Function at 0x42a150
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Enumerate files on windows
Get file size
Manipulate console buffer
Read .ini file
Set console window title
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x13bc
call fcn.0040e430
mov dword [ebp - 0x54], 0x27279461
mov dword [ebp - 0x24], 0x6749f0a9
mov dword [ebp - 0x98], 0x2d78f37a
mov dword [ebp - 0x6c], 0x56297e41
mov dword [ebp - 0x44], 0x6843fca
mov dword [ebp - 0x48], 0x25506011
mov dword [ebp - 0x10], 0x53a2354d
mov dword [ebp - 0xc], 0x714254cd
mov dword [ebp - 0x68], 0x1359b6f9
mov dword [ebp - 0x38], 0x5d1008ae
mov dword [ebp - 0xa8], 0x319749fa
mov dword [ebp - 0x20], 0x7875dd05
mov dword [ebp - 0x2c], 0x2b768599
mov dword [ebp - 0x40], 0x3c55541e
mov dword [ebp - 0x50], 0xafea702
mov dword [ebp - 0x3c], 0x51ef204e
mov dword [ebp - 0x64], 0x7122ed29
mov dword [ebp - 0x58], 0x355d0d81
mov dword [ebp - 0x94], 0x7419cb6a
mov dword [ebp - 0x34], 0x4506aa69
mov dword [ebp - 0x88], 0x6993cee
mov dword [ebp - 0x78], 0x554b8ff1
mov dword [ebp - 0x4c], 0x7b91f22b
mov dword [ebp - 8], 0x5d23df1e
mov dword [ebp - 0x84], 0x747bf4d1
mov dword [ebp - 0xa0], 0x68d392f8
mov dword [ebp - 0x74], 0x4284afe4
mov dword [ebp - 0x30], 0x5ea95677
mov dword [ebp - 0x28], 0x7a8ae5ac
mov dword [ebp - 0x70], 0x7560fffd
mov dword [ebp - 0x90], 0x143ed930
mov dword [ebp - 0x14], 0x6d436a5a
mov dword [ebp - 4], 0x77ca2319
mov dword [ebp - 0x80], 0x16c89e46
mov dword [ebp - 0x60], 0x112304e7
mov dword [ebp - 0x8c], 0x343fd2bb
mov dword [ebp - 0x9c], 0x76a4f534
mov dword [ebp - 0x1c], 0x75d3fc3d
mov dword [ebp - 0x18], 0x90c1e97
mov dword [ebp - 0x7c], 0x7e020010
mov dword [ebp - 0xa4], 0x60f86fe5
mov dword [ebp - 0x5c], 0x4e65684c
cmp dword [0x8db244], 0x25
jne 0x42a2f0
push 0x8db248
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x42a2f0
cmp dword [0x8db244], 0xd76
jne 0x42a2d2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push 0
call fcn.00401220
add esp, 4
push 0
call fcn.00401220
add esp, 4
push 0
call fcn.004011e0
add esp, 4
mov dword [ebp - 0xac], 0
jmp 0x42a30b
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0x13bc], eax
mov dword [ebp - 0x13b8], edx
cmp dword [ebp - 0x13b8], 1
jg 0x42a377
jl 0x42a335
cmp dword [ebp - 0x13bc], 0x19ad06a5
jae 0x42a377
cmp dword [ebp - 0xac], 0x290ba
jne 0x42a34f
mov ecx, dword [0x4415c4]
mov dword [0x8db244], ecx
jmp 0x42a377
cmp dword [0x8db244], 0xd
jne 0x42a375
lea edx, [ebp - 0xc8]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x42a2fc
mov dword [ebp - 0xd8], 0
jmp 0x42a392
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x1b6ecaa
jge 0x42acac
cmp dword [ebp - 0xd8], 0xbc9
jge 0x42a3c4
push 0
push 0
call dword [sym.imp.USER32.dll_GetMenuInfo]
call dword [sym.imp.USER32.dll_GetMenuCheckMarkDimensions]
