Function at 0x456014
Capabilities:
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x11
push 0
push 0
dec ecx
jne 0x45601c
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x456581
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x14]
call fcn.00454580
lea eax, [ebp - 0x14]
mov edx, 0x456598
call fcn.00404774
mov eax, dword [ebp - 0x14]
call fcn.0040496c
push eax
lea eax, [ebp - 0x18]
call fcn.0045569c
lea eax, [ebp - 0x18]
mov edx, 0x456598
call fcn.00404774
mov eax, dword [ebp - 0x18]
call fcn.0040496c
push eax
call sub.kernel32.dll_CopyFileA
cmp byte [0x45ac58], 0
jne 0x4560c3
push 0
lea eax, [ebp - 0x1c]
call fcn.00454580
lea eax, [ebp - 0x1c]
mov edx, 0x4565ac
call fcn.00404774
mov eax, dword [ebp - 0x1c]
call fcn.0040496c
push eax
lea eax, [ebp - 0x20]
call fcn.0045569c
lea eax, [ebp - 0x20]
mov edx, 0x4565ac
call fcn.00404774
mov eax, dword [ebp - 0x20]
call fcn.0040496c
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x45910c]
mov eax, dword [eax]
mov edx, 0x4565c0
call fcn.00451890
call fcn.00455a98
lea eax, [ebp - 0x24]
call fcn.0045569c
lea eax, [ebp - 0x24]
mov edx, 0x4565e0
call fcn.00404774
mov eax, dword [ebp - 0x24]
call fcn.00408be8
lea eax, [ebp - 0x28]
call fcn.0045569c
lea eax, [ebp - 0x28]
mov edx, 0x4565fc
call fcn.00404774
mov eax, dword [ebp - 0x28]
call fcn.00408ac0
test al, al
je 0x456160
call fcn.00455e18
test al, al
jne 0x456160
mov eax, dword [0x45910c]
mov eax, dword [eax]
mov edx, 0x456614
call fcn.00451890
push 0x456638
lea eax, [ebp - 0x30]
call fcn.0045569c
push dword [ebp - 0x30]
push 0x456644
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.0040482c
mov eax, dword [ebp - 0x2c]
mov edx, 1
call fcn.004548f4
mov dl, 1
mov eax, dword [0x42a4a0]
call fcn.0042a570
mov dword [ebp - 0xc], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.0042a610
xor eax, eax
push ebp
push 0x45654f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x34]
call fcn.0045569c
lea eax, [ebp - 0x34]
mov edx, 0x4565fc
call fcn.00404774
mov eax, dword [ebp - 0x34]
call fcn.00408ac0
test al, al
je 0x456409
mov esi, 3
mov ebx, 0x458e24
mov eax, dword [ebx]
mov dl, 1
call fcn.004549a4
add ebx, 4
dec esi
jne 0x4561b9
lea edx, [ebp - 0x38]
mov al, 1
call fcn.00454f14
lea eax, [ebp - 0x38]
mov edx, 0x456660
call fcn.00404774
mov eax, dword [ebp - 0x38]
call fcn.00454d08
lea edx, [ebp - 0x3c]
xor eax, eax
call fcn.00454f14
lea eax, [ebp - 0x3c]
mov edx, 0x456660
call fcn.00404774
mov eax, dword [ebp - 0x3c]
call fcn.00454d08
xor esi, esi
mov edi, 0x458e1c
mov ebx, 0x458e38
mov dword [ebp - 0x10], 0x458e30
mov eax, dword [0x45910c]
mov eax, dword [eax]
call fcn.00451b84
mov ecx, dword [edi]
lea eax, [ebp - 0x40]
mov edx, 0x456674
call fcn.004047b8
mov edx, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
call fcn.0042a678
lea ecx, [ebp - 8]
mov edx, 0x4566b4
mov eax, dword [ebp - 0xc]
call fcn.0042a9f4
push 0xffffffffffffffff
lea edx, [ebp - 0x48]
lea eax, [esi + 1]
call fcn.004085b8
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x44]
mov edx, 0x4566cc
call fcn.004047b8
mov eax, dword [ebp - 0x44]
push eax
lea edx, [ebp - 0x50]
mov al, 1
call fcn.00454f14
push dword [ebp - 0x50]
push 0x4566d8
push dword [0x45ac54]
push 0x4566d8
lea eax, [ebp - 0x4c]
mov edx, 4
call fcn.0040482c
