Function at 0x42d0d0
Capabilities:
Copy file
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5c7ae0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x64
push ebx
push ebp
push esi
lea eax, [esp + 0x28]
push edi
xor esi, esi
push eax
mov dword [esp + 0x14], esi
call fcn.00429ef0
mov dword [esp + 0x80], esi
push str..bak
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.00406610
add esp, 0x10
mov ebx, 1
mov byte [esp + 0x7c], bl
mov eax, dword [eax]
push esi
push eax
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov byte [esp + 0x7c], 0
lea ecx, [esp + 0x34]
call fcn.004381e0
lea ecx, [esp + 0x54]
call fcn.0042b320
mov byte [esp + 0x7c], 2
push str.mail.ru
lea ecx, [esp + 0x38]
call fcn.0043bf90
mov byte [esp + 0x7c], 3
mov eax, dword [esp + 0x68]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [esp + 0x34]
push ecx
push edx
push eax
lea ecx, [esp + 0x60]
call fcn.00427830
push ebx
lea ecx, [esp + 0x58]
mov esi, eax
call fcn.0042b6f0
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov byte [esp + 0x7c], 2
lea ecx, [esp + 0x34]
call fcn.004381e0
push str.yandex.ru
lea ecx, [esp + 0x38]
call fcn.0043bf90
mov byte [esp + 0x7c], 4
mov eax, dword [esp + 0x68]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [esp + 0x34]
push ecx
push edx
push eax
lea ecx, [esp + 0x60]
call fcn.00427830
push ebx
lea ecx, [esp + 0x58]
mov esi, eax
call fcn.0042b6f0
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov byte [esp + 0x7c], 2
lea ecx, [esp + 0x34]
call fcn.004381e0
push str.ya.ru
lea ecx, [esp + 0x38]
call fcn.0043bf90
mov byte [esp + 0x7c], 5
mov eax, dword [esp + 0x68]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [esp + 0x34]
push ecx
push edx
push eax
lea ecx, [esp + 0x60]
call fcn.00427830
push ebx
lea ecx, [esp + 0x58]
mov esi, eax
call fcn.0042b6f0
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov byte [esp + 0x7c], 2
lea ecx, [esp + 0x34]
call fcn.004381e0
push str.yandex.net
lea ecx, [esp + 0x38]
call fcn.0043bf90
mov byte [esp + 0x7c], 6
mov eax, dword [esp + 0x68]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [esp + 0x34]
push ecx
push edx
push eax
lea ecx, [esp + 0x60]
call fcn.00427830
push ebx
lea ecx, [esp + 0x58]
mov esi, eax
call fcn.0042b6f0
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov byte [esp + 0x7c], 2
lea ecx, [esp + 0x34]
call fcn.004381e0
lea ecx, [esp + 0x2c]
call fcn.00437d00
test eax, eax
je 0x42d720
mov eax, dword [esp + 0x2c]
push 0x180
push 0x8002
push eax
call fcn.0051e004
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
je 0x42d720
mov esi, eax
push esi
call fcn.0052150b
mov ebp, eax
add esp, 4
lea ecx, [ebp + 1]
push ecx
lea ecx, [esp + 0x40]
call fcn.0042c7d0
mov byte [esp + 0x7c], 7
mov edx, dword [esp + 0x4c]
sub edx, dword [esp + 0x48]
jne 0x42d2ef
call fcn.0051d2bd
mov eax, dword [esp + 0x48]
push ebp
push eax
push esi
call fcn.0052140e
add esp, 0xc
cmp eax, ebp
jne 0x42d6e1
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ebx
cmp ebp, ecx
jb 0x42d31b
call fcn.0051d2bd
mov edx, dword [esp + 0x48]
mov byte [edx + ebp], 0
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x48]
mov dword [esp + 0x18], 0
jne 0x42d33a
call fcn.0051d2bd
mov ecx, dword [esp + 0x48]
push ecx
lea ecx, [esp + 0x20]
call fcn.0043a810
mov byte [esp + 0x7c], 8
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x54]
mov edi, dword [edx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x28], edi
test eax, eax
je 0x42d371
cmp eax, dword [esp + 0x54]
je 0x42d37a
call fcn.0051d2bd
mov eax, dword [esp + 0x24]
cmp edi, esi
je 0x42d605
test eax, eax
jne 0x42d4d6
call fcn.0051d2bd
