Function at 0x441650
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1938
call fcn.00433940
mov dword [ebp - 0x1910], 0
cmp dword [0x777ee8], 0x225
jne 0x44167d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp dword [0x777ee8], 0x177
jne 0x441741
push 0x7777f0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x441741
push 0
push 0
call dword [sym.imp.USER32.dll_GetAncestor]
mov eax, dword [0x419984]
mov dword [ebp - 0x4b0], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x4ac]
push ecx
call fcn.0042cf80
add esp, 0xc
lea edx, [ebp - 0xb0]
mov dword [ebp - 0xac], edx
push 1
push 3
lea ecx, [ebp - 0xa8]
call fcn.0041cbe0
push 0x419988
lea ecx, [ebp - 0x98]
call fcn.0041c300
push 0x41998c
lea ecx, [ebp - 0x98]
call fcn.0041c300
lea ecx, [ebp - 0x48]
call fcn.0041cca0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x1938], eax
mov ecx, dword [ebp - 0x1938]
mov dword [ecx], 0x419cd4
mov edx, dword [ebp - 0x1938]
mov dword [edx], 0x419ccc
mov eax, dword [ebp - 0x1938]
push eax
call fcn.00422770
add esp, 4
mov dword [ebp - 0x4b4], 0
jmp 0x44175c
mov ecx, dword [ebp - 0x4b4]
add ecx, 1
mov dword [ebp - 0x4b4], ecx
cmp dword [ebp - 0x4b4], 0xe56f91
jge 0x4417bf
cmp dword [ebp - 0x4b4], 0x492
jne 0x441782
mov edx, dword [0x44aa20]
mov dword [0x777ee8], edx
jmp 0x4417bf
cmp dword [0x777ee8], 0xf
jne 0x4417bd
push 0
lea eax, [ebp - 0xcb8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
lea ecx, [ebp - 0x10b8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll__hwrite]
push 0x419990
push 0x4199b4
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x44174d
mov dword [ebp - 0x10bc], 0
jmp 0x4417da
mov edx, dword [ebp - 0x10bc]
add edx, 1
mov dword [ebp - 0x10bc], edx
cmp dword [ebp - 0x10bc], 0xbfe70d
jge 0x44184a
cmp dword [ebp - 0x10bc], 0x57f
jge 0x4417fa
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x777ee8], 0x6b
jne 0x44183e
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x18f0]
push ecx
push 0
push 0x4199cc
push 0x4199f4
push 0x419a18
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [0x76f93c], 0
jmp 0x4417cb
mov dword [ebp - 0x18f4], 0
jmp 0x441865
mov edx, dword [ebp - 0x18f4]
add edx, 1
mov dword [ebp - 0x18f4], edx
cmp dword [ebp - 0x18f4], 0x47e7cf
jge 0x44188e
cmp dword [ebp - 0x18f4], 0x3fa
jne 0x44188c
mov eax, dword [0x777ee8]
add eax, 0x12336
mov dword [0x777ee8], eax
jmp 0x441856
call fcn.00440dd0
mov dword [ebp - 0x18f8], 0
jmp 0x4418ae
mov ecx, dword [ebp - 0x18f8]
add ecx, 1
mov dword [ebp - 0x18f8], ecx
cmp dword [ebp - 0x18f8], 0x28f02
jge 0x4418d3
cmp dword [0x777ee8], 0x105
jne 0x4418d1
push 0x419a70
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x44189f
mov dword [ebp - 0x18fc], 0
jmp 0x4418ee
mov edx, dword [ebp - 0x18fc]
add edx, 1
mov dword [ebp - 0x18fc], edx
cmp dword [ebp - 0x18fc], 0xe5fbc
jge 0x441926
cmp dword [0x777ee8], 0x9e2
jne 0x44190e
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x18fc], 0x3b22
jne 0x441924
mov eax, dword [0x44aa14]
mov dword [0x777eec], eax
jmp 0x4418df
mov dword [ebp - 0x1900], 0
jmp 0x441941
mov ecx, dword [ebp - 0x1900]
add ecx, 1
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x1900]
cmp edx, dword [0x777ee8]
jae 0x441973
mov eax, dword [ebp - 0x1900]
push eax
call fcn.00440f10
cmp dword [0x777ee8], 0x22
jne 0x441971
lea ecx, [ebp - 0x1904]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x441932
mov dword [ebp - 0x1908], 0
jmp 0x44198e
mov edx, dword [ebp - 0x1908]
add edx, 1
mov dword [ebp - 0x1908], edx
cmp dword [ebp - 0x1908], 0xe96350
jge 0x44199c
jmp 0x44197f
mov dword [ebp - 0x190c], 0
jmp 0x4419b7
mov eax, dword [ebp - 0x190c]
add eax, 1
mov dword [ebp - 0x190c], eax
cmp dword [ebp - 0x190c], 0x3dc4a3
jge 0x4419d3
cmp dword [ebp - 0x190c], 0x26
jne 0x4419d1
call fcn.00440df0
jmp 0x4419a8
call fcn.00441450
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10