Function at 0x40e580
Capabilities:
Copy file
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x43c406
mov eax, dword fs:[0]
push eax
mov eax, 0x116c
call fcn.00421330
mov eax, dword [0x44ccd0]
xor eax, esp
mov dword [esp + 0x1168], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44ccd0]
xor eax, esp
push eax
lea eax, [esp + 0x1180]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1198]
mov esi, dword [esp + 0x1190]
push 0x207
lea ecx, [esp + 0x59]
push 0
push ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x28], 0
mov byte [esp + 0x60], 0
call fcn.00421360
push 0x7d000
call fcn.0041152f
mov dword [esp + 0x30], eax
xor eax, eax
push 0x208
push eax
lea edx, [esp + 0x47c]
push edx
mov byte [esp + 0x50], 0
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov dword [esp + 0x69], eax
mov word [esp + 0x6d], ax
mov byte [esp + 0x6f], al
call fcn.00421360
lea eax, [esp + 0x50]
push 0x20
push eax
call fcn.004013d0
push 0x43e570
push esi
call fcn.00420f7d
add esp, 0x2c
mov dword [esp + 0x18], eax
test eax, eax
je 0x40eb63
push eax
call fcn.00420b94
add esp, 4
test eax, eax
jne 0x40e852
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
push esi
mov dword [ebx], 0
call fcn.004212e0
push esi
push 0x7d000
push 1
push ebx
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
call fcn.00420e9c
mov edi, eax
add esp, 0x14
xor esi, esi
mov dword [esp + 0x2c], edi
test edi, edi
jbe 0x40e83d
lea ecx, [esp + 0x34]
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e6d6
test dl, dl
je 0x40e6d2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e6d6
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e6b6
xor eax, eax
jmp 0x40e6db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40e6f4
add esi, 0x200
add ebx, 0x200
cmp esi, edi
jb 0x40e6b0
jmp 0x40e83d
mov eax, dword [esp + 0x1194]
lea edx, [esp + 0x54]
mov dword [esp + 0x14], esi
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x40e705
lea edi, [esp + 0x54]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e714
mov bp, word [0x43e584]
lea eax, [ebx + 0x90]
mov word [edi], bp
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40e730
lea edi, [esp + 0x54]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e740
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea esi, [ebx + 0x2c]
mov edx, 0x43e84c
mov ecx, esi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40e780
test al, al
je 0x40e77c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40e780
add ecx, 2
add edx, 2
test al, al
jne 0x40e760
xor eax, eax
jmp 0x40e785
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40e7ea
mov ecx, dword [esp + 0x1194]
lea eax, [esp + 0x464]
sub eax, ecx
lea esp, [esp]
mov dl, byte [ecx]
mov byte [eax + ecx], dl
inc ecx
test dl, dl
jne 0x40e7a0
lea edi, [esp + 0x464]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e7b2
mov eax, esi
mov word [edi], bp
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40e7c1
lea edi, [esp + 0x464]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e7d4
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
push 0
push 0
push 0
push esi
call fcn.00421476
mov edx, dword [ebx + 0x20]
push 0
lea ecx, [ebx + 0x24]
push ecx
push edx
lea eax, [esp + 0x70]
push eax
push esi
call fcn.0040d6a0
mov edi, dword [esp + 0x38]
mov ecx, dword [ebx + 0xf4]
mov eax, edi
cdq
xor ebx, ebx
add ecx, eax
adc ebx, edx
add ecx, dword [esp + 0x48]
push 0
adc ebx, dword [esp + 0x50]
push ebx
push ecx
push esi
call fcn.00421476
add esp, 0x34
cmp edi, dword [esp + 0x2c]
jb 0x40e852
mov edx, dword [esp + 0x18]
push edx
call fcn.00420b94
add esp, 4
test eax, eax
je 0x40e673
push 0x400
lea eax, [esp + 0x878]
push 0
push eax
call fcn.00421360
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00420b94
add esp, 0x10
test eax, eax
jne 0x40eb56
jmp 0x40e880
mov edi, dword [esp + 0x18]
push edi
push 0x400
lea edx, [esp + 0x87c]
push 1
push edx
call fcn.00420e9c
push edi
mov esi, eax
call fcn.004212e0
add esp, 0x14
mov ebx, eax
mov ebp, edx
cmp esi, 0x400
jne 0x40eb41
mov ecx, str.LeaderCab
lea eax, [esp + 0x874]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e8e0
test dl, dl
je 0x40e8dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e8e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e8c0
xor eax, eax
jmp 0x40e8e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40eb41
push 0x208
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.00421360
mov eax, dword [esp + 0x11a0]
lea edx, [esp + 0x60]
add esp, 0xc
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x40e910
lea edi, [esp + 0x54]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e920
mov cx, word [0x43e584]
lea edx, [esp + 0x898]
mov word [edi], cx
push edx
lea ecx, [esp + 0x18]
call fcn.00402d40
mov edx, dword [esp + 0x14]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
mov dword [esp + 0x1188], 0
jge 0x40e974
push esi
lea ecx, [esp + 0x18]
call fcn.004016c0
mov edx, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
push edx
call fcn.00420252
push eax
call fcn.004010e0
add esp, 0xc
test esi, esi
jl 0x40ebbe
mov eax, dword [esp + 0x14]
cmp esi, dword [eax - 8]
jg 0x40ebbe
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0x14]
mov byte [esi + ecx], 0
call fcn.00408b90
