Function at 0x40e9f0
Capabilities:
Copy file
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x40e9f8
push ebx
push esi
push edi
mov ebx, eax
mov edi, 0x443a18
xor eax, eax
push ebp
push 0x40eceb
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x443a04], 0
je 0x40ea26
call dword [0x443a04]
mov edx, dword [0x443a24]
mov eax, 0x80000002
call fcn.004066f8
mov esi, eax
lea ecx, [ebp - 0x10]
mov edx, 0x40ed04
mov eax, esi
call fcn.00406828
push dword [ebp - 0x10]
push 0x40ed1c
push dword [0x443a00]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00403e68
mov eax, esi
call fcn.00406904
mov eax, dword [ebp - 4]
call fcn.004066dc
push dword [ebp - 4]
push 0x40ed1c
push dword [0x443a00]
push 0x40ed28
mov eax, edi
mov edx, 4
call fcn.00403e68
push 0
mov eax, dword [edi]
call fcn.00403fa8
push eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.004064c8
mov eax, dword [ebp - 0x14]
call fcn.00403fa8
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
mov eax, dword [edi]
call fcn.00403fa8
push eax
call sub.kernel32.dll_SetFileAttributesA
test bl, bl
je 0x40eb73
push 0x40ed38
push dword [edi]
push 0x40eef4
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403e68
push dword [ebp - 4]
push 0x40ed1c
push dword [0x443a00]
push 0x40ef20
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.00403e68
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
call fcn.0040656c
push 0
push 0xfa0
push 0
push 0x40ef30
push dword [0x443a00]
push 0x40ef48
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00406530
push dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x1c]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x18]
call fcn.00403ce8
mov edx, dword [ebp - 0x18]
xor ecx, ecx
mov eax, 0x40ef58
call fcn.00409dd0
mov eax, dword [ebp - 0xc]
call fcn.00403fa8
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x24]
mov ecx, dword [0x443a00]
mov edx, 0x40ef6c
call fcn.00403df4
mov edx, dword [ebp - 0x24]
mov eax, 0x80000002
call fcn.00406758
mov esi, eax
mov eax, dword [edi]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x28]
call fcn.00403ce8
mov ecx, dword [ebp - 0x28]
mov edx, 0x40ef80
mov eax, esi
call fcn.004068c4
mov eax, esi
call fcn.00406904
push dword [0x443a24]
push 0x40ef9c
push 0x40ed1c
push dword [0x443a00]
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00403e68
mov edx, dword [ebp - 0x2c]
mov eax, 0x80000002
call fcn.00406758
mov esi, eax
mov ecx, dword [0x443a10]
mov edx, 0x40efb0
mov eax, esi
call fcn.004068c4
push 0x40efc4
push dword [edi]
push 0x40efd0
push 0x40ef9c
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x34]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x30]
call fcn.00403ce8
mov ecx, dword [ebp - 0x30]
mov edx, 0x40efdc
mov eax, esi
call fcn.004068c4
mov ecx, 1
mov edx, 0x40eff4
mov eax, esi
call fcn.0040688c
mov ecx, 1
mov edx, 0x40f008
mov eax, esi
call fcn.0040688c
mov ecx, dword [0x443a14]
mov edx, 0x40f01c
mov eax, esi
call fcn.004068c4
lea eax, [ebp - 0x38]
mov ecx, 0x40f030
mov edx, dword [edi]
call fcn.00403df4
mov ecx, dword [ebp - 0x38]
mov edx, 0x40f03c
mov eax, esi
call fcn.004068c4
push 0
push 0x400
mov eax, dword [edi]
call fcn.0040661c
call fcn.00404654
mov ecx, eax
mov edx, 0x40f050
mov eax, esi
call fcn.0040688c
mov ecx, dword [0x4439f4]
mov edx, 0x40f068
mov eax, esi
call fcn.004068c4
mov eax, esi
call fcn.00406904
call fcn.0040e950