Function at 0x404e94
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff9c8
mov dword [0x7d90c3], edi
mov dword [0x7d90ea], 0x155b7
mov dword [0x7d9060], edx
mov dword [esp - 0x12], esi
lea eax, [ebp - 0x17b]
push eax
call sub.advapi32.dll_GetCurrentHwProfileW
mov dword [0x7d9016], eax
xchg dword [0x7d908b], esi
xchg dword [0x7d908c], ebx
xchg dword [0x7d90c8], eax
mov dword [0x7d9097], ebx
sub dword [0x7d90c9], edx
mov dword [0x7d903a], 0x13e47
mov dword [esp - 0xc], esi
mov eax, 0x1dd
mov dword [0x7d90d9], edx
push edi
push 0
push eax
call fcn.004015ec
mov dword [0x7d901d], 0x1125b
mov dword [0x7d9108], eax
mov word [0x7d903f], 0x6260
test edx, edx
je 0x404f37
mov dword [0x7d90d2], esi
mov word [0x7d901b], 0xe4fc
jmp 0x404f53
mov dword [0x7d9014], ebx
mov dword [0x7d9066], ecx
xchg dword [0x7d9047], eax
mov dword [0x7d905b], 0x15573
test esi, esi
je 0x404f66
mov dword [esp - 0x12], edx
mov word [0x7d9027], 0x97c4
jmp 0x404f8b
mov dword [0x7d90ec], 0x11c6f
and dword [0x7d9105], edx
mov esi, 0x60
mov dword [0x7d9019], 0x17eed
mov dword [0x7d9010], ebx
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_ConvertThreadToFiber
test eax, eax
jne 0x404fb0
sub dword [0x7d90cf], ecx
inc ebx
mov edx, dword [0x7d908b]
mov dword [0x7d9104], ebx
xchg dword [0x7d9103], esi
mov dword [0x7d90c0], edx
mov byte [0x7d909a], 0xc8
mov byte [0x7d9024], 0x8d
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_ConvertThreadToFiber
test eax, eax
jne 0x40500c
mov dword [0x7d90ed], 0x11a59
mov dword [0x7d904a], esi
cmp bh, byte [esp + 0x1c]
jg 0x404ff9
mov byte [0x7d905b], 0xfd
mov dword [0x7d90ec], ebx
mov byte [0x7d9037], 0xbb
mov dword [0x7d90d5], ecx
lea eax, [ebp - 0x26d]
push eax
call sub.advapi32.dll_GetCurrentHwProfileW
test eax, eax
jne 0x405037
mov edi, 0x99
mov dword [0x7d90d8], edx
mov dword [0x7d9050], 0x10daa
mov dword [0x7d90d9], ebx
mov word [0x7d90f0], 0xac74
mov dword [0x7d90b2], 0x17e92
mov dword [0x7d90f3], eax
mov dword [esp - 0x28], edx
mov dword [0x7d907e], ecx
mov dword [0x7d908c], edi
mov dword [0x7d9095], ecx
mov dword [0x7d90dd], 0x1425b
push 0x7d90bb
push ebx
call fcn.00403648
mov ax, word [ebp - 0xa]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
mov byte [ebp - 0x89], 0
mov dword [0x7d90b8], 0x147e5
mov dword [0x7d9029], edi
mov ecx, 0x83
mov eax, 0x4056d0
mov dword [ebp - 0x10], eax
mov eax, 0x4056e4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0x4015d8
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0x11b5d
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_CopyFileExW
test eax, eax
jne 0x405110
mov dword [0x7d90be], eax
mov dword [0x7d90f7], ecx
test edx, edx
jne 0x405100
mov dword [0x7d9100], ecx
mov edi, eax
mov esi, dword [esp + 0x24]
mov dword [0x7d90da], 0x112d5
inc byte [ebp - 0x89]
cmp byte [ebp - 0x89], 1
jne 0x40508c
mov eax, 0x405704
mov dword [ebp - 0x28], eax
mov eax, 0x40572c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x4015d8
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 0x14030
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
