Function at 0x41de60
Capabilities:
Copy file
Get system information on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1ef0
call fcn.00411e80
push esi
push edi
cmp dword [0x444c50], 0x177
jne 0x41df22
push 0x444558
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x41df22
mov ecx, 9
mov esi, str.riwucesomaverocanu
lea edi, [ebp - 0x808]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7da
push 0
lea eax, [ebp - 0x7e2]
push eax
call fcn.0040bb00
add esp, 0xc
lea ecx, [ebp - 8]
mov dword [ebp - 4], ecx
push 0
call fcn.00401450
add esp, 4
push 0
push 0
call fcn.00401c20
add esp, 8
push 0x4261f4
push str.0__f
push 0x4397c8
call fcn.00401010
add esp, 0xc
push 0
push 0
call fcn.00401c20
add esp, 8
push 0
call fcn.004011f0
add esp, 4
push 0
push 0
push 0
push 0
call fcn.00401b00
add esp, 0x10
push 0
call fcn.00401470
add esp, 4
mov dword [ebp - 0x80c], 0
jmp 0x41df3d
mov edx, dword [ebp - 0x80c]
add edx, 1
mov dword [ebp - 0x80c], edx
mov eax, dword [ebp - 0x80c]
cdq
mov dword [ebp - 0x1ef0], eax
mov dword [ebp - 0x1eec], edx
cmp dword [ebp - 0x1eec], 1
jg 0x41dfd1
jl 0x41df67
cmp dword [ebp - 0x1ef0], 0x1909bea5
jae 0x41dfd1
cmp dword [ebp - 0x80c], 0x41ac
jne 0x41df7f
mov eax, dword [0x4295e4]
mov dword [0x444c50], eax
jmp 0x41dfd1
cmp dword [0x444c50], 0xf
jne 0x41dfcc
lea ecx, [ebp - 0x82c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
push 0
lea edx, [ebp - 0xc40]
push edx
lea eax, [ebp - 0x83c]
push eax
lea ecx, [ebp - 0x834]
push ecx
lea edx, [ebp - 0x810]
push edx
lea eax, [ebp - 0x830]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
jmp 0x41df2e
mov dword [ebp - 0xc44], 0
jmp 0x41dfec
mov ecx, dword [ebp - 0xc44]
add ecx, 1
mov dword [ebp - 0xc44], ecx
cmp dword [ebp - 0xc44], 0x2750d3
jge 0x41e04e
cmp dword [ebp - 0xc44], 0x197
jge 0x41e00a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x444c50], 0x449
jne 0x41e042
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpQueryOption]
push 0
lea edx, [ebp - 0x1470]
push edx
push str.xotopifijubidofodira_mevawep_sofefuxoril_honiregomobumutavonezogukimu_varidecoleyifabidotexik
push str.bifubofijatu_bipolinagovuvuhizel
push str.makulahezihamofahesofuyoz_jikezoheza
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
mov dword [0x43c6a4], 0
jmp 0x41dfdd
mov dword [ebp - 0x1474], 0
jmp 0x41e069
mov eax, dword [ebp - 0x1474]
add eax, 1
mov dword [ebp - 0x1474], eax
cmp dword [ebp - 0x1474], 0x496e6f
jge 0x41e0b4
cmp dword [ebp - 0x1474], 0x418
jne 0x41e093
mov ecx, dword [0x444c50]
add ecx, 0x12336
mov dword [0x444c50], ecx
cmp dword [0x444c50], 0x65
jne 0x41e0b2
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push 0
call dword [sym.imp.KERNEL32.dll_LocalSize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x41e05a
call fcn.0041c420
mov dword [ebp - 0x1478], 0
jmp 0x41e0d4
mov edx, dword [ebp - 0x1478]
add edx, 1
mov dword [ebp - 0x1478], edx
cmp dword [ebp - 0x1478], 0x1083a
jge 0x41e126
cmp dword [0x444c50], 0x105
jne 0x41e124
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push 0
push 0
mov eax, dword [ebp - 0x147c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push str.totuzuticiyabajovolivomepaha
push str.pipeyawiyowutuvasufiwirujudo
push str.behiv
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
jmp 0x41e0c5
mov dword [ebp - 0x1480], 0
jmp 0x41e141
mov ecx, dword [ebp - 0x1480]
add ecx, 1
mov dword [ebp - 0x1480], ecx
cmp dword [ebp - 0x1480], 0xe5fbc
jge 0x41e1af
cmp dword [0x444c50], 0x9e2
jne 0x41e183
push 0
push 0
push 0
push str.minucoxowif
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesA]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea edx, [ebp - 0x16d0]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp dword [ebp - 0x1480], 0x3b22
jne 0x41e199
mov eax, dword [0x428fc8]
mov dword [0x444c54], eax
cmp dword [0x444c50], 0xdb5
jne 0x41e1ad
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
jmp 0x41e132
mov dword [ebp - 0x16d4], 0
jmp 0x41e1ca
mov ecx, dword [ebp - 0x16d4]
add ecx, 1
mov dword [ebp - 0x16d4], ecx
mov edx, dword [ebp - 0x16d4]
cmp edx, dword [0x444c50]
jae 0x41e23a
cmp dword [0x444c50], 0x932
jne 0x41e20a
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
lea eax, [ebp - 0x16d8]
push eax
push 0
push str.podukixunubesagobibecikexinepe_xadawusafurepojisogavakayuhur_rucatupisubohehupuladula
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeA]
mov ecx, dword [ebp - 0x16d4]
push ecx
call fcn.0041d3f0
cmp dword [0x444c50], 0x22
jne 0x41e238
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UnregisterWaitEx]
push 0
lea edx, [ebp - 0x16dc]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
jmp 0x41e1bb
mov dword [ebp - 0x16e0], 0
jmp 0x41e255
mov eax, dword [ebp - 0x16e0]
add eax, 1
mov dword [ebp - 0x16e0], eax
cmp dword [ebp - 0x16e0], 0xe96350
jge 0x41e27a
cmp dword [0x444c50], 0xdda
jne 0x41e278
push str.xebumowavoyewapanedut
call dword [sym.imp.KERNEL32.dll_FindAtomA]
jmp 0x41e246
mov dword [ebp - 0x16e4], 0
jmp 0x41e295
mov ecx, dword [ebp - 0x16e4]
add ecx, 1
mov dword [ebp - 0x16e4], ecx
cmp dword [ebp - 0x16e4], 0x3dc4a3
jge 0x41e2b1
cmp dword [ebp - 0x16e4], 0x26
jne 0x41e2af
call fcn.0041c440
jmp 0x41e286
call fcn.0041dc40
cmp dword [0x444c50], 0x1d
jne 0x41e306
push 0
push 0
push 0
push 0
push str.wemazinuyo
call dword [sym.imp.KERNEL32.dll_ReadConsoleW]
push 0
push 0
push 0
push 0
push str.ranuzokakepayig
push str.bodubec
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
lea edx, [ebp - 0x1ee8]
push edx
push str.yugab
push str.buvexosugesaregaju
push str.lufuwacimajocegufoharesexer
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10