Function at 0x414d70
Capabilities:
Check mutex on windows
Delete file
Enumerate gui resources
Get common file path
Get file attributes
Get hostname
Manipulate console buffer
Query environment variable
Read .ini file
Read pipe
Write pipe

Disassembly:
mov eax, 0x184c
call fcn.0040eda0
cmp dword [0x2b60f74], 0x422
push ebx
push ebp
push esi
push edi
jne 0x414dc8
push 0
push 0
push 0
call fcn.00403c70
push 0x40365c
push 0
call fcn.00403c70
push 0
call fcn.00414516
push 0x4036b4
push 0x4036b8
push 0x437760
call fcn.00403c70
push 0
push 0
call fcn.00403c30
add esp, 0x2c
mov edi, dword [sym.imp.KERNEL32.dll_EnumDateFormatsExW]
xor esi, esi
cmp esi, 0xc0a
jne 0x414de3
mov eax, 0x38d6
add dword [0x2b60f74], eax
cmp dword [0x2b60f74], 0xd04
jne 0x414df7
push 0
push 0
push 0
call edi
inc esi
cmp esi, 0x33a146
jl 0x414dd0
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x30]
mov ebp, dword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
cmp esi, 0x1c275
jge 0x414e1c
push 0
call ebp
cmp esi, 0x1ea070f3
jle 0x414e34
cmp edi, 0xacd436
je 0x414e34
cmp ebx, 0xad1af0c
jne 0x414e3d
inc esi
cmp esi, 0x8c238a18
jb 0x414e10
mov eax, dword [0x2b60f74]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExA]
mov edi, dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov ebp, dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [0x2b60a58], eax
mov eax, dword [0x2b60f74]
mov dword [esp + 0x10], 0x962ae8
cmp eax, 3
jne 0x414e8c
lea ecx, [esp + 0x58]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [0x2b60f74]
cmp eax, 0xd
jne 0x414f73
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
call edi
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x5c]
push eax
push 0
call ebp
push 0
call ebx
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0xc5c]
push edx
push 0
push 0x4036c0
push 0x403710
push 0x403704
call dword [sym.imp.KERNEL32.dll_SearchPathA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeactivateActCtx]
xor eax, eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0x464]
push ecx
push eax
push eax
push eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0x403788
push 0
lea edx, [esp + 0x1060]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea eax, [esp + 0x18]
push eax
push 0
push 0x403828
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
push 0
push 0
lea ecx, [esp + 0x860]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructA]
mov eax, dword [0x2b60f74]
dec dword [esp + 0x10]
jne 0x414e75
xor esi, esi
test eax, eax
je 0x414fc4
mov edi, dword [sym.imp.KERNEL32.dll__lclose]
mov ebx, dword [sym.imp.KERNEL32.dll_FatalAppExitA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetEnvironmentStrings]
cmp eax, 0xfe
jne 0x414fa9
push 0
call edi
push 0x403894
push 0
call ebx
call fcn.00414a10
mov eax, dword [0x2b60f74]
cmp eax, 0x29
jne 0x414fbf
call ebp
mov eax, dword [0x2b60f74]
inc esi
cmp esi, eax
jb 0x414f95
mov ebx, dword [sym.imp.KERNEL32.dll_AddAtomA]
cmp eax, 0x19c
jne 0x415003
push 0x4037fc
call ebx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0x4038c4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoA]
push 0x4038f8
push 0x4038d4
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
mov edi, dword [sym.imp.USER32.dll_LoadMenuA]
mov esi, 0x8dc
push 0
push 0
call edi
dec esi
jne 0x41500e
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, 0x25865
mov ebp, 0x15a
cmp dword [0x2b60f74], ebp
jne 0x415039
push 0
call ebx
push 0
push 0
call esi
dec edi
jne 0x415027
mov byte [0x437760], 0
call fcn.00414550
call fcn.00414d40
call fcn.004149f0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleAliasW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov ebp, 0xdd7b3
lea esp, [esp]
cmp dword [0x2b60f74], 0x21
jne 0x415099
call esi
push 0
push 0
lea edx, [esp + 0x1060]
push edx
push 0
call edi
lea eax, [esp + 0x14]
push eax
push 0x40393c
push 0
call ebx
dec ebp
jne 0x415070
call fcn.00414b90
cmp dword [0x2b60f74], 0x58c
mov byte [0x437761], 0x73
jne 0x41512d
lea ecx, [esp + 0x58]
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push ebp
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesA]
push ebp
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
push ebp
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0x403958
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerA]
push 0x30
lea edx, [esp + 0x2c]
push ebp
push edx
mov dword [esp + 0x30], ebp
call fcn.004081e0
add esp, 0xc
push ebp
lea eax, [esp + 0x28]
push eax
push 0x4039cc
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push 0x40394c
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
lea ecx, [esp + 0x14]
push ecx
push ebp
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_WriteConsoleInputA]
call fcn.00414a00
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x184c
ret