Function at 0x4b2a88
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x25
push 0
push 0
dec ecx
jne 0x4b2a90
push ecx
push ebx
push esi
mov dword [ebp - 0x30], eax
xor eax, eax
push ebp
push 0x4b31b8
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4b317b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x30]
call fcn.004b2554
mov ecx, dword [ebp - 0x30]
mov dl, 1
mov eax, dword [0x4af810]
call fcn.004b0aa8
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x110]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x48]
call fcn.004b0590
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x30]
add eax, 0x48
call fcn.00405284
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x30]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x30]
call fcn.004b079c
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0xc]
add eax, 0x40
call fcn.00405284
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4b2ca1
inc esi
xor ebx, ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
mov edx, dword [eax + ebx*4]
mov eax, 0x4b31cc
call fcn.00405610
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0
jne 0x4b2b76
cmp dword [ebp - 0x50], 0
jbe 0x4b2c49
jmp 0x4b2b7c
jle 0x4b2c49
push ebp
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
sub eax, 1
sbb edx, 0
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ebx*4]
mov edx, 1
call fcn.00405534
mov edx, dword [ebp - 0x11c]
lea ecx, [ebp - 0x118]
mov eax, dword [ebp - 0x30]
call fcn.004b079c
mov eax, dword [ebp - 0x118]
call fcn.004b26ec
pop ecx
push ebp
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
add eax, 1
adc edx, 0
mov edx, eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ebx*4]
mov ecx, 8
call fcn.00405534
mov eax, dword [ebp - 0x120]
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
sub eax, 1
sbb edx, 0
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ebx*4]
mov edx, 1
call fcn.00405534
mov edx, dword [ebp - 0x128]
lea ecx, [ebp - 0x124]
mov eax, dword [ebp - 0x30]
call fcn.004b079c
mov eax, dword [ebp - 0x124]
pop edx
call fcn.004b27cc
pop ecx
jmp 0x4b2c99
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ebx*4]
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x20]
call fcn.004b0420
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0
jne 0x4b2c78
cmp dword [ebp - 0x50], 0
jb 0x4b2c99
jmp 0x4b2c7a
jl 0x4b2c99
push ebp
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ebx*4]
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.004b25a0
pop ecx
inc ebx
dec esi
jne 0x4b2b47
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x10
mov ecx, 1
mov edx, dword [0x4aef98]
call fcn.00406088
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x14
mov ecx, 1
mov edx, dword [0x4af690]
call fcn.00406088
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x18
mov ecx, 1
mov edx, dword [0x4af6b4]
call fcn.00406088
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x1c
mov ecx, 1
mov edx, dword [0x4af6d8]
call fcn.00406088
add esp, 4
mov eax, dword [ebp - 0x30]
cmp word [eax + 0x5a], 0
je 0x4b2d31
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov ebx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebx + 0x5c]
call dword [ebx + 0x58]
xor eax, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xb0], 0
je 0x4b2e20
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xb4]
call fcn.004b0114
test al, al
je 0x4b2e20
lea ecx, [ebp - 0x12c]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x40]
mov edx, 0x4b31d4
call fcn.004b0294
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x30]
add eax, 0x40
call fcn.00405284
push 0xffffffffffffffff
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x40]
call fcn.004053dc
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xb4]
call fcn.004053dc
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
je 0x4b2de1
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x40]
push eax
call fcn.0040af4c
add esp, 0xfffffff8
fstp qword [esp]
wait
push 0x20
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xd0]
push eax
push 1
mov eax, dword [ebp - 0x30]
lea ecx, [eax + 0x34]
mov dl, 1
mov eax, dword [0x4af4c4]
call fcn.004b2140
mov dword [ebp - 0x44], eax
jmp 0x4b2e56
call sub.kernel32.dll_GetLastError
mov edx, dword [ebp - 0x30]
mov dword [edx + 0x34], eax
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x30], 9
mov eax, dword [ebp - 0x30]
cmp word [eax + 0x62], 0
je 0x4b2e56
mov eax, dword [0x4c003c]
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x40]
