Function at 0x40ea74
Capabilities:
Copy file
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x40ea7c
push ebx
push esi
push edi
mov ebx, eax
mov edi, 0x44aa18
xor eax, eax
push ebp
push 0x40ed6f
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x44aa04], 0
je 0x40eaaa
call dword [0x44aa04]
mov edx, dword [0x44aa24]
mov eax, 0x80000002
call fcn.004066f8
mov esi, eax
lea ecx, [ebp - 0x10]
mov edx, 0x40ed88
mov eax, esi
call fcn.00406828
push dword [ebp - 0x10]
push 0x40eda0
push dword [0x44aa00]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00403e68
mov eax, esi
call fcn.00406904
mov eax, dword [ebp - 4]
call fcn.004066dc
push dword [ebp - 4]
push 0x40eda0
push dword [0x44aa00]
push 0x40edac
mov eax, edi
mov edx, 4
call fcn.00403e68
push 0
mov eax, dword [edi]
call fcn.00403fa8
push eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.004064c8
mov eax, dword [ebp - 0x14]
call fcn.00403fa8
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
mov eax, dword [edi]
call fcn.00403fa8
push eax
call sub.kernel32.dll_SetFileAttributesA
test bl, bl
je 0x40ebf7
push 0x40edbc
push dword [edi]
push 0x40ef78
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403e68
push dword [ebp - 4]
push 0x40eda0
push dword [0x44aa00]
push 0x40efa4
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.00403e68
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
call fcn.0040656c
push 0
push 0xfa0
push 0
push 0x40efb4
push dword [0x44aa00]
push 0x40efcc
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00406530
push dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x1c]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x18]
call fcn.00403ce8
mov edx, dword [ebp - 0x18]
xor ecx, ecx
mov eax, 0x40efdc
call fcn.00409e68
mov eax, dword [ebp - 0xc]
call fcn.00403fa8
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x24]
mov ecx, dword [0x44aa00]
mov edx, 0x40eff0
call fcn.00403df4
mov edx, dword [ebp - 0x24]
mov eax, 0x80000002
call fcn.00406758
mov esi, eax
mov eax, dword [edi]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x28]
call fcn.00403ce8
mov ecx, dword [ebp - 0x28]
mov edx, 0x40f004
mov eax, esi
call fcn.004068c4
mov eax, esi
call fcn.00406904
push dword [0x44aa24]
push 0x40f020
push 0x40eda0
push dword [0x44aa00]
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00403e68
mov edx, dword [ebp - 0x2c]
mov eax, 0x80000002
call fcn.00406758
mov esi, eax
mov ecx, dword [0x44aa10]
mov edx, 0x40f034
mov eax, esi
call fcn.004068c4
push 0x40f048
push dword [edi]
push 0x40f054
push 0x40f020
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x34]
call fcn.00403fa8
mov edx, eax
lea eax, [ebp - 0x30]
call fcn.00403ce8
mov ecx, dword [ebp - 0x30]
mov edx, 0x40f060
mov eax, esi
call fcn.004068c4
mov ecx, 1
mov edx, 0x40f078
mov eax, esi
call fcn.0040688c
mov ecx, 1
mov edx, 0x40f08c
mov eax, esi
call fcn.0040688c
mov ecx, dword [0x44aa14]
mov edx, 0x40f0a0
mov eax, esi
call fcn.004068c4
lea eax, [ebp - 0x38]
mov ecx, 0x40f0b4
mov edx, dword [edi]
call fcn.00403df4
mov ecx, dword [ebp - 0x38]
mov edx, 0x40f0c0
mov eax, esi
call fcn.004068c4
push 0
push 0x400
mov eax, dword [edi]
call fcn.0040661c
call fcn.00404654
mov ecx, eax
mov edx, 0x40f0d4
mov eax, esi
call fcn.0040688c
mov ecx, dword [0x44a9f4]
mov edx, 0x40f0ec
mov eax, esi
call fcn.004068c4
mov eax, esi
call fcn.00406904
call fcn.0040e9d4