Function at 0x418dc0
Capabilities:
Move file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x148
push ebx
push esi
push edi
mov dword [ebp - 0x10c], 0x75567
mov dword [ebp - 0xbc], 0x48891
xor eax, eax
jne 0x418e1d
cmp dword [ebp - 0x10c], 0x11da9
jne 0x418dff
movzx ecx, byte [ebp - 0x81]
cmp ecx, 0x25faf
je 0x418e1d
movzx edx, byte [ebp - 0x81]
cmp edx, 0x32694
je 0x418e1d
movzx eax, byte [ebp - 0x81]
cmp eax, dword [ebp - 0x10c]
jne 0x418e65
movzx esi, byte [ebp - 0x81]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov edi, eax
sub edi, dword [ebp - 0x10c]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileWithProgressA]
lea ecx, [edi + eax + 0xa4bf]
sub ecx, dword [ebp - 0x10c]
and esi, ecx
mov dword [ebp - 0x10c], esi
jmp 0x418ead
mov edx, 0x61fec
movzx eax, byte [ebp - 0x81]
lea esi, [edx + eax + 0x22cba]
and esi, 0xffffb86f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
movzx ecx, word [ebp - 0xac]
sub eax, ecx
sub eax, dword [ebp - 0x10c]
sub eax, 0x1c357
movzx edx, word [ebp - 0xac]
sub eax, edx
and esi, eax
mov dword [ebp - 0x10c], esi
mov esi, dword [ebp - 0x10c]
sub esi, dword [ebp - 0x10c]
sub esi, dword [ebp - 0x10c]
and esi, 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov edi, eax
add edi, 0x39652
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
movzx ecx, byte [ebp - 0x81]
add eax, dword [ebp - 0x10c]
lea edx, [ecx + eax + 0x1485c]
add edx, dword [ebp - 0x10c]
and edi, edx
or esi, edi
mov dword [ebp - 0x10c], esi
mov eax, 0x51b70
sub eax, dword [ebp - 0x10c]
movzx ecx, byte [ebp - 0x81]
lea edx, [eax + ecx + 0x51de6]
movzx eax, word [ebp - 0xac]
sub edx, eax
mov ecx, dword [ebp - 0x10c]
sub ecx, 0x6a877
and edx, ecx
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x10c], 0x9cf1
movzx edx, word [ebp - 0xac]
mov eax, dword [ebp - 0x10c]
sub eax, edx
movzx ecx, word [ebp - 0xac]
add eax, ecx
sub eax, dword [ebp - 0x10c]
sub eax, 0x15703
and eax, dword [ebp - 0x10c]
or eax, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetStdHandle]
add eax, 0x59502
and eax, 0x80160
and eax, dword [ebp - 0x10c]
and eax, dword [ebp - 0x10c]
xor edx, edx
mov ecx, dword [ebp - 0x70]
and ecx, 0x29b7a
mov esi, dword [ebp - 0x6c]
and esi, 0
or eax, ecx
or edx, esi
mov byte [ebp - 0x81], al
mov ecx, dword [ebp - 0x70]
add ecx, 0xfff8e4b5
mov esi, dword [ebp - 0x6c]
adc esi, 0xffffffff
sub ecx, 0x1fa09
sbb esi, 0
sub ecx, 0x3959b
sbb esi, 0
add ecx, 0x7bb89
adc esi, 0
movzx eax, byte [ebp - 0x81]
cdq
add ecx, eax
adc esi, edx
and ecx, 0x1b466
and esi, 0
movzx eax, word [ebp - 0xac]
add eax, 0x64b0f
movzx edx, word [ebp - 0xac]
sub eax, edx
cdq
sub eax, dword [ebp - 0x70]
sbb edx, dword [ebp - 0x6c]
and ecx, eax
and esi, edx
mov eax, dword [ebp - 0x10c]
and eax, 0x7a3d5
xor edx, edx
or ecx, eax
or esi, edx
mov word [ebp - 0xac], cx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x10c]
lea ecx, [edx + ecx + 0xc988]
movzx edx, word [ebp - 0xac]
sub ecx, edx
or eax, ecx
or eax, 0xfff8de65
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x10c]
lea esi, [ecx + eax + 0x5cce0]
movzx edi, word [ebp - 0xac]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
lea edx, [edi + eax + 0x3954d]
and esi, edx
mov eax, dword [ebp - 0x10c]
add eax, 0x733e
or esi, eax
movzx ecx, word [ebp - 0xac]
add ecx, dword [ebp - 0x10c]
xor ecx, 0xfffd93a3
or esi, ecx
mov dword [ebp - 0x10c], esi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp dword [ebp - 0x10c], eax
jne 0x419131
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
add esi, eax
movzx edx, word [ebp - 0xac]
lea esi, [esi + edx - 0x6a6f]
sub esi, dword [ebp - 0x10c]
sub esi, dword [ebp - 0x10c]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
lea eax, [esi + eax - 0x4af6c]
mov ecx, 0x50634
sub ecx, dword [ebp - 0x10c]
and eax, ecx
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x10c]
and eax, edx
mov dword [ebp - 0x10c], eax
jmp 0x41919d
movzx eax, byte [ebp - 0x81]
movzx ecx, byte [ebp - 0x81]
lea esi, [eax + ecx + 0x68fb1]
movzx edx, byte [ebp - 0x81]
sub edx, 0x5229a
sub edx, dword [ebp - 0x10c]
or esi, edx
movzx edi, word [ebp - 0xac]
movzx eax, word [ebp - 0xac]
and edi, eax
mov ebx, dword [ebp - 0x10c]
add ebx, 0x4b52b
sub ebx, dword [ebp - 0x10c]
add ebx, 0x85e
push 0
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
sub ebx, eax
add ebx, 0x2879b
and edi, ebx
or esi, edi
mov dword [ebp - 0x10c], esi
movzx esi, byte [ebp - 0x81]
sub esi, dword [ebp - 0x10c]
mov edi, dword [ebp - 0x10c]
add edi, dword [ebp - 0x10c]
add edi, dword [ebp - 0x10c]
movzx ecx, byte [ebp - 0x81]
add edi, ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
add edi, eax
mov ecx, edi
shr esi, cl
xor ecx, ecx
and esi, dword [ebp - 0x70]
and ecx, dword [ebp - 0x6c]
movzx eax, word [ebp - 0xac]
add eax, 0x2e801
cdq
and esi, eax
and ecx, edx
mov word [ebp - 0xac], si
movzx edx, byte [ebp - 0x81]
cmp edx, 0x70449
jne 0x41927f
cmp dword [ebp - 0x10c], 0
jne 0x41927f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
add eax, dword [ebp - 0x10c]
mov ecx, eax
xor esi, esi
add ecx, dword [ebp - 0x70]
adc esi, dword [ebp - 0x6c]
movzx eax, word [ebp - 0xac]
cdq
add ecx, eax
adc esi, edx
mov eax, dword [ebp - 0x10c]
shr eax, cl
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x10c]
movzx edx, byte [ebp - 0x81]
sub ecx, edx
movzx edx, byte [ebp - 0x81]
sub ecx, edx
and eax, ecx
and eax, dword [ebp - 0x10c]
and eax, 0xefef
and eax, 0x13aee
mov byte [ebp - 0x81], al
jmp 0x41929e
mov eax, dword [ebp - 0x10c]
or eax, 0x864c
mov ecx, dword [ebp - 0x10c]
add ecx, 0x3f644
or eax, ecx
mov dword [ebp - 0x10c], eax
movzx dx, byte [ebp - 0x81]
mov word [ebp - 0xac], dx
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x6c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc