Function at 0x10011170
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [esp + 0x18]
sub esp, 0x244
mov edx, dword [esp + 0x248]
lea eax, [esp + 0x2c]
push ebx
push ebp
push esi
push edi
push eax
push str.CopyFiles
push ecx
push edx
call fcn.100017b0
add esp, 0x10
test eax, eax
jne 0x100111a8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret
push 0x104
call fcn.100168e2
mov ebx, eax
mov edi, str.Windows_4.0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x50]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x50]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor ebp, ebp
and ecx, 3
mov dword [esp + 0x28], ebx
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x264]
lea ecx, [esp + 0x14]
push ecx
push 0x104
push ebx
push 1
push edx
push esi
mov dword [esp + 0x2c], ebp
call fcn.10010400
add esp, 0x1c
test eax, eax
jne 0x10011256
push ebx
call fcn.100168d7
mov eax, dword [esp + 0x14]
add esp, 4
cmp eax, ebp
jne 0x10011228
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x244
ret
inc eax
push eax
mov dword [esp + 0x14], eax
call fcn.100168e2
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x30], eax
push eax
lea eax, [esp + 0x5c]
push 1
push eax
push esi
call fcn.10010400
mov ebx, dword [esp + 0x40]
add esp, 0x1c
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x104
push eax
call fcn.100168e2
lea ecx, [esp + 0x14]
lea edx, [esp + 0x154]
push ecx
mov dword [esp + 0x28], eax
push 0x104
push edx
lea eax, [esp + 0x4c]
push 1
push eax
mov dword [esp + 0x40], 1
mov dword [esp + 0x28], ebp
call fcn.10001840
add esp, 0x18
test eax, eax
je 0x10011602
mov al, byte [esp + 0x150]
lea edi, [esp + 0x151]
cmp al, 0x40
je 0x100112ba
lea edi, [esp + 0x150]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x4c]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x20]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp byte [esp + 0x150], 0x40
jne 0x100113c2
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x260]
lea eax, [esp + 0x159]
push edx
push eax
push ecx
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x28], ebp
call fcn.100118f0
add esp, 0x14
lea edx, [esp + 0x151]
push ebp
push edx
call fcn.10005380
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x28]
push eax
push ecx
lea eax, [esp + 0x161]
push edx
push eax
call fcn.10005380
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x284]
push eax
mov eax, dword [esp + 0x274]
push ecx
push edx
push eax
call fcn.10002500
mov eax, dword [esp + 0x40]
add esp, 0x24
cmp eax, ebp
je 0x10011397
push eax
call fcn.100168d7
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, ebp
je 0x100113a8
push eax
call fcn.100168d7
add esp, 4
mov eax, dword [esp + 0x18]
cmp eax, ebp
je 0x100115cd
push eax
call fcn.100168d7
add esp, 4
jmp 0x100115cd
mov eax, dword [esp + 0x258]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x154]
push ebp
push edx
push eax
call fcn.100017b0
add esp, 0x10
test eax, eax
je 0x100115cd
lea ecx, [esp + 0x10]
lea edx, [esp + 0x2c]
push ecx
push ebp
push ebp
push 1
push edx
mov dword [esp + 0x24], ebp
call fcn.10001840
add esp, 0x14
test eax, eax
je 0x100115b3
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x100115b3
inc eax
push eax
mov dword [esp + 0x14], eax
call fcn.100168e2
mov ecx, dword [esp + 0x14]
mov ebx, eax
lea eax, [esp + 0x14]
lea edx, [esp + 0x30]
push eax
push ecx
push ebx
push 1
push edx
call fcn.10001840
lea eax, [esp + 0x30]
lea ecx, [esp + 0x34]
push eax
mov eax, dword [esp + 0x274]
lea edx, [esp + 0x30]
push ecx
push edx
xor esi, esi
push ebx
push eax
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x40], esi
call fcn.100118f0
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x78]
push ecx
push 0x104
push edx
lea eax, [esp + 0x64]
push 4
push eax
mov dword [esp + 0x50], esi
call fcn.10001840
add esp, 0x40
test eax, eax
je 0x100114e9
lea ecx, [esp + 0x4c]
push ecx
call fcn.100054a0
test al, 1
je 0x1001149e
mov ebp, 0x4000
test al, 2
je 0x100114a8
or ebp, 0x400
test al, 8
je 0x100114b2
or ebp, 0x200
test al, 0x10
je 0x100114b9
or ebp, 8
test al, 0x20
je 0x100114c3
or ebp, 0x10000
test ah, 4
je 0x100114cb
or ebp, 2
test ah, 8
je 0x100114d3
or ebp, 0x10
test ah, 0x10
je 0x100114de
or ebp, 0x80000
test ah, 0x20
je 0x100114e9
or ebp, 0x100000
lea edx, [esp + 0x10]
lea eax, [esp + 0x4c]
push edx
push 0x104
push eax
lea ecx, [esp + 0x38]
push 2
push ecx
mov dword [esp + 0x24], esi
call fcn.10001840
add esp, 0x14
test eax, eax
jne 0x10011532
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x4c]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
push ebp
push ebx
call fcn.10005380
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x5c]
push eax
push ecx
call fcn.10005380
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x270]
push eax
mov eax, dword [esp + 0x288]
push edx
push eax
push ecx
call fcn.10002500
mov eax, dword [esp + 0x40]
add esp, 0x24
cmp eax, esi
je 0x10011582
push eax
call fcn.100168d7
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, esi
je 0x10011593
push eax
call fcn.100168d7
add esp, 4
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x100115a4
push eax
call fcn.100168d7
add esp, 4
push ebx
call fcn.100168d7
mov ebx, dword [esp + 0x28]
add esp, 4
xor ebp, ebp
lea edx, [esp + 0x2c]
lea eax, [esp + 0x2c]
push edx
push eax
call fcn.10001800
add esp, 8
test eax, eax
jne 0x100113e8
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x154]
inc eax
push 0x104
push edx
mov dword [esp + 0x34], eax
push eax
lea eax, [esp + 0x4c]
push eax
mov dword [esp + 0x24], ebp
call fcn.10001840
add esp, 0x14
test eax, eax
jne 0x100112a1
mov ecx, dword [esp + 0x20]
push ecx
call fcn.100168d7
push ebx
call fcn.100168d7
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret