Function at 0x40d320
Capabilities:
Check if file exists
Copy file

Disassembly:
push 0xffffffffffffffff
push 0x49a1f0
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x4bd450]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4bd450]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov ebp, 7
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x18], str.SafeLive.dll
mov dword [esp + 0x1c], str.pdown.dll
mov dword [esp + 0x20], str.liveupd360.dll
mov dword [esp + 0x24], str.360net.dll
mov dword [esp + 0x28], str.360p2sp.dll
mov dword [esp + 0x2c], str.360NetBase.dll
mov dword [esp + 0x30], str.CombineExt.dll
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], ax
mov dword [esp + 0xb0], ebx
xor ecx, ecx
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
mov word [esp + 0x70], cx
mov byte [esp + 0xb0], 1
lea ecx, [esp + 0x6c]
call fcn.0040ccf0
test eax, eax
jne 0x40d43d
mov byte [esp + 0xb0], bl
mov esi, 8
cmp dword [esp + 0x84], esi
jb 0x40d3fc
mov edx, dword [esp + 0x70]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
mov word [esp + 0x70], ax
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x68], esi
jb 0x40d42f
mov ecx, dword [esp + 0x54]
push ecx
call fcn.00471eaf
add esp, 4
xor edx, edx
mov word [esp + 0x54], dx
xor eax, eax
jmp 0x40d623
mov dword [esp + 0x14], ebx
mov esi, 8
jmp 0x40d450
mov eax, dword [esp + 0x14]
mov edi, dword [esp + eax*4 + 0x18]
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x70]
call fcn.00402db0
add esp, 4
mov byte [esp + 0xb0], 2
mov eax, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x40d47f
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40d4c8
mov eax, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x40d498
lea eax, [esp + 0x38]
call fcn.0046ce70
test eax, eax
je 0x40d4c8
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x4c], esi
jb 0x40d4bc
mov edx, dword [esp + 0x38]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov word [esp + 0x38], ax
jmp 0x40d5b0
cmp dword [esp + 0x64], ebx
jne 0x40d4df
lea ecx, [esp + 0x50]
call fcn.0040dcc0
test eax, eax
je 0x40d653
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x54]
call fcn.00402db0
add esp, 4
mov byte [esp + 0xb0], 3
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40d512
lea eax, [esp + 0x8c]
call fcn.0046ce70
test eax, eax
je 0x40d689
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x40d52d
lea ecx, [esp + 0x38]
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40d544
lea eax, [esp + 0x8c]
push ebx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x40d745
mov byte [esp + 0xb0], 2
cmp dword [esp + 0xa0], esi
jb 0x40d576
mov edx, dword [esp + 0x8c]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], ebx
mov word [esp + 0x8c], ax
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x4c], esi
jb 0x40d5a9
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00471eaf
add esp, 4
xor edx, edx
mov word [esp + 0x38], dx
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x14], eax
cmp eax, ebp
jb 0x40d450
mov byte [esp + 0xb0], bl
cmp dword [esp + 0x84], esi
jb 0x40d5e6
mov ecx, dword [esp + 0x70]
push ecx
call fcn.00471eaf
add esp, 4
xor edx, edx
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
mov word [esp + 0x70], dx
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x68], esi
jb 0x40d619
mov eax, dword [esp + 0x54]
push eax
call fcn.00471eaf
add esp, 4
xor ecx, ecx
lea eax, [ecx + 1]
mov word [esp + 0x54], cx
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], ebx
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.00471eba
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x4c], esi
jb 0x40d66e
mov eax, dword [esp + 0x38]
push eax
call fcn.00471eaf
add esp, 4
xor ecx, ecx
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], cx
mov byte [esp + 0xb0], bl
jmp 0x40d3e6
mov byte [esp + 0xb0], 2
cmp dword [esp + 0xa0], esi
jb 0x40d6aa
mov eax, dword [esp + 0x8c]
push eax
call fcn.00471eaf
add esp, 4
xor ecx, ecx
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], ebx
mov word [esp + 0x8c], cx
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x4c], esi
jb 0x40d6dd
mov edx, dword [esp + 0x38]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], ax
mov byte [esp + 0xb0], bl
cmp dword [esp + 0x84], esi
jb 0x40d709
mov ecx, dword [esp + 0x70]
push ecx
call fcn.00471eaf
add esp, 4
xor edx, edx
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
mov word [esp + 0x70], dx
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x68], esi
jb 0x40d73c
mov eax, dword [esp + 0x54]
push eax
call fcn.00471eaf
add esp, 4
xor ecx, ecx
xor eax, eax
jmp 0x40d61e
mov byte [esp + 0xb0], 2
cmp dword [esp + 0xa0], esi
jb 0x40d766
mov edx, dword [esp + 0x8c]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], ebx
mov word [esp + 0x8c], ax
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x4c], esi
jb 0x40d799
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00471eaf
add esp, 4
xor edx, edx
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], dx
mov byte [esp + 0xb0], bl
cmp dword [esp + 0x84], esi
jb 0x40d7c5
mov eax, dword [esp + 0x70]
push eax
call fcn.00471eaf
add esp, 4
xor ecx, ecx
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
mov word [esp + 0x70], cx
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x68], esi
jb 0x40d7f8
mov edx, dword [esp + 0x54]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov word [esp + 0x54], ax
jmp 0x40d623