push eax
mov ebx, dword [ebp - 0x30]
mov ecx, 9
mov edx, dword [ebp - 0x30]
mov eax, dword [ebx + 0x64]
call dword [ebx + 0x60]
jmp 0x4b2e56
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x40]
push eax
call fcn.0040af4c
add esp, 0xfffffff8
fstp qword [esp]
wait
push 0x20
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xd0]
push eax
push 0
mov eax, dword [ebp - 0x30]
lea ecx, [eax + 0x34]
mov dl, 1
mov eax, dword [0x4af4c4]
call fcn.004b2140
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x44]
test edx, edx
je 0x4b2e63
sub edx, 0xffffffbc
call fcn.00406784
lea eax, [ebp - 0x3c]
call fcn.0040676c
push eax
push 0x4c0078
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xec]
push eax
mov eax, dword [eax]
call dword [eax]
test eax, eax
jne 0x4b307c
xor ebx, ebx
mov eax, dword [ebp - 0x30]
movzx eax, byte [eax + 0xb8]
sub al, 1
jb 0x4b2ea7
je 0x4b2f73
jmp 0x4b3012
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 0x13
mov eax, 0x4b31e8
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [eax + 0xb9]
call fcn.004b255c
mov dword [ebp + esi*8 - 0xf8], eax
inc ebx
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 8
mov eax, 0x4b31f4
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
mov eax, dword [ebp - 0x30]
test byte [eax + 0x98], 2
je 0x4b2f1b
push 0x4b31f8
call sub.oleaut32.dll_SysAllocString
mov dword [ebp + esi*8 - 0xf8], eax
jmp 0x4b2f2c
push 0x4b3200
call sub.oleaut32.dll_SysAllocString
mov dword [ebp + esi*8 - 0xf8], eax
inc ebx
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xba], 0
jbe 0x4b3012
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 0x13
mov eax, 0x4b3210
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [eax + 0xba]
mov dword [ebp + esi*8 - 0xf8], eax
inc ebx
jmp 0x4b3012
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 8
mov eax, 0x4b321c
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
push 0x4b3220
call sub.oleaut32.dll_SysAllocString
mov dword [ebp + esi*8 - 0xf8], eax
inc ebx
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xbb], 0
jbe 0x4b2fdb
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 0x13
mov eax, 0x4b3234
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
mov dword [ebp + esi*8 - 0xf8], 0xa
inc ebx
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xbc], 0
jbe 0x4b3012
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 0x13
mov eax, 0x4b3240
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
mov dword [ebp + esi*8 - 0xf8], 0x1e
inc ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xe0]
xor edx, edx
call fcn.004054b0
je 0x4b3061
mov eax, dword [ebp - 0x30]
test byte [eax + 0x98], 0x10
je 0x4b3061
mov esi, ebx
add esi, esi
mov word [ebp + esi*8 - 0x100], 8
mov eax, 0x4b324c
call fcn.00405b58
mov dword [ebp + ebx*4 - 0x10c], eax
push 0x4b31f8
call sub.oleaut32.dll_SysAllocString
mov dword [ebp + esi*8 - 0xf8], eax
inc ebx
push ebx
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 8], 0
jbe 0x4b30bb
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0xc]
test edx, edx
je 0x4b308f
sub edx, 0xffffffb4
call fcn.00406784
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4b309e
sub eax, 0xffffffb4
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xec]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x40], eax
jmp 0x4b30ef
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x30], 0xa
mov eax, dword [ebp - 0x30]
cmp word [eax + 0x62], 0
je 0x4b30e8
mov eax, dword [0x4c0040]
push eax
push 0
mov ebx, dword [ebp - 0x30]
mov ecx, 0xa
mov edx, dword [ebp - 0x30]
mov eax, dword [ebx + 0x64]
call dword [ebx + 0x60]
mov dword [ebp - 0x40], 0xffffffff
mov eax, dword [ebp - 0x30]
call fcn.004b3250
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 0x40]
call fcn.00405ecc
push eax
mov eax, dword [ebp - 0x30]
add eax, 0xe4
mov ecx, 1
mov edx, dword [0x4aef98]
call fcn.00406088
add esp, 4
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xe4]
call fcn.00405ecc
mov esi, eax
dec esi
test esi, esi
jl 0x4b3157
inc esi
xor ebx, ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xe4]
lea eax, [eax + ebx*4]
lea edx, [ebx + ebx*2]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx + 0x40]
mov edx, dword [ecx + edx*8]
call fcn.00405284
inc ebx
dec esi
jne 0x4b3136
cmp dword [ebp - 0x38], 0
je 0x4b3165
lea eax, [ebp - 0x38]
call fcn.0040676c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b3182
mov eax, dword [ebp - 0x30]
call fcn.004b2554
ret