Function at 0x418110
Capabilities:
Copy file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x14a8
call fcn.0040ab10
push esi
push edi
cmp dword [0x85d858], 0x177
jne 0x4181b2
push 0x4338d0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0xe12
jne 0x4181b2
mov ecx, 0xd
mov esi, str.fatomifahegohofivonofijot
lea edi, [ebp - 0x808]
rep movsd dword es:[edi], dword [esi]
push 0x7cc
push 0
lea eax, [ebp - 0x7d4]
push eax
call fcn.004029f0
add esp, 0xc
lea ecx, [ebp - 8]
mov dword [ebp - 4], ecx
push 0
call fcn.004014e0
add esp, 4
call section..text
push 0
call fcn.00401700
add esp, 4
push 0
push 0
call fcn.00401780
add esp, 8
push 0
push 0
call fcn.004014b0
add esp, 8
push 0
push 0
push 0
push 0
push 0
call fcn.00401060
add esp, 0x14
mov dword [ebp - 0x80c], 0
jmp 0x4181cd
mov edx, dword [ebp - 0x80c]
add edx, 1
mov dword [ebp - 0x80c], edx
mov eax, dword [ebp - 0x80c]
cdq
mov dword [ebp - 0x14a8], eax
mov dword [ebp - 0x14a4], edx
cmp dword [ebp - 0x14a4], 1
jg 0x418237
jl 0x4181f7
cmp dword [ebp - 0x14a8], 0x1909bee1
jae 0x418237
cmp dword [ebp - 0x80c], 0x2dc0
jne 0x41820f
mov eax, dword [0x432ab0]
mov dword [0x85d858], eax
jmp 0x418237
cmp dword [0x85d858], 0xf
jne 0x418235
lea ecx, [ebp - 0x828]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
jmp 0x4181be
mov dword [ebp - 0x82c], 0
jmp 0x418252
mov edx, dword [ebp - 0x82c]
add edx, 1
mov dword [ebp - 0x82c], edx
cmp dword [ebp - 0x82c], 0xbfe753
jge 0x4182cd
cmp dword [ebp - 0x82c], 0x57f
jge 0x418272
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x85d858], 0x6b
jne 0x4182be
lea eax, [ebp - 0x105c]
push eax
lea ecx, [ebp - 0x1460]
push ecx
push 0
push str.Zuwexukasivemut
push str.Hofepuf
push str.Sajote_lel_higo_sowizibaj_yuke
call dword [sym.imp.KERNEL32.dll_SearchPathA]
push 0
lea edx, [ebp - 0x1058]
push edx
push str.fiwolap
push str.rinacorakocohamilozub_ziyivusovujocatawu
push str.nimelemivorag_yejicixumi_petozahayamivarosire_kapugenoxotef
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
mov dword [0x8552ac], 0
jmp 0x418243
mov dword [ebp - 0x1464], 0
jmp 0x4182e8
mov eax, dword [ebp - 0x1464]
add eax, 1
mov dword [ebp - 0x1464], eax
cmp dword [ebp - 0x1464], 0x47e7cf
jge 0x418334
cmp dword [ebp - 0x1464], 0x3fa
jne 0x418312
mov ecx, dword [0x85d858]
add ecx, 0x12336
mov dword [0x85d858], ecx
cmp dword [0x85d858], 0x65
jne 0x418332
lea edx, [ebp - 0x1484]
push edx
call dword [sym.imp.KERNEL32.dll_CreateActCtxA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
jmp 0x4182d9
call fcn.004177c0
mov dword [ebp - 0x1488], 0
jmp 0x418354
mov eax, dword [ebp - 0x1488]
add eax, 1
mov dword [ebp - 0x1488], eax
cmp dword [ebp - 0x1488], 0x28eda
jge 0x418389
cmp dword [0x85d858], 0x105
jne 0x418387
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push 0
push 0
mov ecx, dword [ebp - 0x148c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
jmp 0x418345
mov dword [ebp - 0x1490], 0
jmp 0x4183a4
mov edx, dword [ebp - 0x1490]
add edx, 1
mov dword [ebp - 0x1490], edx
cmp dword [ebp - 0x1490], 0xe5fbc
jge 0x4183dc
cmp dword [0x85d858], 0x9e2
jne 0x4183c4
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1490], 0x3b22
jne 0x4183da
mov eax, dword [0x432aa4]
mov dword [0x85d85c], eax
jmp 0x418395
mov dword [ebp - 0x1494], 0
jmp 0x4183f7
mov ecx, dword [ebp - 0x1494]
add ecx, 1
mov dword [ebp - 0x1494], ecx
mov edx, dword [ebp - 0x1494]
cmp edx, dword [0x85d858]
jae 0x418461
cmp dword [0x85d858], 0x932
jne 0x41841f
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov eax, dword [ebp - 0x1494]
push eax
call fcn.00417910
cmp dword [0x85d858], 0x22
jne 0x41845f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UnregisterWaitEx]
lea ecx, [ebp - 0x1498]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push 0
push str.yobuwexogu
push str.cegivikatohunuyowas
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceExA]
jmp 0x4183e8
mov dword [ebp - 0x149c], 0
jmp 0x41847c
mov edx, dword [ebp - 0x149c]
add edx, 1
mov dword [ebp - 0x149c], edx
cmp dword [ebp - 0x149c], 0xe96350
jge 0x4184ba
cmp dword [0x85d858], 0x15a
jne 0x4184b8
push str.cereberififezumezoparusunakutiyetihetugibepaarepocokeyiluzidulewupoja
call dword [sym.imp.KERNEL32.dll_FindAtomA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push str.jurayisotiharuyexarule
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
jmp 0x41846d
mov dword [ebp - 0x14a0], 0
jmp 0x4184d5
mov eax, dword [ebp - 0x14a0]
add eax, 1
mov dword [ebp - 0x14a0], eax
cmp dword [ebp - 0x14a0], 0x3dc4a3
jge 0x4184f1
cmp dword [ebp - 0x14a0], 0x26
jne 0x4184ef
call fcn.004177e0
jmp 0x4184c6
call fcn.00417ed0
cmp dword [0x85d858], 0x1d
jne 0x418531
push 0
push 0
push 0
push 0
push str.zuyuyifuhebin
push str.veganapibudita
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
push str.vonaxacaboxebatayunusi
push str.dahociwawo
push str.rezefehedewudakejufepayemirifec
push str.bewopudokomajehu
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10