Function at 0x4081f4
Capabilities:
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x4081fc
mov eax, 0x4081ac
call fcn.004046d0
xor eax, eax
push ebp
push 0x40855a
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x40a850], eax
mov eax, 0x40a85c
call fcn.00403794
call fcn.00402760
test eax, eax
jle 0x4082cb
mov dword [ebp - 0x14], eax
mov dword [0x40a84c], 1
lea edx, [ebp - 0x18]
mov eax, dword [0x40a84c]
call fcn.004027c0
mov eax, dword [ebp - 0x18]
mov edx, 0x408570
call fcn.00403ad4
jne 0x40826c
mov eax, dword [0x40a84c]
mov dword [0x40a850], eax
cmp dword [0x40a850], 0
jne 0x4082bc
cmp dword [0x40a85c], 0
je 0x40828d
mov eax, 0x40a85c
mov edx, 0x40857c
call fcn.00403a0c
push dword [0x40a85c]
push 0x408588
lea edx, [ebp - 0x1c]
mov eax, dword [0x40a84c]
call fcn.004027c0
push dword [ebp - 0x1c]
push 0x408588
mov eax, 0x40a85c
mov edx, 4
call fcn.00403a50
inc dword [0x40a84c]
dec dword [ebp - 0x14]
jne 0x408246
cmp dword [0x40a850], 0
jne 0x4082e3
mov eax, 0x408594
call fcn.004080fc
jmp 0x40853f
call fcn.00402760
sub eax, dword [0x40a850]
jno 0x4082f5
call fcn.00402d9c
mov dword [0x40a854], eax
cmp dword [0x40a854], 2
jle 0x408392
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [0x40a850]
add eax, 3
jno 0x40831d
call fcn.00402d9c
call fcn.004027c0
mov eax, dword [ebp - 0x24]
mov ecx, 1
mov edx, 1
call fcn.00403b94
mov eax, dword [ebp - 0x20]
mov edx, 0x4085b8
call fcn.00403ad4
je 0x408352
mov eax, 0x4085c4
call fcn.004080fc
jmp 0x40853f
lea edx, [ebp - 0x28]
mov eax, dword [0x40a850]
add eax, 3
jno 0x408364
call fcn.00402d9c
call fcn.004027c0
mov edx, dword [ebp - 0x28]
mov eax, 0x4085f4
call fcn.00403bd4
test eax, eax
jle 0x408392
cmp dword [0x40a854], 4
jge 0x408392
mov eax, 0x408600
call fcn.004080fc
jmp 0x40853f
lea edx, [ebp - 0x30]
mov eax, dword [0x40a850]
add eax, 2
jno 0x4083a4
call fcn.00402d9c
call fcn.004027c0
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.00405704
mov eax, dword [ebp - 0x2c]
call fcn.004055d0
test al, al
jne 0x4083cf
mov eax, 0x40862c
call fcn.004080fc
jmp 0x40853f
mov dword [0x40a84c], 1
push 0
lea edx, [ebp - 0x34]
mov eax, dword [0x40a850]
add eax, 2
jno 0x4083ed
call fcn.00402d9c
call fcn.004027c0
mov eax, dword [ebp - 0x34]
call fcn.00403b88
push eax
lea edx, [ebp - 0x38]
mov eax, dword [0x40a850]
add eax, 1
jno 0x40840d
call fcn.00402d9c
call fcn.004027c0
mov eax, dword [ebp - 0x38]
call fcn.00403b88
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
jne 0x408455
cmp dword [0x40a84c], 5
jne 0x40843c
mov eax, 0x408658
call fcn.004080fc
jmp 0x40853f
push 0x3e8
call sub.kernel32.dll_Sleep
inc dword [0x40a84c]
cmp dword [0x40a84c], 6
jne 0x4083d9
cmp dword [0x40a854], 2
jle 0x40853f
lea edx, [ebp - 0x3c]
mov eax, dword [0x40a850]
add eax, 3
jno 0x408474
call fcn.00402d9c
call fcn.004027c0
mov edx, dword [ebp - 0x3c]
mov eax, 0x4085f4
call fcn.00403bd4
test eax, eax
jle 0x4084a9
lea edx, [ebp - 0x40]
mov eax, dword [0x40a850]
add eax, 4
jno 0x40849c
call fcn.00402d9c
call fcn.004027c0
mov eax, dword [ebp - 0x40]
call fcn.00408074
lea edx, [ebp - 0x44]
mov eax, dword [0x40a850]
add eax, 3
jno 0x4084bb
call fcn.00402d9c
call fcn.004027c0
mov edx, dword [ebp - 0x44]
mov eax, 0x408678
call fcn.00403bd4
test eax, eax
jle 0x40853f
push 0x40867c
push 0x408688
call sub.user32.dll_FindWindowA
mov dword [0x40a858], eax
push 1
push 0x408698
mov eax, dword [0x40a85c]
call fcn.00403b88
push eax
lea edx, [ebp - 0x48]
mov eax, dword [0x40a850]
add eax, 2
jno 0x408509
call fcn.00402d9c
call fcn.004027c0
mov eax, dword [ebp - 0x48]
call fcn.00403b88
push eax
push 0x40869c
mov eax, dword [0x40a858]
push eax
call sub.shell32.dll_ShellExecuteA
mov dword [0x40a858], eax
cmp dword [0x40a858], 0x20
jae 0x40853f
mov eax, 0x4086ac
call fcn.004080fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x408561
lea eax, [ebp - 0x48]
mov edx, 0xd
call fcn.004037b8
ret