Function at 0x1001a6c0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b3447
mov eax, dword fs:[0]
push eax
sub esp, 0x44c
mov eax, dword [0x100e01f0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x19c], ecx
push 1
push 0
push str.0PA_
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ecx, dword [ebp + 8]
call fcn.100094d0
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
sub eax, 1
mov dword [ebp - 0x20], eax
jmp 0x1001a722
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0
jl 0x1001adbd
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
call fcn.10009e20
mov dword [ebp - 4], 0
push 0
push 0x100c5e28
lea ecx, [ebp - 0x28]
call fcn.10006860
cmp eax, 1
jne 0x1001a760
mov dword [ebp - 0x3c], 0x26
jmp 0x1001a7aa
push 0
push 0x100c5e2c
lea ecx, [ebp - 0x28]
call fcn.10006860
cmp eax, 1
jne 0x1001a77d
mov dword [ebp - 0x3c], 0x23
jmp 0x1001a7aa
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28]
sub ecx, 0x10
mov dword [ebp - 0x188], ecx
mov ecx, dword [ebp - 0x188]
call fcn.10003fd0
jmp 0x1001a719
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov byte [ebp - 4], 1
lea edx, [ebp - 0x8c]
push edx
push ecx
mov eax, esp
mov dword [ebp - 0x1a8], esp
push 0xa
push 3
push eax
lea ecx, [ebp - 0x28]
call fcn.10006980
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x208], ecx
mov byte [ebp - 4], 2
push ecx
mov edx, esp
mov dword [ebp - 0x1e4], esp
mov eax, dword [ebp - 0x3c]
push eax
push edx
call fcn.100360b0
add esp, 8
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 1
call fcn.10032e20
add esp, 0xc
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x80], ecx
cmp dword [ebp - 0x80], 0
jne 0x1001a860
push ecx
mov edx, esp
mov dword [ebp - 0x20c], esp
mov eax, dword [ebp - 0x20]
push eax
push edx
mov ecx, dword [ebp + 8]
call fcn.1000a090
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp + 8]
call fcn.10009eb0
mov dword [ebp - 0x50], 0
jmp 0x1001a872
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x80]
jae 0x1001ad8b
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x134]
push ecx
call fcn.100360b0
add esp, 8
mov dword [ebp - 0x180], eax
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0xa4], edx
mov byte [ebp - 4], 3
push 0x100c5e34
mov eax, dword [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x130]
push ecx
call fcn.1000a440
add esp, 0xc
mov dword [ebp - 0x160], eax
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0xac], edx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8c]
call fcn.1001bb50
push eax
mov eax, dword [ebp - 0xac]
push eax
lea ecx, [ebp - 0x168]
push ecx
call fcn.10006a90
add esp, 0xc
mov dword [ebp - 0x1a0], eax
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0xb4], edx
mov byte [ebp - 4], 5
push 0x100c5e30
mov eax, dword [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.1000a440
add esp, 0xc
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x168]
sub edx, 0x10
mov dword [ebp - 0xbc], edx
mov ecx, dword [ebp - 0xbc]
call fcn.10003fd0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x130]
sub eax, 0x10
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
call fcn.10003fd0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x134]
sub ecx, 0x10
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0xcc]
call fcn.10003fd0
lea ecx, [ebp - 0x8c]
call fcn.1001bba0
push ecx
mov edx, esp
mov dword [ebp - 0x1ec], esp
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x10
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
push ecx
call fcn.10008200
add esp, 4
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0xd4]
add edx, 0x10
mov eax, dword [ebp - 0x60]
mov dword [eax], edx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1c4], ecx
call fcn.10036580
add esp, 4
mov byte [ebp - 0x1a], al
movzx edx, byte [ebp - 0x1a]
test edx, edx
je 0x1001aa78
push ecx
mov eax, esp
mov dword [ebp - 0x204], esp
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x10
mov dword [ebp - 0x144], ecx
mov edx, dword [ebp - 0x144]
push edx
call fcn.10008200
add esp, 4
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
add eax, 0x10
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x1cc], edx
call fcn.10036230
add esp, 4
push ecx
mov eax, esp
mov dword [ebp - 0x1f4], esp
mov ecx, dword [ebp - 0x20]
push ecx
push eax
mov ecx, dword [ebp + 8]
call fcn.1000a090
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp + 8]
call fcn.10009eb0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
sub edx, 0x10
mov dword [ebp - 0x14c], edx
mov ecx, dword [ebp - 0x14c]
call fcn.10003fd0
jmp 0x1001a869
push 0x7ce2
mov ecx, dword [0x100e28bc]
call fcn.1002c720
