Function at 0x40ea88
Capabilities:
Copy file
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x40ea90
push ebx
push esi
push edi
mov ebx, eax
mov edi, 0x448a18
xor eax, eax
push ebp
push 0x40ed83
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x448a04], 0
je 0x40eabe
call dword [0x448a04]
mov edx, dword [0x448a24]
mov eax, 0x80000002
call fcn.004066f8
mov esi, eax
lea ecx, [ebp - 0x10]
mov edx, 0x40ed9c
mov eax, esi
call fcn.00406828
push dword [ebp - 0x10]
push 0x40edb4
push dword [0x448a00]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00403e68
mov eax, esi
call fcn.00406904
mov eax, dword [ebp - 4]
call fcn.004066dc
push dword [ebp - 4]
push 0x40edb4
push dword [0x448a00]
push 0x40edc0
mov eax, edi
mov edx, 4
call fcn.00403e68
push 0
mov eax, dword [edi]
call fcn.00403fa8
push eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.004064c8
mov eax, dword [ebp - 0x14]
call fcn.00403fa8
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
mov eax, dword [edi]
call fcn.00403fa8
push eax
call sub.kernel32.dll_SetFileAttributesA
test bl, bl
je 0x40ec0b
push 0x40edd0
push dword [edi]
push 0x40ef8c
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403e68
push dword [ebp - 4]
push 0x40edb4
push dword [0x448a00]
push 0x40efb8
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.00403e68
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
call fcn.0040656c
push 0
push 0xfa0
push 0
push 0x40efc8
push dword [0x448a00]
push 0x40efe0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00406530
push dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x1c]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x18]
call fcn.00403ce8
mov edx, dword [ebp - 0x18]
xor ecx, ecx
mov eax, 0x40eff0
call fcn.00409e68
mov eax, dword [ebp - 0xc]
call fcn.00403fa8
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x24]
mov ecx, dword [0x448a00]
mov edx, 0x40f004
call fcn.00403df4
mov edx, dword [ebp - 0x24]
mov eax, 0x80000002
call fcn.00406758
mov esi, eax
mov eax, dword [edi]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x28]
call fcn.00403ce8
mov ecx, dword [ebp - 0x28]
mov edx, 0x40f018
mov eax, esi
call fcn.004068c4
mov eax, esi
call fcn.00406904
push dword [0x448a24]
push 0x40f034
push 0x40edb4
push dword [0x448a00]
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00403e68
mov edx, dword [ebp - 0x2c]
mov eax, 0x80000002
call fcn.00406758
mov esi, eax
mov ecx, dword [0x448a10]
mov edx, 0x40f048
mov eax, esi
call fcn.004068c4
push 0x40f05c
push dword [edi]
push 0x40f068
push 0x40f034
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x34]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x30]
call fcn.00403ce8
mov ecx, dword [ebp - 0x30]
mov edx, 0x40f074
mov eax, esi
call fcn.004068c4
mov ecx, 1
mov edx, 0x40f08c
mov eax, esi
call fcn.0040688c
mov ecx, 1
mov edx, 0x40f0a0
mov eax, esi
call fcn.0040688c
mov ecx, dword [0x448a14]
mov edx, 0x40f0b4
mov eax, esi
call fcn.004068c4
lea eax, [ebp - 0x38]
mov ecx, 0x40f0c8
mov edx, dword [edi]
call fcn.00403df4
mov ecx, dword [ebp - 0x38]
mov edx, 0x40f0d4
mov eax, esi
call fcn.004068c4
push 0
push 0x400
mov eax, dword [edi]
call fcn.0040661c
call fcn.00404654
mov ecx, eax
mov edx, 0x40f0e8
mov eax, esi
call fcn.0040688c
mov ecx, dword [0x4489f4]
mov edx, 0x40f100
mov eax, esi
call fcn.004068c4
mov eax, esi
call fcn.00406904
call fcn.0040e9e8