Function at 0x10008720
Capabilities:
Copy file
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x10
push 0
push 0
dec ecx
jne 0x10008728
push ecx
push ebx
push esi
push edi
mov eax, 0x100086a0
call fcn.100033f0
xor eax, eax
push ebp
push 0x10008ad9
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x10008772
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x10008af0
mov eax, 0x10008b00
call fcn.1000599c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x1000877c
lea edx, [ebp - 0x14]
mov eax, 0x10008b0c
call fcn.10003c48
mov edx, dword [ebp - 0x14]
mov eax, 0x1000a6e4
call fcn.100025f4
push 0x1000a6e4
mov edx, dword [0x1000a6e4]
mov eax, 0x10008b54
call fcn.10002964
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x1000a6e4]
call fcn.10002924
mov eax, dword [0x1000a6e4]
call fcn.10002918
push eax
push 0xffffffffffffffff
push 0
call fcn.100034e8
mov edx, dword [0x10009128]
mov dword [edx], eax
mov eax, dword [0x10009128]
cmp dword [eax], 0
je 0x10008801
call sub.kernel32.dll_GetLastError_1
cmp eax, 0xb7
jne 0x10008801
mov eax, dword [0x10009128]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_ReleaseMutex
call fcn.100024b8
lea edx, [ebp - 0x1c]
xor eax, eax
call fcn.10001480
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.100039b4
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x20]
mov eax, 0x10008b60
call fcn.10003c48
mov edx, dword [ebp - 0x20]
pop eax
call fcn.10002864
je 0x10008977
xor eax, eax
push ebp
push 0x1000896d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x28]
call fcn.10003be8
push dword [ebp - 0x28]
push 0x10008b78
mov eax, 0x10008b60
lea edx, [ebp - 0x2c]
call fcn.10003c48
push dword [ebp - 0x2c]
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.100027e0
mov eax, dword [ebp - 0x24]
call fcn.10003a58
test al, al
jne 0x100088cd
push 0
lea eax, [ebp - 0x34]
call fcn.10003be8
push dword [ebp - 0x34]
push 0x10008b78
mov eax, 0x10008b60
lea edx, [ebp - 0x38]
call fcn.10003c48
push dword [ebp - 0x38]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.100027e0
mov eax, dword [ebp - 0x30]
call fcn.10002918
push eax
lea edx, [ebp - 0x3c]
xor eax, eax
call fcn.10001480
mov eax, dword [ebp - 0x3c]
call fcn.10002918
push eax
call sub.kernel32.dll_CopyFileA
mov eax, 0x1000a6e8
xor ecx, ecx
mov edx, 0x44
call fcn.10001a74
mov eax, 0x1000a72c
xor ecx, ecx
mov edx, 0x10
call fcn.10001a74
mov dword [0x1000a6e8], 0x44
push 0x1000a72c
push 0x1000a6e8
lea eax, [ebp - 0x40]
call fcn.10003be8
mov eax, dword [ebp - 0x40]
call fcn.10002918
push eax
push 0
push 0
push 0xffffffffffffffff
push 0
push 0
push 0x10008b7c
lea eax, [ebp - 0x48]
call fcn.10003be8
push dword [ebp - 0x48]
push 0x10008b78
mov eax, 0x10008b60
lea edx, [ebp - 0x4c]
call fcn.10003c48
push dword [ebp - 0x4c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.100027e0
mov eax, dword [ebp - 0x44]
call fcn.10002918
push eax
call sub.kernel32.dll_CreateProcessA
call fcn.100024b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x10008977
lea edx, [ebp - 0x54]
xor eax, eax
call fcn.10001480
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.10003868
mov edx, dword [ebp - 0x50]
mov eax, dword [0x10009138]
call fcn.100025f4
mov edx, dword [0x1000912c]
xor eax, eax
call fcn.10001480
lea edx, [ebp - 0x58]
mov eax, 8
call fcn.10003a7c
lea eax, [ebp - 0x58]
mov edx, 0x10008b88
call fcn.10002728
mov eax, dword [ebp - 0x58]
call fcn.10002918
mov ebx, eax
lea eax, [ebp - 0x60]
call fcn.10003be8
push dword [ebp - 0x60]
push 0x10008b78
lea eax, [ebp - 0x64]
mov edx, ebx
call fcn.100026cc
push dword [ebp - 0x64]
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.100027e0
mov ecx, dword [ebp - 0x5c]
mov edx, 0x10008b98
mov eax, 0x10008ba8
call fcn.1000585c
lea eax, [ebp - 0x6c]
call fcn.10003be8
push dword [ebp - 0x6c]
push 0x10008b78
lea eax, [ebp - 0x70]
mov edx, ebx
call fcn.100026cc
push dword [ebp - 0x70]
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.100027e0
mov eax, dword [ebp - 0x68]
call fcn.10003f88
call sub.kernel32.dll_GetCurrentProcessId
call fcn.10004048
lea edx, [ebp - 0x78]
mov eax, dword [0x1000912c]
mov eax, dword [eax]
call fcn.100039b4
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.10003728
mov eax, dword [ebp - 0x74]
call fcn.10002918
call fcn.10004084
lea eax, [ebp - 0x80]
call fcn.10003be8
push dword [ebp - 0x80]
push 0x10008b78
lea eax, [ebp - 0x84]
mov edx, ebx
call fcn.100026cc
push dword [ebp - 0x84]
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.100027e0
mov eax, dword [ebp - 0x7c]
call fcn.10002918
push eax
call sub.kernel32.dll_DeleteFileA
call fcn.10008440
push 0xffffffffffffffff
mov eax, dword [0x10009134]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_WaitForSingleObject
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x10008ae0
lea eax, [ebp - 0x84]
mov edx, 0x1d
call fcn.100025c4
ret