Function at 0x1004ac20
Capabilities:
Copy file
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x102500dd
push eax
mov eax, dword [0x102f7658]
mov dword fs:[0], esp
sub esp, 0xa10
push esi
xor esi, esi
cmp eax, esi
je 0x1004ac68
mov eax, dword [esp + 0xa2c]
push eax
push str.CMailControlHelper::LogMail__________08x_
push str.maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x14
push ebx
push ebp
push edi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x202]
mov word [esp + 0x200], si
mov word [esp + 0x408], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x40a]
mov word [esp + 0x610], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x612]
mov ebp, dword [esp + 0xa34]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x81a]
mov word [esp + 0x818], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp]
mov dword [esp + 0x18], esi
cmp eax, esi
je 0x1004b5e9
lea ecx, [esp + 0x34]
call fcn.1004b690
mov edi, dword [esp + 0xa30]
lea ecx, [esp + 0x34]
push ecx
mov ecx, edi
mov dword [esp + 0xa2c], esi
call fcn.10050780
lea edx, [esp + 0x3c]
lea eax, [esp + 0x10]
push edx
push eax
call fcn.1009d7a0
add esp, 8
mov eax, dword [esp + 0x84]
mov byte [esp + 0xa28], 1
cmp eax, esi
jne 0x1004ad3c
mov eax, dword [ebp + 0x10]
mov dword [ebp + 8], esi
and al, 0xfe
mov dword [ebp + 0x10], eax
mov edx, dword [esp + 0x10]
push 2
lea ecx, [esp + 0x204]
push 0x104
push ecx
push edx
call fcn.1004a6a0
add esp, 0x10
test eax, eax
je 0x1004b5a3
mov ecx, dword [esp + 0x10]
push 5
lea eax, [esp + 0x40c]
push 0x104
push eax
push ecx
call fcn.1004a6a0
add esp, 0x10
test eax, eax
je 0x1004b5a3
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x614]
push 0x104
push edx
push eax
call fcn.1004a6a0
add esp, 0x10
test eax, eax
je 0x1004b5a3
mov edx, dword [esp + 0x10]
push 3
lea ecx, [esp + 0x81c]
push 0x104
push ecx
push edx
call fcn.1004a6a0
add esp, 0x10
test eax, eax
je 0x1004b5a3
lea eax, [esp + 0x20]
mov ecx, edi
push eax
call fcn.1004c420
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [esp + 0x200]
push esi
push ecx
push eax
call edi
test eax, eax
lea ecx, [esp + 0x20]
sete bl
call fcn.10083560
mov eax, dword [0x102f7658]
test bl, bl
jne 0x1004b4ca
cmp eax, esi
je 0x1004ae38
mov edx, dword [esp + 0x84]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 4]
push edx
mov edx, dword [ebp]
push eax
push ecx
push edx
push str.CMailControlHelper::LogMail_1___lu____lu____08x____lu_
push str.maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x20
push 0x102e269c
lea ecx, [esp + 0x18]
call fcn.10082dc0
mov eax, dword [ebp + 0xc]
mov byte [esp + 0xa28], 2
cmp eax, esi
je 0x1004aea3
mov eax, dword [esp + 0x78]
lea ecx, [esp + 0x14]
push eax
push str.Ignore_text_content___lu_bytes_.
