Function at 0x41e710
Capabilities:
Connect pipe
Get disk information
Get file size
Get geographical location
Manipulate console buffer
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x205c
call fcn.00409650
mov eax, dword [0x425004]
xor eax, esp
mov dword [esp + 0x2058], eax
mov edx, dword [0x426370]
mov ecx, dword [0x80cb0c]
push ebx
push esi
push edi
xor ebx, ebx
xor eax, eax
mov edi, 0xec58ae96
or esi, 0xffffffff
lea esp, [esp]
cmp eax, 0x4db
jne 0x41e75d
lea ecx, [edx + 0x9e49]
cmp ecx, 0xbcf
jne 0x41e771
mov dword [0x427180], edi
mov dword [0x427184], esi
inc eax
cmp eax, 0x1180b56
jl 0x41e750
mov edi, dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
mov dword [0x80cb0c], ecx
xor esi, esi
cmp esi, 0x55b763
jne 0x41e799
mov eax, dword [0x425f18]
mov dword [0x80cc3c], eax
cmp ecx, 0x3c
jne 0x41e7a8
push ebx
push ebx
call edi
mov ecx, dword [0x80cb0c]
inc esi
cmp esi, 0x4cd9711a
jl 0x41e787
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
lea esp, [esp]
call edi
cmp esi, 0x1709a1
jg 0x41e7d3
inc esi
cmp esi, 0x94d52d
jl 0x41e7c0
cmp dword [0x80cb0c], 0x2a
jne 0x41e8af
lea ecx, [esp + 0x10]
push ecx
push ebx
push ebx
push ebx
push ebx
mov dword [0x80cb00], ebx
mov dword [0x80cb04], ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
xor eax, eax
push ebx
mov dword [esp + 0x22], eax
mov dword [esp + 0x26], eax
mov dword [esp + 0x2a], eax
mov word [esp + 0x2e], ax
lea eax, [esp + 0x464]
push eax
push str.mesiwejiwosofihinutiraju_zipimasozerujikarabozenepiredis
lea ecx, [esp + 0x28]
push ecx
push ebx
xor edx, edx
push ebx
mov word [esp + 0x34], dx
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadIdealProcessor]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthA]
push ebx
push str.juyokidebajecojofibe_nuh
push str.sumal_wejakerazugot_bodijucalawalohilihisoroju_vohaz_yojox
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
push ebx
lea edx, [esp + 0x64]
push edx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ebx
push ebx
call fcn.0040109d
push ebx
call fcn.0040100f
add esp, 0xc
push ebx
push ebx
call fcn.0040109d
push 0x42350c
push 0x4270f8
call fcn.004010fe
add esp, 0x10
cmp dword [0x80cb0c], 0x7c
jne 0x41e9a0
push ebx
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
push ebx
lea ecx, [esp + 0x64]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryA]
push ebx
lea edx, [esp + 0x18]
push edx
push ebx
lea eax, [esp + 0x146c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleA]
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push ebx
lea ecx, [esp + 0xc64]
push ecx
push 0x423510
push str.manecelijotipobumacedo
push str.zisekefepumaleheyuhidi
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0x2e
lea edx, [esp + 0x34]
push ebx
push edx
mov dword [esp + 0x38], ebx
call fcn.004053d0
add esp, 0xc
push ebx
lea eax, [esp + 0x30]
push eax
push str.gudivuvamozijetowog_rikosisociboc
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigW]
push ebx
push ebx
lea ecx, [esp + 0x468]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push ebx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push ebx
lea eax, [esp + 0x1864]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp dword [0x80cb0c], 0x2d
jne 0x41e98e
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
push ebx
call fcn.004010dd
add esp, 4
push ebx
call fcn.004010f3
add esp, 4
mov ecx, dword [0x80cb0c]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [0x80cb0c]
mov esi, eax
xor ecx, ecx
mov dword [0x80c954], esi
cmp edx, ebx
jbe 0x41e9ee
mov edi, dword [0x80cc3c]
mov eax, 0x17bc
lea ecx, [ecx]
mov bl, byte [edi + ecx + 0x9e49]
mov byte [esi + ecx], bl
cmp edx, 0x8d
jne 0x41e9e7
mov dword [0x80c958], eax
inc ecx
cmp ecx, edx
jb 0x41e9d0
xor ebx, ebx
call fcn.0041e500
call fcn.0041e3c0
call fcn.0041e680
mov edi, dword [sym.imp.KERNEL32.dll_QueryMemoryResourceNotification]
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileSize]
xor esi, esi
jmp 0x41ea10
cmp dword [0x80cb0c], 0x41
jne 0x41ea28
lea edx, [esp + 0x14]
push edx
push 0
call edi
push 0
push 0
call ebx
cmp esi, 0xd606b
jne 0x41ea35
call fcn.0041e3b0
cmp dword [0x80cb0c], 0xc
jne 0x41ea55
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MulDiv]
inc esi
cmp esi, 0x24e87d
jl 0x41ea10
mov esi, dword [sym.imp.KERNEL32.dll_WriteConsoleOutputCharacterW]
mov ebx, 0x1dfefd
mov edi, 0x8e4e015c
mov edi, edi
cmp dword [0x80cb0c], 0x7c4
mov dword [0x80c95c], edi
jne 0x41eaa3
xor edx, edx
xor ecx, ecx
lea eax, [esp + 0x14]
push eax
mov word [esp + 0x14], cx
mov word [esp + 0x16], dx
mov ecx, dword [esp + 0x14]
push ecx
push edx
push str.banayikuxociwegepadacon_kepevudekeragevayilemacuxo_peyitorahixiziwejucafeseve_rexagufoduj
push edx
call esi
sub ebx, 1
jne 0x41ea70
mov edi, dword [sym.imp.USER32.dll_GetMonitorInfoA]
mov ebx, dword [sym.imp.USER32.dll_GetClassLongW]
xor esi, esi
lea edx, [esp + 0x2c]
push edx
push 0
call edi
push 0
push 0
call ebx
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetBoundsRect]
cmp esi, 0x408e
jle 0x41eae3
cmp dword [esp + 0x34], 0xf5bed7
jne 0x41eaec
inc esi
cmp esi, 0x687ed2
jl 0x41eab6
mov ecx, dword [esp + 0x2064]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401000
mov esp, ebp
pop ebp
ret