Function at 0x1040d3c
Capabilities:
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x15
push 0
push 0
dec ecx
jne 0x1040d44
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x10410dc
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [esi + 0xe], 0
je 0x1040ea1
lea edx, [ebp - 0x18]
mov eax, 0x1c
call fcn.0101b044
mov eax, 6
call fcn.010032f0
mov edx, eax
add edx, 5
lea eax, [ebp - 0x14]
call fcn.01005728
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x1040d9e
sub eax, 4
mov eax, dword [eax]
mov edi, eax
test edi, edi
jle 0x1040dca
mov ebx, 1
mov eax, 0x1a
call fcn.010032f0
add ax, 0x61
push eax
lea eax, [ebp - 0x14]
call fcn.01005cf8
pop edx
mov word [eax + ebx*2 - 2], dx
inc ebx
dec edi
jne 0x1040da9
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0x10410f8
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x5c]
mov eax, 0x1041108
call ebx
push dword [ebp - 0x5c]
lea eax, [ebp - 4]
mov edx, 4
call fcn.01005964
lea edx, [ebp - 0x60]
xor eax, eax
call fcn.01003268
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 4]
call fcn.0101b978
test al, al
jne 0x1040e33
push 0
mov eax, dword [ebp - 4]
call fcn.01005440
push eax
lea edx, [ebp - 0x64]
xor eax, eax
call fcn.01003268
mov eax, dword [ebp - 0x64]
call fcn.01005440
push eax
call sub.kernel32.dll_CopyFileW
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 4]
call fcn.0101baf8
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 4]
call fcn.01005408
lea eax, [ebp - 0xc]
mov edx, dword [0x105707c]
mov edx, dword [edx]
call fcn.01005408
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x10]
mov eax, 0x104111c
call ebx
cmp byte [esi + 0x13], 0
je 0x1040f18
push dword [ebp - 0x10]
push 0x10411d0
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x6c]
mov eax, 0x10411e0
call ebx
push dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.01005964
jmp 0x1040f18
xor edx, edx
mov eax, esi
call fcn.01040860
lea eax, [ebp - 4]
mov edx, dword [0x105707c]
mov edx, dword [edx]
call fcn.01005408
lea edx, [ebp - 0x70]
mov eax, 2
call fcn.0101b044
push dword [ebp - 0x70]
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x74]
mov eax, 0x10411fc
call ebx
push dword [ebp - 0x74]
push 0x10410f8
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x78]
mov eax, 0x1041228
call ebx
push dword [ebp - 0x78]
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.01005964
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x10]
mov eax, 0x104123c
call ebx
lea eax, [ebp - 8]
push eax
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x7c]
mov eax, 0x10412e0
call ebx
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.01009700
lea eax, [ebp - 0x80]
push eax
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x84]
mov eax, 0x10412fc
call ebx
mov eax, dword [ebp - 0x84]
push eax
call sub.kernel32.dll_GetCurrentProcessId
lea edx, [ebp - 0x8c]
call fcn.01008e18
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0x88]
call fcn.01005614
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 8]
pop edx
call fcn.01009700
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 8]
call fcn.01005408
lea eax, [ebp - 0x90]
push eax
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0x94]
mov eax, 0x1041314
call ebx
mov eax, dword [ebp - 0x94]
push eax
lea edx, [ebp - 0x98]
xor eax, eax
call fcn.01003268
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 8]
pop edx
call fcn.01009700
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 8]
call fcn.01005408
lea eax, [ebp - 0x9c]
push eax
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0xa0]
mov eax, 0x1041330
call ebx
mov edx, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.01009700
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 8]
call fcn.01005408
mov dword [ebp - 0x54], 0x3c
xor eax, eax
mov dword [ebp - 0x4c], eax
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0xa4]
mov eax, 0x104134c
call ebx
mov eax, dword [ebp - 0xa4]
call fcn.01005440
mov dword [ebp - 0x48], eax
mov ebx, dword [fcn.01055ae0]
mov ebx, dword [ebx]
lea edx, [ebp - 0xa8]
mov eax, 0x1041364
call ebx
mov eax, dword [ebp - 0xa8]
call fcn.01005440
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 8]
call fcn.01005440
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x50], 0x440
lea eax, [ebp - 0x54]
push eax
call sub.shell32.dll_ShellExecuteExW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x10410e3
lea eax, [ebp - 0xa8]
mov edx, 7
call fcn.010053ac
lea eax, [ebp - 0x8c]
call fcn.01005040
lea eax, [ebp - 0x88]
mov edx, 0xc
call fcn.010053ac
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.010053ac
ret