Function at 0x40e660
Capabilities:
Accept command line arguments
Connect pipe
Get file attributes
Manipulate console buffer
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc8
cmp dword [0x2b91b24], 0x25
jne 0x40e778
push 0x426c68
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x65f6
jne 0x40e778
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov eax, dword [str.yufoxejoxu]
mov dword [ebp - 0x820], eax
mov ecx, dword [0x416bd0]
mov dword [ebp - 0x81c], ecx
mov edx, dword [0x416bd4]
mov dword [ebp - 0x818], edx
mov eax, dword [0x416bd8]
mov dword [ebp - 0x814], eax
mov ecx, dword [0x416bdc]
mov dword [ebp - 0x810], ecx
mov dx, word [0x416be0]
mov word [ebp - 0x80c], dx
push 0x7ea
push 0
lea eax, [ebp - 0x80a]
push eax
call fcn.00406370
add esp, 0xc
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], ecx
push ecx
fldz
fstp dword [esp]
call fcn.004013b0
fstp st(0)
push str.__s__d__f
push 0
call fcn.0040255a
add esp, 8
push 0
push 0
push 0
push 0
call fcn.004027bf
add esp, 0x10
push 0
push 0
push 0
push 0x426c68
call fcn.004027dc
add esp, 0x10
push 0
call fcn.004027f9
add esp, 4
lea ecx, [ebp - 0x1c]
call fcn.004014c0
push ecx
fldz
fstp dword [esp]
call fcn.00401390
fstp st(0)
push 0
push 0
call fcn.004028b1
add esp, 8
push 0
push 0
call fcn.004026f9
add esp, 8
lea ecx, [ebp - 0x1c]
call fcn.00401520
mov dword [ebp - 0x824], 0
jmp 0x40e793
mov edx, dword [ebp - 0x824]
add edx, 1
mov dword [ebp - 0x824], edx
cmp dword [ebp - 0x824], 0x499677
jge 0x40e7c6
cmp dword [ebp - 0x824], 0x291c8
jne 0x40e7b5
mov eax, dword [0x41dcf0]
mov dword [0x2b91b24], eax
cmp dword [0x2b91b24], 0x49
jne 0x40e7c4
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40e784
mov dword [ebp - 0x828], 0
jmp 0x40e7e1
mov ecx, dword [ebp - 0x828]
add ecx, 1
mov dword [ebp - 0x828], ecx
cmp dword [ebp - 0x828], 0x2bd9db
jge 0x40e88e
cmp dword [ebp - 0x828], 0x4932
jge 0x40e807
push 0
push 0
call dword [sym.imp.USER32.dll_GetAncestor]
mov dword [ebp - 0x858], 0x768e62c5
mov dword [ebp - 0x864], 0x547f725b
mov dword [ebp - 0x85c], 0x409314dd
mov dword [ebp - 0x82c], 0x395f1135
add dword [ebp - 0x858], 0x3ba31025
add dword [ebp - 0x858], 0x7fbe0cf
add dword [ebp - 0x858], 0x429f2635
add dword [ebp - 0x858], 0x6392b65
add dword [ebp - 0x858], 0x5b33373c
add dword [ebp - 0x82c], 0x5dc24f48
cmp dword [0x2b91b24], 0xc5
jne 0x40e87f
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [0x2b91b1c], 0
jmp 0x40e7d2
mov dword [ebp - 0x868], 0
jmp 0x40e8a9
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 0x32d05d76
jge 0x40e908
cmp dword [0x2b91b24], 0xfc
jne 0x40e8db
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleSelectionInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x2b91b24], 0x6c
jne 0x40e8f8
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
cmp dword [ebp - 0x868], 0x9be51de
jle 0x40e906
jmp 0x40e908
jmp 0x40e89a
mov dword [ebp - 0x8c4], 0
jmp 0x40e923
mov eax, dword [ebp - 0x8c4]
add eax, 1
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0x497e0f
jge 0x40e95b
cmp dword [ebp - 0x8c4], 0x6c
jne 0x40e943
mov eax, 0x8c456
add dword [0x2b91b24], eax
cmp dword [0x2b91b24], 0xa1
jne 0x40e959
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x40e914
mov ecx, dword [0x2b91b24]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [0x427b64], eax
mov dword [ebp - 0x8c8], 0
jmp 0x40e98a
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 0x10841
jge 0x40e998
jmp 0x40e97b
mov dword [ebp - 0x8cc], 0
jmp 0x40e9b3
mov eax, dword [ebp - 0x8cc]
add eax, 1
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 0xcd91c
jge 0x40ea20
cmp dword [ebp - 0x8cc], 0x3b22
jne 0x40e9d7
mov ecx, dword [0x41a058]
mov dword [0x2b92220], ecx
cmp dword [0x2b91b24], 0x5e5
jne 0x40ea1e
xor edx, edx
mov word [ebp - 0xce0], dx
xor eax, eax
mov dword [ebp - 0xcde], eax
mov dword [ebp - 0xcda], eax
mov dword [ebp - 0xcd6], eax
mov word [ebp - 0xcd2], ax
lea ecx, [ebp - 0xce0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointA]
jmp 0x40e9a4
mov dword [ebp - 0xce4], 0
jmp 0x40ea3b
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
mov eax, dword [ebp - 0xce4]
cmp eax, dword [0x2b91b24]
jae 0x40ea57
mov ecx, dword [ebp - 0xce4]
push ecx
call fcn.0040e0c0
jmp 0x40ea2c
mov dword [ebp - 0xce8], 0
jmp 0x40ea72
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 0xe972f0
jge 0x40eab8
cmp dword [0x2b91b24], 0x59e
jne 0x40eab6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
xor eax, eax
mov word [ebp - 0xcec], ax
xor ecx, ecx
mov word [ebp - 0xcea], cx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleInputW]
jmp 0x40ea63
mov dword [ebp - 0xcf4], 0
jmp 0x40ead3
mov edx, dword [ebp - 0xcf4]
add edx, 1
mov dword [ebp - 0xcf4], edx
cmp dword [ebp - 0xcf4], 0x3dc4a3
jge 0x40eb74
cmp dword [ebp - 0xcf4], 0x26
jne 0x40eaf1
call fcn.0040e010
cmp dword [0x2b91b24], 0x7a
jne 0x40eb6f
xor eax, eax
mov word [ebp - 0xdc8], ax
xor ecx, ecx
mov dword [ebp - 0xdc6], ecx
mov dword [ebp - 0xdc2], ecx
mov dword [ebp - 0xdbe], ecx
mov word [ebp - 0xdba], cx
xor edx, edx
mov word [ebp - 0xdb8], dx
xor eax, eax
mov dword [ebp - 0xdb6], eax
mov dword [ebp - 0xdb2], eax
mov dword [ebp - 0xdae], eax
mov word [ebp - 0xdaa], ax
lea ecx, [ebp - 0xdb8]
push ecx
lea edx, [ebp - 0xdc8]
push edx
lea eax, [ebp - 0xda8]
push eax
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
push 0
call dword [sym.imp.KERNEL32.dll_SetTimeZoneInformation]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x40eac4
call fcn.0040e4f0
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10