call sub.kernel32.dll_CopyFileExW
test eax, eax
jne 0x405183
mov dword [0x7d9099], edx
mov word [0x7d901a], 0x1920
add dword [0x7d903f], edi
call fcn.00402da4
sub ebx, dword [0x7d9044]
mov dword [0x7d9052], eax
mov dword [0x7d90a3], esi
push 0x7d904d
push eax
push ecx
call fcn.004015ec
lea eax, [ebp - 0x35f]
push eax
call sub.advapi32.dll_GetCurrentHwProfileW
mov dword [0x7d90d6], 0x17855
test edi, edi
je 0x4051da
mov edx, 0xe5
and dword [0x7d90d3], edi
mov word [0x7d90fb], 0xde4f
mov dword [0x7d90cd], eax
mov dword [0x7d9021], edx
mov dword [0x7d9044], edi
sub dword [0x7d907d], ebx
mov byte [0x7d9022], 0x7c
lea edi, [0x7d9080]
mov dword [edi + 0x1c], 0x83
cmp byte [0x7d9016], 0x52
jge 0x405219
mov byte [0x7d90e5], 0xae
mov byte [0x7d9034], 0x1b
jmp 0x405226
mov dword [0x7d9086], esi
mov byte [0x7d90e0], 0x2d
lea eax, [ebp - 0x451]
push eax
call sub.advapi32.dll_GetCurrentHwProfileW
mov dword [0x7d902a], 0x110a8
mov dword [0x7d90f3], esi
mov dword [0x7d906a], 0x148ac
call fcn.00402f5c
mov dword [0x7d905f], edi
lea edx, [0x7d905e]
mov dword [edx + 0x24], 0x31
mov dword [0x7d9045], 0x169c8
lea ebx, [0x7d9073]
sub dword [ebx + 0x10], 1
mov dword [0x7d90b5], edx
push edx
mov ecx, 0x7d90bd
call fcn.004015ec
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
call sub.kernel32.dll_ConvertThreadToFiber
test eax, eax
je 0x4052b0
mov ecx, 0x37
mov word [0x7d9051], 0xd14d
mov byte [0x7d90b6], 0x71
xor eax, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
call sub.kernel32.dll_ConvertThreadToFiber
and edi, 0x7c
mov word [0x7d90e8], 0x9f53
mov dword [0x7d909c], 0x16d2c
dec byte [0x7d910a]
mov dword [0x7d907f], edx
mov ax, word [ebp - 0x46]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
mov dword [0x7d90ed], ecx
mov dword [0x7d90ea], eax
dec esi
mov dword [0x7d90b0], 0x145be
mov dword [0x7d9106], eax
mov dword [0x7d90d4], 0x15e1d
mov dword [0x7d9075], eax
mov eax, 0x405740
mov dword [ebp - 0x4c], eax
mov eax, 0x405750
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 0x4015d8
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x60], 0x18605
mov eax, dword [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x4c]
push eax
call sub.kernel32.dll_CopyFileExW
test eax, eax
je 0x40537a
mov dword [0x7d9045], eax
mov dword [0x7d905b], ebx
mov eax, edx
mov dword [0x7d9023], ebx
mov dword [esp - 0xc], edi
mov word [0x7d90f0], 0xac74
mov dword [0x7d90b2], 0x17e92
mov dword [0x7d90f3], eax
mov dword [esp - 0x28], edx
mov dword [0x7d907e], ecx
call fcn.004015ec
and dword [0x7d90df], edx
add dword [0x7d9061], edi
mov dword [0x7d90a3], edx
cmp word [ebp + 0x18], dx
jl 0x4053d1
dec dword [0x7d90e2]
lea ecx, [0x7d9099]
mov dword [ecx + 4], esi
mov dword [0x7d9094], edi
jmp 0x4053d7
mov dword [0x7d90fa], ebx
lea eax, [ebp - 0x543]
push eax
call sub.advapi32.dll_GetCurrentHwProfileW
test eax, eax
je 0x40540f
lea esi, [0x7d90be]
add dword [esi], 0xb5
mov word [0x7d905f], 0x749b
and dword [0x7d902a], eax
lea edi, [0x7d9018]
mov dword [edi + 0x12], 0xb9
call fcn.004047b4
