Function at 0x5b3c3c
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff5c
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x88], eax
xor eax, eax
push ebp
push 0x5b3f0c
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x44]
mov eax, dword [0x669118]
mov eax, dword [eax]
call fcn.0064e36c
xor al, 1
mov byte [ebp - 0x95], al
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
cmp byte [eax + 0x14e], 0
jne 0x5b3ca8
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov dl, 1
call fcn.0055d408
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
call fcn.005b82f4
xor eax, eax
mov dword [ebp - 0x90], eax
call fcn.0064dfa0
mov dword [ebp - 0x8c], eax
xor eax, eax
mov dword [ebp - 0x94], eax
xor eax, eax
push ebp
push 0x5b3ea2
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
call fcn.005afdd4
pop ecx
mov eax, dword [0x669a50]
test byte [eax + 1], 0x20
jne 0x5b3cfa
push ebp
mov eax, 0x5b3f24
call fcn.005aeed4
pop ecx
push ebp
mov eax, 0x5b3f40
call fcn.005aeed4
pop ecx
push ebp
call fcn.005b01e8
pop ecx
push ebp
mov eax, 0x5b3f54
call fcn.005aeed4
pop ecx
mov esi, dword [0x6694c8]
mov esi, dword [esi + 4]
cmp esi, 0x80000000
je 0x5b3d5f
push ebp
lea edx, [ebp - 0xa0]
mov eax, dword [0x6694c8]
mov eax, esi
call fcn.004b1804
mov ecx, dword [ebp - 0xa0]
lea eax, [ebp - 0x9c]
mov edx, 0x5b3f64
call fcn.00403568
mov eax, dword [ebp - 0x9c]
call fcn.005aeed4
pop ecx
mov eax, dword [0x6694c8]
cmp dword [eax + 8], 0
je 0x5b3e38
mov eax, dword [0x6694c8]
mov eax, dword [eax + 8]
call fcn.00654560
test al, al
je 0x5b3e38
lea edx, [ebp - 0xa4]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x160]
call fcn.006548ec
lea eax, [ebp - 0xa4]
mov edx, dword [0x669b54]
mov edx, dword [edx]
call fcn.00403ac4
mov eax, dword [ebp - 0xa4]
call fcn.006216bc
push 0
lea edx, [ebp - 0xa4]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x160]
call fcn.006548ec
lea eax, [ebp - 0xa4]
mov edx, dword [0x669550]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx]
call fcn.00403ac4
mov eax, dword [ebp - 0xa4]
push eax
mov eax, dword [0x6694c8]
mov eax, dword [eax + 8]
push eax
call sub.kernel32.dll_CopyFileW
push ebp
lea edx, [ebp - 0xa4]
mov eax, dword [0x669550]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
call fcn.005af0b8
mov edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
mov eax, 0x5b3f70
call fcn.006552a0
mov eax, dword [ebp - 0x9c]
call fcn.005aeed4
pop ecx
push ebp
mov eax, 0x5b3f8c
call fcn.005aeed4
pop ecx
mov eax, dword [0x669a50]
test byte [eax + 1], 0x20
je 0x5b3e5b
push ebp
mov eax, 0x5b3f98
call fcn.005aeed4
pop ecx
push ebp
call fcn.005b3b38
pop ecx
mov eax, dword [0x669a50]
test byte [eax + 1], 0x20
je 0x5b3e79
push ebp
mov eax, 0x5b3fbc
call fcn.005aeed4
pop ecx
push ebp
mov eax, 0x5b3fdc
call fcn.005aeed4
pop ecx
mov eax, dword [ebp + 8]
cmp byte [eax - 0x38], 0
jne 0x5b3e98
mov eax, dword [ebp + 8]
push eax
call fcn.00597110
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5b3eae
mov eax, dword [ebp - 0x8c]
call fcn.0064e4dc
mov eax, dword [ebp - 0x8c]
call fcn.0064e5c0
mov dl, byte [ebp - 0x95]
xor dl, 1
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
call fcn.0055d490
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5b3f13
lea eax, [ebp - 0xa4]
call fcn.00403880
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00403298
lea eax, [ebp - 0x88]
call fcn.00403274
ret