Function at 0x4e1134
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff9c
push ebx
xor ebx, ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.0040529c
xor eax, eax
push ebp
push 0x4e16be
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00404dd0
xor eax, eax
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov byte [ebp - 0xd], 0
xor eax, eax
push ebp
push 0x4e167c
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x7063b0], 0
je 0x4e11c9
push 0
push 1
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
lea eax, [ebp - 0x34]
call fcn.00404dd0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4b8e3c]
call fcn.004b8f90
mov dword [ebp - 0x30], eax
mov cl, 1
mov edx, 0x4e16e4
mov eax, dword [ebp - 0x30]
call fcn.004b9054
test al, al
je 0x4e161a
lea eax, [ebp - 0x4c]
call fcn.004e10ac
mov eax, dword [ebp - 0x4c]
push eax
lea eax, [ebp - 0x50]
call fcn.0040bb14
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 0x2c]
pop ecx
call fcn.00405100
mov eax, dword [ebp - 0x2c]
call fcn.0040b654
test al, al
jne 0x4e1245
lea eax, [ebp - 0x54]
call fcn.004e10ac
mov eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x58]
call fcn.004c2294
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 0x2c]
pop ecx
call fcn.00405100
mov eax, dword [ebp - 0x2c]
call fcn.0040b654
test al, al
je 0x4e127e
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00404e24
mov byte [ebp - 0xd], 1
cmp byte [0x7063b0], 0
je 0x4e12c9
push 0
push 2
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
jmp 0x4e12c9
lea ecx, [ebp - 0x34]
mov edx, 0x4e1704
mov eax, dword [ebp - 0x30]
call fcn.004b95d0
test al, al
je 0x4e12c9
mov eax, dword [ebp - 0x34]
call fcn.0040b654
test al, al
je 0x4e12c9
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x34]
call fcn.00404e68
mov byte [ebp - 0xd], 1
cmp byte [0x7063b0], 0
je 0x4e12c9
push 0
push 3
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
cmp byte [ebp - 0xd], 0
je 0x4e135a
mov byte [ebp - 0xd], 0
mov ecx, 2
mov edx, dword [ebp - 0x14]
mov eax, 0x200
call fcn.004b5f74
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4e135a
mov dl, 1
mov eax, dword [0x41c770]
call fcn.00403f74
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
call fcn.004218ec
mov eax, dword [ebp - 0x1c]
call fcn.004bfccc
cmp eax, 0x5b5fc9b8
sete byte [ebp - 0xd]
lea eax, [ebp - 0x24]
call fcn.004b5834
lea eax, [ebp - 0x1c]
call fcn.004b5834
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
call fcn.00404e24
cmp byte [0x7063b0], 0
je 0x4e135a
push 0
push 4
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
cmp byte [ebp - 0xd], 0
jne 0x4e1612
cmp byte [0x7063b0], 0
je 0x4e1380
push 0
push 5
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
mov dl, 1
mov eax, dword [0x41c770]
call fcn.00403f74
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [0x41c770]
call fcn.00403f74
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x5c]
mov eax, 0x4e1714
call fcn.004b74f0
mov eax, dword [ebp - 0x5c]
push eax
push 0xa
mov ecx, dword [0x716718]
mov dl, 1
mov eax, dword [0x41c814]
call fcn.00421aa8
mov dword [ebp - 0x18], eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.004211f0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.004218ec
mov eax, dword [ebp - 0x1c]
call fcn.004bfccc
cmp eax, 0xd0e91693
je 0x4e13f6
call fcn.0040481c
jmp 0x4e1683
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.004211f0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
call fcn.004218ec
mov eax, dword [ebp - 0x1c]
call fcn.00421204
dec eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x38]
add dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x38]
test eax, eax
jl 0x4e145d
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x40]
mov al, byte [eax]
not al
mov edx, dword [ebp - 0x44]
mov byte [edx], al
inc dword [ebp - 0x40]
dec dword [ebp - 0x44]
inc dword [ebp - 0x3c]
dec dword [ebp - 0x48]
jne 0x4e1443
lea eax, [ebp - 0x1c]
call fcn.004b5834
lea eax, [ebp - 0x18]
call fcn.004b5834
mov eax, dword [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004e0f04
mov eax, dword [ebp - 0xc]
cmp dword [eax], 0
je 0x4e1612
cmp byte [0x7063b0], 0
je 0x4e14a6
push 0
push 6
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
mov eax, 0xfffffffb
call fcn.004b5744
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
xor ecx, ecx
mov eax, 0x201
call fcn.004b5f74
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4e1612
cmp byte [0x7063b0], 0
je 0x4e14e0
push 0
push 7
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
push 0
push 0
mov eax, dword [ebp - 0x20]
call fcn.004211f0
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00421890
lea eax, [ebp - 0x20]
call fcn.004b5834
lea eax, [ebp - 0x24]
call fcn.004b5834
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov edx, 1
call fcn.0040b76c
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
mov ecx, 2
mov eax, 0x202
call fcn.004b5f74
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4e1612
cmp byte [0x7063b0], 0
je 0x4e1553
push 0
push 8
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
mov dl, 1
mov eax, dword [0x41c770]
call fcn.00403f74
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004218ec
mov eax, dword [ebp - 0x1c]
call fcn.004bfccc
cmp eax, 0x5b5fc9b8
je 0x4e1586
call fcn.0040481c
jmp 0x4e1683
lea eax, [ebp - 0x1c]
call fcn.004b5834
lea eax, [ebp - 0x24]
call fcn.004b5834
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov edx, dword [ebp - 0x34]
call fcn.004051f8
je 0x4e15d3
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx]
mov edx, 0x4e1704
mov eax, dword [ebp - 0x30]
call fcn.004b920c
cmp byte [0x7063b0], 0
je 0x4e15d3
push 0
push 9
mov edx, 0x4e16d4
mov eax, 0xfffffffb
call fcn.004b5744
lea eax, [ebp - 0x60]
call fcn.004e10ac
mov eax, dword [ebp - 0x60]
push eax
lea eax, [ebp - 0x64]
call fcn.004b8430
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 0x14]
pop ecx
call fcn.00405100
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
call fcn.004052ac
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
call fcn.004052ac
push eax
call sub.kernel32.dll_CopyFileA
mov byte [ebp - 0xd], 1
mov eax, dword [ebp - 0x30]
call fcn.004b9158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e1683
cmp dword [ebp - 0x30], 0
je 0x4e1635
mov eax, dword [ebp - 0x30]
call fcn.00403fa4
cmp dword [ebp - 0x1c], 0
je 0x4e1643
mov eax, dword [ebp - 0x1c]
call fcn.00403fa4
cmp dword [ebp - 0x20], 0
je 0x4e1651
mov eax, dword [ebp - 0x20]
call fcn.00403fa4
cmp dword [ebp - 0x18], 0
je 0x4e165f
mov eax, dword [ebp - 0x18]
call fcn.00403fa4
cmp dword [ebp - 0x24], 0
je 0x4e166d
mov eax, dword [ebp - 0x24]
call fcn.00403fa4
cmp byte [ebp - 0xd], 0
jne 0x4e167b
mov eax, dword [ebp - 0xc]
call fcn.00404dd0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e16c5
lea eax, [ebp - 0x64]
mov edx, 7
call fcn.00404df4
lea eax, [ebp - 0x34]
call fcn.00404dd0
lea eax, [ebp - 0x2c]
call fcn.00404dd0
lea eax, [ebp - 0x14]
call fcn.00404dd0
lea eax, [ebp - 8]
call fcn.00404dd0
ret