Function at 0x433fb0
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1884
call fcn.004223c0
cmp dword [0x16a7be8], 0x225
jne 0x433fd3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp dword [0x16a7be8], 0x177
jne 0x43403e
push 0x16a74f0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x43403e
cmp dword [0x16a7be8], 0xf76
jne 0x434008
push 0x417ce0
call dword [sym.imp.KERNEL32.dll_AddAtomA]
mov eax, dword [0x417d00]
mov dword [ebp - 0x408], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x404]
push ecx
call fcn.00420420
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
push 0x417d04
call fcn.00418410
fstp st(0)
add esp, 4
mov dword [ebp - 0x40c], 0
jmp 0x434059
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xe56f91
jge 0x4340bc
cmp dword [ebp - 0x40c], 0x492
jne 0x43407f
mov ecx, dword [0x438798]
mov dword [0x16a7be8], ecx
jmp 0x4340bc
cmp dword [0x16a7be8], 0xf
jne 0x4340ba
push 0
lea edx, [ebp - 0xc10]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
lea eax, [ebp - 0x1010]
push eax
push 0
call dword [sym.imp.KERNEL32.dll__hwrite]
push 0x417d08
push 0x417d2c
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x43404a
mov dword [ebp - 0x1014], 0
jmp 0x4340d7
mov ecx, dword [ebp - 0x1014]
add ecx, 1
mov dword [ebp - 0x1014], ecx
cmp dword [ebp - 0x1014], 0xbfe70d
jge 0x434197
cmp dword [ebp - 0x1014], 0x57f
jge 0x434105
push 0
push 0
call dword [sym.imp.USER32.dll_GetComboBoxInfo]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x16a7be8], 0x6b
jne 0x434149
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpQueryOption]
lea edx, [ebp - 0x1044]
push edx
lea eax, [ebp - 0x1848]
push eax
push 0
push 0x417d44
push 0x417d6c
push 0x417d90
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [0x169f63c], 0
cmp dword [ebp - 0x1014], 0x1b7ad
jle 0x434192
cmp dword [ebp - 0x1040], 0x50854379
je 0x434192
cmp dword [ebp - 0x1030], 0xd7ea37
je 0x434192
cmp dword [0x16a7be8], 0xfc5
jne 0x434192
push 0x417de8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
jmp 0x4340c8
mov dword [ebp - 0x184c], 0
jmp 0x4341b2
mov ecx, dword [ebp - 0x184c]
add ecx, 1
mov dword [ebp - 0x184c], ecx
cmp dword [ebp - 0x184c], 0x47e7cf
jge 0x4341f4
cmp dword [ebp - 0x184c], 0x3fa
jne 0x4341dc
mov edx, dword [0x16a7be8]
add edx, 0x12336
mov dword [0x16a7be8], edx
cmp dword [0x16a7be8], 0x65
jne 0x4341f2
lea eax, [ebp - 0x186c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateActCtxW]
jmp 0x4341a3
call fcn.00433750
mov dword [ebp - 0x1870], 0
jmp 0x434214
mov ecx, dword [ebp - 0x1870]
add ecx, 1
mov dword [ebp - 0x1870], ecx
cmp dword [ebp - 0x1870], 0x28f02
jge 0x434239
cmp dword [0x16a7be8], 0x105
jne 0x434237
push 0x417e00
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x434205
mov dword [ebp - 0x1874], 0
jmp 0x434254
mov edx, dword [ebp - 0x1874]
add edx, 1
mov dword [ebp - 0x1874], edx
cmp dword [ebp - 0x1874], 0xe5fbc
jge 0x43428c
cmp dword [0x16a7be8], 0x9e2
jne 0x434274
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1874], 0x3b22
jne 0x43428a
mov eax, dword [0x43878c]
mov dword [0x16a7bec], eax
jmp 0x434245
mov dword [ebp - 0x1878], 0
jmp 0x4342a7
mov ecx, dword [ebp - 0x1878]
add ecx, 1
mov dword [ebp - 0x1878], ecx
mov edx, dword [ebp - 0x1878]
cmp edx, dword [0x16a7be8]
jae 0x4342eb
mov eax, dword [ebp - 0x1878]
push eax
call fcn.00433890
cmp dword [0x16a7be8], 0x22
jne 0x4342e9
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
lea ecx, [ebp - 0x187c]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x434298
mov dword [ebp - 0x1880], 0
jmp 0x434306
mov edx, dword [ebp - 0x1880]
add edx, 1
mov dword [ebp - 0x1880], edx
cmp dword [ebp - 0x1880], 0xe96350
jge 0x43432b
cmp dword [0x16a7be8], 0x15a
jne 0x434329
push 0x417e3c
call dword [sym.imp.KERNEL32.dll_AddAtomA]
jmp 0x4342f7
mov dword [ebp - 0x1884], 0
jmp 0x434346
mov eax, dword [ebp - 0x1884]
add eax, 1
mov dword [ebp - 0x1884], eax
cmp dword [ebp - 0x1884], 0x3dc4a3
jge 0x434362
cmp dword [ebp - 0x1884], 0x26
jne 0x434360
call fcn.00433770
jmp 0x434337
call fcn.00433dc0
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10