Function at 0x13143460
Capabilities:
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff680
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0x968], eax
mov dword [ebp - 0x964], eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], eax
lea esi, [ebp - 0x160]
lea ebx, [ebp - 0x12]
xor eax, eax
push ebp
push 0x13143740
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 8]
mov eax, dword [0x131440c0]
call fcn.131430dc
mov eax, dword [0x131554c4]
mov byte [eax], 0
lea edx, [ebp - 0x964]
xor eax, eax
call fcn.131413b8
mov edx, dword [ebp - 0x964]
mov eax, esi
call fcn.13141670
mov edx, 1
mov eax, esi
call fcn.131419d0
call fcn.13141210
call fcn.1314124c
test eax, eax
jne 0x13143715
push 0
mov edx, ebx
mov ecx, 6
mov eax, esi
call fcn.13141774
call fcn.13141210
lea eax, [ebp - 0x968]
mov edx, ebx
mov ecx, 6
call fcn.13141d94
mov eax, dword [ebp - 0x968]
mov edx, dword [ebp - 8]
call fcn.13141e9c
je 0x1314355c
mov eax, esi
call fcn.1314180c
call fcn.13141210
mov edx, eax
sub edx, 5
mov eax, esi
call fcn.131419f8
call fcn.13141210
mov eax, esi
call fcn.1314180c
call fcn.13141210
mov edi, eax
mov eax, esi
call fcn.1314185c
call fcn.13141210
sub eax, 6
cmp edi, eax
je 0x131435a3
lea eax, [ebp - 0x96c]
mov edx, ebx
mov ecx, 6
call fcn.13141d94
mov eax, dword [ebp - 0x96c]
mov edx, dword [ebp - 8]
call fcn.13141e9c
jne 0x13143508
mov eax, esi
call fcn.1314180c
call fcn.13141210
mov edi, eax
mov eax, esi
call fcn.131417b4
call fcn.13141210
lea eax, [ebp - 0x970]
mov edx, ebx
mov ecx, 6
call fcn.13141d94
mov eax, dword [ebp - 0x970]
mov edx, dword [ebp - 8]
call fcn.13141e9c
jne 0x13143715
lea eax, [ebp - 0x974]
push eax
lea edx, [ebp - 0x978]
xor eax, eax
call fcn.131413b8
mov eax, dword [ebp - 0x978]
call fcn.13141ddc
sub eax, 3
push eax
lea edx, [ebp - 0x97c]
xor eax, eax
call fcn.131413b8
mov eax, dword [ebp - 0x97c]
mov edx, 1
pop ecx
call fcn.13141f5c
mov edx, dword [ebp - 0x974]
lea eax, [ebp - 4]
mov ecx, 0x13143758
call fcn.13141e28
push 0
mov eax, dword [ebp - 4]
call fcn.13141f50
push eax
lea edx, [ebp - 0x980]
xor eax, eax
call fcn.131413b8
mov eax, dword [ebp - 0x980]
call fcn.13141f50
push eax
call sub.KERNEL32.DLL_CopyFileA
mov eax, dword [0x131554c4]
mov byte [eax], 2
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.13141670
mov edx, 1
mov eax, esi
call fcn.131419d0
call fcn.13141210
call fcn.1314124c
test eax, eax
jne 0x13143715
xor ebx, ebx
lea edx, [edi + ebx]
mov eax, esi
call fcn.131419f8
call fcn.13141210
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x960]
mov ecx, 0x800
mov eax, esi
call fcn.13141774
call fcn.13141210
mov edx, ebx
mov eax, esi
call fcn.131419f8
call fcn.13141210
push 0
lea edx, [ebp - 0x960]
mov ecx, dword [ebp - 0xc]
mov eax, esi
call fcn.13141794
call fcn.13141210
add ebx, dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x800
je 0x13143692
mov eax, esi
call fcn.13141a2c
call fcn.13141210
mov eax, esi
call fcn.131417b4
call fcn.13141210
push 1
mov eax, dword [ebp - 4]
call fcn.13141f50
push eax
call sub.KERNEL32.DLL_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x13143747
lea eax, [ebp - 0x980]
mov edx, 8
call fcn.13141cf4
lea eax, [ebp - 8]
mov edx, 2
call fcn.13141cf4
ret