Function at 0x10019210
Capabilities:
Create directory
Move file

Disassembly:
push 0xffffffffffffffff
push 0x1005049b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x344
mov eax, dword [0x100778dc]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x350], eax
call fcn.10026ca0
test al, al
je 0x1001934e
mov edi, dword [esp + 0x364]
mov esi, dword [esp + 0x368]
mov eax, edi
call fcn.10017f00
test al, al
je 0x1001939d
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
lea eax, [esp + 0x250]
push eax
call ebx
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendA]
push 0x100548a8
lea ecx, [esp + 0x250]
push ecx
call esi
xor edi, edi
push edi
lea edx, [esp + 0x250]
push edx
lea ecx, [esp + 0x1c]
call fcn.1000fd60
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x10], edi
test ebp, ebp
jne 0x100192af
xor eax, eax
jmp 0x100192c6
mov ecx, dword [esp + 0x1c]
sub ecx, ebp
mov eax, 0x66666667
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jge 0x10019340
mov eax, dword [edi + ebp]
shr eax, 4
test al, 1
jne 0x10019331
mov ecx, dword [esp + 0x364]
push ecx
lea edx, [esp + 0x14c]
push edx
call ebx
mov eax, dword [esp + 0x18]
lea ecx, [edi + eax + 0x2c]
push ecx
lea edx, [esp + 0x14c]
push edx
call esi
mov eax, dword [esp + 0x368]
push eax
lea ecx, [esp + 0x48]
push ecx
call ebx
mov edx, dword [esp + 0x18]
lea eax, [edi + edx + 0x2c]
push eax
lea ecx, [esp + 0x48]
push ecx
call esi
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov ebp, dword [esp + 0x18]
inc dword [esp + 0x10]
add edi, 0x140
jmp 0x100192a7
test ebp, ebp
je 0x100194a2
push ebp
jmp 0x1001949a
mov ebx, dword [esp + 0x364]
mov ebp, dword [esp + 0x368]
push ebx
mov esi, ebp
lea edi, [esp + 0x250]
call fcn.10017f80
add esp, 4
test al, al
je 0x100194a2
xor edi, edi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x10019397
push ebp
lea ecx, [esp + 0x250]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x100193a4
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
jmp 0x100194a4
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0x20
push str._deleted_
lea edx, [esp + 0x2c]
push edx
call ebx
push str._deleted_
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x104
lea ecx, [esp + 0x28]
push ebp
lea edx, [esp + 0x150]
dec ecx
push edx
mov byte [eax + ecx], 0
call ebx
push 0x100548a8
lea eax, [esp + 0x14c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
push edi
lea ecx, [esp + 0x14c]
push ecx
lea ecx, [esp + 0x1c]
call fcn.1000fd60
mov esi, dword [esp + 0x18]
mov dword [esp + 0x35c], edi
mov dword [esp + 0x10], edi
test esi, esi
jne 0x10019418
xor eax, eax
jmp 0x1001942f
mov ecx, dword [esp + 0x1c]
sub ecx, esi
mov eax, 0x66666667
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jge 0x10019495
mov edx, dword [edi + esi]
shr edx, 4
test dl, 1
je 0x10019486
lea eax, [esp + 0x24]
push eax
lea ecx, [edi + esi + 0x2c]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x10019482
push 0x104
push ebp
lea edx, [esp + 0x4c]
push edx
call ebx
mov eax, dword [esp + 0x18]
lea ecx, [edi + eax + 0x2c]
push ecx
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea eax, [esp + 0x44]
push eax
call fcn.10019090
add esp, 4
mov esi, dword [esp + 0x18]
inc dword [esp + 0x10]
add edi, 0x140
jmp 0x10019410
test esi, esi
je 0x100194a2
push esi
call fcn.1004119d
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x354]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x344]
pop ebx
call fcn.1004189e
add esp, 0x350
ret