test eax, eax
je 0x40e9fe
mov edx, dword [esp + 0x14]
push str.LDX64.EXE
push edx
call fcn.004205bb
add esp, 8
test eax, eax
sete al
test al, al
je 0x40e9da
lea eax, [esp + 0x54]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e9d0
jmp 0x40ea28
lea eax, [esp + 0x898]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40e9e3
lea edi, [esp + 0x54]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e9f1
jmp 0x40eaae
mov eax, dword [esp + 0x14]
push str.LDX32.EXE
push eax
call fcn.004205bb
add esp, 8
test eax, eax
sete al
test al, al
je 0x40ea3e
lea eax, [esp + 0x54]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40ea20
mov ecx, dword [str.Ldx.exe]
mov edx, dword [0x43f658]
mov dword [eax], ecx
mov dword [eax + 4], edx
jmp 0x40eabe
mov eax, dword [esp + 0x14]
push str.LDDISK32.SYS
push eax
call fcn.004205bb
add esp, 8
test eax, eax
sete al
test al, al
je 0x40ea8f
lea eax, [esp + 0x54]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40ea60
mov ecx, dword [str.Lddisk.sys]
mov edx, dword [0x43f63c]
mov dword [eax], ecx
mov cx, word [0x43f640]
mov dword [eax + 4], edx
mov dl, byte [0x43f642]
mov word [eax + 8], cx
mov byte [eax + 0xa], dl
jmp 0x40eabe
lea eax, [esp + 0x898]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40ea98
lea edi, [esp + 0x54]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40eaa6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
push 0
push ebp
push ebx
push esi
call fcn.00421476
mov eax, dword [esp + 0x8a4]
mov edx, dword [esp + 0x914]
push eax
lea ecx, [esp + 0x910]
push ecx
push edx
lea eax, [esp + 0x70]
push eax
push esi
call fcn.0040d6a0
mov ecx, dword [esp + 0x928]
mov edx, dword [esp + 0x92c]
add ecx, ebx
push 0
adc edx, ebp
push edx
push ecx
push esi
call fcn.00421476
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
add esp, 0x34
mov dword [esp + 0x1c], 2
mov dword [esp + 0x1188], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40eb41
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00420b94
add esp, 4
test eax, eax
je 0x40e880
mov edx, dword [esp + 0x18]
push edx
call fcn.00420934
add esp, 4
mov eax, dword [esp + 0x20]
push eax
call fcn.0041153a
lea ecx, [esp + 0x468]
push ecx
call fcn.00408690
add esp, 8
test eax, eax
je 0x40ee2b
push 0x207
lea edx, [esp + 0x261]
push 0
push edx
mov byte [esp + 0x268], 0
call fcn.00421360
add esp, 0xc
call fcn.004125a5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40ebc8
push 0x80004005
call fcn.004011d0
push 0x80070057
call fcn.004011d0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x107c]
push ecx
lea edx, [esp + 0xf80]
push edx
lea eax, [esp + 0xc7c]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x474]
push edx
mov dword [esp + 0x119c], 1
call fcn.00421c47
push 0x43f634
push 0x43f630
lea eax, [esp + 0xc90]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0xd98]
push edx
call fcn.0042264a
lea eax, [esp + 0x284]
push eax
call fcn.00408630
lea eax, [esp + 0x288]
add esp, 0x2c
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40ec50
mov ecx, dword [str.Ldx.EN]
mov edx, dword [0x43f62c]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0
lea eax, [esp + 0xd78]
push eax
lea ecx, [esp + 0x264]
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
push eax
lea edx, [esp + 0xd78]
push edx
lea eax, [esp + 0x1c]
push str.Replace_CopyFile__s___d_
push eax
call fcn.00401f40
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
mov ecx, 0x44e3c9
call fcn.0040be50
push 0x208
lea edx, [esp + 0x260]
push 0
push edx
call fcn.00421360
lea eax, [esp + 0x268]
push eax
call fcn.00408630
lea eax, [esp + 0x26c]
add esp, 0x10
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40ece3
mov ecx, dword [0x43f560]
mov edx, dword [0x43f564]
mov dword [eax], ecx
mov cl, byte [0x43f568]
mov dword [eax + 4], edx
push 0
lea edx, [esp + 0x468]
mov byte [eax + 8], cl
push edx
lea eax, [esp + 0x264]
push eax
call esi
call edi
push eax
lea ecx, [esp + 0x468]
push ecx
lea edx, [esp + 0x1c]
push str.Replace_CopyFile__s___d_
push edx
call fcn.00401f40
mov ebp, dword [esp + 0x24]
add esp, 0x10
push 0
push ebp
mov ecx, 0x44e3c9
call fcn.0040be50
push 0x207
lea eax, [esp + 0x671]
push 0
push eax
mov byte [esp + 0x678], 0
call fcn.00421360
lea eax, [esp + 0x678]
add esp, 0xc
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40ed70
mov ecx, dword [str.__Back__]
mov edx, dword [0x43f57c]
mov dword [eax], ecx
mov cl, byte [0x43f580]
mov dword [eax + 4], edx
mov byte [eax + 8], cl
mov eax, dword [esp + 0x30]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40ed98
lea edi, [esp + 0x66c]
sub eax, ecx
mov esi, ecx
dec edi
jmp 0x40edb0
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40edb0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x66c]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40edd0
mov dx, word [0x43ef8c]
push 1
lea eax, [esp + 0x670]
push eax
lea ecx, [esp + 0x46c]
push ecx
mov word [edi], dx
call fcn.00409140
lea eax, [ebp - 0x10]
add esp, 0xc
mov dword [esp + 0x1c], 3
mov dword [esp + 0x1188], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40ee2b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1180]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1168]
xor ecx, esp
call fcn.0041f914
add esp, 0x1178
ret