62
push 0x5c
push dword [ebp - 4]
call fcn.00444485
add esp, 8
test eax, eax
je 0x42ba76
push 0x187e2d4
call fcn.0044438c
pop ecx
add eax, 0x187e2d4
mov dword [ebp - 4], eax
push str..LOG
push dword [ebp - 4]
call fcn.0044435c
add esp, 8
mov byte [0x187e3d8], 0
push dword [ebp + 0xc]
push 0x187e2d4
call fcn.00444570
add esp, 8
test eax, eax
jne 0x42bab8
push str..LO
push dword [ebp - 4]
call fcn.0044435c
add esp, 8
mov byte [0x187e3d8], 0
push 0x187e2d4
push dword [ebp + 8]
call fcn.0042b278
add esp, 8
test eax, eax
jne 0x42b9fd
push dword [ebp + 0x14]
push dword [ebp + 8]
push 0
call fcn.0042b798
add esp, 0xc
cmp dword [ebp + 0x14], 0
je 0x42bb3f
push fcn.0042b700
push dword [ebp + 0x10]
push 0x187e2d4
call dword [ebp - 0x1c]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42bb93
push 0
push dword [ebp + 8]
push 5
call fcn.0042b798
add esp, 0xc
push 0x187e2d4
call fcn.00445acc
pop ecx
mov eax, dword [ebp - 8]
mov ecx, 0x64
cdq
idiv ecx
cmp edx, 0xe
jne 0x42bb37
mov eax, 0xfffffffe
jmp 0x42bddb
or eax, 0xffffffff
jmp 0x42bddb
push fcn.0042b700
push dword [ebp + 0x10]
push 0x187e2d4
call dword [ebp - 0x14]
mov dword [ebp - 8], eax
cmp dword [ebp + 0x18], 0
je 0x42bb93
push 0x468fd5
lea edx, [ebp - 0x158]
push edx
call fcn.0044435c
add esp, 8
push str.lastXML.log
lea ecx, [ebp - 0x158]
push ecx
call fcn.00444280
add esp, 8
push 0
lea eax, [ebp - 0x158]
push eax
push 0x187e2d4
call sub.KERNEL32.DLL_CopyFileA
push 0
push dword [ebp + 8]
push 5
call fcn.0042b798
add esp, 0xc
cmp dword [ebp - 8], 0x11
jne 0x42bc00
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_FreeLibrary
push dword [ebp + 0xc]
push 0x187e2d4
call fcn.00446f44
add esp, 8
test eax, eax
je 0x42bbec
push 0x187e2d4
call fcn.00445acc
pop ecx
push dword [ebp + 0xc]
push 0x461d22
push 9
push dword [ebp + 8]
call fcn.0042b218
add esp, 0x10
or eax, 0xffffffff
jmp 0x42bddb
mov dword [0x187de6c], 4
mov eax, dword [0x187de6c]
jmp 0x42bddb
cmp dword [ebp - 8], 0
je 0x42bc72
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_FreeLibrary
push 0x187e2d4
push 0x461d23
push dword [ebp - 8]
push dword [ebp + 8]
call fcn.0042b218
add esp, 0x10
push 0x187e2d4
call fcn.00445acc
pop ecx
cmp dword [ebp - 8], 6
je 0x42bc6a
cmp dword [ebp - 8], 8
je 0x42bc6a
cmp dword [ebp - 8], 9
je 0x42bc6a
cmp dword [ebp - 8], 7
je 0x42bc6a
push str.LOG_Datei
push 0x24
push dword [ebp + 8]
call fcn.00411b5c
add esp, 0xc
cmp eax, 6
jne 0x42bc6a
mov eax, 0xfffffffe
jmp 0x42bddb
or eax, 0xffffffff
jmp 0x42bddb
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0042b278
add esp, 8
test eax, eax
je 0x42bc8d
mov dword [ebp - 8], 0xf
jmp 0x42bcf4
cmp dword [ebp + 0x14], 0
je 0x42bcb5
push 0x45e8ac
push dword [ebp + 0xc]
push 0x187e2d4
push dword [ebp + 8]
call dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov dword [0x187de6c], 4
jmp 0x42bcf4
push dword [ebp + 0x14]
push dword [ebp + 8]
push 1
call fcn.0042b798
add esp, 0xc
push fcn.0042b700
push 0x187de6c
push 0x45e8ac
push dword [ebp + 0xc]
push 0x187e2d4
push dword [ebp + 8]
call dword [ebp - 0x18]
mov dword [ebp - 8], eax
push 0
push dword [ebp + 8]
push 5
call fcn.0042b798
add esp, 0xc
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_FreeLibrary
cmp dword [ebp - 8], 0
je 0x42bdd6
push dword [ebp + 0xc]
push 0x187e2d4
push dword [ebp - 8]
push dword [ebp + 8]
call fcn.0042b218
add esp, 0x10
push str.LOG_Datei_speichern_
push 0x24
push dword [ebp + 8]
call fcn.00411b5c
add esp, 0xc
cmp eax, 6
jne 0x42bdc6
push 0x452ccd
lea edx, [ebp - 0x158]
push edx
call fcn.0044435c
add esp, 8
push 0
push 0x452f3b
lea ecx, [ebp - 0x158]
push ecx
push dword [0x4528dc]
call fcn.00411ee8
add esp, 0x10
cmp byte [ebp - 0x158], 0
je 0x42bd1c
lea eax, [ebp - 0x158]
push eax
push 0x452ccd
call fcn.0044435c
add esp, 8
push 0
lea edx, [ebp - 0x158]
push edx
push 0x187e2d4
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
je 0x42bda8
push 0x187e2d4
call fcn.00445acc
pop ecx
jmp 0x42bdd1
lea ecx, [ebp - 0x158]
push ecx
push 0x45353c
push 0x30
push dword [ebp + 8]
call fcn.00411b5c
add esp, 0x10
jmp 0x42bd1c
push 0x187e2d4
call fcn.00445acc
pop ecx
or eax, 0xffffffff
jmp 0x42bddb
mov eax, dword [0x187de6c]
mov esp, ebp
pop ebp
ret