Function at 0x40e6fc
Capabilities:
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x412246
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x18cc
call fcn.0040db70
mov eax, dword [0x45e050]
xor eax, esp
mov dword [esp + 0x18c8], eax
push ebx
push esi
push edi
mov eax, dword [0x45e050]
xor eax, esp
push eax
lea eax, [esp + 0x18e0]
mov dword fs:[0], eax
xor esi, esi
xor eax, eax
cmp eax, 0x180
jne 0x40e75e
mov ecx, dword [0x463074]
add ecx, 0xa231
mov dword [0x1bda404], ecx
cmp dword [0x1bda404], 0x141
jne 0x40e77b
or dword [0x46405c], 0xffffffff
mov dword [0x464058], 0xec58acac
inc eax
cmp eax, 0x12376ec
jl 0x40e745
xor edi, edi
cmp edi, 0x562d05
jne 0x40e797
mov eax, dword [0x45f068]
mov dword [0x1bda534], eax
cmp dword [0x1bda404], 0x3c
jne 0x40e7ad
push str.nukupuyenuberorimemakox_mizivoyilimibat_mikakunefup_damosuhahoyokiliyatike
push esi
push esi
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
inc edi
cmp edi, 0x5f6c74
jl 0x40e785
cmp dword [0x1bda404], 0x7c
jne 0x40e899
push esi
lea eax, [esp + 0x8d8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push esi
lea eax, [esp + 0x5c]
push eax
push esi
lea eax, [esp + 0x4e0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadConsoleW]
push esi
push esi
call dword [sym.imp.USER32.dll_LoadIconA]
push esi
push esi
lea eax, [esp + 0x10dc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push str.wazikowoloxihucaxatag
call dword [sym.imp.KERNEL32.dll_FindAtomA]
call dword [sym.imp.KERNEL32.dll_AreFileApisANSI]
xor eax, eax
mov word [esp + 0x1c], ax
lea edi, [esp + 0x1e]
stosw word es:[edi], ax
mov word [esp + 0x14], ax
lea edi, [esp + 0x16]
stosw word es:[edi], ax
lea eax, [esp + 0x78]
push eax
push dword [esp + 0x18]
lea eax, [esp + 0x58]
push dword [esp + 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
push esi
lea eax, [esp + 0xd8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExA]
push esi
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push str.mubopa_tutovosasadurezejesapibaviyi__s__d__f
push esi
call fcn.00402c0d
push 0x45b6d5
push 0x463fd0
call fcn.00402fd9
push esi
call fcn.00403126
add esp, 0x14
cmp dword [0x1bda404], 0x110a
jne 0x40ebd5
push esi
mov dword [0x1bda3f8], esi
mov dword [0x1bda3fc], esi
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push esi
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x8c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
lea eax, [esp + 0x1c]
push eax
push esi
push str.kakunifulafi_tez_regecinu_kulotahamavabapivozuga_cizitolocopamovezena
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
push esi
push esi
lea eax, [esp + 0x10dc]
push eax
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigW]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
mov word [esp + 0x80], ax
lea edi, [esp + 0x82]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
stosw word es:[edi], ax
lea eax, [esp + 0x4d8]
push eax
push str.jepufizalu
lea eax, [esp + 0x8c]
push eax
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push esi
push str.yuwiguvawitahexoyayajuniwula_cozegifomoh_kohigomofadise_havomacaxiyijawuxe
push esi
push str.zaxujaxatakebudayoromutonuwo_titapol
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push esi
push esi
lea eax, [esp + 0x8dc]
push eax
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_PurgeComm]
fld qword [0x45b8b8]
push 0x50
push ecx
push ecx
fstp qword [esp]
push 0x45b7e4
push str._s__f__c
call fcn.00402fd9
add esp, 0x14
push 0x45b7f4
push str.xubetihumupa__f
push 0x463fd0
call fcn.00402603
add esp, 0xc
push esi
push esi
call fcn.004027cd
pop ecx
pop ecx
lea eax, [esp + 0xac]
call fcn.004011e1
push esi
mov dword [esp + 0x18ec], esi
call fcn.00402abd
pop ecx
push esi
push esi
call fcn.004027cd
xor eax, eax
mov dword [esp + 0xb0], 7
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], ax
push 4
mov byte [esp + 0x18f4], 1
call fcn.004036fb
add esp, 0xc
cmp eax, esi
je 0x40ea0c
lea ecx, [esp + 0x20]
mov dword [eax], ecx
jmp 0x40ea0e
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
lea eax, [esp + 0x5c]
mov byte [esp + 0x18e8], 3
call fcn.004011e1
mov byte [esp + 0x18e8], 4
mov ecx, dword [esp + 0x2c]
cmp ecx, esi
je 0x40ea4d
mov eax, dword [esp + 0x34]
sub eax, ecx
push 0x1c
cdq
pop esi
idiv esi
mov esi, eax
mov ebx, dword [esp + 0x30]
mov eax, ebx
sub eax, ecx
push 0x1c
cdq
pop edi
idiv edi
cmp eax, esi
jae 0x40ea72
lea eax, [esp + 0x5c]
push eax
push 1
push ebx
call fcn.004014a2
mov dword [esp + 0x30], eax
jmp 0x40ea96
mov esi, ebx
cmp ecx, ebx
jbe 0x40ea7d
call fcn.00402fc9
mov eax, dword [esp + 0x20]
push esi
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x30]
call fcn.004013d0
push 1
xor ebx, ebx
lea esi, [esp + 0x60]
mov byte [esp + 0x18ec], 3
call fcn.0040138b
mov ecx, dword [esp + 0x30]
mov eax, ecx
sub eax, dword [esp + 0x2c]
push 0x1c
cdq
pop esi
idiv esi
test eax, eax
je 0x40eacc
push ecx
lea eax, [ecx - 0x1c]
call fcn.0040147f
sub dword [esp + 0x30], esi
push 4
call fcn.004036fb
xor esi, esi
pop ecx
cmp eax, esi
je 0x40eae2
lea ecx, [esp + 0x38]
mov dword [eax], ecx
jmp 0x40eae4
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov ebx, 0x45b80c
push ebx
lea ecx, [esp + 0x60]
mov byte [esp + 0x18ec], 6
call fcn.00401189
mov byte [esp + 0x18e8], 7
mov ecx, dword [esp + 0x44]
cmp ecx, esi
jne 0x40eb21
mov dword [esp + 0x14], esi
jmp 0x40eb31
mov eax, dword [esp + 0x4c]
sub eax, ecx
push 0x1c
cdq
pop edi
idiv edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
sub eax, ecx
push 0x1c
cdq
pop edi
idiv edi
cmp eax, dword [esp + 0x14]
jae 0x40eb59
lea eax, [esp + 0x5c]
push eax
push 1
push dword [esp + 0x50]
call fcn.00401581
mov dword [esp + 0x48], eax
jmp 0x40eb7f
mov edi, dword [esp + 0x48]
cmp ecx, edi
jbe 0x40eb66
call fcn.00402fc9
mov eax, dword [esp + 0x38]
push edi
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x48]
call fcn.004014d2
push esi
push 1
lea ecx, [esp + 0x64]
call fcn.00401340
push esi
push esi
call fcn.0040313c
push esi
push esi
call fcn.004027cd
push esi
call fcn.0040273f
add esp, 0x14
push esi
call fcn.00402c2a
pop ecx
push esi
push esi
push esi
call fcn.00402a39
add esp, 0xc
push esi
push esi
call fcn.0040313c
push ebx
push 0x463fd0
call fcn.00402c0d
push esi
call fcn.00402e55
add esp, 0x14
push esi
call fcn.00403648
call fcn.0040e404
xor ecx, ecx
cmp dword [0x1bda404], esi
jbe 0x40ec21
mov eax, dword [0x1bda534]
mov dword [esp + 0x14], eax
mov eax, 0xa231
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov al, byte [eax + ecx]
mov edx, dword [0x1bda24c]
mov byte [ecx + edx], al
mov eax, dword [0x1bda404]
cmp eax, 0x5ab
jne 0x40ec1c
mov dword [0x1bda250], 0x19b0
inc ecx
cmp ecx, eax
jb 0x40ebe4
push 0x45b810
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call fcn.0040e459
call fcn.0040e43b
call fcn.0040e68b
xor eax, eax
cmp eax, 0xd606b
jne 0x40ec49
call fcn.0040e430
inc eax
cmp eax, 0x24e87d
jl 0x40ec3d
mov edi, 0x1e4165
cmp dword [0x1bda404], 0xcc1
jne 0x40ec70
push str.kugijedologutozayafetojunogub
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
cmp dword [0x1bda404], 0x7c4
mov dword [0x1bda400], 0x8e46a6f0
jne 0x40ec91
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObjectEx]
dec edi
jne 0x40ec56
cmp esi, 0x408e
jle 0x40eca9
cmp dword [esp + 0xb4], 0xf5bed7
jne 0x40ecb2
inc esi
cmp esi, 0x687ed2
jl 0x40ec94
mov ecx, dword [esp + 0x18e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18c8]
xor ecx, esp
call fcn.00402519
mov esp, ebp
pop ebp
ret