Function at 0x100520b2
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x428
push ebx
push esi
mov esi, 0x1019f4bc
push edi
push esi
lea ecx, [ebp - 4]
call fcn.10094520
push esi
lea ecx, [ebp - 0xc]
call fcn.10094520
push esi
lea ecx, [ebp - 8]
call fcn.10094520
call fcn.100bc710
test eax, eax
je 0x1005228e
push esi
lea ecx, [ebp - 0x18]
call fcn.10094520
push esi
lea ecx, [ebp - 0x14]
call fcn.10094520
push esi
lea ecx, [ebp - 0x10]
call fcn.10094520
push dword [0x101ad648]
lea ecx, [ebp - 4]
call fcn.10094f40
mov esi, 0x10160bc0
lea ecx, [ebp - 4]
push esi
call fcn.100984d0
push esi
lea ecx, [ebp - 4]
call fcn.10095910
lea eax, [ebp - 4]
lea ecx, [ebp - 0x18]
push eax
call fcn.10094e50
mov ebx, str.dtframe32.dll
lea ecx, [ebp - 4]
push ebx
call fcn.10095910
push str.dtframe64.dll
lea ecx, [ebp - 0x18]
call fcn.10095910
and word [ebp - 0x220], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x21e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0
lea eax, [ebp - 0x220]
push 0x103
push eax
call fcn.100bfe40
add esp, 0xc
test eax, eax
je 0x10052245
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0xc]
push eax
call fcn.10094f40
push esi
lea ecx, [ebp - 0xc]
call fcn.100984d0
push str.SysWOW64_
lea ecx, [ebp - 0xc]
call fcn.10095910
push ebx
lea ecx, [ebp - 0xc]
call fcn.10095910
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x14]
push eax
call fcn.10094f40
push esi
lea ecx, [ebp - 0x14]
call fcn.100984d0
push str.System32_
lea ecx, [ebp - 0x14]
call fcn.10095910
push str.dtframe64.dll
lea ecx, [ebp - 0x14]
call fcn.10095910
lea eax, [ebp - 0x220]
lea ecx, [ebp - 8]
push eax
call fcn.10094f40
push esi
lea ecx, [ebp - 8]
call fcn.100984d0
push esi
lea ecx, [ebp - 8]
call fcn.10095910
push str.bakdtfrm32.sys
lea ecx, [ebp - 8]
call fcn.10095910
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x10]
push eax
call fcn.10094f40
push esi
lea ecx, [ebp - 0x10]
call fcn.100984d0
push esi
lea ecx, [ebp - 0x10]
call fcn.10095910
push str.bakdtfrm64.sys
lea ecx, [ebp - 0x10]
call fcn.10095910
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
push edi
push dword [ebp - 0xc]
push dword [ebp - 4]
call esi
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call esi
push edi
push dword [ebp - 8]
push dword [ebp - 4]
call esi
push edi
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call esi
lea ecx, [ebp - 0x10]
call fcn.10094cc0
lea ecx, [ebp - 0x14]
call fcn.10094cc0
lea ecx, [ebp - 0x18]
call fcn.10094cc0
jmp 0x10052397
push dword [0x101ad648]
lea ecx, [ebp - 4]
call fcn.10094f40
mov esi, 0x10160bc0
lea ecx, [ebp - 4]
push esi
call fcn.100984d0
push esi
lea ecx, [ebp - 4]
call fcn.10095910
mov ebx, str.dtframe32.dll
lea ecx, [ebp - 4]
push ebx
call fcn.10095910
and word [ebp - 0x220], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x21e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0
lea eax, [ebp - 0x220]
push 0x103
push eax
call fcn.100c0330
add esp, 0xc
test eax, eax
je 0x1005231e
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0xc]
push eax
call fcn.10094f40
push esi
lea ecx, [ebp - 0xc]
call fcn.100984d0
push esi
lea ecx, [ebp - 0xc]
call fcn.10095910
push ebx
lea ecx, [ebp - 0xc]
call fcn.10095910
xor ebx, ebx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x426]
mov word [ebp - 0x428], bx
push ebx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x428]
push 0x103
push eax
call fcn.100bfe40
add esp, 0xc
test eax, eax
je 0x1005237f
lea eax, [ebp - 0x428]
lea ecx, [ebp - 8]
push eax
call fcn.10094f40
push esi
lea ecx, [ebp - 8]
call fcn.100984d0
push esi
lea ecx, [ebp - 8]
call fcn.10095910
push str.bakdtfrm32.sys
lea ecx, [ebp - 8]
call fcn.10095910
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
push ebx
push dword [ebp - 0xc]
push dword [ebp - 4]
call esi
push ebx
push dword [ebp - 8]
push dword [ebp - 4]
call esi
lea ecx, [ebp - 8]
call fcn.10094cc0
lea ecx, [ebp - 0xc]
call fcn.10094cc0
lea ecx, [ebp - 4]
call fcn.10094cc0
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret