Function at 0x41d1a0
Capabilities:
Identify system language via api
Move file
Print debug messages
Receive http response

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x147c
call fcn.0040fb50
cmp dword [0x862d20], 0x177
jne 0x41d2aa
push 0x438d98
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0xe12
jne 0x41d2aa
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov eax, dword [str.fatomifahegohofivonijot]
mov dword [ebp - 0x408], eax
mov ecx, dword [0x425260]
mov dword [ebp - 0x404], ecx
mov edx, dword [0x425264]
mov dword [ebp - 0x400], edx
mov eax, dword [0x425268]
mov dword [ebp - 0x3fc], eax
mov ecx, dword [0x42526c]
mov dword [ebp - 0x3f8], ecx
mov edx, dword [0x425270]
mov dword [ebp - 0x3f4], edx
push 0x3e8
push 0
lea eax, [ebp - 0x3f0]
push eax
call fcn.00403200
add esp, 0xc
lea ecx, [ebp - 8]
mov dword [ebp - 4], ecx
push str.__s__d__f
push 0
call fcn.00401d20
add esp, 8
push 0
push 0
push 0
push 0
call fcn.004017e0
add esp, 0x10
call section..text
push 0x425280
push str.0__f
push 0x438d98
call fcn.004014b0
add esp, 0xc
push 0
call fcn.004016b0
add esp, 4
push 0
push 0
push 0
push 0
push 0
call fcn.00401060
add esp, 0x14
push 0
push 0
push 0
push 0
call fcn.00401cf0
add esp, 0x10
mov dword [ebp - 0x40c], 0
jmp 0x41d2c5
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
mov eax, dword [ebp - 0x40c]
cdq
mov dword [ebp - 0x147c], eax
mov dword [ebp - 0x1478], edx
cmp dword [ebp - 0x1478], 1
jg 0x41d34c
jl 0x41d2ef
cmp dword [ebp - 0x147c], 0x1909bee1
jae 0x41d34c
cmp dword [ebp - 0x40c], 0x1c91b
jne 0x41d307
mov eax, dword [0x437f60]
mov dword [0x862d20], eax
jmp 0x41d34c
cmp dword [0x862d20], 0xf
jne 0x41d347
push 0
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x814], 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
jmp 0x41d2b6
mov dword [ebp - 0x818], 0
jmp 0x41d367
mov edx, dword [ebp - 0x818]
add edx, 1
mov dword [ebp - 0x818], edx
cmp dword [ebp - 0x818], 0xbfe753
jge 0x41d42e
cmp dword [ebp - 0x818], 0x57f
jge 0x41d38b
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x862d20], 0x6b
jne 0x41d3d7
lea eax, [ebp - 0x104c]
push eax
lea ecx, [ebp - 0x1450]
push ecx
push 0
push str.nokezucuxoziwejom
push str.jijeruwefexadiwa
push str.labesecujecazitunohobopuzewegalotoragededejimures
call dword [sym.imp.KERNEL32.dll_SearchPathA]
push 0
lea edx, [ebp - 0x1048]
push edx
push str.fiwolap
push str.rinacorakocohamilozub_ziyivusovujocatawu
push str.nimelemivorag_yejicixumi_petozahayamivarosire_kapugenoxotef
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
mov dword [0x85a774], 0
cmp dword [ebp - 0x818], 0x1b799
jle 0x41d429
cmp dword [ebp - 0x844], 0x50854379
je 0x41d429
cmp dword [ebp - 0x834], 0xd7ea37
je 0x41d429
cmp dword [0x862d20], 0x1b5
jne 0x41d429
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
jmp 0x41d358
mov dword [ebp - 0x1454], 0
jmp 0x41d449
mov eax, dword [ebp - 0x1454]
add eax, 1
mov dword [ebp - 0x1454], eax
cmp dword [ebp - 0x1454], 0x47e7cf
jge 0x41d48c
cmp dword [ebp - 0x1454], 0x3fa
jne 0x41d473
mov ecx, dword [0x862d20]
add ecx, 0x12336
mov dword [0x862d20], ecx
cmp dword [0x862d20], 0x65
jne 0x41d48a
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
jmp 0x41d43a
call fcn.0041c990
mov dword [ebp - 0x1458], 0
jmp 0x41d4ac
mov edx, dword [ebp - 0x1458]
add edx, 1
mov dword [ebp - 0x1458], edx
cmp dword [ebp - 0x1458], 0x28eda
jge 0x41d4e4
cmp dword [0x862d20], 0x105
jne 0x41d4e2
push str.Vokizadamiwofob
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0
push 0
mov eax, dword [ebp - 0x145c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
jmp 0x41d49d
mov dword [ebp - 0x1460], 0
jmp 0x41d4ff
mov ecx, dword [ebp - 0x1460]
add ecx, 1
mov dword [ebp - 0x1460], ecx
cmp dword [ebp - 0x1460], 0xe5fbc
jge 0x41d539
cmp dword [0x862d20], 0x9e2
jne 0x41d51f
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
cmp dword [ebp - 0x1460], 0x3b22
jne 0x41d537
mov edx, dword [0x437f54]
mov dword [0x862d24], edx
jmp 0x41d4f0
mov dword [ebp - 0x1464], 0
jmp 0x41d554
mov eax, dword [ebp - 0x1464]
add eax, 1
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
cmp ecx, dword [0x862d20]
jae 0x41d5d0
cmp dword [0x862d20], 0x932
jne 0x41d574
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov edx, dword [ebp - 0x1464]
push edx
call fcn.0041cae0
cmp dword [0x862d20], 0x22
jne 0x41d5cb
xor eax, eax
mov word [ebp - 0x1468], ax
xor ecx, ecx
mov word [ebp - 0x1466], cx
mov edx, dword [ebp - 0x1468]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
lea eax, [ebp - 0x146c]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
push str.Solofudi_goxoruv_sapocuzi
push str.Nimigot_gifovu
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
jmp 0x41d545
mov dword [ebp - 0x1470], 0
jmp 0x41d5eb
mov ecx, dword [ebp - 0x1470]
add ecx, 1
mov dword [ebp - 0x1470], ecx
cmp dword [ebp - 0x1470], 0xe96350
jge 0x41d61a
cmp dword [0x862d20], 0x15a
jne 0x41d618
push str.norevujayevemawazilevawobowitosidalamayapajaduvilijoxikuzobisasesovix
call dword [sym.imp.KERNEL32.dll_FindAtomW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
jmp 0x41d5dc
mov dword [ebp - 0x1474], 0
jmp 0x41d635
mov edx, dword [ebp - 0x1474]
add edx, 1
mov dword [ebp - 0x1474], edx
cmp dword [ebp - 0x1474], 0x3dc4a3
jge 0x41d651
cmp dword [ebp - 0x1474], 0x26
jne 0x41d64f
call fcn.0041c9b0
jmp 0x41d626
call fcn.0041cfc0
cmp dword [0x862d20], 0x1d
jne 0x41d66f
push str.napezucodukah
push str.zukolivefacaxa
call dword [sym.imp.KERNEL32.dll_MoveFileW]
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10