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 0x1b8], 0x305f1a6b
mov dword [ebp - 0x1b4], 0x45899f91
mov dword [ebp - 0xf0], 0x5f699fb7
mov dword [ebp - 0xec], 0x3f869e74
mov dword [ebp - 0xe4], 0x6c5fdb3d
mov dword [ebp - 0x190], 0x75f60e14
mov dword [ebp - 0x1b0], 0x73e050d0
mov dword [ebp - 0x140], 0x32e76236
mov dword [ebp - 0x18c], 0x849d84a
mov dword [ebp - 0x13c], 0x332aa737
mov dword [ebp - 0x188], 0x55f80b74
mov dword [ebp - 0x104], 0x4ff409dd
mov dword [ebp - 0x1d8], 0x3365dea7
mov dword [ebp - 0x16c], 0x22b3f85
mov dword [ebp - 0x1e8], 0x6f8d94ca
mov dword [ebp - 0x170], 0x5a6914af
mov dword [ebp - 0x154], 0x1bbf069d
mov dword [ebp - 0x168], 0x4a55cf3c
mov dword [ebp - 0x1dc], 0x65832b5c
mov dword [ebp - 0xe0], 0x3e2820e7
mov dword [ebp - 0x138], 0x5a047404
mov dword [ebp - 0x148], 0x2b5d0d9d
mov dword [ebp - 0x1e4], 0x733cb020
mov dword [ebp - 0x1d4], 0x55e26081
mov dword [ebp - 0x144], 0x602fb79a
mov dword [ebp - 0x150], 0x4ac37ba3
mov dword [ebp - 0x1ac], 0x38556e49
mov dword [ebp - 0xf4], 0x7eaf4902
mov dword [ebp - 0x164], 0x1c58875f
mov dword [ebp - 0xe8], 0x3050bf6c
mov dword [ebp - 0x194], 0x3b0366e2
mov dword [ebp - 0x184], 0x53333b8a
mov dword [ebp - 0x1d0], 0x31543ebc
mov dword [ebp - 0x100], 0x6ddb9535
mov dword [ebp - 0x134], 0x62ce8bfb
mov dword [ebp - 0x160], 0x784b6c81
mov dword [ebp - 0xdc], 0x618f1209
mov dword [ebp - 0x130], 0x586114b5
mov dword [ebp - 0x14c], 0x1ecd9245
mov dword [ebp - 0x180], 0x5d03adeb
mov dword [ebp - 0xfc], 0x78305db7
mov dword [ebp - 0x17c], 0x2e5fe4d4
mov dword [ebp - 0x1e0], 0x1a587fc3
mov dword [ebp - 0x15c], 0x685760da
mov dword [ebp - 0x158], 0xf36eb77
mov dword [ebp - 0x1cc], 0x44d1b3b5
mov dword [ebp - 0x1a8], 0x2f7e34e7
mov dword [ebp - 0x178], 0x3024548b
mov dword [ebp - 0x1a4], 0x65e7e144
mov dword [ebp - 0x1a0], 0x567101b4
mov dword [ebp - 0x1c8], 0x5337f5fe
mov dword [ebp - 0x19c], 0x12e91b1a
mov dword [ebp - 0x1c4], 0x2e609f8
mov dword [ebp - 0x1c0], 0x7fd9a52a
mov dword [ebp - 0x198], 0x6355e409
mov dword [ebp - 0xf8], 0x2c832c20
mov dword [ebp - 0x174], 0x58aa677a
add dword [ebp - 0x24], 0x7e472ec4
add dword [ebp - 0x98], 0x10dcc082
add dword [ebp - 0x98], 0x5df02b4
sub dword [ebp - 0x44], 0x8e9f2e
add dword [ebp - 0x44], 0x7c871446
add dword [ebp - 0x10], 0x2915195d
sub dword [ebp - 0x48], 0x73eac6f4
sub dword [ebp - 0x44], 0x384ebe7e
sub dword [ebp - 0x24], 0x6d11752b
sub dword [ebp - 0x10], 0x52bae1f7
add dword [ebp - 0x10], 0x489b7d1b
add dword [ebp - 0x54], 0x79ff5555
add dword [ebp - 0x6c], 0x41205960
sub dword [ebp - 0x44], 0x75123343
sub dword [ebp - 0x68], 0x6284e110
sub dword [ebp - 0x44], 0x360817b4
sub dword [ebp - 0x44], 0x1a26fb4
add dword [ebp - 0x98], 0x39e59ea6
add dword [ebp - 0x54], 0x605156e
sub dword [ebp - 0x40], 0x9af865b
