Function at 0x43e6e088
Capabilities:
Accept command line arguments
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x43e6e090
push ecx
push ebx
mov ebx, 0x43e729b8
xor eax, eax
push ebp
push 0x43e6e3b4
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x43e729e8], 0
je 0x43e6e399
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x43e729e8]
mov dword [edx + 0x208], eax
mov eax, dword [0x43e729e8]
xor edx, edx
mov dword [eax + 0x200], edx
push ebp
call fcn.43e6dca0
pop ecx
lea ecx, [ebp - 0x14]
mov edx, 0x43e6e3c8
mov eax, 0x80000002
call fcn.43e6718c
mov eax, dword [ebp - 0x14]
mov edx, 0x43e6e41c
call fcn.43e5390c
je 0x43e6e109
mov eax, 0x43e6e430
call fcn.43e691c0
lea edx, [ebp - 0x18]
mov eax, dword [ebx]
call fcn.43e6bae0
call sub.kernel32.dll_GetCommandLineA_1
mov edx, eax
lea eax, [ebp - 0x1c]
call fcn.43e5376c
mov edx, dword [ebp - 0x1c]
mov eax, 0x43e6e458
call fcn.43e680c0
test al, al
jne 0x43e6e197
push 1
mov eax, dword [ebx]
call fcn.43e539c0
push eax
mov eax, dword [ebp - 0x18]
call fcn.43e539c0
push eax
call sub.kernel32.dll_MoveFileExA
mov eax, dword [ebx]
call fcn.43e6c714
test al, al
jne 0x43e6e162
mov edx, dword [ebx]
mov eax, dword [0x43e729c8]
call fcn.43e69508
mov eax, dword [ebx]
call fcn.43e6c714
test al, al
jne 0x43e6e17f
mov ecx, dword [ebx]
mov edx, dword [0x43e729dc]
mov eax, dword [0x43e729e0]
call fcn.43e69438
call fcn.43e6dba8
test al, al
je 0x43e6e197
mov eax, 0x43e6e46c
call fcn.43e691c0
jmp 0x43e6e399
lea eax, [ebp - 0x20]
mov ecx, 0x43e6e494
mov edx, dword [0x43e729d0]
call fcn.43e5380c
mov eax, dword [ebp - 0x20]
call fcn.43e691c0
mov eax, 0x43e6e4b0
call fcn.43e67d60
mov eax, 0x43e6e4b0
call fcn.43e67964
call fcn.43e6b838
mov eax, 0x43e6e4b0
call fcn.43e67964
call fcn.43e6b838
push 0x3e8
call sub.kernel32.dll_Sleep
mov eax, dword [0x43e729e0]
call fcn.43e69b4c
test al, al
je 0x43e6e217
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x43e729dc]
mov eax, dword [0x43e729e0]
call fcn.43e69438
mov ecx, dword [ebx]
mov edx, dword [0x43e729dc]
mov eax, dword [0x43e729e0]
call fcn.43e69438
mov eax, dword [ebp - 0x18]
call fcn.43e6c714
test al, al
je 0x43e6e22e
mov eax, dword [ebx]
call fcn.43e6c714
test al, al
jne 0x43e6e247
mov edx, dword [ebp - 0x18]
mov eax, dword [0x43e729c8]
call fcn.43e69508
mov edx, dword [ebx]
mov eax, dword [0x43e729c8]
call fcn.43e69508
mov eax, dword [ebx]
call fcn.43e68d54
test al, al
jne 0x43e6e261
mov eax, 0x43e6e4c0
call fcn.43e691c0
jmp 0x43e6e399
mov eax, 0x43e6e4b0
call fcn.43e67c0c
test al, al
jne 0x43e6e298
lea edx, [ebp - 0x28]
mov eax, 0x43e6e4e0
call fcn.43e6bae0
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
mov edx, dword [0x43e729d4]
call fcn.43e5380c
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
call fcn.43e69508
mov eax, 0x43e6e4b0
call fcn.43e67c0c
test al, al
je 0x43e6e2c6
lea eax, [ebp - 0x2c]
mov ecx, 0x43e6e4f4
mov edx, dword [0x43e729d0]
call fcn.43e5380c
mov eax, dword [ebp - 0x2c]
call fcn.43e691c0
jmp 0x43e6e358
lea eax, [ebp - 0x30]
mov ecx, 0x43e6e510
mov edx, dword [ebp - 4]
call fcn.43e5380c
mov edx, dword [ebp - 0x30]
lea ecx, [ebp - 0x10]
mov eax, 0x80000002
call fcn.43e6718c
lea eax, [ebp - 0x34]
mov ecx, 0x43e6e524
mov edx, dword [ebp - 4]
call fcn.43e5380c
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0xc]
mov eax, 0x80000002
call fcn.43e6718c
cmp dword [ebp - 0x10], 0
jne 0x43e6e319
lea eax, [ebp - 0x10]
mov edx, 0x43e6e538
call fcn.43e536d4
cmp dword [ebp - 0xc], 0
jne 0x43e6e32c
lea eax, [ebp - 0xc]
mov edx, 0x43e6e56c
call fcn.43e536d4
mov eax, 0x43e6e4b0
call fcn.43e67f54
mov eax, dword [ebp - 8]
push eax
push 0x110
push 2
mov eax, 0x43e6e4b0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.43e67e28
push ebp
call fcn.43e6dca0
pop ecx
call fcn.43e6dba8
test al, al
je 0x43e6e37e
lea eax, [ebp - 0x38]
mov ecx, 0x43e6e58c
mov edx, dword [0x43e729d0]
call fcn.43e5380c
mov eax, dword [ebp - 0x38]
call fcn.43e691c0
jmp 0x43e6e399
lea eax, [ebp - 0x3c]
mov ecx, 0x43e6e5bc
mov edx, dword [0x43e729d0]
call fcn.43e5380c
mov eax, dword [ebp - 0x3c]
call fcn.43e691c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43e6e3bb
lea eax, [ebp - 0x3c]
mov edx, 0xf
call fcn.43e53660
ret