Function at 0x4499a0
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1090
call fcn.0043ba50
cmp dword [0x8791f8], 0x225
jne 0x4499c3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
cmp dword [0x8791f8], 0x177
jne 0x449a3d
push 0x878b00
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x449a3d
mov eax, dword [0x408c80]
mov dword [ebp - 0x408], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x404]
push ecx
call fcn.0042c750
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
push 0
call fcn.004292f0
add esp, 4
call fcn.00428d00
push 0x408c84
call fcn.00429810
fstp st(0)
add esp, 4
push 0x408c88
push 0x408c8c
push 0x44efd8
call fcn.00428e40
add esp, 0xc
mov dword [ebp - 0x40c], 0
jmp 0x449a58
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xe56f91
jge 0x449aaa
cmp dword [ebp - 0x40c], 0x492
jne 0x449a7e
mov ecx, dword [0x44e374]
mov dword [0x8791f8], ecx
jmp 0x449aaa
cmp dword [0x8791f8], 0xf
jne 0x449aa8
push 0
lea edx, [ebp - 0x810]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x408c94
push 0x408c9c
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x449a49
mov dword [ebp - 0x814], 0
jmp 0x449ac5
mov eax, dword [ebp - 0x814]
add eax, 1
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0xc0352d
jge 0x449b27
cmp dword [ebp - 0x814], 0x57f
jge 0x449ae5
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x8791f8], 0x6b
jne 0x449b1b
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
lea ecx, [ebp - 0x1044]
push ecx
lea edx, [ebp - 0x1040]
push edx
push 0
push 0x408ccc
push 0x408cd8
push 0x408d00
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [0x870c4c], 0
jmp 0x449ab6
mov dword [ebp - 0x1048], 0
jmp 0x449b42
mov eax, dword [ebp - 0x1048]
add eax, 1
mov dword [ebp - 0x1048], eax
cmp dword [ebp - 0x1048], 0x485ceb
jge 0x449baa
cmp dword [ebp - 0x1048], 0x3fa
jne 0x449b6c
mov ecx, dword [0x8791f8]
add ecx, 0x12336
mov dword [0x8791f8], ecx
cmp dword [0x8791f8], 0x65
jne 0x449ba8
lea edx, [ebp - 0x1068]
push edx
call dword [sym.imp.KERNEL32.dll_CreateActCtxW]
mov dword [ebp - 0x1078], 0
xor eax, eax
mov dword [ebp - 0x1074], eax
lea ecx, [ebp - 0x1078]
push ecx
lea edx, [ebp - 0x1070]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
jmp 0x449b33
call fcn.00449240
mov dword [ebp - 0x107c], 0
jmp 0x449bca
mov eax, dword [ebp - 0x107c]
add eax, 1
mov dword [ebp - 0x107c], eax
cmp dword [ebp - 0x107c], 0x199615
jge 0x449bf9
cmp dword [0x8791f8], 0x105
jne 0x449bf7
push 0x408d1c
push 0x408d30
push 0x408d4c
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
jmp 0x449bbb
mov dword [ebp - 0x1080], 0
jmp 0x449c14
mov ecx, dword [ebp - 0x1080]
add ecx, 1
mov dword [ebp - 0x1080], ecx
cmp dword [ebp - 0x1080], 0xe5fc3
jge 0x449c4e
cmp dword [0x8791f8], 0x9e2
jne 0x449c34
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1080], 0x3b22
jne 0x449c4c
mov edx, dword [0x44e2c8]
mov dword [0x8791fc], edx
jmp 0x449c05
mov dword [ebp - 0x1084], 0
jmp 0x449c69
mov eax, dword [ebp - 0x1084]
add eax, 1
mov dword [ebp - 0x1084], eax
mov ecx, dword [ebp - 0x1084]
cmp ecx, dword [0x8791f8]
jae 0x449c9b
mov edx, dword [ebp - 0x1084]
push edx
call fcn.00449390
cmp dword [0x8791f8], 0x22
jne 0x449c99
lea eax, [ebp - 0x1088]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x449c5a
mov dword [ebp - 0x108c], 0
jmp 0x449cb6
mov ecx, dword [ebp - 0x108c]
add ecx, 1
mov dword [ebp - 0x108c], ecx
cmp dword [ebp - 0x108c], 0xe96350
jge 0x449cc4
jmp 0x449ca7
mov dword [ebp - 0x1090], 0
jmp 0x449cdf
mov edx, dword [ebp - 0x1090]
add edx, 1
mov dword [ebp - 0x1090], edx
cmp dword [ebp - 0x1090], 0x3dc4a3
jge 0x449cfb
cmp dword [ebp - 0x1090], 0x26
jne 0x449cf9
call fcn.00449260
jmp 0x449cd0
call fcn.00449790
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10