Function at 0x41c150
Capabilities:
Identify system language via api
Manipulate console buffer
Move file
Print debug messages
Receive http response

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1c7c
call fcn.0040dbc0
cmp dword [0x86ae38], 0x177
jne 0x41c21e
push 0x440eb0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0xe12
jne 0x41c21e
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov eax, dword [str.fatomifahegohofivonijot]
mov dword [ebp - 0x408], eax
mov ecx, dword [0x42b104]
mov dword [ebp - 0x404], ecx
mov edx, dword [0x42b108]
mov dword [ebp - 0x400], edx
mov eax, dword [0x42b10c]
mov dword [ebp - 0x3fc], eax
mov ecx, dword [0x42b110]
mov dword [ebp - 0x3f8], ecx
mov edx, dword [0x42b114]
mov dword [ebp - 0x3f4], edx
push 0x3e8
push 0
lea eax, [ebp - 0x3f0]
push eax
call fcn.0040be80
add esp, 0xc
lea ecx, [ebp - 8]
mov dword [ebp - 4], ecx
push 0
push 0
push 0
push 0x440eb0
call fcn.00401790
add esp, 0x10
push 0
call fcn.004017c0
add esp, 4
push 0
push 0
push 0
call section..text
add esp, 0xc
mov dword [ebp - 0x40c], 0
jmp 0x41c239
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
mov eax, dword [ebp - 0x40c]
cdq
mov dword [ebp - 0x1c7c], eax
mov dword [ebp - 0x1c78], edx
cmp dword [ebp - 0x1c78], 1
jg 0x41c2c0
jl 0x41c263
cmp dword [ebp - 0x1c7c], 0x1909bee1
jae 0x41c2c0
cmp dword [ebp - 0x40c], 0x1c91b
jne 0x41c27b
mov eax, dword [0x43fd40]
mov dword [0x86ae38], eax
jmp 0x41c2c0
cmp dword [0x86ae38], 0xf
jne 0x41c2bb
push 0
lea ecx, [ebp - 0xc10]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0xc14], 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
jmp 0x41c22a
mov dword [ebp - 0xc18], 0
jmp 0x41c2db
mov edx, dword [ebp - 0xc18]
add edx, 1
mov dword [ebp - 0xc18], edx
cmp dword [ebp - 0xc18], 0xbfe70d
jge 0x41c386
cmp dword [ebp - 0xc18], 0x57f
jge 0x41c2fd
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x86ae38], 0x6b
jne 0x41c33b
lea eax, [ebp - 0x144c]
push eax
lea ecx, [ebp - 0x1c50]
push ecx
push 0
push str.Xupejaz_tanasojofukamow_cawiwunapaf_valefuvugoyame
push str.Givir
push str.Foxutinuhode_meheneribimihi
call dword [sym.imp.KERNEL32.dll_SearchPathW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
mov dword [0x86288c], 0
cmp dword [ebp - 0xc18], 0x1b799
jle 0x41c381
cmp dword [ebp - 0xc44], 0x50854379
je 0x41c381
cmp dword [ebp - 0xc34], 0xd7ea37
je 0x41c381
cmp dword [0x86ae38], 0x1b5
jne 0x41c381
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
jmp 0x41c2cc
mov dword [ebp - 0x1c54], 0
jmp 0x41c3a1
mov edx, dword [ebp - 0x1c54]
add edx, 1
mov dword [ebp - 0x1c54], edx
cmp dword [ebp - 0x1c54], 0x47e7cf
jge 0x41c3e1
cmp dword [ebp - 0x1c54], 0x3fa
jne 0x41c3c8
mov eax, dword [0x86ae38]
add eax, 0x12336
mov dword [0x86ae38], eax
cmp dword [0x86ae38], 0x65
jne 0x41c3df
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
jmp 0x41c392
call fcn.0041b970
mov dword [ebp - 0x1c58], 0
jmp 0x41c401
mov ecx, dword [ebp - 0x1c58]
add ecx, 1
mov dword [ebp - 0x1c58], ecx
cmp dword [ebp - 0x1c58], 0x28eda
jge 0x41c439
cmp dword [0x86ae38], 0x105
jne 0x41c437
push str.sinasanazikomaj
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0
push 0
mov edx, dword [ebp - 0x1c5c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
jmp 0x41c3f2
mov dword [ebp - 0x1c60], 0
jmp 0x41c454
mov eax, dword [ebp - 0x1c60]
add eax, 1
mov dword [ebp - 0x1c60], eax
cmp dword [ebp - 0x1c60], 0xe5fbc
jge 0x41c48e
cmp dword [0x86ae38], 0x9e2
jne 0x41c474
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1c60], 0x3b22
jne 0x41c48c
mov ecx, dword [0x43fd34]
mov dword [0x86ae3c], ecx
jmp 0x41c445
mov dword [ebp - 0x1c64], 0
jmp 0x41c4a9
mov edx, dword [ebp - 0x1c64]
add edx, 1
mov dword [ebp - 0x1c64], edx
mov eax, dword [ebp - 0x1c64]
cmp eax, dword [0x86ae38]
jae 0x41c50e
cmp dword [0x86ae38], 0x932
jne 0x41c4c9
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, dword [ebp - 0x1c64]
push ecx
call fcn.0041bac0
cmp dword [0x86ae38], 0x22
jne 0x41c50c
xor edx, edx
mov word [ebp - 0x1c68], dx
xor eax, eax
mov word [ebp - 0x1c66], ax
mov ecx, dword [ebp - 0x1c68]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea edx, [ebp - 0x1c6c]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x41c49a
mov dword [ebp - 0x1c70], 0
jmp 0x41c529
mov eax, dword [ebp - 0x1c70]
add eax, 1
mov dword [ebp - 0x1c70], eax
cmp dword [ebp - 0x1c70], 0xe96350
jge 0x41c54e
cmp dword [0x86ae38], 0x15a
jne 0x41c54c
push str.sipecedekozadumidoyawayahivifawejireyacoyajijelegucevegumavetezedegaz
call dword [sym.imp.KERNEL32.dll_FindAtomA]
jmp 0x41c51a
mov dword [ebp - 0x1c74], 0
jmp 0x41c569
mov ecx, dword [ebp - 0x1c74]
add ecx, 1
mov dword [ebp - 0x1c74], ecx
cmp dword [ebp - 0x1c74], 0x3dc4a3
jge 0x41c585
cmp dword [ebp - 0x1c74], 0x26
jne 0x41c583
call fcn.0041b990
jmp 0x41c55a
call fcn.0041bf50
cmp dword [0x86ae38], 0x1d
jne 0x41c5a3
push str.napezucoukah
push str.zukolivefacax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10