push ecx
call fcn.100864e0
mov eax, dword [0x102f7658]
add esp, 0xc
cmp eax, esi
je 0x1004ae8e
push str.CMailControlHelper::LogMail__not_log_Body__
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x10
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x200]
push edx
push eax
call fcn.1004ab00
add esp, 8
lea ecx, [esp + 0x154]
call fcn.100b3110
lea ecx, [esp + 0x200]
mov byte [esp + 0xa28], 3
push ecx
lea ecx, [esp + 0x158]
call fcn.100b35c0
test eax, eax
je 0x1004b4dc
lea edx, [esp + 0x408]
lea ecx, [esp + 0x154]
push edx
call fcn.100b4eb0
lea ecx, [esp + 0x154]
mov byte [esp + 0xa28], 2
call fcn.100b3280
cmp dword [ebp + 8], esi
je 0x1004af98
cmp dword [0x102f7658], esi
je 0x1004af25
push str.CMailControlHelper::LogMail__not_log_attach__
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x10
lea eax, [esp + 0x408]
lea ecx, [esp + 0x20]
push eax
call fcn.10082dc0
lea ecx, [esp + 0x200]
mov byte [esp + 0xa28], 4
push ecx
lea ecx, [esp + 0x28]
call fcn.10082dc0
mov eax, dword [esp + 0x20]
mov byte [esp + 0xa28], 5
cmp dword [eax - 8], esi
je 0x1004b527
mov ecx, dword [esp + 0x24]
cmp dword [ecx - 8], esi
je 0x1004b527
push esi
push ecx
push eax
call edi
lea ecx, [esp + 0x24]
mov byte [esp + 0xa28], 4
call fcn.10083560
lea ecx, [esp + 0x20]
mov byte [esp + 0xa28], 2
call fcn.10083560
cmp dword [0x102f7658], esi
je 0x1004afdf
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x64]
push eax
push ecx
push edx
push str.CMailControlHelper::LogMail_2___08x___s____s___s___s___s____08x_
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x2c
mov edx, dword [esp + 0x44]
mov ecx, 0x2f
xor eax, eax
lea edi, [esp + 0x98]
mov dword [esp + 0x94], esi
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x120], eax
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0xa38]
lea eax, [esp + 0xec]
push eax
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], edx
call fcn.1005a1d0
mov ecx, dword [ebp + 0x14]
lea edx, [ebp + 0x18]
push 0x27
lea eax, [esp + 0xa4]
push edx
push eax
mov dword [esp + 0x10c], ecx
call fcn.1006c1b8
mov ecx, dword [ebp + 0x68]
add esp, 0x10
lea edx, [esp + 0x104]
mov dword [esp + 0x94], ecx
push esi
push esi
push esi
push edx
mov ecx, 0x102e67b8
call fcn.1003d850
mov eax, dword [esp + 0x64]
mov eax, dword [eax - 8]
cmp eax, esi
je 0x1004b099
mov dword [esp + 0x12c], eax
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx - 8]
cmp eax, esi
je 0x1004b0ab
mov dword [esp + 0x130], eax
mov edx, dword [esp + 0x6c]
mov eax, dword [edx - 8]
cmp eax, esi
je 0x1004b0bd
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x70]
mov eax, dword [eax - 8]
cmp eax, esi
je 0x1004b0cf
mov dword [esp + 0x138], eax
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx - 8]
cmp eax, esi
je 0x1004b0e1
mov dword [esp + 0x13c], eax
lea edx, [esp + 0x2c]
push esi
push edx
lea eax, [esp + 0x410]
push esi
push eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], esi
call fcn.100587f0
lea ecx, [esp + 0x38]
push esi
push ecx
lea edx, [esp + 0x218]
push esi
push edx
call fcn.100587f0
mov eax, dword [ebp + 0xc]
add esp, 0x20
cmp eax, esi
je 0x1004b124
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 8]
jmp 0x1004b12b
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx - 8]
mov edx, dword [esp + 0x2c]
mov ecx, dword [0x1025e6e4]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x144], edx
mov dword [esp + 0x148], eax
xor edi, edi
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x84]
xor ebp, ebp
cmp eax, esi
mov byte [esp + 0xa28], 6
jle 0x1004b1b5
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esi + edx + 8]
mov ecx, dword [eax - 8]
add edi, ebx
test ecx, ecx
jle 0x1004b18f
push 0x102a924c
lea ecx, [esp + 0x20]
call fcn.100841b0
mov ecx, dword [esp + 0x80]
lea edx, [esi + ecx + 0x14]
lea ecx, [esp + 0x1c]
push edx
call fcn.10084210
mov eax, dword [esp + 0x84]
inc ebp
add esi, 0x28
cmp ebp, eax
jl 0x1004b169
xor esi, esi
cmp eax, esi
mov dword [esp + 0x14c], edi
mov dword [esp + 0x150], eax
jne 0x1004b1dd
cmp dword [esp + 0xa38], 2
jne 0x1004b1dd
mov eax, 1
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x13c]
lea eax, [eax + eax*4]
mov ebp, dword [esp + 0x134]
mov ebx, dword [esp + 0x130]
lea eax, [eax + eax*8]
mov edi, dword [esp + 0x12c]
lea edx, [ecx + eax*2]
mov eax, dword [esp + 0x138]
add edx, eax
add edx, ebp
add edx, ebx
add edx, edi
lea eax, [edx + edx + 0xca]
push eax
call fcn.1023d8fc
mov ebp, eax
add esp, 4
cmp ebp, esi
je 0x1004b56c
mov eax, dword [esp + 0x150]
mov edx, dword [esp + 0x13c]
mov ebx, dword [esp + 0x130]
mov edi, dword [esp + 0x12c]
lea eax, [eax + eax*4]
lea esi, [esp + 0x94]
lea ecx, [eax + eax*8]
lea eax, [edx + ecx*2]
mov edx, dword [esp + 0x138]
mov ecx, dword [esp + 0x134]
add eax, edx
add eax, ecx
add eax, ebx
add eax, edi
mov edi, ebp
lea ecx, [eax + eax + 0xca]
xor eax, eax
mov dword [esp + 0x30], ecx
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, 0x30
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x12c]
test eax, eax
je 0x1004b2b3
push eax
mov eax, dword [esp + 0x68]
lea ecx, [ebp + 0xc0]
push eax
push ecx
call fcn.1006c1b8
add esp, 0xc
mov eax, dword [esp + 0x130]
test eax, eax
je 0x1004b2da
mov edx, dword [esp + 0x68]
push eax
mov eax, dword [ebp + 0x98]
push edx
lea ecx, [ebp + eax*2 + 0xc2]
push ecx
call fcn.1006c1b8
add esp, 0xc
mov eax, dword [esp + 0x134]
test eax, eax
je 0x1004b309
mov esi, dword [ebp + 0x98]
mov edx, dword [esp + 0x6c]
push eax
mov eax, dword [ebp + 0x9c]
add eax, esi
push edx
lea ecx, [ebp + eax*2 + 0xc4]
push ecx
call fcn.1006c1b8
add esp, 0xc
mov eax, dword [esp + 0x138]
test eax, eax
je 0x1004b340
mov edi, dword [ebp + 0x9c]
mov esi, dword [ebp + 0x98]
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [ebp + 0xa0]
push edx
add eax, edi
add eax, esi
lea ecx, [ebp + eax*2 + 0xc6]
push ecx
call fcn.1006c1b8
add esp, 0xc
mov eax, dword [esp + 0x13c]
test eax, eax
je 0x1004b37f
mov ebx, dword [ebp + 0xa0]
mov edi, dword [ebp + 0x9c]
mov esi, dword [ebp + 0x98]
push eax
mov eax, dword [ebp + 0xa4]
mov edx, dword [esp + 0x78]
add eax, ebx
push edx
add eax, edi
add eax, esi
lea ecx, [ebp + eax*2 + 0xc8]
push ecx
call fcn.1006c1b8
add esp, 0xc
mov edx, dword [ebp + 0xa8]
mov eax, dword [ebp + 0xa4]
mov ebx, dword [ebp + 0xa0]
mov edi, dword [ebp + 0x9c]
mov esi, dword [ebp + 0x98]
add edx, eax
mov ecx, dword [esp + 0x84]
add edx, ebx
add edx, edi
xor ebx, ebx
add edx, esi
test ecx, ecx
