Function at 0x47f820
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1938
call fcn.00471b20
mov dword [ebp - 0x1910], 0
cmp dword [0x7b5ee8], 0x225
jne 0x47f84d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp dword [0x7b5ee8], 0x177
jne 0x47f911
push 0x7b57f0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x47f911
push 0
push 0
call dword [sym.imp.USER32.dll_GetAncestor]
mov eax, dword [0x457924]
mov dword [ebp - 0x4b0], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x4ac]
push ecx
call fcn.0046b160
add esp, 0xc
lea edx, [ebp - 0xb0]
mov dword [ebp - 0xac], edx
push 1
push 3
lea ecx, [ebp - 0xa8]
call fcn.0045adc0
push 0x457a84
lea ecx, [ebp - 0x98]
call fcn.0045a4e0
push 0x457b28
lea ecx, [ebp - 0x98]
call fcn.0045a4e0
lea ecx, [ebp - 0x48]
call fcn.0045ae80
lea eax, [ebp - 0x48]
mov dword [ebp - 0x1938], eax
mov ecx, dword [ebp - 0x1938]
mov dword [ecx], 0x457ea4
mov edx, dword [ebp - 0x1938]
mov dword [edx], 0x457e9c
mov eax, dword [ebp - 0x1938]
push eax
call fcn.00460950
add esp, 4
mov dword [ebp - 0x4b4], 0
jmp 0x47f92c
mov ecx, dword [ebp - 0x4b4]
add ecx, 1
mov dword [ebp - 0x4b4], ecx
cmp dword [ebp - 0x4b4], 0xe56f91
jge 0x47f98f
cmp dword [ebp - 0x4b4], 0x492
jne 0x47f952
mov edx, dword [0x488a20]
mov dword [0x7b5ee8], edx
jmp 0x47f98f
cmp dword [0x7b5ee8], 0xf
jne 0x47f98d
push 0
lea eax, [ebp - 0xcb8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
lea ecx, [ebp - 0x10b8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll__hwrite]
push 0x457b30
push 0x457b74
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x47f91d
mov dword [ebp - 0x10bc], 0
jmp 0x47f9aa
mov edx, dword [ebp - 0x10bc]
add edx, 1
mov dword [ebp - 0x10bc], edx
cmp dword [ebp - 0x10bc], 0xbfe70d
jge 0x47fa0c
cmp dword [ebp - 0x10bc], 0x57f
jge 0x47f9ca
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x7b5ee8], 0x6b
jne 0x47fa00
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x18f0]
push ecx
push 0
push 0x457b9c
push 0x457bc4
push 0x457be4
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [0x7ad93c], 0
jmp 0x47f99b
mov dword [ebp - 0x18f4], 0
jmp 0x47fa27
mov edx, dword [ebp - 0x18f4]
add edx, 1
mov dword [ebp - 0x18f4], edx
cmp dword [ebp - 0x18f4], 0x47e7cf
jge 0x47fa50
cmp dword [ebp - 0x18f4], 0x3fa
jne 0x47fa4e
mov eax, dword [0x7b5ee8]
add eax, 0x12336
mov dword [0x7b5ee8], eax
jmp 0x47fa18
call fcn.0047efb0
mov dword [ebp - 0x18f8], 0
jmp 0x47fa70
mov ecx, dword [ebp - 0x18f8]
add ecx, 1
mov dword [ebp - 0x18f8], ecx
cmp dword [ebp - 0x18f8], 0x28f02
jge 0x47fa95
cmp dword [0x7b5ee8], 0x105
jne 0x47fa93
push 0x457c20
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x47fa61
mov dword [ebp - 0x18fc], 0
jmp 0x47fab0
mov edx, dword [ebp - 0x18fc]
add edx, 1
mov dword [ebp - 0x18fc], edx
cmp dword [ebp - 0x18fc], 0xe5fbc
jge 0x47fae8
cmp dword [0x7b5ee8], 0x9e2
jne 0x47fad0
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x18fc], 0x3b22
jne 0x47fae6
mov eax, dword [0x488a14]
mov dword [0x7b5eec], eax
jmp 0x47faa1
mov dword [ebp - 0x1900], 0
jmp 0x47fb03
mov ecx, dword [ebp - 0x1900]
add ecx, 1
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x1900]
cmp edx, dword [0x7b5ee8]
jae 0x47fb35
mov eax, dword [ebp - 0x1900]
push eax
call fcn.0047f0f0
cmp dword [0x7b5ee8], 0x22
jne 0x47fb33
lea ecx, [ebp - 0x1904]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x47faf4
mov dword [ebp - 0x1908], 0
jmp 0x47fb50
mov edx, dword [ebp - 0x1908]
add edx, 1
mov dword [ebp - 0x1908], edx
cmp dword [ebp - 0x1908], 0xe96350
jge 0x47fb5e
jmp 0x47fb41
mov dword [ebp - 0x190c], 0
jmp 0x47fb79
mov eax, dword [ebp - 0x190c]
add eax, 1
mov dword [ebp - 0x190c], eax
cmp dword [ebp - 0x190c], 0x3dc4a3
jge 0x47fb95
cmp dword [ebp - 0x190c], 0x26
jne 0x47fb93
call fcn.0047efd0
jmp 0x47fb6a
call fcn.0047f620
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10