Function at 0x40f050
Capabilities:
Copy file

Disassembly:
enter 0x534, 0
push ebx
push ecx
push edx
mov eax, 0
mov dword [ebp - 0xc], eax
mov edi, 0
mov dword [0x4285f4], edi
mov eax, 0
mov dword [0x4285f0], eax
mov al, byte [0x425c01]
mov byte [0x425046], al
movzx eax, byte [0x427f18]
imul eax, eax, 0x79
lea esi, [eax + 0x45851f]
lea edi, [ebp - 0x334]
call fcn.00401b30
mov esi, 0x4284f0
call fcn.00401af0
mov edi, 0x4283e4
lea esi, [ebp - 0x334]
call fcn.00401940
movzx eax, byte [0x427f18]
imul eax, eax, 0x79
lea esi, [eax + 0x45851f]
lea edi, [ebp - 0x534]
call fcn.00401b30
mov esi, 0x42814b
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x434]
call fcn.00401b30
mov esi, 0x428152
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x334]
call fcn.00401b30
mov esi, 0x428157
call fcn.00401af0
lea edi, [ebp - 0x232]
lea esi, [ebp - 0x334]
call fcn.00401940
mov esi, 0x4283e4
lea edi, [ebp - 0x334]
call fcn.00401b30
mov esi, 0x428159
call fcn.00401af0
mov edi, 0x4283e4
lea esi, [ebp - 0x334]
call fcn.00401940
push 0x43074c
push 0x1f
push 0x42815b
push 0
call fcn.00403350
push 0x4283e4
push 0
call fcn.00402790
push 7
push 0x42817a
push 0
call fcn.00403350
push dword [ebp + 0x14]
push 0
call fcn.00404230
call fcn.00403330
push 0x43074c
push 0x15
push 0x428181
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
push 0xe
push 0x428196
push 0
call fcn.00403350
lea eax, [ebp - 0x232]
push eax
push 0
call fcn.00402790
call fcn.00403330
push 0
lea eax, [ebp - 0x231]
push eax
push 0x4283e5
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40f202
push 0x43074c
push 0x22
push 0x4281a4
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
call fcn.00403330
push 0x43074c
push 0x18
push 0x4281c6
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
call fcn.00403330
lea eax, [ebp - 0x12a]
push eax
push 0x4283e4
call fcn.00401e60
lea ebx, [ebp - 0x12a]
push ebx
push 1
call fcn.0040bba0
mov al, byte [0x425c01]
mov byte [0x425046], al
push 0x43074c
push 0x1c
push 0x4281de
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
call fcn.00403330
mov dword [ebp - 0x12e], pe_nt_image_headers32
push 0x43074c
push 0x15
push 0x4281fa
push 0
call fcn.00403350
push dword [ebp - 0x12e]
push 0
call fcn.00404230
push 8
push 0x42820f
push 0
call fcn.00403350
push dword [0x4284ec]
push 0
call fcn.00404230
push 0x10
push 0x428217
push 0
call fcn.00403350
push pe_nt_image_headers32
push 0
call fcn.00404230
push 7
push 0x428227
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
call fcn.00403330
push 0x43074c
push 0x15
push 0x42822e
push 0
call fcn.00403350
push dword [ebp + 8]
push 0
call fcn.00404230
push 5
push 0x428243
push 0
call fcn.00403350
push dword [0x425b93]
push 0
call fcn.00404230
push 6
push 0x428248
push 0
call fcn.00403350
mov eax, dword [0x425b93]
imul eax, eax, 0x100
push eax
push 0
call fcn.00404230
call fcn.00403330
lea eax, [ebp - 0x12a]
push eax
mov ebx, dword [0x425b93]
imul ebx, ebx, 0x100
push ebx
call fcn.0040fc90
call fcn.00402770
test eax, eax
je 0x40f3a6
push 0x43074c
push 0x1b
push 0x42824e
push 0
call fcn.00403350
push dword [ebp + 8]
push 0
call fcn.00404230
call fcn.00403330
mov eax, 0
mov dword [ebp - 0x132], eax
jmp 0x40f43b
push 0x43074c
push 0x19
push 0x428269
push 0
call fcn.00403350
push dword [ebp - 0x12e]
push 0
call fcn.00404230
push 8
push 0x428282
push 0
call fcn.00403350
push dword [0x4284ec]
push 0
call fcn.00404230
push 0x10
push 0x42828a
push 0
call fcn.00403350
push pe_nt_image_headers32
push 0
call fcn.00404230
push 7
push 0x42829a
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
call fcn.00403330
lea eax, [ebp - 0x12a]
push eax
push dword [0x428306]
push dword [ebp - 0x12e]
push 1
call fcn.0040e1d0
mov dword [ebp - 0x132], eax
mov eax, dword [ebp - 0x12e]
cmp dword [ebp - 0x132], eax
je 0x40f46e
push 0x43074c
push 0x17
push 0x4282a1
push 0
call fcn.00403350
push dword [ebp - 0x132]
push 0
call fcn.00404230
call fcn.00403330
lea eax, [ebp - 0x12a]
push eax
call fcn.00401d90
call fcn.00402770
test eax, eax
je 0x40f4ac
mov esi, 0x4282b8
lea edi, [ebp - 0x334]
call fcn.00401b30
mov esi, 0x4284f0
call fcn.00401af0
mov eax, edi
push eax
call fcn.004032a0
push 0
call fcn.00404e20
call fcn.0040fba0
mov dword [ebp + 0x14], 2
mov eax, dword [0x425b93]
mov dword [ebp + 8], eax
mov al, byte [0x42868a]
test al, al
jne 0x40f4ee
call fcn.00406700
cmp dword [0x426549], 0
je 0x40f4ee
push dword [ebp + 8]
push dword [ebp + 0x14]
push dword [0x425b8f]
push dword [0x426549]
call sub.user32.dll_PostMessageA
push 0x43074c
push 0x1c
push 0x4282d3
push 0
call fcn.00403350
call fcn.00403330
call fcn.0040f540
push 0x43074c
push 0x17
push 0x4282ef
push 0
call fcn.00403350
push dword [ebp + 8]
push 0
call fcn.00404230
call fcn.00403330
mov eax, dword [ebp - 0xc]
pop edx
pop ecx
pop ebx
leave
ret 0x10