push ecx
mov ecx, esp
mov dword [ebp - 0x210], esp
push eax
call fcn.10006710
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x1fc], esp
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x10
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x154]
push eax
call fcn.10008200
add esp, 4
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
add ecx, 0x10
mov edx, dword [ebp - 0x68]
mov dword [edx], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1ac], eax
lea ecx, [ebp - 0x30]
push ecx
mov byte [ebp - 4], 9
call fcn.10033040
add esp, 0xc
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 0xb
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindow]
mov edx, dword [ebp - 0x30]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jne 0x1001ab65
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x30]
sub ecx, 0x10
mov dword [ebp - 0xf4], ecx
mov ecx, dword [ebp - 0xf4]
call fcn.10003fd0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
sub edx, 0x10
mov dword [ebp - 0x164], edx
mov ecx, dword [ebp - 0x164]
call fcn.10003fd0
jmp 0x1001a869
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x40]
push edx
call fcn.10006a90
add esp, 0xc
mov byte [ebp - 4], 0xc
push 0x178
call fcn.1007ab42
add esp, 4
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x78], 0
je 0x1001aba4
mov ecx, dword [ebp - 0x78]
call fcn.10012e50
mov dword [ebp - 0x70], eax
jmp 0x1001abab
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xfc], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x48]
push edx
lea ecx, [ebp - 0x334]
call fcn.1001c870
mov byte [ebp - 4], 0xe
push 0
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
push ecx
mov eax, esp
mov dword [ebp - 0x1b8], esp
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x10
mov dword [ebp - 0x16c], ecx
mov edx, dword [ebp - 0x16c]
push edx
call fcn.10008200
add esp, 4
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
add eax, 0x10
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c0], edx
lea ecx, [ebp - 0x334]
call fcn.10020750
mov byte [ebp - 0x19], al
mov al, byte [ebp - 0x19]
mov byte [ebp - 0x17], al
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindow]
movzx ecx, byte [ebp - 0x17]
test ecx, ecx
jne 0x1001acfc
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x1001ac8b
mov ecx, dword [ebp - 0x34]
call fcn.100134e0
mov ecx, 1
and ecx, 1
je 0x1001ac80
mov edx, dword [ebp - 0x34]
push edx
call fcn.1007ab2e
add esp, 4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10c], eax
jmp 0x1001ac95
mov dword [ebp - 0x10c], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x334]
call fcn.1001b220
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x40]
sub ecx, 0x10
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x17c]
call fcn.10003fd0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x30]
sub edx, 0x10
mov dword [ebp - 0x90], edx
mov ecx, dword [ebp - 0x90]
call fcn.10003fd0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
sub eax, 0x10
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
call fcn.10003fd0
jmp 0x1001a869
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.1001bcb0
mov edx, dword [eax]
mov dword [ebp - 0x11c], edx
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.1001c0d0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x334]
call fcn.1001b220
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x40]
sub edx, 0x10
mov dword [ebp - 0x18c], edx
mov ecx, dword [ebp - 0x18c]
call fcn.10003fd0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x30]
sub eax, 0x10
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
call fcn.10003fd0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
sub ecx, 0x10
mov dword [ebp - 0x194], ecx
mov ecx, dword [ebp - 0x194]
call fcn.10003fd0
jmp 0x1001a869
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8c]
call fcn.1001bd50
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
sub edx, 0x10
mov dword [ebp - 0x12c], edx
mov ecx, dword [ebp - 0x12c]
call fcn.10003fd0
jmp 0x1001a719
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx]
call fcn.10014870
mov dword [ebp - 4], 0xf
mov byte [ebp - 0xd], 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax]
mov dword [ebp - 0x1a4], ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x44]
call fcn.1001c050
jmp 0x1001ae03
lea ecx, [ebp - 0x44]
call fcn.1001be50
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov dword [ebp - 0x138], edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
lea ecx, [ebp - 0x170]
call fcn.1001c050
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x44]
call fcn.1001be70
movzx eax, al
test eax, eax
