Function at 0x401900
Capabilities:
Get disk information
Get file attributes
Identify system language via api
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52be3b
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x577f00]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edi, edx
xor ebx, ebx
push str.QNrDg
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x144], ecx
mov dword [edi], ebx
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 1
push 0x180
push 0x224
push 0x37f
push 0x3a0
call esi
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
xor eax, eax
mov dword [ebp - 0x13c], eax
mov ecx, 3
mov dword [ebp - 4], ebx
cmp eax, ecx
jae 0x4019f2
mov edx, dword [ebp - 0x144]
mov eax, dword [edx + eax*4]
add dword [edi], eax
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push 0x100
lea ecx, [ebp - 0x11c]
push ecx
push ebx
push 0x2a7
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push str.MPSd9
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
lea edx, [ebp - 0x14c]
push edx
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
inc dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
jmp 0x401981
mov eax, dword [edi]
push eax
call fcn.0040336d
add esp, 4
mov edi, eax
push str.lgfs
mov dword [ebp - 0x14c], edi
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push ebx
push 0x100
lea ecx, [ebp - 0x11c]
push ecx
push ebx
push 0x105
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.._ZD2o
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push 0x10d
mov dword [ebp - 0x148], edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push 0x1f
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call esi
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x13c], ebx
mov edi, edi
mov eax, 3
cmp dword [ebp - 0x13c], eax
jae 0x401cab
lea edx, [ebp - 0x154]
push edx
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push ebx
push str.._rTsE
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push ebx
push ebx
push ebx
push ebx
push SysReAllocStringLen
push SysReAllocStringLen
push SysReAllocStringLen
push SysReAllocStringLen
push 0xcf0000
push str.H8nC
push str.ZNUoR
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 4], ebx
mov eax, edx
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x128], ebx
mov byte [ebp - 0x138], bl
lea edi, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401b10
sub eax, edi
push eax
push edx
lea ecx, [ebp - 0x138]
call fcn.00401f40
mov ecx, dword [ebp - 0x144]
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x13c]
mov byte [ebp - 4], 0xb
mov edx, dword [ecx + eax*4]
push edx
mov edx, dword [ebp - 0x158]
add eax, 0x7530
push eax
lea ecx, [ebp - 0x150]
call fcn.00401740
add esp, 0xc
cmp dword [ebp - 0x124], 0x10
mov dword [ebp - 0x140], eax
jb 0x401b79
mov eax, dword [ebp - 0x138]
push eax
call fcn.00403362
add esp, 4
push ebx
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x128], ebx
mov byte [ebp - 0x138], bl
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0x144]
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 4], ebx
mov edi, dword [ebp - 0x150]
cmp edi, dword [ecx + edx*4]
je 0x401bfb
mov eax, dword [ebp - 0x140]
push eax
call fcn.00403362
add esp, 4
lea ecx, [ebp - 0x154]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.005090d4
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x148]
push edi
push edx
push eax
call fcn.0050d6d0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 0x267
push 0x65
call esi
push eax
call dword [sym.imp.USER32.dll_SetTimer]
add dword [ebp - 0x148], edi
push str.FpRFp
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
push ebx
push 0x3cf
push 0x23
call esi
push eax
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [ebp - 0x164]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov edi, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push eax
call edi
push str.._TafH
push str.._eCCE
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov edx, dword [ebp - 0x140]
push edx
call fcn.00403362
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call edi
inc dword [ebp - 0x13c]
mov dword [ebp - 4], ebx
jmp 0x401a90
mov eax, dword [ebp - 0x14c]
jmp 0x401bdf