Function at 0x40142d
Capabilities:
Copy file

Disassembly:
mov eax, 0x62d68f
call fcn.0060aa10
sub esp, 0x830
push ebx
push esi
push edi
mov dword [ebp - 0x14], ecx
push 0x68112c
lea ecx, [ebp - 0x20]
call fcn.004034c3
and dword [ebp - 4], 0
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
mov ecx, esi
call fcn.00510090
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401017
lea ecx, [ebp - 0x1c]
call fcn.00403481
xor edi, edi
inc edi
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x10]
call fcn.00403481
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00403481
mov byte [ebp - 4], 3
push 0x6765e8
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.00510200
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x4014d7
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x1c]
add ecx, 0xa4
call fcn.00403442
push 0x676588
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 5
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.005101c0
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x40150e
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x114], edi
push 0x676574
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 6
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.005101c0
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x4015f0
lea eax, [ebp - 0x3c]
push eax
call fcn.00406c4f
pop ecx
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x401559
mov eax, dword [eax + 4]
jmp 0x40155c
add eax, 4
mov edi, 0x681130
lea ecx, [ebp - 0x43c]
call fcn.00420c10
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.00403747
and dword [ebp + 8], 0
push 0x681154
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.005b2e53
add esp, 0xc
test eax, eax
jne 0x4015b9
push 0x8250
push str.r_d_n
push dword [ebp + 8]
call fcn.005b2ea6
push dword [ebp + 8]
call fcn.005b3054
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401017
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00401017
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401017
xor al, al
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4
push 0x6765b4
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 8
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.00510200
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x401715
mov esi, 0x200
push esi
lea eax, [ebp - 0x83c]
push eax
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ecx, dword [ebp - 0x10]
call fcn.00406a8f
xor edi, edi
push ebx
push dword [ebp - 0x10]
lea eax, [ebp - 0x83c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x40166e
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0x64
jl 0x401646
jmp 0x4016e8
xor eax, eax
push 0x3fe
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x43a]
push ebx
push eax
call fcn.005b57c0
push 0x681164
lea eax, [ebp - 0x43c]
push esi
push eax
call fcn.004210f0
mov eax, dword [ebp - 0x14]
add esp, 0x18
cmp dword [eax + 0xb8], ebx
je 0x4016d1
add eax, 0xa4
cmp dword [eax + 0x18], 8
jb 0x4016b9
mov eax, dword [eax + 4]
jmp 0x4016bc
add eax, 4
push eax
mov ecx, esi
push str.__p___s_
lea esi, [ebp - 0x43c]
call fcn.00420e00
pop ecx
pop ecx
call fcn.0040109f
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x43c]
push ebx
push eax
call fcn.00407361
pop ecx
pop ecx
xor bl, bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401017
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00401017
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401017
mov al, bl
jmp 0x4015df
push 0x676540
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 9
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.005101c0
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x401749
or dword [0x719570], edi
push 0x6764cc
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 0xa
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.005101c0
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x40177e
or dword [0x719570], 2
push 0x676478
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 0xb
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.005101c0
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x4017b3
or dword [0x719570], 4
push str.param
lea ecx, [ebp + 8]
call fcn.004034c3
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.00510200
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.00401017
test bl, bl
je 0x4017f6
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x18]
add ecx, 0x118
call fcn.00403442
mov bl, 1
jmp 0x4016ea