Function at 0x41df80
Capabilities:
Copy file
Get system information on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1de0
call fcn.00410990
push esi
push edi
cmp dword [0x444b90], 0x177
jne 0x41e038
push 0x444498
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x41e038
mov ecx, 9
mov esi, 0x426188
lea edi, [ebp - 0x808]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7da
push 0
lea eax, [ebp - 0x7e2]
push eax
call fcn.0040b2f0
add esp, 0xc
lea ecx, [ebp - 8]
mov dword [ebp - 4], ecx
push 0
call fcn.004011d0
add esp, 4
push 0
push 0
call fcn.00401b00
add esp, 8
push 0x4261b0
push 0x4261b4
push 0x439708
call fcn.00401230
add esp, 0xc
push 0
push 0
call fcn.00401b00
add esp, 8
push 0
push 0
push 0
push 0
call fcn.004019e0
add esp, 0x10
push 0
call fcn.004011f0
add esp, 4
mov dword [ebp - 0x80c], 0
jmp 0x41e053
mov edx, dword [ebp - 0x80c]
add edx, 1
mov dword [ebp - 0x80c], edx
mov eax, dword [ebp - 0x80c]
cdq
mov dword [ebp - 0x1de0], eax
mov dword [ebp - 0x1ddc], edx
cmp dword [ebp - 0x1ddc], 1
jg 0x41e0e7
jl 0x41e07d
cmp dword [ebp - 0x1de0], 0x1909bea5
jae 0x41e0e7
cmp dword [ebp - 0x80c], 0x41ac
jne 0x41e095
mov eax, dword [0x4295e4]
mov dword [0x444b90], eax
jmp 0x41e0e7
cmp dword [0x444b90], 0xf
jne 0x41e0e2
lea ecx, [ebp - 0x82c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 0
lea edx, [ebp - 0xc40]
push edx
lea eax, [ebp - 0x83c]
push eax
lea ecx, [ebp - 0x834]
push ecx
lea edx, [ebp - 0x810]
push edx
lea eax, [ebp - 0x830]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
jmp 0x41e044
mov dword [ebp - 0xc44], 0
jmp 0x41e102
mov ecx, dword [ebp - 0xc44]
add ecx, 1
mov dword [ebp - 0xc44], ecx
cmp dword [ebp - 0xc44], 0x2750d3
jge 0x41e195
cmp dword [0x444b90], 0x449
jne 0x41e14a
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
push 0
lea edx, [ebp - 0x1470]
push edx
push 0x4261c0
push 0x426280
push 0x4262c8
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
mov dword [0x43c5e4], 0
cmp dword [ebp - 0xc44], 0x1b799
jle 0x41e190
cmp dword [ebp - 0xc70], 0x50854379
je 0x41e190
cmp dword [ebp - 0xc60], 0xd7ea37
je 0x41e190
cmp dword [0x444b90], 0x1b5
jne 0x41e190
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
jmp 0x41e0f3
mov dword [ebp - 0x1474], 0
jmp 0x41e1b0
mov eax, dword [ebp - 0x1474]
add eax, 1
mov dword [ebp - 0x1474], eax
cmp dword [ebp - 0x1474], 0x496e6f
jge 0x41e1fb
cmp dword [ebp - 0x1474], 0xff832
jne 0x41e1da
mov ecx, dword [0x444b90]
add ecx, 0x12336
mov dword [0x444b90], ecx
cmp dword [0x444b90], 0x65
jne 0x41e1f9
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push 0
call dword [sym.imp.KERNEL32.dll_LocalSize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x41e1a1
call fcn.0041c530
mov dword [ebp - 0x1478], 0
jmp 0x41e21b
mov edx, dword [ebp - 0x1478]
add edx, 1
mov dword [ebp - 0x1478], edx
cmp dword [ebp - 0x1478], 0x1083a
jge 0x41e250
cmp dword [0x444b90], 0x105
jne 0x41e24e
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push 0x426314
push 0x426334
push 0x426354
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
jmp 0x41e20c
mov dword [ebp - 0x147c], 0
jmp 0x41e26b
mov eax, dword [ebp - 0x147c]
add eax, 1
mov dword [ebp - 0x147c], eax
cmp dword [ebp - 0x147c], 0xe5fbc
jge 0x41e2c7
cmp dword [0x444b90], 0x9e2
jne 0x41e2ad
push 0
push 0
push 0
push 0x42635c
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesA]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0x15c0]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp dword [ebp - 0x147c], 0x3b22
jne 0x41e2c5
mov edx, dword [0x428fc8]
mov dword [0x444b94], edx
jmp 0x41e25c
mov dword [ebp - 0x15c4], 0
jmp 0x41e2e2
mov eax, dword [ebp - 0x15c4]
add eax, 1
mov dword [ebp - 0x15c4], eax
mov ecx, dword [ebp - 0x15c4]
cmp ecx, dword [0x444b90]
jae 0x41e35d
cmp dword [0x444b90], 0x932
jne 0x41e32a
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
lea edx, [ebp - 0x15c8]
push edx
push 0
push 0x426368
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeA]
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [ebp - 0x15c4]
push eax
call fcn.0041d500
cmp dword [0x444b90], 0x22
jne 0x41e358
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UnregisterWaitEx]
push 0
lea ecx, [ebp - 0x15cc]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
jmp 0x41e2d3
mov dword [ebp - 0x15d0], 0
jmp 0x41e378
mov edx, dword [ebp - 0x15d0]
add edx, 1
mov dword [ebp - 0x15d0], edx
cmp dword [ebp - 0x15d0], 0xe96350
jge 0x41e39d
cmp dword [0x444b90], 0xdda
jne 0x41e39b
push 0x4263c0
call dword [sym.imp.KERNEL32.dll_FindAtomA]
jmp 0x41e369
mov dword [ebp - 0x15d4], 0
jmp 0x41e3b8
mov eax, dword [ebp - 0x15d4]
add eax, 1
mov dword [ebp - 0x15d4], eax
cmp dword [ebp - 0x15d4], 0x3dc4a3
jge 0x41e3d4
cmp dword [ebp - 0x15d4], 0x26
jne 0x41e3d2
call fcn.0041c550
jmp 0x41e3a9
call fcn.0041dd70
cmp dword [0x444b90], 0x1d
jne 0x41e429
push 0
push 0
push 0
push 0
push 0x4263d8
call dword [sym.imp.KERNEL32.dll_ReadConsoleA]
push 0
push 0
push 0
push 0
push 0x4263e4
push 0x426404
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
lea ecx, [ebp - 0x1dd8]
push ecx
push 0x426414
push 0x426420
push 0x426448
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10