add dword [ebp - 0xa8], 0x442c633c
add dword [ebp - 0x54], 0x323a5ff1
add dword [ebp - 0x2c], 0x4b298293
sub dword [ebp - 0x48], 0x4e013b11
sub dword [ebp - 0xa8], 0x45ce3a57
add dword [ebp - 0x68], 0x236f33b
sub dword [ebp - 0x40], 0x3ce4806f
sub dword [ebp - 0x50], 0x539b6f18
sub dword [ebp - 0x38], 0x5ef8fa6
sub dword [ebp - 0x50], 0x6664c350
sub dword [ebp - 0x6c], 0x6a00e73a
add dword [ebp - 0x98], 0x278f0874
sub dword [ebp - 0x98], 0x7a884afe
sub dword [ebp - 0x94], 0x32935c7c
sub dword [ebp - 0x88], 0x74b187cc
sub dword [ebp - 0x50], 0x2887a189
add dword [ebp - 0x2c], 0x102b690
add dword [ebp - 0x4c], 0x3c7db119
add dword [ebp - 0x88], 0x50f249cc
add dword [ebp - 0xc], 0x1538abec
sub dword [ebp - 0x20], 0x1ab84e77
add dword [ebp - 0x54], 0x694a532f
add dword [ebp - 0xa8], 0x3e1c721
sub dword [ebp - 0x6c], 0x201dd669
sub dword [ebp - 0x38], 0x527152bb
add dword [ebp - 0x20], 0x6c03d21f
sub dword [ebp - 0x88], 0x3eaa8ff1
sub dword [ebp - 0x78], 0x2ca1781f
sub dword [ebp - 0x38], 0x4b386509
sub dword [ebp - 0x38], 0xaf91f17
add dword [ebp - 0x54], 0x68ec60dd
sub dword [ebp - 0x98], 0x1d5a967e
sub dword [ebp - 0xc], 0x48985ae9
add dword [ebp - 0x44], 0x5535cab8
sub dword [ebp - 0x44], 0x359d1a22
add dword [ebp - 0x54], 0x6465559c
sub dword [ebp - 0x38], 0x1d662929
sub dword [ebp - 0x48], 0x6db77b4
add dword [ebp - 0x44], 0x1eba3cbc
sub dword [ebp - 0x50], 0x543c325d
add dword [ebp - 0x40], 0x50d53eb3
add dword [ebp - 0x24], 0x93389c7
add dword [ebp - 0xc], 0x6fc953c7
add dword [ebp - 0x88], 0x34708a1e
add dword [ebp - 0x28], 0x5711da43
add dword [ebp - 0x34], 0x7ca0b83c
sub dword [ebp - 0x74], 0x4cb04ed5
sub dword [ebp - 0x48], 0x31c19367
sub dword [ebp - 0x74], 0x5fcacab0
sub dword [ebp - 0x28], 0x123fce23
sub dword [ebp - 0x1c], 0x262c72b1
sub dword [ebp - 4], 0x73f54a7
add dword [ebp - 0x68], 0x94a643c
sub dword [ebp - 0xa8], 0x59c5f412
add dword [ebp - 0x5c], 0x6dab928e
add dword [ebp - 0x40], 0x662765f9
sub dword [ebp - 0x34], 0x285c0eb0
sub dword [ebp - 0x10], 0x168649b0
add dword [ebp - 0x9c], 0x7ea7591e
add dword [ebp - 0x1b4], 0x250d536b
add dword [ebp - 4], 0x1a7e571a
sub dword [ebp - 0xc], 0x24310c3c
sub dword [ebp - 0x28], 0x1c9ba475
add dword [ebp - 0x98], 0x614adc6d
add dword [ebp - 0x38], 0x11fe6e9f
add dword [ebp - 0x4c], 0x3e376269
sub dword [ebp - 4], 0xd7b9abc
sub dword [ebp - 0x5c], 0x5a71e808
add dword [ebp - 0x20], 0x7365a4de
add dword [ebp - 0x38], 0x2d2fa6e5
sub dword [ebp - 0x3c], 0x4d719f01
sub dword [ebp - 0x50], 0x27c59120
add dword [ebp - 0x30], 0x4f22249e
add dword [ebp - 0x88], 0x41f27212
add dword [ebp - 0x94], 0x38070c5f
sub dword [ebp - 0x64], 0x5a99a7a7
sub dword [ebp - 0x64], 0x27bc5e21
sub dword [ebp - 0x44], 0x3d750557
add dword [ebp - 0x2c], 0x76d13139
sub dword [ebp - 0x188], 0x70b082df
add dword [ebp - 0x4c], 0x788615af
sub dword [ebp - 0x13c], 0x2e0cfbe4
sub dword [ebp - 0x48], 0x1d3d3d46
add dword [ebp - 0x9c], 0x633296ef
sub dword [ebp - 0x6c], 0x11fdab3e
add dword [ebp - 0x50], 0x52c9c345
add dword [ebp - 0x1b4], 0x4a453337
sub dword [ebp - 0x68], 0x500036b6
sub dword [ebp - 0x13c], 0x3a1d6919
add dword [ebp - 0xe4], 0x40b17261
sub dword [ebp - 0x30], 0x1cc7345f
sub dword [ebp - 0x1b0], 0x317d0c40
sub dword [ebp - 0xa8], 0x79bbf8c
sub dword [ebp - 0x68], 0x658d1668
sub dword [ebp - 0x190], 0xb8f0c51
sub dword [ebp - 0x54], 0x3f02a495
add dword [ebp - 0x74], 0x4722ae76
add dword [ebp - 0x38], 0x6d091cf
add dword [ebp - 0x190], 0x43a3db23
sub dword [ebp - 0x50], 0xa056aed
sub dword [ebp - 0x84], 0x289b85a1
sub dword [ebp - 0x40], 0x5139fd73
sub dword [ebp - 0x140], 0x1c1c206f
sub dword [ebp - 0x18], 0x45120207
sub dword [ebp - 0x150], 0x5c125569
add dword [ebp - 0xa8], 0x12658bcf
add dword [ebp - 0x10], 0x3fa00ca5
sub dword [ebp - 0xa4], 0x314e1520
add dword [ebp - 0x148], 0x7dbbfbf1
add dword [ebp - 0x18], 0x49ae7641
add dword [ebp - 0x1e8], 0x1707d2f2
sub dword [ebp - 0x140], 0x3691a737
add dword [ebp - 0x140], 0x69ef05d6
sub dword [ebp - 0x64], 0x698ea491
add dword [ebp - 0xc], 0x4629b190
sub dword [ebp - 0x138], 0x3f8713f3
add dword [ebp - 0x188], 0x6d5d35e0
add dword [ebp - 0x78], 0x278041d0
add dword [ebp - 0x1d0], 0x3596e4fb
sub dword [ebp - 0x2c], 0x86375bc
sub dword [ebp - 0x6c], 0x175bd12
add dword [ebp - 0x4c], 0x20646449
add dword [ebp - 0x68], 0x68624bb1
sub dword [ebp - 0x20], 0x7a43329b
add dword [ebp - 0x28], 0x7dfbf8b6
add dword [ebp - 0x190], 0x50df8596
sub dword [ebp - 0x1dc], 0x72ce8a94
sub dword [ebp - 0x14], 0x2375ebd7
add dword [ebp - 0x10], 0x122313cf
add dword [ebp - 0x1b0], 0xfbf2c43
sub dword [ebp - 0x44], 0x31cc4361
add dword [ebp - 0x104], 0x3d6afba2
sub dword [ebp - 0x1dc], 0xb4ed697
sub dword [ebp - 0x8c], 0x7030015b
add dword [ebp - 0x90], 0x32bcce9d
sub dword [ebp - 0x188], 0x589b833e
sub dword [ebp - 0x34], 0x294bc95a
sub dword [ebp - 0x58], 0xddb13a7
add dword [ebp - 0x144], 0x2886a990
sub dword [ebp - 0x94], 0x64cc3861
sub dword [ebp - 0x54], 0x40a4f506
sub dword [ebp - 0x70], 0x6431545e
add dword [ebp - 0x140], 0xd71ec9f
add dword [ebp - 0x7c], 0x3cf2391a
sub dword [ebp - 0x14c], 0x1e171517
add dword [ebp - 0x50], 0x71f70d1b
sub dword [ebp - 0x4c], 0x12f410ea
add dword [ebp - 0x16c], 0x4aed9a96
add dword [ebp - 0x88], 0x2f65d1d8
sub dword [ebp - 0xe0], 0x7083b5a0
sub dword [ebp - 0x60], 0x38804e87
sub dword [ebp - 0x158], 0x5e8fd45b
add dword [ebp - 0x144], 0x6d8bdaac
sub dword [ebp - 0x1d0], 0x12885246
sub dword [ebp - 0xe0], 0x5b49f9d2
add dword [ebp - 0x30], 0x4b5eafc6
add dword [ebp - 0x100], 0x59584af1
sub dword [ebp - 0x14], 0x9f8e389
add dword [ebp - 0x1b8], 0x4a5c2f95
add dword [ebp - 0x190], 0x3d35f235
sub dword [ebp - 0x104], 0x7755a949
sub dword [ebp - 0x1b4], 0x2c3d0c91
sub dword [ebp - 0x158], 0x76502306
add dword [ebp - 0x1a8], 0x1e0b2ed5
sub dword [ebp - 0x58], 0x29e6309c
sub dword [ebp - 0x94], 0x17adec27
add dword [ebp - 0x4c], 0x37e06438
sub dword [ebp - 0x94], 0x7395090b
sub dword [ebp - 0x14], 0xeeb7980
sub dword [ebp - 0x188], 0x6fc01abf
add dword [ebp - 0x24], 0x2c521e41
sub dword [ebp - 4], 0x2ee8415e
sub dword [ebp - 0x168], 0x2f3197cc
sub dword [ebp - 0xf4], 0x6108d185
add dword [ebp - 0x10], 0x40cb23fa
sub dword [ebp - 0x94], 0x51e0f2e4
sub dword [ebp - 0x1ac], 0x70f93765
add dword [ebp - 0x1c], 0xa88312a
add dword [ebp - 0xfc], 0x4723030a
sub dword [ebp - 0x5c], 0x3000227f
add dword [ebp - 0x138], 0x3c85fdd3
cmp dword [0x8db244], 0xc5
jne 0x42ac9d
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
lea ecx, [ebp - 0x1ec]
push ecx
lea edx, [ebp - 0x9f0]
push edx
push 0
push str.delix_helofededuhiyareha
push str.cozihuwajujegulevehozo_cumipomumajo_gayotukibavulomibos
push str.jenudatimehobihijele
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [0x8db23c], 0
jmp 0x42a383
mov dword [ebp - 0x9f4], 0
jmp 0x42acc7
mov eax, dword [ebp - 0x9f4]
add eax, 1
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x9f4], 0x496e6f
jge 0x42ad1f
cmp dword [ebp - 0x9f4], 0xff832
jne 0x42acf1
mov ecx, dword [0x8db244]
add ecx, 0x8c456
mov dword [0x8db244], ecx
cmp dword [0x8db244], 0xa1
jne 0x42ad1d
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
push str.Led_wupekocosakonavabebuyihiliyalu_fesotikesanixutaxeta_tefepatayecexewufagefufif
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x42acb8
call fcn.004292a0
mov dword [ebp - 0xa18], 0
jmp 0x42ad3f
mov eax, dword [ebp - 0xa18]
add eax, 1
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 0x10841
jge 0x42ad7d
cmp dword [0x8db244], 0xb91
jne 0x42ad7b
lea ecx, [ebp - 0xa1c]
push ecx
push str.dunowirorahuhixawopisoromatuvevi_lopufimoni
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
jmp 0x42ad30
mov dword [ebp - 0xa20], 0
jmp 0x42ad98
mov edx, dword [ebp - 0xa20]
add edx, 1
mov dword [ebp - 0xa20], edx
cmp dword [ebp - 0xa20], 0xe5fbc
jge 0x42ae2c
cmp dword [0x8db244], 0x9e2
jne 0x42ade9
push 0
push 0
push str.xosefatudifuzarekesalomuja_tava_famoteyowow_tizice
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
push 0
push str.xisilumibuvetufonahuvemugeli_tewafuvapiwiyuzotuvu_fatejevohivo
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea eax, [ebp - 0xb78]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp dword [ebp - 0xa20], 0x3b22
jne 0x42ae01
mov ecx, dword [0x440fa8]
mov dword [0x8db940], ecx
cmp dword [0x8db244], 0xdb5
jne 0x42ae27
push 0
push str.xudihacosotab
push str.vivajos
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExW]
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
jmp 0x42ad89
mov dword [ebp - 0xb80], 0
jmp 0x42ae47
mov edx, dword [ebp - 0xb80]
add edx, 1
mov dword [ebp - 0xb80], edx
mov eax, dword [ebp - 0xb80]
cmp eax, dword [0x8db244]
jae 0x42af07
cmp dword [0x8db244], 0x201
jne 0x42aeca
push str.xewuyahemigepawoxeresufodemabah_raxirotosukekes_zoxatedadasetatasi_visagipupudajanem_vacahumunulayoba
push str.tupuzavo_zazagocitenidudu
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionW]
push str.Luf_ligebifisewecimuvehiruve_yawitijosikurinenud
push 0
lea ecx, [ebp - 0x13a0]
push ecx
push str.yayudurimevuzokekijagotepenukij_rocifixakubadonifaw_vacodirumejazanoyeyaresuked_tasirodomebubojitifuduceteyifefe
push str.yenedutuhawiwinusigevizutef_ditawe_honawitejemef
push str.hidimucujaf_gofaperobi_ticasuhepezuyojed_refetuhidudesemepoxacaxiwuwo_lajijacivozucibuworodiyefaboc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
push str.wexowayixipalesevanoseti_vicarejitiwafinagulof_lapowigogesofozowapuneyerusi_hinebel_fixaxatimododerumub
push str.canehidusesucifugocanuhokodadomu_dawuyafetej_ritadepowu
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelA]
lea edx, [ebp - 0xb9c]
push edx
push str.xayecixatacawopixuyanopun_puhomixutujabuyalusufok_payuholorixonekenolep
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
mov eax, dword [ebp - 0xb80]
push eax
call fcn.00429a10
cmp dword [0x8db244], 0x27
jne 0x42af02
push 0
lea ecx, [ebp - 0x13a4]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push 0
push str.cibicocek
push str.dozoda
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceExA]
jmp 0x42ae38
mov dword [ebp - 0x13a8], 0
jmp 0x42af22
mov edx, dword [ebp - 0x13a8]
add edx, 1
mov dword [ebp - 0x13a8], edx
cmp dword [ebp - 0x13a8], 0xe96350
jge 0x42af69
cmp dword [0x8db244], 0xee
jne 0x42af67
push str.Fok_vijevagaro_tozetuxesazezekigffibav_dekidiyadiwetapunedamowot_keheluserazacuwolofa
call dword [sym.imp.KERNEL32.dll_FindAtomA]
push str.gusupuweraf_gatemomocujicuyiyicurixuse_wusam
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0x13ac]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleInputW]
jmp 0x42af13
mov dword [ebp - 0x13b0], 0
jmp 0x42af84
mov ecx, dword [ebp - 0x13b0]
add ecx, 1
mov dword [ebp - 0x13b0], ecx
cmp dword [ebp - 0x13b0], 0x3dc4a3
jge 0x42afa0
cmp dword [ebp - 0x13b0], 0x26
jne 0x42af9e
call fcn.004292c0
jmp 0x42af75
call fcn.00429ea0
cmp dword [0x8db244], 0x1021
jne 0x42afde
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push str.dezehi
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push 0
push 0
push 0
push 0
push str.Zedogovuwasola
push str.Jolakucuzas_situhi
call dword [sym.imp.KERNEL32.dll_CopyFileExA]
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10