Function at 0x4035c1
Capabilities:
Copy file

Disassembly:
push 0x18
mov eax, 0x535463
call fcn.004fa4d4
mov ebx, ecx
push 0x19a
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
mov edi, str.CFreezeWrapStub::ExitStub
push edi
call fcn.00401769
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
call fcn.004147ed
or dword [ebp - 0x10], 0xffffffff
lea esi, [ebx + 0x10]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x64]
test eax, eax
je 0x403747
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
mov ecx, esi
call dword [eax + 0x5c]
test eax, eax
je 0x4036d1
lea ecx, [ebp - 0x14]
call fcn.00404433
mov dword [ebp - 4], 1
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push dword [ebp - 0x10]
push str.Process_exit_code___u__0x_08X_
push eax
call fcn.00404420
add esp, 0xc
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.0040184e
mov byte [ebp - 4], 2
push 2
mov byte [ebp - 4], 1
call fcn.0041485d
cmp dword [ebp - 0x10], 0
je 0x4036c3
push 0x1a7
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push edi
call fcn.00401769
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.abnormal
call fcn.00401769
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Process_returned_non_zero_exit_code_
call fcn.00401769
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.procexit
call fcn.00401769
mov byte [ebp - 4], 6
push dword [ebp - 0x10]
mov byte [ebp - 4], 1
mov ecx, ebx
call fcn.00404024
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401898
jmp 0x403737
push 0x1ac
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push edi
call fcn.00401769
mov dword [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.abnormal
call fcn.00401769
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.GetExitCode_failed_
call fcn.00401769
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.getexitcode
call fcn.00401769
mov byte [ebp - 4], 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
call fcn.00404024
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x60]
mov ecx, ebx
call fcn.00403de7
jmp 0x403769
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.Process_never_ran.
call fcn.00401769
mov dword [ebp - 4], 0xb
push 2
or dword [ebp - 4], 0xffffffff
call fcn.0041485d
xor edi, edi
cmp dword [ebp - 0x10], edi
je 0x403790
mov esi, dword [ebx + 4]
cmp esi, edi
je 0x40378b
call fcn.0042cca8
test eax, eax
je 0x40378b
lea ecx, [esi + 0xa44]
call fcn.0042cd99
call fcn.00403877
mov eax, dword [ebx + 4]
lea ecx, [eax + 4]
mov eax, dword [ecx]
push 0x20
call dword [eax + 0x84]
test eax, eax
je 0x40380d
lea eax, [ebp - 0x18]
push eax
call fcn.004019c2
mov dword [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str..log
call fcn.00401769
mov byte [ebp - 4], 0xd
push ecx
mov esi, esp
mov dword [ebp - 0x20], esp
call fcn.00413a61
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x14]
call fcn.00413931
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [ebp - 4], 0xc
mov ecx, esi
call fcn.00401898
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401898
mov eax, dword [ebx + 4]
lea ecx, [eax + 4]
mov eax, dword [ecx]
push 2
call dword [eax + 0x84]
test eax, eax
jne 0x403866
xor ecx, ecx
mov edx, 0x5a0408
call fcn.00414d05
push edi
xor eax, eax
call fcn.00401963
mov eax, dword [ebx + 4]
lea ecx, [eax + 4]
mov eax, dword [ecx]
push 0x20
call dword [eax + 0x84]
test eax, eax
jne 0x403866
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004019c2
mov dword [ebp - 4], 0x10
or dword [ebp - 4], 0xffffffff
call fcn.00412bdf
pop ecx
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x54]
mov eax, dword [ebp - 0x10]
call fcn.004fa5ac
ret