Function at 0x1001bf8f
Capabilities:
Check if file exists
Move file

Disassembly:
push 0x2d4
mov eax, 0x10098ea8
call fcn.1007684e
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x1001bfaf
lea eax, [ebp + 8]
push ebx
push ebx
push 3
push ebx
xor esi, esi
inc esi
push esi
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, ebx
jge 0x1001bfe5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x1001bfec
push ebx
push esi
lea ecx, [ebp + 8]
call fcn.1000f89d
mov eax, esi
call fcn.100768d1
ret
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x240], ebx
mov word [ebp - 0x250], cx
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2b0], ebx
mov word [ebp - 0x2c0], cx
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x278], ebx
mov word [ebp - 0x288], cx
mov dword [ebp - 0x258], eax
xor eax, eax
mov dword [ebp - 0x25c], ebx
mov word [ebp - 0x26c], ax
push esi
push 0xffffffffffffffff
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp + 8]
mov dword [ebp - 0x2e0], 0x5c
call fcn.100140ae
mov edi, eax
cmp edi, ebx
jle 0x1001c2f9
cmp edi, dword [ebp + 0x18]
jae 0x1001c2f9
push edi
push ebx
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp + 8]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 5
call fcn.1000fd37
push ebx
push esi
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 4
call fcn.1000f89d
push 0xffffffffffffffff
inc edi
push edi
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp + 8]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 6
call fcn.1000fd37
push ebx
push esi
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 4
call fcn.1000f89d
push esi
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x250]
push eax
xor eax, eax
mov dword [ebp - 0x2e0], 0x2e
call fcn.10014014
mov edi, eax
cmp edi, ebx
jle 0x1001c170
cmp edi, dword [ebp - 0x240]
jae 0x1001c170
push edi
push ebx
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x250]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 7
call fcn.1000fd37
push ebx
push esi
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 4
call fcn.1000f89d
push 0xffffffffffffffff
inc edi
push edi
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x250]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 8
call fcn.1000fd37
push ebx
push esi
lea ecx, [ebp - 0x234]
call fcn.1000f89d
jmp 0x1001c19b
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x26c]
call fcn.1000f802
mov esi, 0x100b14c8
push esi
call fcn.1005d0d1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x288]
call fcn.1000f93d
xor eax, eax
mov dword [ebp - 0x290], 7
mov dword [ebp - 0x294], ebx
mov word [ebp - 0x2a4], ax
mov byte [ebp - 4], 9
xor esi, esi
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.1005d3f0
mov edx, dword [ebp - 0x288]
add esp, 0xc
cmp dword [ebp - 0x274], 8
jae 0x1001c1ed
lea edx, [ebp - 0x288]
cmp dword [ebp - 0x258], 8
mov ecx, dword [ebp - 0x26c]
jae 0x1001c202
lea ecx, [ebp - 0x26c]
push edx
lea eax, [esi + 1]
push eax
push ecx
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x218]
push str._s__d._s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x218]
push eax
call fcn.1005d0d1
add esp, 0x18
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2a4]
call fcn.1000f93d
cmp dword [ebp + 0x1c], 8
mov esi, dword [ebp + 8]
jae 0x1001c24e
lea esi, [ebp + 8]
call fcn.1001bf0f
lea eax, [ebp - 0x2dc]
push 0x100afb00
push eax
lea edi, [ebp - 0x2c0]
call fcn.10014290
lea ecx, [ebp - 0x2a4]
push ecx
lea ecx, [ebp - 0x234]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100142fb
add esp, 0x10
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0xc
call fcn.1000f89d
cmp dword [ebp - 0x220], 8
mov ecx, dword [ebp - 0x234]
jae 0x1001c2af
lea ecx, [ebp - 0x234]
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x1001c2bb
lea eax, [ebp + 8]
push esi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x1001c2fd
push ebx
push esi
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 9
call fcn.1000f89d
mov esi, dword [ebp - 0x2e0]
cmp esi, 3
jl 0x1001c1ba
push ebx
push 1
lea ecx, [ebp - 0x2a4]
call fcn.1000f89d
xor esi, esi
inc esi
xor edi, edi
jmp 0x1001c336
cmp dword [ebp - 0x220], 8
mov eax, dword [ebp - 0x234]
jae 0x1001c312
lea eax, [ebp - 0x234]
call fcn.1001bf3b
push ebx
push esi
lea ecx, [ebp - 0x234]
call fcn.1000f89d
push ebx
push esi
lea ecx, [ebp - 0x2a4]
call fcn.1000f89d
mov edi, esi
xor esi, esi
inc esi
push ebx
push esi
lea ecx, [ebp - 0x26c]
call fcn.1000f89d
push ebx
push esi
lea ecx, [ebp - 0x288]
call fcn.1000f89d
push ebx
push esi
lea ecx, [ebp - 0x2c0]
call fcn.1000f89d
push ebx
push esi
lea ecx, [ebp - 0x250]
call fcn.1000f89d
push ebx
push esi
lea ecx, [ebp + 8]
call fcn.1000f89d
mov eax, edi
jmp 0x1001bfdf