Function at 0x402b80
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
sub esp, 0xc74
push ebx
push ebp
push esi
push edi
xor ebx, ebx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x16]
mov word [esp + 0x14], bx
push 0x103
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xc8c]
stosw word es:[edi], ax
lea eax, [esp + 0x18]
push eax
push str._cpath:
push ecx
call fcn.0040e1d0
add esp, 0x10
cmp word [esp + 0x14], bx
je 0x402e2b
lea edx, [esp + 0x14]
push 1
push edx
call fcn.0040dc50
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x476]
mov word [esp + 0x474], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x87e]
mov word [esp + 0x87c], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 8
stosw word es:[edi], ax
lea eax, [esp + 0x14]
lea ecx, [esp + 0x874]
push eax
push str._sindex.dat
push 0x103
push ecx
call esi
mov ebp, dword [esp + 0xc9c]
add esp, 0x10
lea edx, [esp + 0x46c]
push str.Cookie
push ebp
push str._s_sindex.dat
push 0x103
push edx
call esi
lea eax, [esp + 0x480]
push eax
call fcn.0040de00
add esp, 0x18
lea ecx, [esp + 0x46c]
lea edx, [esp + 0x874]
push ebx
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x676]
mov word [esp + 0x674], bx
rep stosd dword es:[edi], eax
mov edx, dword [esp + 0xc90]
push ebx
stosw word es:[edi], ax
lea eax, [esp + 0x14]
push 2
lea ecx, [esp + 0x67c]
push eax
push ecx
push edx
mov dword [esp + 0x24], 0xff
call dword [sym.imp.SHLWAPI.dll_UrlGetPartW]
lea eax, [esp + 0x674]
push 0x2e
push eax
lea ebx, [esp + 0x67c]
call dword [sym.imp.MSVCRT.dll_wcsrchr]
add esp, 8
test eax, eax
je 0x402cda
mov word [eax], 0
lea ecx, [esp + 0x674]
push 0x2e
push ecx
call dword [sym.imp.MSVCRT.dll_wcschr]
add esp, 8
test eax, eax
je 0x402cf4
lea ebx, [eax + 2]
mov dx, word [0x42e49c]
mov ecx, 0x93
xor eax, eax
lea edi, [esp + 0x220]
mov dword [esp + 0x21c], 0
mov word [esp + 0xa7c], dx
rep stosd dword es:[edi], eax
mov ecx, 0x81
lea edi, [esp + 0xa7e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x14]
push ebx
push eax
push 0x42834c
lea ecx, [esp + 0xa88]
push 0x103
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x21c]
lea eax, [esp + 0xa7c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x402e2b
mov ebx, dword [sym.imp.MSVCRT.dll_wcscmp]
lea ecx, [esp + 0x248]
push 0x428348
push ecx
call ebx
add esp, 8
test eax, eax
je 0x402e0d
lea edx, [esp + 0x248]
push 0x428340
push edx
call ebx
add esp, 8
test eax, eax
je 0x402e0d
test byte [esp + 0x21c], 0x10
jne 0x402e0d
lea eax, [esp + 0x248]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0x428240
lea edx, [esp + 0x880]
push 0x103
push edx
call esi
add esp, 0x14
lea eax, [esp + 0x248]
lea ecx, [esp + 0x46c]
push eax
push str.Cookie
push ebp
push 0x428330
push 0x103
push ecx
call esi
add esp, 0x18
lea edx, [esp + 0x46c]
lea eax, [esp + 0x874]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [esp + 0x21c]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x402d72
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc74
ret 0xc