Function at 0x40e650
Capabilities:
Accept command line arguments
Connect pipe
Get file attributes
Manipulate console buffer
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc8
cmp dword [0x2b96804], 0x25
jne 0x40e768
push 0x42b948
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x65f6
jne 0x40e768
push 0
push 0
call dword [sym.imp.USER32.dll_GetTitleBarInfo]
mov eax, dword [str.yufoxejoxu]
mov dword [ebp - 0x820], eax
mov ecx, dword [0x416bd0]
mov dword [ebp - 0x81c], ecx
mov edx, dword [0x416bd4]
mov dword [ebp - 0x818], edx
mov eax, dword [0x416bd8]
mov dword [ebp - 0x814], eax
mov ecx, dword [0x416bdc]
mov dword [ebp - 0x810], ecx
mov dx, word [0x416be0]
mov word [ebp - 0x80c], dx
push 0x7ea
push 0
lea eax, [ebp - 0x80a]
push eax
call fcn.00406370
add esp, 0xc
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], ecx
push ecx
fldz
fstp dword [esp]
call fcn.004013c0
fstp st(0)
push str.__s__d__f
push 0
call fcn.0040255a
add esp, 8
push 0
push 0
push 0
push 0
call fcn.004027bf
add esp, 0x10
push 0
push 0
push 0
push 0x42b948
call fcn.004027dc
add esp, 0x10
push 0
call fcn.004027f9
add esp, 4
lea ecx, [ebp - 0x1c]
call fcn.004014d0
push ecx
fldz
fstp dword [esp]
call fcn.004013a0
fstp st(0)
push 0
push 0
call fcn.004028b1
add esp, 8
push 0
push 0
call fcn.004026f9
add esp, 8
lea ecx, [ebp - 0x1c]
call fcn.00401530
mov dword [ebp - 0x824], 0
jmp 0x40e783
mov edx, dword [ebp - 0x824]
add edx, 1
mov dword [ebp - 0x824], edx
cmp dword [ebp - 0x824], 0x499677
jge 0x40e7b6
cmp dword [ebp - 0x824], 0x291c8
jne 0x40e7a5
mov eax, dword [0x41dcf0]
mov dword [0x2b96804], eax
cmp dword [0x2b96804], 0x49
jne 0x40e7b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40e774
mov dword [ebp - 0x828], 0
jmp 0x40e7d1
mov ecx, dword [ebp - 0x828]
add ecx, 1
mov dword [ebp - 0x828], ecx
cmp dword [ebp - 0x828], 0x2bd9db
jge 0x40e868
mov dword [ebp - 0x858], 0x768e62c5
mov dword [ebp - 0x864], 0x547f725b
mov dword [ebp - 0x85c], 0x409314dd
mov dword [ebp - 0x82c], 0x395f1135
add dword [ebp - 0x858], 0x3ba31025
add dword [ebp - 0x858], 0x7fbe0cf
add dword [ebp - 0x858], 0x429f2635
add dword [ebp - 0x858], 0x6392b65
add dword [ebp - 0x858], 0x5b33373c
add dword [ebp - 0x82c], 0x5dc24f48
cmp dword [0x2b96804], 0xc5
jne 0x40e859
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [0x2b967fc], 0
jmp 0x40e7c2
mov dword [ebp - 0x868], 0
jmp 0x40e883
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 0x32d05d76
jge 0x40e8e2
cmp dword [0x2b96804], 0xfc
jne 0x40e8b5
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleSelectionInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x2b96804], 0x6c
jne 0x40e8d2
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
cmp dword [ebp - 0x868], 0x9be51de
jle 0x40e8e0
jmp 0x40e8e2
jmp 0x40e874
mov dword [ebp - 0x8c4], 0
jmp 0x40e8fd
mov eax, dword [ebp - 0x8c4]
add eax, 1
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0x497e0f
jge 0x40e935
cmp dword [ebp - 0x8c4], 0x6c
jne 0x40e91d
mov eax, 0x8c456
add dword [0x2b96804], eax
cmp dword [0x2b96804], 0xa1
jne 0x40e933
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x40e8ee
mov ecx, dword [0x2b96804]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x42c844], eax
mov dword [ebp - 0x8c8], 0
jmp 0x40e964
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 0x10841
jge 0x40e972
jmp 0x40e955
mov dword [ebp - 0x8cc], 0
jmp 0x40e98d
mov eax, dword [ebp - 0x8cc]
add eax, 1
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 0xcd91c
jge 0x40e9fa
cmp dword [ebp - 0x8cc], 0x3b22
jne 0x40e9b1
mov ecx, dword [0x41a058]
mov dword [0x2b96f00], ecx
cmp dword [0x2b96804], 0x5e5
jne 0x40e9f8
xor edx, edx
mov word [ebp - 0xce0], dx
xor eax, eax
mov dword [ebp - 0xcde], eax
mov dword [ebp - 0xcda], eax
mov dword [ebp - 0xcd6], eax
mov word [ebp - 0xcd2], ax
lea ecx, [ebp - 0xce0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
jmp 0x40e97e
mov dword [ebp - 0xce4], 0
jmp 0x40ea15
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
mov eax, dword [ebp - 0xce4]
cmp eax, dword [0x2b96804]
jae 0x40ea31
mov ecx, dword [ebp - 0xce4]
push ecx
call fcn.0040e0c0
jmp 0x40ea06
mov dword [ebp - 0xce8], 0
jmp 0x40ea4c
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 0xe972f0
jge 0x40ea92
cmp dword [0x2b96804], 0x59e
jne 0x40ea90
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
xor eax, eax
mov word [ebp - 0xcec], ax
xor ecx, ecx
mov word [ebp - 0xcea], cx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleInputW]
jmp 0x40ea3d
mov dword [ebp - 0xcf4], 0
jmp 0x40eaad
mov edx, dword [ebp - 0xcf4]
add edx, 1
mov dword [ebp - 0xcf4], edx
cmp dword [ebp - 0xcf4], 0x3dc4a3
jge 0x40eb4e
cmp dword [ebp - 0xcf4], 0x26
jne 0x40eacb
call fcn.0040e010
cmp dword [0x2b96804], 0x7a
jne 0x40eb49
xor eax, eax
mov word [ebp - 0xdc8], ax
xor ecx, ecx
mov dword [ebp - 0xdc6], ecx
mov dword [ebp - 0xdc2], ecx
mov dword [ebp - 0xdbe], ecx
mov word [ebp - 0xdba], cx
xor edx, edx
mov word [ebp - 0xdb8], dx
xor eax, eax
mov dword [ebp - 0xdb6], eax
mov dword [ebp - 0xdb2], eax
mov dword [ebp - 0xdae], eax
mov word [ebp - 0xdaa], ax
lea ecx, [ebp - 0xdb8]
push ecx
lea edx, [ebp - 0xdc8]
push edx
lea eax, [ebp - 0xda8]
push eax
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x40ea9e
call fcn.0040e500
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10