Function at 0x4850f8
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x47
push 0
push 0
dec ecx
jne 0x485100
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404bf8
xor eax, eax
push ebp
push 0x4855df
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1fc]
xor eax, eax
call fcn.00402b38
mov eax, dword [ebp - 0x1fc]
lea edx, [ebp - 0x1f8]
call fcn.004093cc
mov edx, dword [ebp - 0x1f8]
lea eax, [ebp - 0x18]
mov ecx, 0x4855f8
call fcn.00404a54
xor edx, edx
push ebp
push 0x4855a5
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, dword [ebp - 0x18]
lea eax, [ebp - 0x1f4]
call fcn.00402ed4
mov eax, dword [ebp - 0x18]
call fcn.0040933c
test al, al
jne 0x48518f
lea eax, [ebp - 0x1f4]
call fcn.00402c64
call fcn.00402978
jmp 0x48519f
lea eax, [ebp - 0x1f4]
call fcn.00402c70
call fcn.00402978
mov eax, dword [ebp - 4]
call fcn.0040933c
test al, al
je 0x485587
xor edx, edx
push ebp
push 0x485580
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x42ff94]
call fcn.00430044
mov dword [ebp - 8], eax
mov dl, 0x20
lea eax, [ebp - 0x1f4]
call fcn.004033b4
call fcn.004033f0
call fcn.00402978
push 0x485610
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x485620
mov edx, 0x485630
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
push 0x485610
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x485644
mov edx, 0x485630
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
push 0x485654
push dword [ebp - 0x24]
push 0x48567c
push dword [ebp - 0x28]
push 0x485698
lea eax, [ebp - 0x200]
mov edx, 5
call fcn.00404ac8
mov edx, dword [ebp - 0x200]
mov eax, dword [0x487a08]
mov eax, dword [eax]
call fcn.00484e3c
test al, al
je 0x485517
xor eax, eax
mov dword [ebp - 0xc], eax
push 0x485610
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x208]
mov eax, dword [ebp - 0xc]
call fcn.00408e34
mov ecx, dword [ebp - 0x208]
lea eax, [ebp - 0x204]
mov edx, 0x4856bc
call fcn.00404a54
mov edx, dword [ebp - 0x204]
mov ecx, 0x4856cc
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
push 0x485610
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0xc]
call fcn.00408e34
mov ecx, dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
mov edx, 0x4856bc
call fcn.00404a54
mov edx, dword [ebp - 0x20c]
mov ecx, 0x4856dc
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
push 0x485610
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x218]
mov eax, dword [ebp - 0xc]
call fcn.00408e34
mov ecx, dword [ebp - 0x218]
lea eax, [ebp - 0x214]
mov edx, 0x4856bc
call fcn.00404a54
mov edx, dword [ebp - 0x214]
mov ecx, 0x4856e8
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
push 0x485610
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0xc]
call fcn.00408e34
mov ecx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
mov edx, 0x4856bc
call fcn.00404a54
mov edx, dword [ebp - 0x21c]
mov ecx, 0x4856fc
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x10]
mov edx, 0x485610
call fcn.00404b54
je 0x485505
mov eax, dword [ebp - 0x14]
mov edx, 0x485610
call fcn.00404b54
je 0x485505
xor eax, eax
push ebp
push 0x4854fb
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0040ad1c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x228]
mov eax, 0x485710
call fcn.0040b998
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x224]
mov edx, 0x48572c
call fcn.00404a54
mov edx, dword [ebp - 0x224]
lea eax, [ebp - 0x1f4]
call fcn.00404e24
call fcn.004033f0
call fcn.00402978
mov eax, dword [0x487a08]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.00484fdc
push 0x48573c
push dword [ebp - 0x10]
push 0x485750
push dword [ebp - 0x14]
lea eax, [ebp - 0x22c]
mov edx, 4
call fcn.00404ac8
mov edx, dword [ebp - 0x22c]
lea eax, [ebp - 0x1f4]
call fcn.00404e24
call fcn.004033f0
call fcn.00402978
push 0
mov eax, dword [ebp - 0x14]
call fcn.00404c08
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404c08
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
je 0x48549a
call fcn.0040ad1c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x230]
mov eax, 0x485710
call fcn.0040b998
lea eax, [ebp - 0x230]
mov edx, 0x48575c
call fcn.00404a10
mov edx, dword [ebp - 0x230]
lea eax, [ebp - 0x1f4]
call fcn.00404e24
call fcn.004033f0
call fcn.00402978
mov eax, dword [0x487a08]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00484ee8
jmp 0x4854f1
push 0x48572c
call fcn.0040ad1c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x238]
mov eax, 0x485710
call fcn.0040b998
push dword [ebp - 0x238]
push 0x485770
lea eax, [ebp - 0x234]
mov edx, 3
call fcn.00404ac8
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x1f4]
call fcn.00404e24
call fcn.004033f0
call fcn.00402978
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485505
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x3e9
jne 0x48525e
jmp 0x48555e
call fcn.0040ad1c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x23c]
mov eax, 0x485710
call fcn.0040b998
lea eax, [ebp - 0x23c]
mov edx, 0x485788
call fcn.00404a10
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x1f4]
call fcn.00404e24
call fcn.004033f0
call fcn.00402978
mov eax, dword [0x487a08]
mov eax, dword [eax]
call fcn.00484edc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x485587
mov eax, dword [ebp - 8]
call fcn.00403930
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4855ac
lea eax, [ebp - 0x1f4]
call fcn.00402f9c
call fcn.00402978
ret