Function at 0x10015ae0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c21db
mov eax, dword fs:[0]
push eax
sub esp, 0x238
push ebx
push esi
push edi
lea edi, [ebp - 0x244]
mov ecx, 0x8e
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x100ef014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x100f405c
call fcn.10003373
push str.MSBuild.EXE
push 0x100f000c
lea eax, [ebp - 0x30]
push eax
call fcn.100031c5
add esp, 0xc
mov dword [ebp - 4], 0
push str.MSBuild.EXE
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.100031c5
add esp, 0xc
mov byte [ebp - 4], 1
mov esi, esp
push 0
lea ecx, [ebp - 0x54]
call fcn.10001e83
push eax
lea ecx, [ebp - 0x30]
call fcn.10001e83
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
cmp esi, esp
call fcn.10003440
push 0x100c625c
push 0x100f000c
lea eax, [ebp - 0x138]
push eax
call fcn.100031c5
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov ecx, dword [ebp - 0x23c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.100044c6
lea ecx, [ebp - 0x138]
call fcn.10003e9a
push 0x100c625c
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.100031c5
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x54]
call fcn.100044c6
lea ecx, [ebp - 0x15c]
call fcn.10003e9a
mov esi, esp
push 0
lea ecx, [ebp - 0x54]
call fcn.10001e83
push eax
lea ecx, [ebp - 0x30]
call fcn.10001e83
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
cmp esi, esp
call fcn.10003440
push str.WINWORD.EXE
push 0x100f0028
push 0x100f000c
lea eax, [ebp - 0x180]
push eax
call fcn.10002b85
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x240], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x240]
push edx
lea eax, [ebp - 0x1a4]
push eax
call fcn.100018b1
add esp, 0xc
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x30]
call fcn.100044c6
lea ecx, [ebp - 0x1a4]
call fcn.10003e9a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x180]
call fcn.10003e9a
push str.WINWORD.EXE
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x1c8]
push ecx
call fcn.100031c5
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x54]
call fcn.100044c6
lea ecx, [ebp - 0x1c8]
call fcn.10003e9a
mov esi, esp
push 0
lea ecx, [ebp - 0x54]
call fcn.10001e83
push eax
lea ecx, [ebp - 0x30]
call fcn.10001e83
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
cmp esi, esp
call fcn.10003440
push str.WWLIB.dll
push 0x100f0028
push 0x100f000c
lea eax, [ebp - 0x1ec]
push eax
call fcn.10002b85
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x240], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x240]
push edx
lea eax, [ebp - 0x210]
push eax
call fcn.100018b1
add esp, 0xc
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x30]
call fcn.100044c6
lea ecx, [ebp - 0x210]
call fcn.10003e9a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1ec]
call fcn.10003e9a
push str.WWLIB.dll
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.100031c5
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x54]
call fcn.100044c6
lea ecx, [ebp - 0x234]
call fcn.10003e9a
mov esi, esp
push 0
lea ecx, [ebp - 0x54]
call fcn.10001e83
push eax
lea ecx, [ebp - 0x30]
call fcn.10001e83
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
cmp esi, esp
call fcn.10003440
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x54]
call fcn.10003e9a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.10003e9a
push edx
mov ecx, ebp
push eax
lea edx, [0x10015e14]
call fcn.100035f8
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10003012
add esp, 0x244
cmp ebp, esp
call fcn.10003440
mov esp, ebp
pop ebp
ret