Function at 0x41c240
Capabilities:
Copy file
Get file size
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8a8
cmp dword [0x239becc], 0x177
jne 0x41c30b
push 0x4375a8
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0xe12
jne 0x41c30b
mov eax, dword [str.kanumel]
mov dword [ebp - 0x808], eax
mov ecx, dword [0x423e24]
mov dword [ebp - 0x804], ecx
mov edx, dword [0x423e28]
mov dword [ebp - 0x800], edx
mov eax, dword [0x423e2c]
mov dword [ebp - 0x7fc], eax
push 0x7f0
push 0
lea ecx, [ebp - 0x7f8]
push ecx
call fcn.00404000
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
cmp dword [0x239becc], 0xd75
jne 0x41c2cf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push 0
call fcn.00401840
add esp, 4
push 0
call fcn.00401610
add esp, 4
push 0
push 0
call fcn.004019b0
add esp, 8
push 0
push 0
push 0
push 0
push 0
call section..text
add esp, 0x14
push 0
call fcn.00401630
add esp, 4
mov dword [ebp - 0x80c], 0
jmp 0x41c326
mov eax, dword [ebp - 0x80c]
add eax, 1
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x80c]
cdq
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 1
jg 0x41c3ed
jl 0x41c358
cmp dword [ebp - 0x8a8], 0x19146c3d
jae 0x41c3ed
cmp dword [ebp - 0x80c], 0x290ba
jne 0x41c372
mov ecx, dword [0x4275e4]
mov dword [0x239becc], ecx
jmp 0x41c3ed
cmp dword [0x239becc], 0x541
jne 0x41c3e8
lea edx, [ebp - 0x828]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov dword [ebp - 0x840], 0
xor eax, eax
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], eax
mov dword [ebp - 0x830], eax
lea ecx, [ebp - 0x840]
push ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x41c317
mov dword [ebp - 0x844], 0
jmp 0x41c408
mov edx, dword [ebp - 0x844]
add edx, 1
mov dword [ebp - 0x844], edx
cmp dword [ebp - 0x844], 0x275097
jge 0x41c477
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x239becc], 0x449
jne 0x41c42e
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
mov dword [0x239bec4], 0
cmp dword [ebp - 0x844], 0x1bb81
jle 0x41c475
cmp dword [ebp - 0x870], 0x50854379
je 0x41c475
cmp dword [ebp - 0x860], 0xd7ea37
je 0x41c475
cmp dword [0x239becc], 0x1b5
jne 0x41c475
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x41c3f9
mov dword [ebp - 0x878], 0
jmp 0x41c492
mov ecx, dword [ebp - 0x878]
add ecx, 1
mov dword [ebp - 0x878], ecx
cmp dword [ebp - 0x878], 0x496e6f
jge 0x41c4dd
cmp dword [ebp - 0x878], 0xff832
jne 0x41c4bc
mov edx, dword [0x239becc]
add edx, 0x12336
mov dword [0x239becc], edx
cmp dword [0x239becc], 0x641
jne 0x41c4db
push str.fecoxipedu
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x41c483
call fcn.0041af00
mov dword [ebp - 0x87c], 0
jmp 0x41c4fd
mov eax, dword [ebp - 0x87c]
add eax, 1
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 0x1083a
jge 0x41c545
cmp dword [0x239becc], 0x105
jne 0x41c543
lea ecx, [ebp - 0x880]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapWalk]
push str.filow
push str.jalivivexajetaguru
push str.wegob
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
jmp 0x41c4ee
mov dword [ebp - 0x888], 0
jmp 0x41c560
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 0xe5fbc
jge 0x41c5cc
cmp dword [0x239becc], 0x9e2
jne 0x41c591
push 0
push 0
push str.diledigadidobego_kolicohidig_gikuhaleki_mufepodijunifanawe
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
cmp dword [ebp - 0x888], 0x3b22
jne 0x41c5a7
mov eax, dword [0x426fc8]
mov dword [0x239c5c8], eax
cmp dword [0x239becc], 0xdb5
jne 0x41c5ca
push str.wenapodumifebam
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
jmp 0x41c551
mov dword [ebp - 0x88c], 0
jmp 0x41c5e7
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x88c]
cmp edx, dword [0x239becc]
jae 0x41c666
cmp dword [0x239becc], 0x932
jne 0x41c635
push str.dicuhexozupati
push str.seyuhugocazobapeba
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
mov dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
push eax
call dword [sym.imp.KERNEL32.dll_AddRefActCtx]
push str.cerocajujika
push 0
call dword [sym.imp.KERNEL32.dll_FatalAppExitW]
mov ecx, dword [ebp - 0x88c]
push ecx
call fcn.0041b960
cmp dword [0x239becc], 0x22
jne 0x41c661
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UnregisterWaitEx]
lea edx, [ebp - 0x894]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x41c5d8
mov dword [ebp - 0x898], 0
jmp 0x41c681
mov eax, dword [ebp - 0x898]
add eax, 1
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0xe96350
jge 0x41c6bf
cmp dword [0x239becc], 0xdda
jne 0x41c6bd
push str.gegijewahiloxota
call dword [sym.imp.KERNEL32.dll_FindAtomW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push str.xerepokabudakabuninifatis
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
jmp 0x41c672
mov dword [ebp - 0x89c], 0
jmp 0x41c6da
mov ecx, dword [ebp - 0x89c]
add ecx, 1
mov dword [ebp - 0x89c], ecx
cmp dword [ebp - 0x89c], 0x3dc4a3
jge 0x41c6f6
cmp dword [ebp - 0x89c], 0x26
jne 0x41c6f4
call fcn.0041af20
jmp 0x41c6cb
call fcn.0041c040
cmp dword [0x239becc], 0x1d
jne 0x41c726
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0
push 0
push 0
push 0
push str.xabeduniperiwabuyehodabetewapero
push str.ducikimem
call dword [sym.imp.KERNEL32.dll_CopyFileExA]
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10