Function at 0x5bb7c4
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff5c
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x88], eax
xor eax, eax
push ebp
push 0x5bbaa1
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
call fcn.005397ec
mov eax, dword [eax + 0xc]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x44]
call fcn.00656dac
xor al, 1
mov byte [ebp - 0x95], al
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
cmp byte [eax + 0x146], 0
jne 0x5bb831
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov dl, 1
call fcn.005637e0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
call fcn.005c009c
xor eax, eax
mov dword [ebp - 0x90], eax
call fcn.00656a20
mov dword [ebp - 0x8c], eax
xor eax, eax
mov dword [ebp - 0x94], eax
xor eax, eax
push ebp
push 0x5bba37
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
call fcn.005b7960
pop ecx
call fcn.004da2b4
test byte [eax + 0x2d], 0x20
jne 0x5bb883
push ebp
mov eax, 0x5bbabc
call fcn.005b6a50
pop ecx
push ebp
mov eax, 0x5bbad8
call fcn.005b6a50
pop ecx
push ebp
call fcn.005b7d84
pop ecx
push ebp
mov eax, 0x5bbaec
call fcn.005b6a50
pop ecx
mov esi, dword [0x672428]
mov esi, dword [esi + 0x2cc]
cmp esi, 0x80000000
je 0x5bb8eb
push ebp
lea edx, [ebp - 0xa0]
mov eax, dword [0x672428]
mov eax, esi
call fcn.004b3fbc
mov ecx, dword [ebp - 0xa0]
lea eax, [ebp - 0x9c]
mov edx, 0x5bbafc
call fcn.00403568
mov eax, dword [ebp - 0x9c]
call fcn.005b6a50
pop ecx
mov eax, dword [0x672428]
cmp dword [eax + 0x2d0], 0
je 0x5bb9cd
mov eax, dword [0x672428]
mov eax, dword [eax + 0x2d0]
call fcn.0065cc54
test al, al
je 0x5bb9cd
lea edx, [ebp - 0xa4]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x158]
call fcn.0065cfe0
lea eax, [ebp - 0xa4]
mov edx, dword [0x672970]
mov edx, dword [edx]
call fcn.00403ac4
mov eax, dword [ebp - 0xa4]
call fcn.0062afc8
push 0
lea edx, [ebp - 0xa4]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x158]
call fcn.0065cfe0
lea eax, [ebp - 0xa4]
mov edx, dword [0x672418]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx]
call fcn.00403ac4
mov eax, dword [ebp - 0xa4]
push eax
mov eax, dword [0x672428]
mov eax, dword [eax + 0x2d0]
push eax
call sub.kernel32.dll_CopyFileW
push ebp
lea edx, [ebp - 0xa4]
mov eax, dword [0x672418]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
call fcn.005b6c3c
mov edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
mov eax, 0x5bbb08
call fcn.0065d968
mov eax, dword [ebp - 0x9c]
call fcn.005b6a50
pop ecx
push ebp
mov eax, 0x5bbb24
call fcn.005b6a50
pop ecx
call fcn.004da2b4
test byte [eax + 0x2d], 0x20
je 0x5bb9f0
push ebp
mov eax, 0x5bbb30
call fcn.005b6a50
pop ecx
push ebp
call fcn.005bb6c0
pop ecx
call fcn.004da2b4
test byte [eax + 0x2d], 0x20
je 0x5bba0e
push ebp
mov eax, 0x5bbb54
call fcn.005b6a50
pop ecx
push ebp
mov eax, 0x5bbb74
call fcn.005b6a50
pop ecx
mov eax, dword [ebp + 8]
cmp byte [eax - 0x38], 0
jne 0x5bba2d
mov eax, dword [ebp + 8]
push eax
call fcn.0059e144
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5bba43
mov eax, dword [ebp - 0x8c]
call fcn.00656eec
mov eax, dword [ebp - 0x8c]
call fcn.00656ff0
mov dl, byte [ebp - 0x95]
xor dl, 1
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
call fcn.00563878
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5bbaa8
lea eax, [ebp - 0xa4]
call fcn.00403880
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00403298
lea eax, [ebp - 0x88]
call fcn.00403274
ret