Function at 0x300fdbda
Capabilities:
Copy file
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcf8
mov eax, dword [0x3002450c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push edi
xor ebx, ebx
mov dword [ebp - 0xcb4], eax
mov byte [ebp - 0xcad], 1
xor edi, edi
push esi
mov eax, dword [ebp - 0xcb4]
cmp eax, ebx
je 0x300fdc18
mov al, byte [eax]
cmp al, 1
je 0x300fdcc0
mov dword [ebp - 0xccc], ebx
mov dword [ebp - 0xcd0], ebx
call dword [edi + 0x30003ea0]
mov esi, eax
cmp esi, ebx
jne 0x300fdc3d
push ebx
push 0x326b6661
call fcn.3010aa60
jmp 0x300fdc97
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
test al, al
jne 0x300fdc50
push ebx
push 0x326b6662
jmp 0x300fdc81
push dword [ebp - 0xcb4]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0xcd0]
push edx
lea edx, [ebp - 0xccc]
push edx
push esi
push 0x300fc684
push eax
push ecx
call fcn.300fad09
test al, al
jne 0x300fdc8c
push ebx
push 0x326b6663
call fcn.3010aa60
mov byte [ebp - 0xcad], bl
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
test al, al
jne 0x300fdca8
push ebx
push 0x326b6664
call fcn.3010aa60
mov byte [ebp - 0xcad], bl
cmp esi, ebx
je 0x300fdcb4
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
add edi, 4
cmp edi, 0x14
jb 0x300fdc04
mov edi, 0x3022f248
mov dword [ebp - 0xcb8], ebx
mov eax, dword [ebp - 0xcb4]
cmp eax, ebx
je 0x300fdcdb
mov al, byte [eax]
cmp al, 1
je 0x300fdd5a
push 0x20
call fcn.301089da
cmp eax, ebx
je 0x300fdcf2
push edi
mov ecx, eax
call fcn.300fc128
mov esi, eax
jmp 0x300fdcf4
xor esi, esi
cmp esi, ebx
jne 0x300fdd0b
push ebx
push 0x326b6665
call fcn.3010aa60
mov byte [ebp - 0xcad], bl
jmp 0x300fdd43
mov ecx, esi
call fcn.300fc1c5
test eax, eax
jge 0x300fdd1e
push ebx
push 0x38706b31
jmp 0x300fdd35
push dword [ebp - 0xcb4]
mov ecx, esi
call fcn.300fc2f8
test eax, eax
jge 0x300fdd3a
push ebx
push 0x38706b32
call fcn.3010aa60
push 1
mov ecx, esi
call fcn.300fcb6e
add dword [ebp - 0xcb8], 0xc
add edi, 0xc
cmp dword [ebp - 0xcb8], 0xc
jb 0x300fdccb
mov esi, 0x206
push esi
lea eax, [ebp - 0x282]
push ebx
push eax
mov word [ebp - 0x284], bx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edi, 0x104
push edi
lea eax, [ebp - 0x284]
push eax
call fcn.300fa721
call fcn.300fd99b
test al, al
jne 0x300fdd9d
push ebx
push 0x36347378
call fcn.3010aa60
push esi
lea eax, [ebp - 0xcaa]
push ebx
push eax
mov word [ebp - 0xcac], bx
call sub.MSVCR80.dll_memset
push esi
lea eax, [ebp - 0xaa2]
push ebx
push eax
mov word [ebp - 0xaa4], bx
call sub.MSVCR80.dll_memset
add esp, 0x18
push edi
lea eax, [ebp - 0xcac]
push eax
call fcn.3010db84
test eax, eax
jne 0x300fdde6
push ebx
push 0x35386d6e
call fcn.3010aa60
push 0x300041c0
lea eax, [ebp - 0x284]
push eax
push 0x300027c0
lea eax, [ebp - 0xaa4]
push edi
push eax
call fcn.300ee78d
add esp, 0x14
test eax, eax
push ebx
jge 0x300fde13
push 0x35386d6f