push edi
push esi
mov ecx, 0x7d90bb
call fcn.00402f5c
mov ax, word [ebp - 0x62]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
call fcn.00402294
push 1
push ebx
push 0
call fcn.00402f5c
call fcn.00403648
mov dword [0x7d907b], 0x17e7f
mov dword [0x7d90ed], 0x11087
mov dword [0x7d9085], ebx
mov eax, 0x405774
mov dword [ebp - 0x68], eax
mov eax, 0x405794
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0x4015d8
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x7c], 0x13dd3
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
call sub.kernel32.dll_CopyFileExW
test eax, eax
je 0x4054e0
cmp eax, 0xffffffff
je 0x4054be
mov dword [0x7d90d9], ecx
mov dword [0x7d906d], 0x10399
mov dword [0x7d9088], ebx
sub dword [0x7d902d], esi
mov dword [0x7d9063], edi
mov dword [0x7d9098], 0x13a08
dec dword [0x7d9074]
inc dword [0x7d90e8]
call fcn.004047b4
cmp edi, 0xffffffff
jle 0x405508
sub dword [0x7d909f], ecx
mov dword [0x7d90ce], esi
mov dword [0x7d903f], 0x116a6
mov dword [0x7d9104], esi
jmp 0x40552b
mov dword [0x7d90da], 0x17439
mov dword [0x7d90fd], eax
lea edi, [0x7d90a7]
mov dword [edi + 4], 0x2a
mov dword [0x7d9069], eax
mov dword [0x7d9109], ebx
cmp byte [0x7d9013], 0
jl 0x405556
mov dword [0x7d905c], esi
mov dword [0x7d90c8], ecx
mov dword [esp - 0x10], esi
mov dword [0x7d909c], 0x10ede
jmp 0x40556c
mov dword [0x7d9021], 0x10ccb
mov dword [0x7d90f6], ecx
mov dword [0x7d9062], edi
xchg dword [0x7d90a3], esi
mov dword [0x7d902d], edi
xor eax, eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
call sub.kernel32.dll_ConvertThreadToFiber
test eax, eax
je 0x4055a6
mov dword [0x7d90a1], ecx
sub dword [0x7d906f], ebx
mov dword [0x7d9061], 0x16bb7
mov dword [0x7d90ac], ebx
mov dword [0x7d9036], edi
mov dword [0x7d9021], ebx
add dword [0x7d9047], eax
lea ecx, [0x7d909c]
add dword [ecx + 4], eax
cmp word [ebp + 0x24], ax
jge 0x4055df
mov word [0x7d9029], 0x6c52
mov dword [0x7d9037], esi
lea ecx, [0x7d904b]
and dword [ecx + 0xc], eax
mov dword [0x7d909f], edi
mov dword [0x7d901e], 0x12d7e
xchg dword [0x7d90ed], edi
mov dword [0x7d909c], ecx
lea eax, [ebp - 0x635]
push eax
call sub.advapi32.dll_GetCurrentHwProfileW
test eax, eax
jne 0x40561c
mov dword [esp - 0x20], edi
sub dword [0x7d9109], esi
mov byte [0x7d9067], 0xc9
call fcn.00402da4
mov dword [0x7d908c], edi
mov dword [0x7d9095], ecx
mov dword [0x7d90dd], 0x1425b
mov dword [0x7d9081], edi
mov dword [0x7d9047], edx
cmp dword [0x7d905d], ecx
je 0x405661
mov dword [esp - 0x28], ebx
mov dword [0x7d90d5], edi
mov dword [0x7d9102], 0x10b5a
jmp 0x405667
xchg dword [0x7d90f3], ebx
mov eax, edx
mov word [0x7d9035], 0xce05
mov ax, word [ebp - 0x82]
push eax
call sub.kernel32.dll_GlobalDeleteAtom
call fcn.004047b4
xor eax, eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
push eax
call sub.kernel32.dll_ConvertThreadToFiber
mov dword [0x7d90a0], 0x14c39
mov dword [0x7d90f2], ecx
mov dword [0x7d9051], edi
add dword [0x7d90ff], edx
mov dword [0x7d9082], ebx
call fcn.00402f5c
mov eax, 0x7d9023
call fcn.00402f5c
mov esp, ebp
pop ebp
ret