Function at 0x478bc0
Capabilities:
Copy file
Get common file path
Manipulate console buffer
Read .ini file
Set environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x18e8
call fcn.00418c40
mov dword [ebp - 4], 0
jmp 0x478bdf
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x32d05d76
jge 0x478c9f
cmp dword [0x494860], 0xfc
jne 0x478c3d
mov ecx, dword [ebp - 0x80]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea edx, [ebp - 0x68]
push edx
push 0
lea eax, [ebp - 0x7c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleInputW]
xor ecx, ecx
mov word [ebp - 0x64], cx
xor edx, edx
mov dword [ebp - 0x62], edx
mov dword [ebp - 0x5e], edx
mov dword [ebp - 0x5a], edx
mov word [ebp - 0x56], dx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
cmp dword [0x494860], 0x5e4
jne 0x478c8f
push str.hijizidafowetefegusayaya_yerivixoyakileripegeyobo
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
push str.Mobebarinamohay_foyusunah
push 0
lea eax, [ebp - 0x480]
push eax
push str.Yufudizodu_galaf_rayi_mica_cije
push str.Bacunizucojux_lisi_det
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructA]
push str.gomikisoxonotakadokukahurekutut_vuzuzaliyuzadip
push 0
push 0
push str.wikowu
push str.cubefilulekapolinila_katiguruhoragemobuhefige_mov
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructA]
cmp dword [ebp - 4], 0x9be51dc
jle 0x478c9a
jmp 0x478c9f
jmp 0x478bd6
push 0x48d678
mov ecx, dword [0x494860]
push ecx
mov edx, dword [0x4934a4]
push edx
call fcn.00478a40
mov dword [ebp - 0x4a8], 0
jmp 0x478cd2
mov eax, dword [ebp - 0x4a8]
add eax, 1
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x3e7a3
jge 0x478d2a
cmp dword [0x494860], 0x10
jne 0x478d0f
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0
lea ecx, [ebp - 0x4ac]
push ecx
lea edx, [ebp - 0x4b8]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedPushEntrySList]
push 0
call dword [sym.imp.KERNEL32.dll_LocalSize]
cmp dword [ebp - 0x4a8], 0x1e673
jne 0x478d28
call fcn.00478610
jmp 0x478cc3
mov dword [ebp - 0x4bc], 0
jmp 0x478d45
mov eax, dword [ebp - 0x4bc]
add eax, 1
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0xdd9a7
jge 0x478d8a
cmp dword [0x494860], 0xc01
jne 0x478d88
lea ecx, [ebp - 0x4c4]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
lea edx, [ebp - 0x4c8]
push edx
mov eax, dword [ebp - 0x4c0]
push eax
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x478d36
call dword [0x4934a4]
cmp dword [0x494860], 0x1144
jne 0x478e93
call dword [sym.imp.KERNEL32.dll_IsSystemResumeAutomatic]
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
call dword [sym.imp.KERNEL32.dll_GetACP]
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x18e4], 0
xor ecx, ecx
mov dword [ebp - 0x18e0], ecx
mov dword [ebp - 0x18dc], ecx
mov dword [ebp - 0x18d8], ecx
mov dword [ebp - 0x18d4], ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommMask]
push str.yodukeker_zareneyid_dewidixibusejewunilubumacuyutuza_wutuxejewiwosuhotodur_tedoyekaxinozopinizuvazigonameni
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoA]
lea edx, [ebp - 0xcd0]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
lea eax, [ebp - 0x4cc]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea ecx, [ebp - 0x18d0]
push ecx
push 0
push 0x486ec8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
lea edx, [ebp - 0x4d0]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push str.ziyuke_kihijagecohawefo_tuhuhukayinewisuwarok
push str.wujunakimidutole_zaleruvadegipovafice
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0
lea eax, [ebp - 0x10d0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileSectionA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor eax, eax
mov esp, ebp
pop ebp
ret