Function at 0x40e000
Capabilities:
Copy file
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x43bb36
mov eax, dword fs:[0]
push eax
sub esp, 0xd98
mov eax, dword [0x44bcd0]
xor eax, esp
mov dword [esp + 0xd94], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44bcd0]
xor eax, esp
push eax
lea eax, [esp + 0xdac]
mov dword fs:[0], eax
mov eax, dword [esp + 0xdc4]
mov esi, dword [esp + 0xdbc]
push 0x13f
lea ecx, [esp + 0x59]
push 0
push ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], 0
mov byte [esp + 0x60], 0
call fcn.00420a40
push 0x7d000
call fcn.00410bca
mov dword [esp + 0x30], eax
xor eax, eax
push 0x104
push eax
lea edx, [esp + 0x2b0]
push edx
mov byte [esp + 0x50], 0
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov dword [esp + 0x69], eax
mov word [esp + 0x6d], ax
mov byte [esp + 0x6f], al
call fcn.00420a40
lea eax, [esp + 0x50]
push 0x20
push eax
call fcn.004013d0
push 0x43d570
push esi
call fcn.0042065d
add esp, 0x2c
mov dword [esp + 0x18], eax
test eax, eax
je 0x40e5e3
push eax
call fcn.00420274
add esp, 4
test eax, eax
jne 0x40e2d2
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
push esi
mov dword [ebx], 0
call fcn.004209c0
push esi
push 0x7d000
push 1
push ebx
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
call fcn.0042057c
mov edi, eax
add esp, 0x14
xor esi, esi
mov dword [esp + 0x30], edi
test edi, edi
jbe 0x40e2bd
lea esp, [esp]
lea ecx, [esp + 0x34]
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e156
test dl, dl
je 0x40e152
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e156
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e136
xor eax, eax
jmp 0x40e15b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40e174
add esi, 0x200
add ebx, 0x200
cmp esi, edi
jb 0x40e130
jmp 0x40e2bd
mov eax, dword [esp + 0xdc0]
lea edx, [esp + 0x54]
mov dword [esp + 0x14], esi
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x40e185
lea edi, [esp + 0x54]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e194
mov bp, word [0x43d584]
lea eax, [ebx + 0x90]
mov word [edi], bp
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40e1b0
lea edi, [esp + 0x54]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e1c0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea esi, [ebx + 0x2c]
mov edx, 0x43d840
mov ecx, esi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40e200
test al, al
je 0x40e1fc
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40e200
add ecx, 2
add edx, 2
test al, al
jne 0x40e1e0
xor eax, eax
jmp 0x40e205
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40e26a
mov ecx, dword [esp + 0xdc0]
lea eax, [esp + 0x298]
sub eax, ecx
lea esp, [esp]
mov dl, byte [ecx]
mov byte [eax + ecx], dl
inc ecx
test dl, dl
jne 0x40e220
lea edi, [esp + 0x298]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e232
mov eax, esi
mov word [edi], bp
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40e241
lea edi, [esp + 0x298]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e254
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
push 0
push 0
push 0
push esi
call fcn.00420b56
mov edx, dword [ebx + 0x20]
push 0
lea ecx, [ebx + 0x24]
push ecx
push edx
lea eax, [esp + 0x70]
push eax
push esi
call fcn.0040d0e0
mov edi, dword [esp + 0x38]
mov ecx, dword [ebx + 0xf4]
mov eax, edi
cdq
xor ebx, ebx
add ecx, eax
adc ebx, edx
add ecx, dword [esp + 0x48]
push 0
adc ebx, dword [esp + 0x50]
push ebx
push ecx
push esi
call fcn.00420b56
add esp, 0x34
cmp edi, dword [esp + 0x30]
jb 0x40e2d2
mov edx, dword [esp + 0x18]
push edx
call fcn.00420274
add esp, 4
test eax, eax
je 0x40e0ef
push 0x400
lea eax, [esp + 0x6ac]
push 0
push eax
call fcn.00420a40
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00420274
add esp, 0x10
test eax, eax
jne 0x40e5d6
jmp 0x40e300
mov edi, dword [esp + 0x18]
push edi
push 0x400
lea edx, [esp + 0x6b0]
push 1
push edx
call fcn.0042057c
push edi
mov esi, eax
call fcn.004209c0
add esp, 0x14
mov ebx, eax
mov ebp, edx
cmp esi, 0x400
jne 0x40e5c1
mov ecx, str.LeaderCab
lea eax, [esp + 0x6a8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e360
test dl, dl
je 0x40e35c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e360
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e340
xor eax, eax
jmp 0x40e365
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40e5c1
push 0x104
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.00420a40
mov eax, dword [esp + 0xdcc]
lea edx, [esp + 0x60]
add esp, 0xc
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x40e390
lea edi, [esp + 0x54]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e3a0
mov cx, word [0x43d584]
lea edx, [esp + 0x6cc]
mov word [edi], cx
push edx
lea ecx, [esp + 0x18]
call fcn.00402d40
mov edx, dword [esp + 0x14]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
mov dword [esp + 0xdb4], 0
jge 0x40e3f4
push esi
lea ecx, [esp + 0x18]
call fcn.004016e0
mov edx, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
push edx
call fcn.0041f932
push eax
call fcn.004010e0
add esp, 0xc
test esi, esi
jl 0x40e63e
mov eax, dword [esp + 0x14]
cmp esi, dword [eax - 8]
jg 0x40e63e
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0x14]
mov byte [esi + ecx], 0
call fcn.00408ea0
test eax, eax
