Function at 0x434120
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1084
call fcn.00422540
cmp dword [0x16a7be8], 0x225
jne 0x434143
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp dword [0x16a7be8], 0x177
jne 0x4341ae
push 0x16a74f0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x4341ae
cmp dword [0x16a7be8], 0xf76
jne 0x434178
push 0x417ec0
call dword [sym.imp.KERNEL32.dll_AddAtomA]
mov eax, dword [0x417ee0]
mov dword [ebp - 0x408], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x404]
push ecx
call fcn.004205a0
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
push 0x417ee4
call fcn.00418590
fstp st(0)
add esp, 4
mov dword [ebp - 0x40c], 0
jmp 0x4341c9
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xe56f91
jge 0x43422c
cmp dword [ebp - 0x40c], 0x492
jne 0x4341ef
mov ecx, dword [0x438798]
mov dword [0x16a7be8], ecx
jmp 0x43422c
cmp dword [0x16a7be8], 0xf
jne 0x43422a
push 0
lea edx, [ebp - 0x810]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
lea eax, [ebp - 0xc10]
push eax
push 0
call dword [sym.imp.KERNEL32.dll__hwrite]
push 0x417ee8
push 0x417f0c
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x4341ba
mov dword [ebp - 0xc14], 0
jmp 0x434247
mov ecx, dword [ebp - 0xc14]
add ecx, 1
mov dword [ebp - 0xc14], ecx
cmp dword [ebp - 0xc14], 0xbfe70d
jge 0x434307
cmp dword [ebp - 0xc14], 0x57f
jge 0x434275
push 0
push 0
call dword [sym.imp.USER32.dll_GetComboBoxInfo]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x16a7be8], 0x6b
jne 0x4342b9
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpQueryOption]
lea edx, [ebp - 0xc44]
push edx
lea eax, [ebp - 0x1048]
push eax
push 0
push 0x417f24
push 0x417f38
push 0x417f4c
call dword [sym.imp.KERNEL32.dll_SearchPathA]
mov dword [0x169f63c], 0
cmp dword [ebp - 0xc14], 0x1b7ad
jle 0x434302
cmp dword [ebp - 0xc40], 0x50854379
je 0x434302
cmp dword [ebp - 0xc30], 0xd7ea37
je 0x434302
cmp dword [0x16a7be8], 0xfc5
jne 0x434302
push 0x417f78
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
jmp 0x434238
mov dword [ebp - 0x104c], 0
jmp 0x434322
mov ecx, dword [ebp - 0x104c]
add ecx, 1
mov dword [ebp - 0x104c], ecx
cmp dword [ebp - 0x104c], 0x47e7cf
jge 0x434364
cmp dword [ebp - 0x104c], 0x3fa
jne 0x43434c
mov edx, dword [0x16a7be8]
add edx, 0x12336
mov dword [0x16a7be8], edx
cmp dword [0x16a7be8], 0x65
jne 0x434362
lea eax, [ebp - 0x106c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateActCtxW]
jmp 0x434313
call fcn.004338d0
mov dword [ebp - 0x1070], 0
jmp 0x434384
mov ecx, dword [ebp - 0x1070]
add ecx, 1
mov dword [ebp - 0x1070], ecx
cmp dword [ebp - 0x1070], 0x28f02
jge 0x4343a9
cmp dword [0x16a7be8], 0x105
jne 0x4343a7
push 0x417f90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x434375
mov dword [ebp - 0x1074], 0
jmp 0x4343c4
mov edx, dword [ebp - 0x1074]
add edx, 1
mov dword [ebp - 0x1074], edx
cmp dword [ebp - 0x1074], 0xe5fbc
jge 0x4343fc
cmp dword [0x16a7be8], 0x9e2
jne 0x4343e4
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1074], 0x3b22
jne 0x4343fa
mov eax, dword [0x43878c]
mov dword [0x16a7bec], eax
jmp 0x4343b5
mov dword [ebp - 0x1078], 0
jmp 0x434417
mov ecx, dword [ebp - 0x1078]
add ecx, 1
mov dword [ebp - 0x1078], ecx
mov edx, dword [ebp - 0x1078]
cmp edx, dword [0x16a7be8]
jae 0x43445b
mov eax, dword [ebp - 0x1078]
push eax
call fcn.00433a10
cmp dword [0x16a7be8], 0x22
jne 0x434459
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
lea ecx, [ebp - 0x107c]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x434408
mov dword [ebp - 0x1080], 0
jmp 0x434476
mov edx, dword [ebp - 0x1080]
add edx, 1
mov dword [ebp - 0x1080], edx
cmp dword [ebp - 0x1080], 0xe96350
jge 0x43449b
cmp dword [0x16a7be8], 0x15a
jne 0x434499
push 0x417fcc
call dword [sym.imp.KERNEL32.dll_AddAtomA]
jmp 0x434467
mov dword [ebp - 0x1084], 0
jmp 0x4344b6
mov eax, dword [ebp - 0x1084]
add eax, 1
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1084], 0x3dc4a3
jge 0x4344d2
cmp dword [ebp - 0x1084], 0x26
jne 0x4344d0
call fcn.004338f0
jmp 0x4344a7
call fcn.00433f30
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10