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x42d39b
call fcn.0051d2bd
lea eax, [edi + 8]
push eax
lea ecx, [esp + 0x38]
call fcn.00438190
mov byte [esp + 0x7c], 9
mov eax, dword [esp + 0x1c]
cmp dword [eax - 4], ebx
mov esi, dword [esp + 0x34]
jle 0x42d3cb
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
push esi
push eax
call fcn.0051d47a
mov esi, eax
add esp, 8
test esi, esi
je 0x42d5d3
nop
mov eax, dword [esp + 0x18]
add eax, ebx
cmp eax, 0x64
mov dword [esp + 0x18], eax
jg 0x42d5d3
lea ecx, [esp + 0x34]
call fcn.00437d00
movzx edx, word [esi + eax*2]
lea edi, [esi + eax*2]
push edx
call fcn.0051e68c
add esp, 4
test eax, eax
jne 0x42d5b4
movzx eax, word [edi]
push eax
call fcn.0051e60b
add esp, 4
test eax, eax
jne 0x42d5b4
cmp word [edi], 0x2d
je 0x42d5b4
mov eax, dword [esp + 0x1c]
cmp dword [eax - 4], ebx
jle 0x42d44c
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
cmp esi, eax
je 0x42d4a7
cmp dword [eax - 4], ebx
jle 0x42d466
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
cmp esi, eax
jbe 0x42d5b4
movzx eax, word [esi - 2]
push eax
call fcn.0051e68c
add esp, 4
test eax, eax
jne 0x42d5b4
movzx ecx, word [esi - 2]
push ecx
call fcn.0051e60b
add esp, 4
test eax, eax
jne 0x42d5b4
cmp word [esi - 2], 0x2d
je 0x42d5b4
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], 2
mov edi, esi
cmp dword [eax - 4], ebx
jle 0x42d4c7
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
cmp edi, eax
jb 0x42d4dd
cmp word [edi], 0xa
je 0x42d4dd
sub edi, 2
jmp 0x42d4b1
mov eax, dword [eax]
jmp 0x42d391
cmp dword [eax - 4], ebx
jle 0x42d4f3
mov eax, dword [eax - 0xc]
push eax
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
cmp edi, eax
jae 0x42d510
cmp dword [eax - 4], ebx
jle 0x42d50d
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
mov edi, eax
nop
cmp dword [eax - 4], ebx
jle 0x42d526
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
lea ecx, [eax + ebp*2]
cmp esi, ecx
jae 0x42d538
cmp word [esi], 0xa
je 0x42d538
add esi, 2
jmp 0x42d510
cmp dword [eax - 4], ebx
jle 0x42d54e
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
lea ecx, [eax + ebp*2]
cmp esi, ecx
jb 0x42d56e
cmp dword [eax - 4], ebx
jle 0x42d56b
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
lea esi, [eax + ebp*2]
cmp dword [eax - 4], ebx
jle 0x42d584
mov eax, dword [eax - 0xc]
push eax
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
sub esi, edi
sub edi, eax
sar esi, 1
push esi
sar edi, 1
push edi
lea ecx, [esp + 0x24]
call fcn.00426cd0
mov eax, dword [esp + 0x1c]
cmp dword [eax - 4], ebx
jle 0x42d5b1
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401ba0
mov eax, dword [esp + 0x1c]
lea esi, [eax - 2]
mov edx, dword [esp + 0x34]
push edx
add esi, 2
push esi
call fcn.0051d47a
mov edi, dword [esp + 0x30]
mov esi, eax
add esp, 8
test esi, esi
jne 0x42d3e0
mov byte [esp + 0x7c], 8
lea ecx, [esp + 0x34]
call fcn.004381e0
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x42d601
call fcn.0051d2bd
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x42d5fa
call fcn.0051d2bd
mov edi, dword [edi]
jmp 0x42d35b
mov eax, dword [eax]
jmp 0x42d5f0
cmp dword [esp + 0x18], 0x64
jle 0x42d65a
mov eax, dword [esp + 0x14]
push eax
call fcn.0051dedc
add esp, 4
mov byte [esp + 0x7c], 7
lea ecx, [esp + 0x1c]
call fcn.004381e0
mov byte [esp + 0x7c], 0xa
mov eax, dword [esp + 0x48]
xor esi, esi
cmp eax, esi
je 0x42d63f
push eax
call fcn.004d9334
add esp, 4
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
mov byte [esp + 0x7c], 2
mov ecx, dword [esp + 0x3c]
push ecx
jmp 0x42d718
mov esi, dword [esp + 0x14]
push 0
push esi
