Function at 0x1001fa30
Capabilities:
Copy file

Disassembly:
push 0xffffffffffffffff
push 0x1005b338
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1006c3ac]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x4c]
lea esi, [ebp + 0x5c]
xor edi, edi
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], edi
test esi, esi
je 0x1001fa84
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, 1
mov dword [esp + 0x2c], edi
mov byte [esp + 0x44], 1
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.1002d2a0
mov byte [esp + 0x44], 2
mov eax, dword [esp + 0x4c]
cmp dword [eax - 0xc], 0
jne 0x1001fb04
add eax, 0xfffffff0
mov byte [esp + 0x44], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fac6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, esi
je 0x1001fad5
test edi, edi
je 0x1001fad5
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esp + 0x44], 0xffffffff
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fafd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor al, al
jmp 0x1002000b
mov esi, dword [ebp + 0x28]
cmp esi, dword [ebp + 0x2c]
jbe 0x1001fb11
call fcn.1003f767
mov ebx, dword [ebp + 0x2c]
mov edi, dword [ebp + 0x1c]
cmp dword [ebp + 0x28], ebx
jbe 0x1001fb21
call fcn.1003f767
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x30], eax
test eax, eax
je 0x1001fb30
cmp eax, edi
je 0x1001fb35
call fcn.1003f767
cmp ebx, esi
je 0x1001fc25
test edi, edi
jne 0x1001fb8a
call fcn.1003f767
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x1001fb52
call fcn.1003f767
mov ecx, dword [esi + 4]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x1001fbbc
mov eax, dword [esp + 0x4c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1001fb8e
test dx, dx
je 0x1001fb86
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1001fb8e
add eax, 4
add ecx, 4
test dx, dx
jne 0x1001fb64
xor eax, eax
jmp 0x1001fb93
mov eax, dword [edi]
jmp 0x1001fb48
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1001fbc6
test edi, edi
jne 0x1001fbb8
call fcn.1003f767
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x1001fbac
call fcn.1003f767
mov eax, dword [esp + 0x30]
add esi, 8
jmp 0x1001fb28
mov eax, dword [edi]
jmp 0x1001fba2
push 0x80004005
call fcn.10001000
mov byte [esp + 0x44], 1
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fbeb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x28], 0
je 0x1001fc04
cmp dword [esp + 0x2c], 0
je 0x1001fc04
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esp + 0x44], 0xffffffff
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x1001faf1
mov edx, dword [0x1006e504]
mov eax, dword [edx + 0xc]
mov ecx, 0x1006e504
call eax
mov edx, dword [0x1006e504]
add eax, 0x10
mov dword [esp + 0x30], eax
mov eax, dword [edx + 0xc]
mov ecx, 0x1006e504
call eax
lea ecx, [eax + 0x10]
mov dword [esp + 0x34], ecx
mov byte [esp + 0x44], 3
mov edx, dword [esp + 0x4c]
lea eax, [edx - 0x10]
lea esi, [ecx - 0x10]
cmp eax, esi
je 0x1001fca8
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x1001fc9b
mov ecx, dword [eax]
cmp ecx, dword [esi]
jne 0x1001fc9b
call fcn.10002fe0
mov ebx, eax
or edx, 0xffffffff
lock xadd dword [edi], edx
dec edx
test edx, edx
jg 0x1001fc92
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
add ebx, 0x10
mov dword [esp + 0x34], ebx
jmp 0x1001fca8
mov ebx, dword [edx - 0xc]
push edx
lea eax, [esp + 0x38]
call fcn.10002f40
mov eax, dword [ebp + 0x34]
push eax
push 0x100606a0
lea edi, [esp + 0x38]
call fcn.100126a0
mov edi, dword [esp + 0x38]
inc dword [ebp + 0x34]
add esp, 4
add edi, 0xfffffff0
mov eax, edi
mov dword [esp + 0x24], esp
mov esi, esp
call fcn.10002fe0
lea ecx, [esp + 0x1c]
add eax, 0x10
push ecx
mov dword [esi], eax
call fcn.10021ef0
mov bl, 4
mov byte [esp + 0x44], bl
mov eax, dword [esp + 0x18]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov esi, esp
call fcn.10002fe0
add eax, 0x10
mov dword [esi], eax
call fcn.1002b680
add esp, 4
test eax, eax
jne 0x1001fdb6
mov byte [esp + 0x44], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1001fd36
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x44], 2
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fd5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fd74
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov byte [esp + 0x44], 1
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fd99
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
test eax, eax
je 0x1001fad5
cmp dword [esp + 0x2c], 0
je 0x1001fad5
push eax
jmp 0x1001facf
mov eax, dword [esp + 0x18]
push 0x82
push 0xd2
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x2c], esp
mov esi, esp
call fcn.10002fe0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x50], 5
mov eax, dword [esp + 0x5c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x34], esp
mov esi, esp
call fcn.10002fe0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x54], bl
call fcn.1002c000
add esp, 0x10
test al, al
jne 0x1001fe47
mov eax, dword [esp + 0x18]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x28], esp
mov esi, esp
call fcn.10002fe0
add eax, 0x10
mov dword [esi], eax
call fcn.1002c4c0
add esp, 4
test al, al
jne 0x1001fe47
mov byte [esp + 0x44], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x1001fd2a
push ecx
mov eax, edi
mov dword [esp + 0x28], esp
mov esi, esp
call fcn.10002fe0
lea ecx, [esp + 0x20]
add eax, 0x10
push ecx
mov dword [esi], eax
call fcn.10021fd0
mov byte [esp + 0x44], 6
mov eax, dword [esp + 0x1c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x28], esp
mov esi, esp
call fcn.10002fe0
add eax, 0x10
mov dword [esi], eax
call fcn.1002b680
add esp, 4
test eax, eax
jne 0x1001feb6
mov byte [esp + 0x44], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1001fe29
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x1001fe29
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x50]
push 0
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x1001ff23
mov byte [esp + 0x44], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001fef0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x44], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001ff15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [esp + 0x30]
call fcn.10012260
jmp 0x1001fd74
lea ebx, [esp + 0x30]
lea edi, [ebp + 0x1c]
call fcn.100225b0
mov bl, 1
mov eax, ebp
mov byte [ebp + 0x38], bl
call fcn.1001f4b0
mov edi, dword [esp + 0x54]
lea eax, [esp + 0x30]
call fcn.10005550
add edi, 4
lea eax, [esp + 0x34]
call fcn.10005550
mov byte [esp + 0x44], 4
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001ff79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x44], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001ff9e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [esp + 0x30]
call fcn.10012260
mov byte [esp + 0x44], bl
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001ffcb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
test eax, eax
je 0x1001ffe1
cmp dword [esp + 0x2c], 0
je 0x1001ffe1
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esp + 0x44], 0xffffffff
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10020009
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret 0xc