je 0x40e47e
mov edx, dword [esp + 0x14]
push str.LDX64.EXE
push edx
call fcn.0041fc9b
add esp, 8
test eax, eax
sete al
test al, al
je 0x40e45a
lea eax, [esp + 0x54]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e450
jmp 0x40e4a8
lea eax, [esp + 0x6cc]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40e463
lea edi, [esp + 0x54]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e471
jmp 0x40e52e
mov eax, dword [esp + 0x14]
push str.LDX32.EXE
push eax
call fcn.0041fc9b
add esp, 8
test eax, eax
sete al
test al, al
je 0x40e4be
lea eax, [esp + 0x54]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e4a0
mov ecx, dword [str.Ldx.exe]
mov edx, dword [0x43e590]
mov dword [eax], ecx
mov dword [eax + 4], edx
jmp 0x40e53e
mov eax, dword [esp + 0x14]
push str.LDDISK32.SYS
push eax
call fcn.0041fc9b
add esp, 8
test eax, eax
sete al
test al, al
je 0x40e50f
lea eax, [esp + 0x54]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e4e0
mov ecx, dword [str.Lddisk.sys]
mov edx, dword [0x43e574]
mov dword [eax], ecx
mov cx, word [0x43e578]
mov dword [eax + 4], edx
mov dl, byte [0x43e57a]
mov word [eax + 8], cx
mov byte [eax + 0xa], dl
jmp 0x40e53e
lea eax, [esp + 0x6cc]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40e518
lea edi, [esp + 0x54]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e526
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
push 0
push ebp
push ebx
push esi
call fcn.00420b56
mov eax, dword [esp + 0x6d8]
mov edx, dword [esp + 0x748]
push eax
lea ecx, [esp + 0x744]
push ecx
push edx
lea eax, [esp + 0x70]
push eax
push esi
call fcn.0040d0e0
mov ecx, dword [esp + 0x75c]
mov edx, dword [esp + 0x760]
add ecx, ebx
push 0
adc edx, ebp
push edx
push ecx
push esi
call fcn.00420b56
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
add esp, 0x34
mov dword [esp + 0x1c], 2
mov dword [esp + 0xdb4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e5c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00420274
add esp, 4
test eax, eax
je 0x40e300
mov edx, dword [esp + 0x18]
push edx
call fcn.00420014
add esp, 4
mov eax, dword [esp + 0x20]
push eax
call fcn.00410bbf
lea ecx, [esp + 0x29c]
push ecx
call fcn.004089a0
add esp, 8
test eax, eax
je 0x40e8ab
push 0x103
lea edx, [esp + 0x199]
push 0
push edx
mov byte [esp + 0x1a0], 0
call fcn.00420a40
add esp, 0xc
call fcn.00411c35
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40e648
push 0x80004005
call fcn.004011d0
push 0x80070057
call fcn.004011d0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
lea ecx, [esp + 0xba8]
push ecx
lea edx, [esp + 0xcac]
push edx
lea eax, [esp + 0xab0]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x2a8]
push edx
mov dword [esp + 0xdc8], 1
call fcn.00421327
push 0x43e56c
push 0x43e568
lea eax, [esp + 0xac4]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x3c0]
push edx
call fcn.00421d2a
lea eax, [esp + 0x1bc]
push eax
call fcn.00408940
lea eax, [esp + 0x1c0]
add esp, 0x2c
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e6d0
mov ecx, dword [str.Ldx.EN]
mov edx, dword [0x43e564]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0
lea eax, [esp + 0x3a0]
push eax
lea ecx, [esp + 0x19c]
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
push eax
lea edx, [esp + 0x3a0]
push edx
lea eax, [esp + 0x1c]
push str.Replace_CopyFile__s___d_
push eax
call fcn.00401f40
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
mov ecx, 0x44d3c9
call fcn.0040bc50
push 0x104
lea edx, [esp + 0x198]
push 0
push edx
call fcn.00420a40
lea eax, [esp + 0x1a0]
push eax
call fcn.00408940
lea eax, [esp + 0x1a4]
add esp, 0x10
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e763
mov ecx, dword [0x43e498]
mov edx, dword [0x43e49c]
mov dword [eax], ecx
mov cl, byte [0x43e4a0]
mov dword [eax + 4], edx
push 0
lea edx, [esp + 0x29c]
mov byte [eax + 8], cl
push edx
lea eax, [esp + 0x19c]
push eax
call esi
call edi
push eax
lea ecx, [esp + 0x29c]
push ecx
lea edx, [esp + 0x1c]
push str.Replace_CopyFile__s___d_
push edx
call fcn.00401f40
mov ebp, dword [esp + 0x24]
add esp, 0x10
push 0
push ebp
mov ecx, 0x44d3c9
call fcn.0040bc50
push 0x207
lea eax, [esp + 0x4a5]
push 0
push eax
mov byte [esp + 0x4ac], 0
call fcn.00420a40
lea eax, [esp + 0x4ac]
add esp, 0xc
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x40e7f0
mov ecx, dword [str.__Back__]
mov edx, dword [0x43e4b4]
mov dword [eax], ecx
mov cl, byte [0x43e4b8]
mov dword [eax + 4], edx
mov byte [eax + 8], cl
mov eax, dword [esp + 0x2c]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40e818
lea edi, [esp + 0x4a0]
sub eax, ecx
mov esi, ecx
dec edi
jmp 0x40e830
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40e830
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x4a0]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40e850
mov dx, word [0x43df28]
push 1
lea eax, [esp + 0x4a4]
push eax
lea ecx, [esp + 0x2a0]
push ecx
mov word [edi], dx
call fcn.00409450
lea eax, [ebp - 0x10]
add esp, 0xc
mov dword [esp + 0x1c], 3
mov dword [esp + 0xdb4], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40e8ab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xdac]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd94]
xor ecx, esp
call fcn.0041eff4
add esp, 0xda4
ret