Function at 0x403b87
Capabilities:
Copy file

Disassembly:
push 0x18
mov eax, 0x5ce7f6
call fcn.00595e20
mov ebx, ecx
push 0x162
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
mov edi, str.CFreezeWrapStub::ExitStub
push edi
call fcn.004015a6
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
call fcn.0040b1a6
or dword [ebp - 0x10], 0xffffffff
lea esi, [ebx + 0x58]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x5c]
test eax, eax
je 0x403d0d
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
mov ecx, esi
call dword [eax + 0x54]
test eax, eax
je 0x403c97
lea ecx, [ebp - 0x14]
call fcn.004048be
mov dword [ebp - 4], 1
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push dword [ebp - 0x10]
push str.Process_exit_code___u__0x_08X_
push eax
call fcn.004048ab
add esp, 0xc
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 2
push 2
mov byte [ebp - 4], 1
call fcn.0040b216
cmp dword [ebp - 0x10], 0
je 0x403c89
push 0x16f
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push edi
call fcn.004015a6
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.abnormal
call fcn.004015a6
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Process_returned_non_zero_exit_code_
call fcn.004015a6
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.procexit
call fcn.004015a6
mov byte [ebp - 4], 6
push dword [ebp - 0x10]
mov byte [ebp - 4], 1
mov ecx, ebx
call fcn.00404462
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401752
jmp 0x403cfd
push 0x174
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push edi
call fcn.004015a6
mov dword [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.abnormal
call fcn.004015a6
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.GetExitCode_failed_
call fcn.004015a6
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.getexitcode
call fcn.004015a6
mov byte [ebp - 4], 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
call fcn.00404462
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x58]
mov ecx, ebx
call fcn.0040421e
jmp 0x403d2f
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.Process_never_ran.
call fcn.004015a6
mov dword [ebp - 4], 0xb
push 2
or dword [ebp - 4], 0xffffffff
call fcn.0040b216
xor edi, edi
cmp dword [ebp - 0x10], edi
je 0x403d56
mov esi, dword [ebx + 4]
cmp esi, edi
je 0x403d51
call fcn.00412687
test eax, eax
je 0x403d51
lea ecx, [esi + 0xd98]
call fcn.00412732
call fcn.00403e44
mov eax, dword [ebx + 4]
lea ecx, [eax + 0x248]
mov eax, dword [ecx]
push 0x20
call dword [eax + 4]
test eax, eax
je 0x403dd3
lea eax, [ebp - 0x18]
push eax
call fcn.0040198d
mov dword [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str..log
call fcn.004015a6
mov byte [ebp - 4], 0xd
push ecx
mov esi, esp
mov dword [ebp - 0x20], esp
call fcn.0040d1ea
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x14]
call fcn.0040d0ba
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [ebp - 4], 0xc
mov ecx, esi
call fcn.00401752
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401752
mov eax, dword [ebx + 4]
lea ecx, [eax + 0x248]
mov eax, dword [ecx]
push 2
call dword [eax + 4]
test eax, eax
jne 0x403e33
push 0x6caa50
xor ecx, ecx
call fcn.0040b6b1
cmp dword [0x6caacc], edi
jle 0x403e02
and dword [0x6caa74], 0xfffffffe
mov eax, dword [ebx + 4]
lea ecx, [eax + 0x248]
mov eax, dword [ecx]
push 0x20
call dword [eax + 4]
test eax, eax
jne 0x403e33
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.0040198d
mov dword [ebp - 4], 0x10
or dword [ebp - 4], 0xffffffff
call fcn.0040cd4f
pop ecx
lea ecx, [ebx + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x4c]
mov eax, dword [ebp - 0x10]
call fcn.00595ef8
ret