Function at 0x10014387
Capabilities:
Copy file
Set file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x1030]
mov eax, 0x10b0
call fcn.101d14f0
mov eax, dword [0x10274398]
xor eax, ebp
mov dword [ebp + 0x102c], eax
push ebx
push esi
push edi
mov esi, 0x104
push esi
lea eax, [ebp + 0xb9c]
push eax
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.UninstClone
mov dword [ebp - 0x80], eax
call fcn.1000a6f3
mov ebx, eax
pop ecx
cmp ebx, edi
je 0x1001469b
cmp word [ebx], di
je 0x1001469b
push ebx
push esi
lea eax, [ebp + 0xda4]
push eax
call fcn.1000108c
push 0x80
lea eax, [ebp + 0xda4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp + 0xda4]
push eax
lea eax, [ebp + 0xb9c]
push eax
call edi
test eax, eax
jne 0x10014443
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0xda4]
push eax
push str.AIL:CopyClone__s__d
push 3
call fcn.101d1209
add esp, 0x10
jmp 0x10014748
push ebx
push esi
lea eax, [ebp + 0x994]
push eax
call fcn.1000108c
lea eax, [ebp + 0x994]
push 0x5c
push eax
call fcn.101d1bcf
pop ecx
pop ecx
test eax, eax
je 0x1001446a
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp + 0x994]
mov dword [ebp - 0x78], eax
push str.AhnUn.dat
push 0x20
lea eax, [ebp + 0xfec]
push eax
call fcn.1000108c
push esi
lea eax, [ebp + 0xfec]
push eax
push dword [ebp - 0x78]
lea eax, [ebp + 0x78c]
push eax
call fcn.10016b70
push dword [ebp - 0x80]
lea eax, [ebp + 0xfac]
push 0x101ee5d8
push 0x20
push eax
call fcn.1001d140
add esp, 0x20
lea eax, [ebp + 0x78c]
push eax
push 0
push 0
push dword [ebp - 0x80]
call fcn.100142e4
add esp, 0xc
push eax
lea eax, [ebp + 0xfac]
push eax
push str.ppid
call fcn.100051a0
add esp, 0x10
test eax, eax
jne 0x100144e9
test edx, edx
je 0x10014508
push edx
push eax
lea eax, [ebp + 0xfac]
push eax
lea eax, [ebp + 0x78c]
push eax
push str.AIL:CopyUnSecClone:__s__szPID__llu
push 3
call fcn.101d1209
add esp, 0x18
push str.SecFile
call fcn.1000a6f3
mov ebx, eax
pop ecx
test ebx, ebx
je 0x10014576
cmp word [ebx], 0
je 0x10014576
push ebx
call fcn.100167d3
push esi
push eax
push dword [ebp - 0x78]
lea eax, [ebp + 0xb9c]
push eax
call fcn.10016b70
add esp, 0x14
push 0
lea eax, [ebp + 0xb9c]
push eax
push ebx
call edi
test eax, eax
jne 0x10014566
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0xb9c]
push eax
push str.AIL:CopySecClone__s__d
push 3
call fcn.101d1209
add esp, 0x10
lea eax, [ebp + 0xb9c]
push 0
push eax
call fcn.1000c929
pop ecx
pop ecx
push str.IniFile
call fcn.1000a6f3
mov ebx, eax
pop ecx
test ebx, ebx
je 0x100145e4
cmp word [ebx], 0
je 0x100145e4
push ebx
call fcn.100167d3
push esi
push eax
push dword [ebp - 0x78]
lea eax, [ebp + 0xb9c]
push eax
call fcn.10016b70
add esp, 0x14
push 0
lea eax, [ebp + 0xb9c]
push eax
push ebx
call edi
test eax, eax
jne 0x100145d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0xb9c]
push eax
push str.AIL:CopySecClone__s__d
push 3
call fcn.101d1209
add esp, 0x10
lea eax, [ebp + 0xb9c]
push 0
push eax
call fcn.1000c929
pop ecx
pop ecx
push 0x80
lea eax, [ebp + 0xda4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0xda4]
push eax
push str.AIL:DeleteOnReboot_s
push 3
call fcn.101d1209
xor ebx, ebx
lea eax, [ebp + 0xda4]
push ebx
push eax
call fcn.1000c929
push str.CmdLine
call fcn.1000a6f3
mov edi, eax
add esp, 0x18
mov esi, edi
cmp edi, ebx
je 0x1001478d
cmp word [edi], bx
je 0x1001478d
push str._Uninstall
push esi
call fcn.1001664d
pop ecx
pop ecx
cmp eax, ebx
jne 0x10014660
push 0x101f70cc
push esi
call fcn.1001664d
pop ecx
pop ecx
cmp eax, ebx
je 0x10014768
lea edx, [eax + 0x14]
movzx ecx, word [edx]
cmp cx, 0x3d
je 0x1001474c
cmp cx, 0x20
je 0x1001474c
cmp cx, 0x2f
je 0x1001474c
cmp cx, 0x2d
je 0x1001474c
cmp cx, bx
je 0x1001474c
mov esi, edx
jmp 0x1001463a
push str.TempDir
call fcn.1000a6f3
mov dword [ebp - 0x7c], edi
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileW]
pop ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x7c], 0x1e
jge 0x10014742
push dword [ebp - 0x7c]
lea eax, [ebp + 0xfec]
push str.AhnUn0_02d.tmp
push 0x20
push eax
call fcn.1001d140
push esi
lea eax, [ebp + 0xfec]
push eax
push dword [ebp - 0x78]
lea eax, [ebp + 0xda4]
push eax
call fcn.10016b70
add esp, 0x20
push 0x80
lea eax, [ebp + 0xda4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
lea eax, [ebp + 0xda4]
push eax
lea eax, [ebp + 0xb9c]
push eax
call edi
mov ebx, eax
test ebx, ebx
jne 0x10014733
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0xda4]
push eax
push str.AIL:CopyClone__s__d
push 3
call fcn.101d1209
add esp, 0x10
inc dword [ebp - 0x7c]
test ebx, ebx
je 0x100146b2
cmp dword [ebp - 0x7c], 0x1e
jne 0x10014473
xor eax, eax
jmp 0x100147bb
lea ecx, [eax + 0x14]
jmp 0x10014753
inc ecx
inc ecx
cmp word [ecx], 0x20
je 0x10014751
push ecx
push closesocket
push eax
call fcn.10016ac1
add esp, 0xc
cmp word [edi], bx
je 0x1001478d
push edi
lea eax, [ebp + 0xda4]
push eax
push str.__s___UC__s
lea eax, [ebp - 0x74]
push 0x400
push eax
call fcn.1001d140
add esp, 0x14
jmp 0x100147aa
lea eax, [ebp + 0xda4]
push eax
push str.__s___UC
lea eax, [ebp - 0x74]
push 0x400
push eax
call fcn.1001d140
add esp, 0x10
push ebx
push ebx
push dword [ebp - 0x78]
lea eax, [ebp - 0x74]
push eax
call fcn.100133a4
add esp, 0x10
mov ecx, dword [ebp + 0x102c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101d14d7
add ebp, 0x1030
leave
ret