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebx]
lea eax, [ebp - 0x54]
mov edx, 0x4566e4
call fcn.004047b8
mov eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x58]
call fcn.00454580
lea eax, [ebp - 0x58]
mov edx, 0x456598
call fcn.00404774
mov eax, dword [ebp - 0x58]
pop edx
pop ecx
call fcn.00455060
lea eax, [ebp - 0x5c]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004049cc
mov eax, dword [ebp - 0x5c]
mov edx, 0x456638
call fcn.004048b8
jne 0x456309
lea eax, [ebp - 8]
mov ecx, 1
mov edx, 1
call fcn.00404a0c
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 8]
call fcn.0040476c
mov edx, eax
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.004049cc
mov eax, dword [ebp - 0x60]
mov edx, 0x456638
call fcn.004048b8
jne 0x45634a
mov eax, dword [ebp - 8]
call fcn.0040476c
mov edx, eax
lea eax, [ebp - 8]
mov ecx, 1
call fcn.00404a0c
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.00408d14
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea eax, [ebp - 8]
call fcn.004047b8
push 0xffffffffffffffff
push 0
lea edx, [ebp - 0x6c]
mov al, 1
call fcn.00454f14
push dword [ebp - 0x6c]
push 0x4566d8
push dword [0x45ac54]
push 0x4566d8
lea eax, [ebp - 0x68]
mov edx, 4
call fcn.0040482c
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00455060
test esi, esi
jne 0x4563ce
push 1
push 0x456638
push dword [ebp - 8]
push 0x456638
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.0040482c
mov eax, dword [ebp - 0x70]
call fcn.0040496c
push eax
call sub.kernel32.dll_WinExec
inc esi
add dword [ebp - 0x10], 4
add ebx, 4
add edi, 4
cmp esi, 2
jne 0x456219
lea edx, [ebp - 4]
xor eax, eax
call fcn.00454f14
lea eax, [ebp - 0x74]
call fcn.0045569c
lea eax, [ebp - 0x74]
mov edx, 0x4565fc
call fcn.00404774
mov eax, dword [ebp - 0x74]
call fcn.00408be8
mov edx, 0x80000001
mov eax, dword [ebp - 0xc]
call fcn.0042a610
mov edx, 0x4566f4
mov eax, dword [ebp - 0xc]
call fcn.0042aba8
test al, al
jne 0x4564b6
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.0042a610
mov edx, 0x4566f4
mov eax, dword [ebp - 0xc]
call fcn.0042aba8
test al, al
jne 0x4564b6
mov eax, dword [0x45910c]
mov eax, dword [eax]
mov edx, 0x45671c
call fcn.00451890
push 0x456638
lea eax, [ebp - 0x7c]
call fcn.0045569c
push dword [ebp - 0x7c]
push 0x456744
push 0x456638
lea eax, [ebp - 0x78]
mov edx, 4
call fcn.0040482c
mov eax, dword [ebp - 0x78]
mov edx, 1
call fcn.004548f4
jmp 0x4564a6
mov eax, dword [0x45910c]
mov eax, dword [eax]
call fcn.00451b84
push 0xc8
call sub.kernel32.dll_Sleep_1
xor edx, edx
mov eax, 0x456744
call fcn.004549a4
test eax, eax
jg 0x456490
mov eax, dword [0x45910c]
mov eax, dword [eax]
mov edx, 0x456768
call fcn.00451890
lea eax, [ebp - 0x80]
call fcn.0045569c
lea eax, [ebp - 0x80]
mov edx, 0x456744
call fcn.00404774
mov eax, dword [ebp - 0x80]
call fcn.00408be8
lea edx, [ebp - 0x84]
mov al, 1
call fcn.00454f14
lea eax, [ebp - 0x84]
mov edx, 0x456660
call fcn.00404774
mov eax, dword [ebp - 0x84]
call fcn.00454d08
lea edx, [ebp - 0x88]
xor eax, eax
call fcn.00454f14
lea eax, [ebp - 0x88]
mov edx, 0x456660
call fcn.00404774
mov eax, dword [ebp - 0x88]
call fcn.00454d08
call fcn.00454484
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x456556
mov eax, dword [ebp - 0xc]
call fcn.00403774
ret