Function at 0x40358c
Capabilities:
Copy file

Disassembly:
push 0x18
mov eax, 0x532459
call fcn.004f8194
mov ebx, ecx
push 0x19a
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
mov edi, str.CFreezeWrapStub::ExitStub
push edi
call fcn.00401769
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
call fcn.004146de
or dword [ebp - 0x10], 0xffffffff
lea esi, [ebx + 0x10]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x64]
test eax, eax
je 0x403712
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
mov ecx, esi
call dword [eax + 0x5c]
test eax, eax
je 0x40369c
lea ecx, [ebp - 0x14]
call fcn.00404402
mov dword [ebp - 4], 1
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push dword [ebp - 0x10]
push str.Process_exit_code___u__0x_08X_
push eax
call fcn.004043ef
add esp, 0xc
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.0040184e
mov byte [ebp - 4], 2
push 2
mov byte [ebp - 4], 1
call fcn.0041474e
cmp dword [ebp - 0x10], 0
je 0x40368e
push 0x1a7
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push edi
call fcn.00401769
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.abnormal
call fcn.00401769
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Process_returned_non_zero_exit_code_
call fcn.00401769
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.procexit
call fcn.00401769
mov byte [ebp - 4], 6
push dword [ebp - 0x10]
mov byte [ebp - 4], 1
mov ecx, ebx
call fcn.00403ff3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401898
jmp 0x403702
push 0x1ac
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push edi
call fcn.00401769
mov dword [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.abnormal
call fcn.00401769
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.GetExitCode_failed_
call fcn.00401769
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.getexitcode
call fcn.00401769
mov byte [ebp - 4], 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
call fcn.00403ff3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x60]
mov ecx, ebx
call fcn.00403db6
jmp 0x403734
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.Process_never_ran.
call fcn.00401769
mov dword [ebp - 4], 0xb
push 2
or dword [ebp - 4], 0xffffffff
call fcn.0041474e
xor edi, edi
cmp dword [ebp - 0x10], edi
je 0x40375b
mov esi, dword [ebx + 4]
cmp esi, edi
je 0x403756
call fcn.0042c65b
test eax, eax
je 0x403756
lea ecx, [esi + 0xa24]
call fcn.0042c74c
call fcn.00403842
mov eax, dword [ebx + 4]
lea ecx, [eax + 4]
mov eax, dword [ecx]
push 0x20
call dword [eax + 0x84]
test eax, eax
je 0x4037d8
lea eax, [ebp - 0x18]
push eax
call fcn.004019c2
mov dword [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str..log
call fcn.00401769
mov byte [ebp - 4], 0xd
push ecx
mov esi, esp
mov dword [ebp - 0x20], esp
call fcn.00413952
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x14]
call fcn.00413822
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [ebp - 4], 0xc
mov ecx, esi
call fcn.00401898
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401898
mov eax, dword [ebx + 4]
lea ecx, [eax + 4]
mov eax, dword [ecx]
push 2
call dword [eax + 0x84]
test eax, eax
jne 0x403831
xor ecx, ecx
mov edx, 0x59c390
call fcn.00414bf6
push edi
xor eax, eax
call fcn.00401963
mov eax, dword [ebx + 4]
lea ecx, [eax + 4]
mov eax, dword [ecx]
push 0x20
call dword [eax + 0x84]
test eax, eax
jne 0x403831
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004019c2
mov dword [ebp - 4], 0x10
or dword [ebp - 4], 0xffffffff
call fcn.00412ad0
pop ecx
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x54]
mov eax, dword [ebp - 0x10]
call fcn.004f826c
ret