Function at 0x4bb9cc
Capabilities:
Copy file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x14
push 0
push 0
dec ecx
jne 0x4bb9d4
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4bc1cd
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 1
mov eax, dword [0x4d6070]
call fcn.00404290
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0xc]
call fcn.004b8fa8
test al, al
jne 0x4bbb20
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d5b00]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x10]
call fcn.004b8fa8
test al, al
je 0x4bbae8
push 0x80
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x14]
call fcn.00404760
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x18]
call fcn.00404760
push eax
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d5b00]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x1c]
call fcn.00404760
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x4bbb20
mov edx, dword [0x4d57a4]
mov edx, dword [edx]
lea eax, [ebp - 0x20]
mov ecx, 0x4bc1f8
call fcn.004045ac
mov eax, dword [ebp - 0x20]
call fcn.004b8fa8
test al, al
je 0x4bbb18
call fcn.004bae70
call fcn.004bb3c0
jmp 0x4bc1af
mov eax, dword [0x4d5bd4]
mov byte [eax], 1
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00404620
mov ecx, dword [ebp - 0x24]
mov dl, 1
mov eax, dword [0x4383ec]
call fcn.0043849c
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4bbdd4
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4bc20c
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x4bc21c
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x28]
mov eax, 0x4d9294
call fcn.004042e4
mov eax, dword [0x4d9294]
call fcn.00404560
cmp eax, 3
jge 0x4bbba8
mov eax, 0x4d9294
mov edx, dword [0x4d5670]
mov edx, dword [edx]
call fcn.004042e4
push 0
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x4bc234
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x2c]
mov eax, 0x4d9298
call fcn.004042e4
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4bc240
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x30]
mov eax, 0x4d92ac
call fcn.004042e4
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x4bc24c
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x34]
call fcn.004b2ce4
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4d6070]
call fcn.004042e4
push 0x4bc258
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4bc268
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.004089f8
mov edx, dword [ebp - 0x3c]
mov eax, 0x4d92a4
call fcn.004042e4
mov eax, dword [0x4d92a4]
call fcn.00404560
cmp eax, 3
jge 0x4bbc6f
mov eax, 0x4d92a4
mov edx, 0x4bc258
call fcn.004042e4
push 0
mov ecx, 0x4bc274
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929d], al
push 0
mov ecx, 0x4bc280
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929e], al
push 0
mov ecx, 0x4bc28c
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929f], al
push 0x4bc298
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x4bc2b8
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x44]
mov eax, 0x4d92b8
call fcn.004042e4
push 0x1f90
mov ecx, 0x4bc2c4
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov dword [0x4d92bc], eax
push 0
mov ecx, 0x4bc2d0
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929c], al
cmp byte [0x4d929c], 0
jne 0x4bbd2d
mov eax, dword [0x4d579c]
cmp byte [eax], 0
je 0x4bbdb1
push 0x4bc2dc
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x4bc2f0
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.004b7f44
mov edx, dword [ebp - 0x48]
mov eax, 0x4d92a8
call fcn.004042e4
mov dl, 1
mov eax, dword [0x4a56ec]
call fcn.004a5780
mov ebx, eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x58]
mov edx, dword [0x4d92a8]
mov eax, ebx
call fcn.004a5468
mov eax, dword [ebp - 0x58]
mov ecx, 0xa
xor edx, edx
call fcn.004047c0
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.004089f8
mov edx, dword [ebp - 0x50]
mov eax, 0x4d92b0
call fcn.004042e4
mov eax, ebx
call fcn.00403440
jmp 0x4bbdca
mov eax, 0x4d92a8
call fcn.00404290
mov eax, 0x4d92b0
mov edx, 0x4bc2fc
