Function at 0x4309f0
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1060
call fcn.00422d10
cmp dword [0x2d8b0a0], 0x225
jne 0x430a13
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
cmp dword [0x2d8b0a0], 0x177
jne 0x430a77
push 0x2d8a9a8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x430a77
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetAltTabInfoW]
mov eax, dword [0x417234]
mov dword [ebp - 0x408], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x404]
push ecx
call fcn.00421070
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
push 0x41730c
push 0
call fcn.00418070
add esp, 8
mov dword [ebp - 0x40c], 0
jmp 0x430a92
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xe56f91
jge 0x430ae4
cmp dword [ebp - 0x40c], 0x492
jne 0x430ab8
mov ecx, dword [0x438460]
mov dword [0x2d8b0a0], ecx
jmp 0x430ae4
cmp dword [0x2d8b0a0], 0xf
jne 0x430ae2
push 0
lea edx, [ebp - 0xc10]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x417538
push 0x417454
call dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x430a83
mov dword [ebp - 0xc14], 0
jmp 0x430aff
mov eax, dword [ebp - 0xc14]
add eax, 1
mov dword [ebp - 0xc14], eax
cmp dword [ebp - 0xc14], 0xc0352d
jge 0x430b61
cmp dword [ebp - 0xc14], 0x57f
jge 0x430b1f
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x2d8b0a0], 0x6b
jne 0x430b55
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
lea ecx, [ebp - 0x1044]
push ecx
lea edx, [ebp - 0x1040]
push edx
push 0
push 0x417558
push 0x417560
push 0x417574
call dword [sym.imp.KERNEL32.dll_SearchPathA]
mov dword [0x2d82af4], 0
jmp 0x430af0
mov dword [ebp - 0x1048], 0
jmp 0x430b7c
mov eax, dword [ebp - 0x1048]
add eax, 1
mov dword [ebp - 0x1048], eax
cmp dword [ebp - 0x1048], 0x485cff
jge 0x430ba8
cmp dword [ebp - 0x1048], 0x3fa
jne 0x430ba6
mov ecx, dword [0x2d8b0a0]
add ecx, 0x12336
mov dword [0x2d8b0a0], ecx
jmp 0x430b6d
call fcn.00430160
mov dword [ebp - 0x104c], 0
jmp 0x430bc8
mov edx, dword [ebp - 0x104c]
add edx, 1
mov dword [ebp - 0x104c], edx
cmp dword [ebp - 0x104c], 0x199615
jge 0x430bed
cmp dword [0x2d8b0a0], 0x105
jne 0x430beb
push 0x417588
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x430bb9
mov dword [ebp - 0x1050], 0
jmp 0x430c08
mov eax, dword [ebp - 0x1050]
add eax, 1
mov dword [ebp - 0x1050], eax
cmp dword [ebp - 0x1050], 0xe5fbc
jge 0x430c42
cmp dword [0x2d8b0a0], 0x9e2
jne 0x430c28
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x1050], 0x3b22
jne 0x430c40
mov ecx, dword [0x438454]
mov dword [0x2d8b0a4], ecx
jmp 0x430bf9
mov dword [ebp - 0x1054], 0
jmp 0x430c5d
mov edx, dword [ebp - 0x1054]
add edx, 1
mov dword [ebp - 0x1054], edx
mov eax, dword [ebp - 0x1054]
cmp eax, dword [0x2d8b0a0]
jae 0x430c8f
mov ecx, dword [ebp - 0x1054]
push ecx
call fcn.004302b0
cmp dword [0x2d8b0a0], 0x22
jne 0x430c8d
lea edx, [ebp - 0x1058]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x430c4e
mov dword [ebp - 0x105c], 0
jmp 0x430caa
mov eax, dword [ebp - 0x105c]
add eax, 1
mov dword [ebp - 0x105c], eax
cmp dword [ebp - 0x105c], 0xe96350
jge 0x430cb8
jmp 0x430c9b
mov dword [ebp - 0x1060], 0
jmp 0x430cd3
mov ecx, dword [ebp - 0x1060]
add ecx, 1
mov dword [ebp - 0x1060], ecx
cmp dword [ebp - 0x1060], 0x3dc4a3
jge 0x430cef
cmp dword [ebp - 0x1060], 0x26
jne 0x430ced
call fcn.00430180
jmp 0x430cc4
call fcn.00430800
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10