lea eax, [ebp + edx*2 + 0xca]
mov dword [esp + 0x18], eax
jle 0x1004b42b
lea edi, [eax + 0x14]
xor esi, esi
jmp 0x1004b3c8
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xa34]
mov edx, dword [ecx + 8]
test edx, edx
jne 0x1004b3e3
push 0
push 0
push eax
call fcn.1005a220
add esp, 0xc
mov edx, dword [esp + 0x80]
push 0x4f
mov eax, dword [esi + edx + 8]
mov dword [edi - 4], eax
mov ecx, dword [esp + 0x84]
mov eax, dword [esi + ecx + 0x14]
push eax
push edi
call fcn.1006c1b8
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x90]
add esp, 0xc
inc ebx
add esi, 0x28
add edx, 0xb4
add edi, 0xb4
cmp ebx, eax
mov dword [esp + 0x18], edx
jl 0x1004b3c4
mov edx, dword [esp + 0xa34]
mov eax, dword [edx + 0xc]
test eax, eax
mov eax, dword [esp + 0x14]
jne 0x1004b441
mov eax, dword [esp + 0x78]
mov ecx, dword [eax - 8]
lea edx, [esp + 0x610]
add ecx, ecx
push ecx
push eax
push edx
call fcn.1005a2e0
mov eax, dword [esp + 0x3c]
add esp, 0xc
lea ecx, [esp + 0x818]
push eax
push ebp
push ecx
call fcn.1005a2e0
push ebp
mov dword [esp + 0x28], 1
call fcn.1023d925
add esp, 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa28], 2
call fcn.10083560
lea ecx, [esp + 0x14]
mov byte [esp + 0xa28], 1
call fcn.10083560
lea ecx, [esp + 0x10]
mov byte [esp + 0xa28], 0
call fcn.10083560
lea ecx, [esp + 0x34]
mov dword [esp + 0xa28], 0xffffffff
call fcn.1004b750
xor esi, esi
jmp 0x1004b628
cmp eax, esi
je 0x1004b5c4
push str.CMailControlHelper::LogMail_failed_2
jmp 0x1004b5b0
cmp dword [0x102f7658], esi
je 0x1004b4fd
push str.CMailControlHelper::LogMail_failed_3
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x10
lea ecx, [esp + 0x154]
mov byte [esp + 0xa28], 2
call fcn.100b3280
lea ecx, [esp + 0x14]
mov byte [esp + 0xa28], 1
call fcn.10083560
jmp 0x1004b5c4
cmp dword [0x102f7658], esi
je 0x1004b548
push str.CMailControlHelper::LogMail_failed_60__
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x10
lea ecx, [esp + 0x24]
mov byte [esp + 0xa28], 4
call fcn.10083560
lea ecx, [esp + 0x20]
mov byte [esp + 0xa28], 2
call fcn.10083560
jmp 0x1004b511
cmp dword [0x102f7658], esi
je 0x1004b58d
push str.CMailControlHelper::LogMail_new_BYTE_10__
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa28], 2
call fcn.10083560
jmp 0x1004b511
cmp dword [0x102f7658], esi
je 0x1004b5c4
push str.CMailControlHelper::LogMail_failed_1
push str.maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0xa28], 0
call fcn.10083560
lea ecx, [esp + 0x34]
mov dword [esp + 0xa28], 0xffffffff
call fcn.1004b750
lea edx, [esp + 0x200]
push 1
push edx
call fcn.1005b3d0
lea eax, [esp + 0x410]
push 1
push eax
call fcn.1005b3d0
lea ecx, [esp + 0x620]
push 1
push ecx
call fcn.1005b3d0
lea edx, [esp + 0x830]
push 1
push edx
call fcn.1005b3d0
add esp, 0x20
mov eax, dword [0x102f7658]
pop edi
pop ebp
cmp eax, esi
pop ebx
je 0x1004b66a
mov esi, dword [esp + 0xc]
push esi
push str.CMailControlHelper::LogMail_____d_
push str.Maillog
push 0xffffffffffffffff
push 0x102f6dc4
call fcn.10098fb0
add esp, 0x14
mov eax, esi
pop esi
mov ecx, dword [esp + 0xa10]
mov dword fs:[0], ecx
add esp, 0xa1c
ret
mov ecx, dword [esp + 0xa14]
mov eax, dword [esp + 0xc]
pop esi
mov dword fs:[0], ecx
add esp, 0xa1c
ret