call fcn.004042e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bbdde
cmp dword [ebp - 8], 0
je 0x4bbdec
mov eax, dword [ebp - 8]
call fcn.00403440
mov eax, dword [0x4d92a4]
mov edx, 0x4bc258
call fcn.004046ac
jne 0x4bc180
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc310
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x5c]
call fcn.004b8fa8
test al, al
je 0x4bc180
push 0
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x60]
call fcn.00404760
push eax
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc310
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.00404620
mov eax, dword [ebp - 0x64]
call fcn.00404760
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x4d5f14]
push dword [eax]
mov eax, dword [0x4d588c]
push dword [eax]
push 0x4bc1e8
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00404620
mov ecx, dword [ebp - 0x68]
mov dl, 1
mov eax, dword [0x4383ec]
call fcn.0043849c
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4bc168
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4bc20c
lea eax, [ebp - 0x6c]
push eax
mov ecx, 0x4bc21c
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x6c]
mov eax, 0x4d9294
call fcn.004042e4
mov eax, dword [0x4d9294]
call fcn.00404560
cmp eax, 3
jge 0x4bbf12
mov eax, 0x4d9294
mov edx, dword [0x4d5670]
mov edx, dword [edx]
call fcn.004042e4
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, 0x4bc234
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x70]
mov eax, 0x4d9298
call fcn.004042e4
push 0
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x4bc240
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x74]
mov eax, 0x4d92ac
call fcn.004042e4
push 0
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x4bc24c
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x78]
call fcn.004b2ce4
mov edx, dword [ebp - 0x78]
mov eax, dword [0x4d6070]
call fcn.004042e4
push 0x4bc258
lea eax, [ebp - 0x84]
push eax
mov ecx, 0x4bc268
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x80]
call fcn.004089f8
mov edx, dword [ebp - 0x80]
mov eax, 0x4d92a4
call fcn.004042e4
mov eax, dword [0x4d92a4]
call fcn.00404560
cmp eax, 3
jge 0x4bbfdf
mov eax, 0x4d92a4
mov edx, 0x4bc258
call fcn.004042e4
push 0
mov ecx, 0x4bc274
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929d], al
push 0
mov ecx, 0x4bc280
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929e], al
push 0
mov ecx, 0x4bc28c
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929f], al
push 0x4bc298
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x4bc2b8
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x88]
mov eax, 0x4d92b8
call fcn.004042e4
push 0x1f90
mov ecx, 0x4bc2c4
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov dword [0x4d92bc], eax
push 0
mov ecx, 0x4bc2d0
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [0x4d929c], al
cmp byte [0x4d929c], 0
jne 0x4bc0a3
mov eax, dword [0x4d579c]
cmp byte [eax], 0
je 0x4bc145
push 0x4bc2dc
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x4bc2f0
mov edx, 0x4bc228
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.004b7f44
mov edx, dword [ebp - 0x8c]
mov eax, 0x4d92a8
call fcn.004042e4
mov dl, 1
mov eax, dword [0x4a56ec]
call fcn.004a5780
mov ebx, eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x9c]
mov edx, dword [0x4d92a8]
mov eax, ebx
call fcn.004a5468
mov eax, dword [ebp - 0x9c]
mov ecx, 0xa
xor edx, edx
call fcn.004047c0
mov eax, dword [ebp - 0x98]
lea edx, [ebp - 0x94]
call fcn.004089f8
mov edx, dword [ebp - 0x94]
mov eax, 0x4d92b0
call fcn.004042e4
mov eax, ebx
call fcn.00403440
jmp 0x4bc15e
mov eax, 0x4d92a8
call fcn.00404290
mov eax, 0x4d92b0
mov edx, 0x4bc2fc
call fcn.004042e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bc172
cmp dword [ebp - 8], 0
je 0x4bc180
mov eax, dword [ebp - 8]
call fcn.00403440
mov eax, dword [0x4d92ac]
call fcn.00404560
cmp eax, 0x14
je 0x4bc1af
lea edx, [ebp - 0xa0]
mov eax, 0x14
call fcn.004b6f20
mov edx, dword [ebp - 0xa0]
mov eax, 0x4d92ac
call fcn.004042e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bc1d4
lea eax, [ebp - 0xa0]
mov edx, 0x26
call fcn.004042b4
ret