Function at 0x42f190
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1864
call fcn.00422c00
cmp dword [0x7636c0], 0x225
jne 0x42f1b3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp dword [0x7636c0], 0x177
jne 0x42f202
push 0x762fc8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x42f202
push 0
push 0
call dword [sym.imp.USER32.dll_GetAncestor]
mov eax, dword [0x4173d8]
mov dword [ebp - 0x408], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x404]
push ecx
call fcn.0041efa0
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
mov dword [ebp - 0x40c], 0
jmp 0x42f21d
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xe56f91
jge 0x42f280
cmp dword [ebp - 0x40c], 0x492
jne 0x42f243
mov ecx, dword [0x436470]
mov dword [0x7636c0], ecx
jmp 0x42f280
cmp dword [0x7636c0], 0xf
jne 0x42f27e
push 0
lea edx, [ebp - 0xc10]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
lea eax, [ebp - 0x1010]
push eax
push 0
call dword [sym.imp.KERNEL32.dll__hwrite]
push 0x4173dc
push 0x417400
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x42f20e
mov dword [ebp - 0x1014], 0
jmp 0x42f29b
mov ecx, dword [ebp - 0x1014]
add ecx, 1
mov dword [ebp - 0x1014], ecx
cmp dword [ebp - 0x1014], 0xbfe70d
jge 0x42f30b
cmp dword [ebp - 0x1014], 0x57f
jge 0x42f2bb
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x7636c0], 0x6b
jne 0x42f2ff
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
lea edx, [ebp - 0x1044]
push edx
lea eax, [ebp - 0x1848]
push eax
push 0
push 0x417418
push 0x417440
push 0x4174a0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [0x75b114], 0
jmp 0x42f28c
mov dword [ebp - 0x184c], 0
jmp 0x42f326
mov ecx, dword [ebp - 0x184c]
add ecx, 1
mov dword [ebp - 0x184c], ecx
cmp dword [ebp - 0x184c], 0x47e7cf
jge 0x42f352
cmp dword [ebp - 0x184c], 0x3fa
jne 0x42f350
mov edx, dword [0x7636c0]
add edx, 0x12336
mov dword [0x7636c0], edx
jmp 0x42f317
call fcn.0042e930
mov dword [ebp - 0x1850], 0
jmp 0x42f372
mov eax, dword [ebp - 0x1850]
add eax, 1
mov dword [ebp - 0x1850], eax
cmp dword [ebp - 0x1850], 0x28f02
jge 0x42f397
cmp dword [0x7636c0], 0x105
jne 0x42f395
push 0x417464
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x42f363
mov dword [ebp - 0x1854], 0
jmp 0x42f3b2
mov ecx, dword [ebp - 0x1854]
add ecx, 1
mov dword [ebp - 0x1854], ecx
cmp dword [ebp - 0x1854], 0xe5fbc
jge 0x42f3ec
cmp dword [0x7636c0], 0x9e2
jne 0x42f3d2
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1854], 0x3b22
jne 0x42f3ea
mov edx, dword [0x436464]
mov dword [0x7636c4], edx
jmp 0x42f3a3
mov dword [ebp - 0x1858], 0
jmp 0x42f407
mov eax, dword [ebp - 0x1858]
add eax, 1
mov dword [ebp - 0x1858], eax
mov ecx, dword [ebp - 0x1858]
cmp ecx, dword [0x7636c0]
jae 0x42f439
mov edx, dword [ebp - 0x1858]
push edx
call fcn.0042ea70
cmp dword [0x7636c0], 0x22
jne 0x42f437
lea eax, [ebp - 0x185c]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x42f3f8
mov dword [ebp - 0x1860], 0
jmp 0x42f454
mov ecx, dword [ebp - 0x1860]
add ecx, 1
mov dword [ebp - 0x1860], ecx
cmp dword [ebp - 0x1860], 0xe96350
jge 0x42f462
jmp 0x42f445
mov dword [ebp - 0x1864], 0
jmp 0x42f47d
mov edx, dword [ebp - 0x1864]
add edx, 1
mov dword [ebp - 0x1864], edx
cmp dword [ebp - 0x1864], 0x3dc4a3
jge 0x42f499
cmp dword [ebp - 0x1864], 0x26
jne 0x42f497
call fcn.0042e950
jmp 0x42f46e
call fcn.0042efa0
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10