Function at 0x40fab0
Capabilities:
Copy file
Encode data using xor
Write file on windows

Disassembly:
sub esp, 0x14c
push ebx
push ebp
push esi
push edi
mov edi, 0x42553c
or ecx, 0xffffffff
xor eax, eax
xor ebx, ebx
repne scasb al, byte es:[edi]
not ecx
add ecx, 0xfffffffe
xor esi, esi
test ecx, ecx
mov dword [esp + 0x24], ebx
mov dl, 0x5f
lea ebp, [esp + 0x30]
jle 0x40faf7
mov al, dl
shl al, 7
shr dl, 1
add dl, al
mov al, byte [esi + 0x42553c]
xor al, dl
mov byte [ebp], al
inc ebp
inc esi
cmp esi, ecx
jl 0x40fadd
mov esi, dword [esp + 0x164]
lea ecx, [esp + 0x30]
push 7
push ecx
push esi
mov byte [ebp], 0
call fcn.0041aac0
add esp, 0xc
test eax, eax
jne 0x40fb83
lea eax, [esi + 7]
lea edx, [esp + 0x58]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x40fb1f
lea edi, [esp + 0x58]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x40fb4c
cmp byte [esp + eax + 0x58], 0x2f
jne 0x40fb47
mov byte [esp + eax + 0x58], 0x5c
inc eax
cmp eax, ecx
jl 0x40fb3b
lea edx, [esp + 0x58]
push 0x425e00
push edx
call fcn.0041a820
add esp, 8
test eax, eax
je 0x40fd19
mov ecx, dword [esp + 0x160]
push 0
dec eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14c
ret
call fcn.0040f820
mov edi, eax
test edi, edi
je 0x40fd19
push 0x1000
call fcn.0041a470
mov ebp, eax
add esp, 4
test ebp, ebp
mov dword [esp + 0x14], ebp
je 0x40fd19
push 0
push 0
push 0
push 0
push esi
push edi
call dword [0x42a96c]
mov esi, eax
test esi, esi
mov dword [esp + 0x18], esi
je 0x40fd10
mov edx, dword [esp + 0x160]
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x1c], eax
je 0x40fd09
mov esi, dword [esp + 0x16c]
mov ebp, dword [esp + 0x170]
xor edi, edi
mov ebx, esi
mov dword [esp + 0x10], edi
mov ecx, dword [esp + 0x18]
push 0
lea eax, [esp + 0x2c]
push 0
push eax
push ecx
call dword [0x42a968]
test eax, eax
je 0x40fcd9
mov eax, dword [esp + 0x28]
test eax, eax
jbe 0x40fcd9
cmp eax, 0x1000
jbe 0x40fc42
mov eax, 0x1000
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x20]
push edx
push eax
mov eax, dword [esp + 0x1c]
push eax
push ecx
call dword [0x42a964]
cmp eax, 1
jne 0x40fcb0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x2c]
push 0
push edx
mov edx, dword [esp + 0x24]
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x40fcb0
mov ecx, dword [esp + 0x20]
add edi, ecx
cmp ebp, esi
je 0x40fcb8
mov ecx, dword [esp + 0x168]
test ecx, ecx
jle 0x40fcb8
mov eax, ebp
xor edx, edx
sub eax, esi
imul eax, edi
div ecx
add eax, esi
cmp eax, ebx
je 0x40fcb8
push eax
mov ebx, eax
call fcn.00401f00
add esp, 4
jmp 0x40fcb8
mov dword [esp + 0x10], 1
push 0
call fcn.004052b0
mov eax, dword [0x42adb0]
add esp, 4
test eax, eax
jne 0x40fcf2
mov eax, dword [esp + 0x10]
test eax, eax
je 0x40fc0e
jmp 0x40fcf2
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x40fcf2
push ebp
mov dword [esp + 0x28], 1
call fcn.00401f00
add esp, 4
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
push esi
call dword [0x42a970]
push ebp
call fcn.0041a5d3
add esp, 4
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x14c
ret