Function at 0x40d756
Capabilities:
Get hostname
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1874
call fcn.0040bcd0
mov eax, dword [0x44c090]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
xor eax, eax
cmp eax, 0x180
jne 0x40d78b
mov ecx, dword [0x4510c4]
add ecx, 0xa231
mov dword [0x17f7934], ecx
cmp dword [0x17f7934], 0x141
jne 0x40d7a8
or dword [0x451d64], 0xffffffff
mov dword [0x451d60], 0xec58acac
inc eax
cmp eax, 0x12376ec
jl 0x40d772
push esi
xor esi, esi
cmp esi, 0x562d05
jne 0x40d7c5
mov eax, dword [0x44d0b8]
mov dword [0x17f7938], eax
cmp dword [0x17f7934], 0x3c
jne 0x40d7db
push str.hilucigelesezizahulegepigazicab_pefehadona_zicezihivov_hucogagekutayoyumisamasavugirox
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
inc esi
cmp esi, 0x5f6c74
jl 0x40d7b3
cmp dword [0x17f7934], 0x7c
push edi
jne 0x40d8d8
push ebx
lea eax, [ebp - 0x1804]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x185c]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push ebx
lea eax, [ebp - 0x1854]
push eax
push ebx
lea eax, [ebp - 0x804]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadConsoleW]
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
push ebx
push ebx
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push str.Socovi
call dword [sym.imp.KERNEL32.dll_FindAtomA]
call dword [sym.imp.KERNEL32.dll_AreFileApisANSI]
xor eax, eax
mov word [ebp - 0x1850], ax
lea edi, [ebp - 0x184e]
stosw word es:[edi], ax
mov word [ebp - 0x184c], ax
lea edi, [ebp - 0x184a]
stosw word es:[edi], ax
lea eax, [ebp - 0x1864]
push eax
push dword [ebp - 0x184c]
lea eax, [ebp - 0x1858]
push dword [ebp - 0x1850]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointA]
push ebx
lea eax, [ebp - 0x404]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push str.xofomicufulepebejuverim_kacavekazudok__s__d__f
push ebx
call fcn.00401e1e
push 0x44a35f
push 0x451cd8
call fcn.00401b21
push ebx
call fcn.00401ef7
add esp, 0x14
cmp dword [0x17f7934], 0x110a
jne 0x40da5e
push ebx
mov dword [0x17f7800], ebx
mov dword [0x17f7804], ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push ebx
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x1858]
push eax
lea eax, [ebp - 0x1854]
push eax
lea eax, [ebp - 0x185c]
push eax
lea eax, [ebp - 0x1850]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
lea eax, [ebp - 0x184c]
push eax
push ebx
push str.janepike_tez_cadoweruholunihi_pehoduvomelelom_tivepovawehujus
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
lea eax, [ebp - 0x1860]
push eax
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
mov word [ebp - 0x1874], ax
lea edi, [ebp - 0x1872]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp - 0x804]
push eax
push str.fekohuzilicogagidugamayozolujuh
lea eax, [ebp - 0x1874]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push ebx
push str.wihuwaticucihodolavi_kecicecelu_puxamijajibupimifimeyuxo_baheyucesekuceleyaw
push ebx
push str.lajeserizolepaxogolexuh_regeculiheheyegixumafexavayuvok
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push ebx
push ebx
lea eax, [ebp - 0x1404]
push eax
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_PurgeComm]
push 0x44a488
push str.xubetihumupa__f
push 0x451cd8
call fcn.00401c1c
push ebx
push ebx
call fcn.00401d58
add esp, 0x14
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x1808], edi
mov dword [ebp - 0x180c], ebx
mov word [ebp - 0x181c], ax
push 1
lea esi, [ebp - 0x1820]
call fcn.00401091
push ebx
push ebx
call fcn.00401d58
xor eax, eax
push ebx
push ebx
mov dword [ebp - 0x1824], edi
mov dword [ebp - 0x1828], ebx
mov word [ebp - 0x1838], ax
call fcn.00401f0d
push ebx
push ebx
call fcn.00401d58
push ebx
push ebx
call fcn.00401f0d
push 0x44a4a0
push 0x451cd8
call fcn.00401e1e
push ebx
call fcn.00401ec3
add esp, 0x2c
push 1
xor ebx, ebx
lea esi, [ebp - 0x183c]
call fcn.0040104c
push 1
lea esi, [ebp - 0x1820]
call fcn.0040104c
push dword [0x17f7934]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
xor esi, esi
mov dword [0x17f7654], eax
pop edi
cmp dword [0x17f7934], ebx
jbe 0x40daca
mov eax, dword [0x17f7938]
mov dword [ebp - 0x184c], eax
mov eax, 0xa231
add dword [ebp - 0x184c], eax
mov eax, dword [ebp - 0x184c]
mov al, byte [eax + esi]
mov ecx, dword [0x17f7654]
mov byte [esi + ecx], al
cmp dword [0x17f7934], 0x5ab
jne 0x40dac1
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetThreadToken]
mov dword [0x17f7658], 0x19b0
inc esi
cmp esi, dword [0x17f7934]
jb 0x40da7b
push 0x44a4a4
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call fcn.0040d49d
call fcn.0040d47f
call fcn.0040d6e5
xor eax, eax
cmp eax, 0xd606b
jne 0x40daf2
call fcn.0040d474
inc eax
cmp eax, 0x24e87d
jl 0x40dae6
mov esi, 0x1e4165
cmp dword [0x17f7934], 0xcc1
jne 0x40db19
push str.Zamukufibisak
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
cmp dword [0x17f7934], 0x7c4
mov dword [0x17f765c], 0x8e46a6f0
jne 0x40db3a
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObjectEx]
dec esi
jne 0x40daff
pop esi
cmp ebx, 0x408e
jle 0x40db52
cmp dword [ebp - 0x1840], 0xf5bed7
jne 0x40db5b
inc ebx
cmp ebx, 0x687ed2
jl 0x40db3e
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.00401ab5
leave
ret