jne 0x1001ae43
mov dword [ebp - 0x64], 1
jmp 0x1001ae4a
mov dword [ebp - 0x64], 0
movzx ecx, byte [ebp - 0x64]
test ecx, ecx
je 0x1001aef2
mov edx, dword [ebp - 0x44]
add edx, 8
mov dword [ebp - 0x140], edx
lea eax, [ebp - 0x150]
push eax
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ecx]
call fcn.10014870
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x148], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax]
mov dword [ebp - 0x178], ecx
mov edx, dword [ebp - 0x178]
push edx
lea ecx, [ebp - 0x24]
call fcn.1000a2d0
test eax, eax
jne 0x1001aeb6
mov dword [ebp - 0x6c], 1
jmp 0x1001aebd
mov dword [ebp - 0x6c], 0
mov al, byte [ebp - 0x6c]
mov byte [ebp - 0x15], al
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x150]
sub ecx, 0x10
mov dword [ebp - 0x190], ecx
mov ecx, dword [ebp - 0x190]
call fcn.10003fd0
movzx edx, byte [ebp - 0x15]
test edx, edx
je 0x1001aeed
mov byte [ebp - 0xd], 1
jmp 0x1001adfb
movzx eax, byte [ebp - 0xd]
test eax, eax
jne 0x1001b1dc
push 0x7ce2
mov ecx, dword [0x100e28bc]
call fcn.1002c720
push ecx
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.10006710
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1d8], ecx
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x1e0], esp
lea edx, [ebp - 0x24]
push edx
call fcn.10008320
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xf
call fcn.10033040
add esp, 0xc
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx - 0xc]
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 0
jne 0x1001afca
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
mov dword [ebp - 0xb0], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x2c]
sub edx, 0x10
mov dword [ebp - 0xa0], edx
mov ecx, dword [ebp - 0xa0]
call fcn.10003fd0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x24]
sub eax, 0x10
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
call fcn.10003fd0
mov eax, dword [ebp - 0xb0]
jmp 0x1001b20c
push 0x100c5e38
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0xc8]
push edx
call fcn.1000a440
add esp, 0xc
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
lea eax, [ebp - 0x54]
push eax
call fcn.10006a90
add esp, 0xc
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xc8]
sub ecx, 0x10
mov dword [ebp - 0xd0], ecx
mov ecx, dword [ebp - 0xd0]
call fcn.10003fd0
push 0x178
call fcn.1007ab42
add esp, 4
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x74], 0
je 0x1001b054
mov ecx, dword [ebp - 0x74]
call fcn.10012e50
mov dword [ebp - 0x7c], eax
jmp 0x1001b05b
mov dword [ebp - 0x7c], 0
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xd8], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x458]
call fcn.1001c870
mov byte [ebp - 4], 0x17
push 0
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
push ecx
mov ecx, esp
mov dword [ebp - 0x1f8], esp
lea edx, [ebp - 0x54]
push edx
call fcn.10008320
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x458]
call fcn.10020750
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0x18], al
movzx ecx, byte [ebp - 0x18]
test ecx, ecx
jne 0x1001b18b
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x1001b105
mov ecx, dword [ebp - 0x38]
call fcn.100134e0
mov ecx, 1
and ecx, 1
je 0x1001b0fa
mov edx, dword [ebp - 0x38]
push edx
call fcn.1007ab2e
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xe8], eax
jmp 0x1001b10f
mov dword [ebp - 0xe8], 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x108], edx
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x458]
call fcn.1001b220
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x54]
sub eax, 0x10
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0xf0]
call fcn.10003fd0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x10
mov dword [ebp - 0xf8], ecx
mov ecx, dword [ebp - 0xf8]
call fcn.10003fd0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24]
sub edx, 0x10
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x100]
call fcn.10003fd0
mov eax, dword [ebp - 0x108]
jmp 0x1001b20c
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.1001bac0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x458]
call fcn.1001b220
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x54]
sub ecx, 0x10
mov dword [ebp - 0x110], ecx
mov ecx, dword [ebp - 0x110]
call fcn.10003fd0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x2c]
sub edx, 0x10
mov dword [ebp - 0x118], edx
mov ecx, dword [ebp - 0x118]
call fcn.10003fd0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24]
sub edx, 0x10
mov dword [ebp - 0x120], edx
mov ecx, dword [ebp - 0x120]
call fcn.10003fd0
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 8