call fcn.00520e30
push 0
push 0
push esi
call fcn.00520ab1
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.0051d859
add esp, 0x1c
test eax, eax
jl 0x42d813
mov ecx, dword [esp + 0x1c]
cmp eax, dword [ecx - 8]
jg 0x42d813
mov dword [ecx - 0xc], eax
mov ecx, dword [esp + 0x1c]
xor edx, edx
mov word [ecx + eax*2], dx
push edx
lea ecx, [esp + 0x20]
call fcn.00438d40
push eax
push 0
lea ecx, [esp + 0x24]
call fcn.00438c70
push eax
push esi
call fcn.0051f211
add esp, 0xc
test eax, eax
jle 0x42d6d3
test byte [esp + 0x10], 2
je 0x42d6d3
or dword [esp + 0x10], 4
mov byte [esp + 0x7c], 7
lea ecx, [esp + 0x1c]
call fcn.004381e0
push esi
xor edi, edi
call fcn.0051dedc
add esp, 4
mov byte [esp + 0x7c], 0xc
mov eax, dword [esp + 0x48]
cmp eax, edi
je 0x42d702
push eax
call fcn.004d9334
add esp, 4
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov byte [esp + 0x7c], 2
mov edx, dword [esp + 0x3c]
push edx
call fcn.004d9334
add esp, 4
lea ecx, [esp + 0x34]
call fcn.00438090
test byte [esp + 0x10], 4
je 0x42d81d
mov bl, 0xe
mov byte [esp + 0x7c], bl
mov eax, dword [esp + 0x2c]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5dbe20
call fcn.0043bf90
mov byte [esp + 0x88], 0xf
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5e0630
call fcn.0043bf90
mov byte [esp + 0x90], 0x10
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x94], bl
mov ecx, 0x659c00
call fcn.004414f0
mov byte [esp + 0x80], 0x11
mov eax, dword [eax]
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.00403bb0
add esp, 0xc
mov byte [esp + 0x7c], bl
lea ecx, [esp + 0x24]
call fcn.004381e0
push 0x40
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5dbe20
call fcn.0043bf90
mov byte [esp + 0x88], 0x12
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5dcebc
call fcn.0043bf90
mov byte [esp + 0x90], 0x13
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x94], bl
mov ecx, 0x659c00
call fcn.004414f0
mov byte [esp + 0x80], 0x14
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
push eax
push ecx
jmp 0x42d8f7
push 0x80070057
call fcn.00401300
mov bl, 0x15
mov byte [esp + 0x7c], bl
mov edx, dword [esp + 0x2c]
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5dbe20
call fcn.0043bf90
mov byte [esp + 0x88], 0x16
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5e0500
call fcn.0043bf90
mov byte [esp + 0x90], 0x17
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x94], bl
mov ecx, 0x659c00
call fcn.004414f0
mov byte [esp + 0x80], 0x18
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00403bb0
add esp, 0xc
mov byte [esp + 0x7c], bl
lea ecx, [esp + 0x24]
call fcn.004381e0
push 0x10
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5dbe20
call fcn.0043bf90
mov byte [esp + 0x88], 0x19
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5dcebc
call fcn.0043bf90
mov byte [esp + 0x90], 0x1a
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x94], bl
mov ecx, 0x659c00
call fcn.004414f0
mov byte [esp + 0x80], 0x1b
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x3c]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [esp + 0x7c], bl
lea ecx, [esp + 0x24]
call fcn.004381e0
mov byte [esp + 0x7c], 2
lea ecx, [esp + 0x34]
call fcn.004381e0
mov byte [esp + 0x7c], 0x1c
lea ecx, [esp + 0x54]
call fcn.00428910
mov ecx, dword [esp + 0x68]
push ecx
call fcn.004d9334
mov dword [esp + 0x6c], 0
mov byte [esp + 0x80], 0
mov edx, dword [esp + 0x58]
push edx
call fcn.004d9334
add esp, 8
mov dword [esp + 0x7c], 0xffffffff
lea ecx, [esp + 0x2c]
call fcn.004381e0
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x10]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret