Function at 0x405840
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x158
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xb4]
lea esi, [entry0]
mov dword [ebp - 0x14], 0
mov edi, dword [ebp - 0x10]
and edi, 0
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x10]
mov byte [ebp - 0x2d], 0xbc
mov dword [ebp - 0xbc], 1
mov ebx, dword [ebp - 0xbc]
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x5c]
mov word [ebp - 0x42], 0x6ffe
mov dword [ebp - 0x68], 0x100000
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x50], 0x100000
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xc4], 0x10
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], 0xa
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], 8
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x90], 0x400
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x6c], 4
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x40], 0x80000000
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x94], 0x800
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x94]
mov word [ebp - 0x86], 0x14b5
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x64], eax
mov dword [0x409180], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [ebp - 0x110]
mov dword [esp + 8], ecx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x138], edi
call fcn.00401540
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x13c], eax
mov al, byte [ebp - 0x2d]
or al, 0x97
mov byte [ebp - 0x2d], al
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x64]
mov si, word [ebp - 0x86]
or si, 0x79bf
mov word [ebp - 0x86], si
mov edi, dword [ebp - 0x28]
xor edi, 0
mov dword [ebp - 0x28], edi
cmp ecx, edx
jge 0x405bf6
mov eax, esp
mov ecx, dword [ebp - 0x108]
mov dword [eax + 4], ecx
mov dword [eax], str.D7yHaaOgny2TMS
mov eax, dword [sym.imp.USER32.dll_CharLowerBuffA]
call eax
sub esp, 8
lea ecx, [ebp - 0x14]
mov edx, 0
lea esi, [ebp - 0x2d]
mov edi, dword [ebp - 0x54]
xor edi, esi
mov dword [ebp - 0x54], edi
mov esi, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x54]
xor edx, ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0xf8]
cmp esi, ecx
mov dword [ebp - 0x140], eax
jne 0x405b4b
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x64], eax
jne 0x405af7
mov eax, dword [sym.imp.KERNEL32.DLL_FreeConsole]
call eax
mov dword [ebp - 0x144], eax
call fcn.00405d50
mov eax, 0
mov ecx, dword [ebp - 0x38]
add ecx, 0
sub eax, dword [ebp - 0x14]
mov word [ebp - 0x42], 0x6d58
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], ecx
jmp 0x405c3b
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x14]
and edx, ecx
mov dword [ebp - 0x28], edx
mov ecx, esp
mov edx, dword [ebp - 0x124]
mov dword [ecx + 0x10], edx
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x128]
mov dword [ecx + 8], eax
mov esi, dword [ebp - 0x12c]
mov dword [ecx + 4], esi
mov edi, dword [ebp - 0x130]
mov dword [ecx], edi
mov dword [ecx + 0x14], 0
mov ecx, dword [sym.imp.KERNEL32.DLL_GetCalendarInfoW]
call ecx
sub esp, 0x18
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], eax
mov ax, 0x76f0
mov cx, 0
lea edx, [ebp - 0x14]
mov esi, dword [ebp - 0x28]
sub cx, word [ebp - 0x42]
mov word [ebp - 0x42], cx
sub edx, esi
sub ax, word [ebp - 0x86]
mov esi, esp
mov edi, dword [ebp - 0x114]
mov dword [esi + 0x14], edi
mov ebx, dword [ebp - 0x118]
mov dword [esi + 0xc], ebx
mov ecx, dword [ebp - 0x11c]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0x120]
mov dword [esi], ecx
mov dword [esi + 0x10], str.srBSLAGoFp
mov dword [esi + 8], str.02E5YYKm
mov esi, dword [sym.imp.KERNEL32.DLL_CompareStringA]
mov dword [ebp - 0x148], edx
mov word [ebp - 0x14a], ax
call esi
sub esp, 0x18
mov dword [ebp - 0x4c], eax
mov ax, word [ebp - 0x14a]
mov word [ebp - 0x42], ax
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x14], ecx
mov eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
and edx, 0
mov dword [ebp - 0x38], edx
sub eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x134]
add ecx, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], ecx
jmp 0x405a1a
mov eax, esp
mov ecx, dword [ebp - 0x10c]
mov dword [eax + 8], ecx
mov dword [eax + 4], str.E:_ftML81PHbsvcivCPPaBqffIpppDFpkje56Rm2YSGO
mov dword [eax], str.E:_aMLw4lcdp0UUCr79wSjSqUNlmD7q9ZRoJlU7zQWNfE
mov eax, dword [sym.imp.KERNEL32.DLL_CopyFileW]
call eax
sub esp, 0xc
mov dl, 0
mov byte [ebp - 0x2d], 0x5d
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
add eax, 0
sub dl, byte [ebp - 0x2d]
mov byte [ebp - 0x2d], dl
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x42]
mov cx, word [ebp - 0x42]
mov dx, ax
or cx, dx
mov word [ebp - 0x42], cx
mov cx, word [ebp - 0x42]
mov dx, ax
sub dx, cx
mov word [ebp - 0x42], dx
mov eax, dword [ebp - 0x60]
add esp, 0x158
pop esi
pop edi
pop ebx
pop ebp
ret