Function at 0x42f350
Capabilities:
Move file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc90
cmp dword [0x2d8b1e0], 0x225
jne 0x42f36f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
cmp dword [0x2d8b1e0], 0x177
jne 0x42f3c4
push 0x2d8aae8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0xe12
jne 0x42f3c4
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetAltTabInfoW]
mov eax, dword [0x41723c]
mov dword [ebp - 0x408], eax
push 0x3fc
push 0
lea ecx, [ebp - 0x404]
push ecx
call fcn.0041f0f0
add esp, 0xc
lea edx, [ebp - 8]
mov dword [ebp - 4], edx
mov dword [ebp - 0x40c], 0
jmp 0x42f3df
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xe56f91
jge 0x42f431
cmp dword [ebp - 0x40c], 0x492
jne 0x42f405
mov ecx, dword [0x438470]
mov dword [0x2d8b1e0], ecx
jmp 0x42f431
cmp dword [0x2d8b1e0], 0xf
jne 0x42f42f
push 0
lea edx, [ebp - 0x810]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x417478
push 0x41737c
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x42f3d0
mov dword [ebp - 0x814], 0
jmp 0x42f44c
mov eax, dword [ebp - 0x814]
add eax, 1
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0xc0352d
jge 0x42f4ae
cmp dword [ebp - 0x814], 0x57f
jge 0x42f46c
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x2d8b1e0], 0x6b
jne 0x42f4a2
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
lea ecx, [ebp - 0xc44]
push ecx
lea edx, [ebp - 0xc40]
push edx
push 0
push 0x417480
push 0x4173ac
push 0x417488
call dword [sym.imp.KERNEL32.dll_SearchPathA]
mov dword [0x2d82c34], 0
jmp 0x42f43d
mov dword [ebp - 0xc48], 0
jmp 0x42f4c9
mov eax, dword [ebp - 0xc48]
add eax, 1
mov dword [ebp - 0xc48], eax
cmp dword [ebp - 0xc48], 0x485cff
jge 0x42f531
cmp dword [ebp - 0xc48], 0x3fa
jne 0x42f4f3
mov ecx, dword [0x2d8b1e0]
add ecx, 0x12336
mov dword [0x2d8b1e0], ecx
cmp dword [0x2d8b1e0], 0x65
jne 0x42f52f
lea edx, [ebp - 0xc68]
push edx
call dword [sym.imp.KERNEL32.dll_CreateActCtxW]
mov dword [ebp - 0xc78], 0
xor eax, eax
mov dword [ebp - 0xc74], eax
lea ecx, [ebp - 0xc78]
push ecx
lea edx, [ebp - 0xc70]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
jmp 0x42f4ba
call fcn.0042ea80
mov dword [ebp - 0xc7c], 0
jmp 0x42f551
mov eax, dword [ebp - 0xc7c]
add eax, 1
mov dword [ebp - 0xc7c], eax
cmp dword [ebp - 0xc7c], 0x199615
jge 0x42f576
cmp dword [0x2d8b1e0], 0x105
jne 0x42f574
push 0x417498
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x42f542
mov dword [ebp - 0xc80], 0
jmp 0x42f591
mov ecx, dword [ebp - 0xc80]
add ecx, 1
mov dword [ebp - 0xc80], ecx
cmp dword [ebp - 0xc80], 0xe5fbc
jge 0x42f5cb
cmp dword [0x2d8b1e0], 0x9e2
jne 0x42f5b1
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0xc80], 0x3b22
jne 0x42f5c9
mov edx, dword [0x438464]
mov dword [0x2d8b1e4], edx
jmp 0x42f582
mov dword [ebp - 0xc84], 0
jmp 0x42f5e6
mov eax, dword [ebp - 0xc84]
add eax, 1
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0xc84]
cmp ecx, dword [0x2d8b1e0]
jae 0x42f618
mov edx, dword [ebp - 0xc84]
push edx
call fcn.0042ebd0
cmp dword [0x2d8b1e0], 0x22
jne 0x42f616
lea eax, [ebp - 0xc88]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x42f5d7
mov dword [ebp - 0xc8c], 0
jmp 0x42f633
mov ecx, dword [ebp - 0xc8c]
add ecx, 1
mov dword [ebp - 0xc8c], ecx
cmp dword [ebp - 0xc8c], 0xe96350
jge 0x42f641
jmp 0x42f624
mov dword [ebp - 0xc90], 0
jmp 0x42f65c
mov edx, dword [ebp - 0xc90]
add edx, 1
mov dword [ebp - 0xc90], edx
cmp dword [ebp - 0xc90], 0x3dc4a3
jge 0x42f678
cmp dword [ebp - 0xc90], 0x26
jne 0x42f676
call fcn.0042eaa0
jmp 0x42f64d
call fcn.0042f140
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10