jmp 0x300fde31
lea eax, [ebp - 0xaa4]
push eax
lea eax, [ebp - 0xcac]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x300fde36
push ebx
push 0x35386d70
call fcn.3010aa60
push 0x63
lea eax, [ebp - 0x7b]
push ebx
push eax
mov byte [ebp - 0x7c], bl
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0x7c]
push eax
push 0x30277550
call fcn.30129f9b
lea eax, [ebp - 0xcc4]
push eax
lea eax, [ebp - 0xcbc]
push eax
lea eax, [ebp - 0xcc8]
push eax
lea eax, [ebp - 0xcc0]
push eax
mov dword [ebp - 0xcc0], ebx
mov dword [ebp - 0xcc8], ebx
mov dword [ebp - 0xcbc], ebx
mov dword [ebp - 0xcc4], ebx
call fcn.30110e05
push dword [ebp - 0xcc4]
lea eax, [ebp - 0x18]
push dword [ebp - 0xcbc]
push dword [ebp - 0xcc8]
push dword [ebp - 0xcc0]
push 0x300041b4
push 0x14
push eax
call fcn.300fd170
add esp, 0x1c
test eax, eax
jge 0x300fdecb
push ebx
push 0x33766467
jmp 0x300fdfcb
mov eax, dword [0x3022e510]
mov ecx, dword [0x3022e50c]
mov dword [ebp - 0xcd8], eax
lea eax, [ebp - 0x7c]
mov dword [ebp - 0xcd4], eax
mov eax, dword [0x3022e514]
mov dword [ebp - 0xce0], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0xcdc], eax
mov eax, dword [0x3022e508]
mov dword [ebp - 0xcf8], eax
lea eax, [ebp - 0xcd8]
mov dword [ebp - 0xcf4], eax
xor eax, eax
inc eax
push esi
mov dword [ebp - 0xcf0], eax
mov dword [ebp - 0xce4], eax
mov dword [ebp - 0xcec], ecx
lea eax, [ebp - 0x48a]
lea ecx, [ebp - 0xce0]
push ebx
push eax
mov dword [ebp - 0xce8], ecx
mov word [ebp - 0x48c], bx
call sub.MSVCR80.dll_memset
push esi
lea eax, [ebp - 0x89a]
push ebx
push eax
mov word [ebp - 0x89c], bx
call sub.MSVCR80.dll_memset
push 2
lea eax, [ebp - 0xcf8]
push eax
lea eax, [ebp - 0x48c]
push edi
push eax
call fcn.30110727
add esp, 0x28
test eax, eax
je 0x300fdfc5
lea eax, [ebp - 0x48c]
push eax
call fcn.3010ad76
push eax
lea eax, [ebp - 0x284]
push eax
push 0x300027c0
lea eax, [ebp - 0x89c]
push edi
push eax
call fcn.300ee78d
add esp, 0x14
test eax, eax
jl 0x300fdfbd
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x48c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x300fdfd0
push ebx
push 0x33766468
jmp 0x300fdfcb
push ebx
push 0x33766469
call fcn.3010aa60
push esi
lea eax, [ebp - 0x692]
push ebx
push eax
mov word [ebp - 0x694], bx
call sub.MSVCR80.dll_memset
push 0x30003eb4
lea eax, [ebp - 0x284]
push eax
push 0x300027c0
lea eax, [ebp - 0x694]
push edi
push eax
call fcn.300ee78d
add esp, 0x20
cmp eax, ebx
pop esi
jge 0x300fe01d
push 0x32743268
push eax
push 0x30004190
call fcn.300f2d54
jmp 0x300fe049
push dword [ebp - 0xcb4]
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.300f20c6
test al, al
jne 0x300fe04f
push 0x32743269
push 0x30004170
call fcn.300f2d34
mov byte [ebp - 0xcad], bl
call fcn.300fd051
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0xcad]
pop edi
xor ecx, ebp
pop ebx
call fcn.30136bd1
leave
ret 4