Function at 0x108e411
Capabilities:
Copy file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x518
mov eax, dword [0x111127c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x518]
push eax
push dword [0x11115b8]
push edi
call fcn.0108de8e
mov esi, eax
cmp esi, 0x80070002
je 0x108e6c4
push dword [ebp - 0x518]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jge 0x108e463
mov eax, esi
jmp 0x108e6c6
mov esi, 0x143
test edi, edi
je 0x108e4d9
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x108e471
sub eax, edx
sar eax, 1
cmp eax, 0x104
jb 0x108e49a
push 0x1009168
push 0xaa0
push 0x1008c14
call fcn.0107b4be
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x108e49f
sub eax, edx
sar eax, 1
cmp word [edi + eax*2 - 2], 0x5c
jne 0x108e4c9
push 0x100912c
push 0xaa1
push 0x1008c14
call fcn.0107b4be
push edi
push esi
lea eax, [ebp - 0x28c]
push eax
call fcn.01025872
jmp 0x108e4f6
push 0
push 0
push 0x105
lea eax, [ebp - 0x28c]
push eax
call fcn.0108cab9
test eax, eax
jl 0x108e6c6
push 0x10019e4
push esi
lea eax, [ebp - 0x28c]
push eax
call fcn.01040bdd
lea eax, [ebp - 0x28c]
push eax
push esi
lea eax, [ebp - 0x514]
push eax
call fcn.01025872
lea eax, [ebp - 0x28c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x108e525
sub eax, edx
sar eax, 1
push ebx
mov ebx, eax
mov eax, dword [0x11115b8]
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x108e53e
sub eax, ecx
sar eax, 1
mov ecx, eax
mov eax, dword [0x11115c4]
lea edx, [eax + 2]
mov di, word [eax]
inc eax
inc eax
test di, di
jne 0x108e556
sub eax, edx
sar eax, 1
add eax, ecx
lea eax, [eax + ebx + 1]
cmp eax, esi
jb 0x108e582
push 0x1009300
push 0xab8
push 0x1008c14
call fcn.0107b4be
push dword [0x11115c4]
lea eax, [ebp - 0x28c]
push esi
push eax
call fcn.01040bdd
push 0x10019e4
push esi
lea eax, [ebp - 0x28c]
push eax
call fcn.01040bdd
push dword [0x11115b8]
lea eax, [ebp - 0x28c]
push esi
push eax
call fcn.01040bdd
lea eax, [ebp - 0x514]
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x108e5c3
sub eax, ecx
mov ecx, dword [0x11115bc]
sar eax, 1
mov ebx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
inc ecx
inc ecx
test ax, ax
jne 0x108e5dc
sub ecx, edx
sar ecx, 1
mov edx, ecx
mov ecx, dword [0x11115c4]
lea edi, [ecx + 2]
mov ax, word [ecx]
inc ecx
inc ecx
test ax, ax
jne 0x108e5f5
sub ecx, edi
sar ecx, 1
add ecx, edx
lea eax, [ecx + ebx + 1]
pop ebx
cmp eax, esi
jb 0x108e622
push 0x1009280
push 0xac1
push 0x1008c14
call fcn.0107b4be
push dword [0x11115c4]
lea eax, [ebp - 0x514]
push esi
push eax
call fcn.01040bdd
push 0x10019e4
push esi
lea eax, [ebp - 0x514]
push eax
call fcn.01040bdd
push dword [0x11115bc]
lea eax, [ebp - 0x514]
push esi
push eax
call fcn.01040bdd
xor edi, edi
push edi
push edi
push edi
push edi
lea eax, [ebp - 0x514]
push eax
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
jne 0x108e6c4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x108e6ab
test byte [eax + 0x1c], 2
je 0x108e6ab
cmp byte [eax + 0x19], 4
jb 0x108e6ab
push esi
push 0x1008be8
push 0x58
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
cmp esi, edi
jle 0x108e45c
and esi, 0xffff
or esi, 0x80070000
jmp 0x108e45c
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0106f5f8
leave
ret 4