Function at 0x41e050
Capabilities:
Copy file
Get file size
Get system information on windows
Receive http response

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x880
cmp dword [0x23a7494], 0x177
jne 0x41e16a
push 0x442b70
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0xe12
jne 0x41e16a
push 0
push 0
call dword [sym.imp.USER32.dll_GetTitleBarInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov eax, dword [str.sapupe]
mov dword [ebp - 0x808], eax
mov ecx, dword [0x42d300]
mov dword [ebp - 0x804], ecx
mov edx, dword [0x42d304]
mov dword [ebp - 0x800], edx
mov ax, word [0x42d308]
mov word [ebp - 0x7fc], ax
push 0x7f2
push 0
lea ecx, [ebp - 0x7fa]
push ecx
call fcn.00404ff0
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
push 0
push 0
push 0
push 0x6f8
push 0x23a7498
call fcn.00401820
add esp, 0x14
push 0
call fcn.00402050
add esp, 4
cmp dword [0x23a7494], 0xd75
jne 0x41e11b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
call fcn.00401010
push 0
call fcn.00401570
add esp, 4
push 0
call fcn.00401310
add esp, 4
push 0
push 0
call fcn.00402020
add esp, 8
push 0
call fcn.00401370
add esp, 4
push 0
call fcn.00401fa0
add esp, 4
push 0
push 0
call fcn.00401d40
add esp, 8
push 0
call fcn.00401330
add esp, 4
mov dword [ebp - 0x80c], 0
jmp 0x41e185
mov eax, dword [ebp - 0x80c]
add eax, 1
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x80c]
cdq
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 1
jg 0x41e20d
jl 0x41e1af
cmp dword [ebp - 0x880], 0x1909bddd
jae 0x41e20d
cmp dword [ebp - 0x80c], 0x290ba
jne 0x41e1c9
mov ecx, dword [0x4325c4]
mov dword [0x23a7494], ecx
jmp 0x41e20d
cmp dword [0x23a7494], 0x541
jne 0x41e208
lea edx, [ebp - 0x828]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x41e176
mov dword [ebp - 0x830], 0
jmp 0x41e228
mov eax, dword [ebp - 0x830]
add eax, 1
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 0x275097
jge 0x41e25a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x23a7494], 0x449
jne 0x41e24e
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
mov dword [0x23a748c], 0
jmp 0x41e219
mov dword [ebp - 0x860], 0
jmp 0x41e275
mov ecx, dword [ebp - 0x860]
add ecx, 1
mov dword [ebp - 0x860], ecx
cmp dword [ebp - 0x860], 0x496e6f
jge 0x41e2c8
cmp dword [ebp - 0x860], 0xff832
jne 0x41e29f
mov edx, dword [0x23a7494]
add edx, 0x12336
mov dword [0x23a7494], edx
cmp dword [0x23a7494], 0x641
jne 0x41e2c6
push str.ledugoms
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x41e266
mov eax, dword [0x23a7494]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [0x239f5d8], eax
mov dword [ebp - 0x864], 0
jmp 0x41e2f6
mov ecx, dword [ebp - 0x864]
add ecx, 1
mov dword [ebp - 0x864], ecx
cmp dword [ebp - 0x864], 0x1083a
jge 0x41e304
jmp 0x41e2e7
mov dword [ebp - 0x868], 0
jmp 0x41e31f
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 0xe5fbc
jge 0x41e38b
cmp dword [0x23a7494], 0x9e2
jne 0x41e350
push 0
push 0
push str.mufamajewasizecawomuyirafedeculihulozodopifayigedufarotecayafudu
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
cmp dword [ebp - 0x868], 0x3b22
jne 0x41e366
mov eax, dword [0x431fa8]
mov dword [0x23a7b90], eax
cmp dword [0x23a7494], 0xdb5
jne 0x41e389
push str.Tanixuyij
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x41e310
mov dword [ebp - 0x86c], 0
jmp 0x41e3a6
mov ecx, dword [ebp - 0x86c]
add ecx, 1
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
cmp edx, dword [0x23a7494]
jae 0x41e408
cmp dword [0x23a7494], 0x932
jne 0x41e3dd
push str.cebidixakiyewibohonasi
push str.tizajaliyoxug_nituyugibi_vegenacujugijed_zehegupezimoxeyacasanofuk
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionW]
push str.nutonovazoyavopehakoxaxo
push 0
call dword [sym.imp.KERNEL32.dll_FatalAppExitA]
mov eax, dword [ebp - 0x86c]
push eax
call fcn.0041d7c0
cmp dword [0x23a7494], 0x22
jne 0x41e406
push 0
push str.putoxadibacumeyikakafef_vunucudicejikup_liponifidekabokolacoralim
push str.vawumute
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceExA]
jmp 0x41e397
mov dword [ebp - 0x870], 0
jmp 0x41e423
mov ecx, dword [ebp - 0x870]
add ecx, 1
mov dword [ebp - 0x870], ecx
cmp dword [ebp - 0x870], 0xe96350
jge 0x41e461
cmp dword [0x23a7494], 0xdda
jne 0x41e45f
push str.tixininohagofixodibomuratetorahayadodume
call dword [sym.imp.KERNEL32.dll_FindAtomA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push str.wewefubizuwuse
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
jmp 0x41e414
mov dword [ebp - 0x874], 0
jmp 0x41e47c
mov edx, dword [ebp - 0x874]
add edx, 1
mov dword [ebp - 0x874], edx
cmp dword [ebp - 0x874], 0x3dc4a3
jge 0x41e498
cmp dword [ebp - 0x874], 0x26
jne 0x41e496
call fcn.0041cd80
jmp 0x41e46d
call fcn.0041de60
cmp dword [0x23a7494], 0x1d
jne 0x41e4c8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
push 0
push 0
push 0
push 0
push str.jeyofixafiyikeluteniviyixifocopi
push str.nimokufodadozekovo
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10