Function at 0x2e02f45b
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x468
mov eax, dword [0x2e0c18a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 8]
xor eax, eax
push 0x206
mov word [ebp - 0x450], ax
xor esi, esi
lea eax, [ebp - 0x44e]
push esi
push eax
mov dword [ebp - 0x460], edi
call fcn.2e06e640
push 0x244
lea eax, [ebp - 0x248]
push esi
push eax
call fcn.2e06e640
add esp, 0x18
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x454], esi
cmp edi, esi
je 0x2e02f6fa
cmp dword [edi + 0x21c], esi
je 0x2e02f6fa
cmp ebx, esi
je 0x2e02f6fa
cmp dword [ebx + 0x21c], esi
je 0x2e02f6fa
push 1
lea eax, [ebp - 0x454]
push eax
push ebx
call fcn.2e02d5f9
test eax, eax
je 0x2e02f705
push dword [ebp - 0x454]
push ebx
call fcn.2e02d6c6
push dword [ebp - 0x454]
test eax, eax
jne 0x2e02f51b
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x2e02f705
call dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call fcn.2e02ce1d
test eax, eax
je 0x2e02f705
push ebx
call fcn.2e02ce1d
test eax, eax
je 0x2e02f6d0
mov eax, dword [edi + 0x21c]
mov dword [ebp - 0x45c], esi
cmp dword [eax], esi
jbe 0x2e02f6d0
mov dword [ebp - 0x458], esi
mov ecx, dword [ebx + 0x21c]
mov ecx, dword [ecx]
cmp ecx, dword [ebx + 4]
jae 0x2e02f6ad
mov esi, dword [eax + 0xc]
add esi, dword [ebp - 0x458]
push esi
call fcn.2e03fd60
cmp word [eax], 0x5c
jne 0x2e02f57f
inc eax
inc eax
push eax
lea edi, [ebx + 0xc]
push edi
push 0x2e003b64
lea eax, [ebp - 0x450]
push 0x104
push eax
call fcn.2e06ea2b
lea eax, [esi + 0x208]
add esp, 0x14
push eax
mov dword [ebp - 0x468], eax
call fcn.2e03fd60
cmp word [eax], 0x5c
jne 0x2e02f5b7
inc eax
inc eax
push eax
push edi
push 0x2e003b64
lea eax, [ebp - 0x248]
push 0x104
push eax
call fcn.2e06ea2b
mov ecx, dword [ebx + 0x21c]
add esp, 0x14
lea eax, [ebp - 0x450]
push eax
call fcn.2e025df3
test eax, eax
je 0x2e02f6bd
lea eax, [ebp - 0x450]
push eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
call esi
test eax, eax
jne 0x2e02f62c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call fcn.2e03e006
test eax, eax
je 0x2e02f61e
push esi
push 0x2e003b2c
call fcn.2e03fce6
pop ecx
pop ecx
push 0
push 0x30303030
call fcn.2e0448b0
jmp 0x2e02f681
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x468]
call esi
test eax, eax
jne 0x2e02f677
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call fcn.2e03e006
test eax, eax
je 0x2e02f65d
push esi
push 0x2e003af0
call fcn.2e03fce6
pop ecx
pop ecx
push 0
push 0x30303030
call fcn.2e0448b0
lea eax, [ebp - 0x450]
push eax
call fcn.2e03dce6
jmp 0x2e02f681
mov dword [ebp - 0x464], 1
inc dword [ebp - 0x45c]
mov eax, dword [ebp - 0x460]
mov eax, dword [eax + 0x21c]
mov ecx, dword [ebp - 0x45c]
add dword [ebp - 0x458], 0x44c
cmp ecx, dword [eax]
jb 0x2e02f557
jmp 0x2e02f6d0
call fcn.2e03e006
test eax, eax
je 0x2e02f6d0
push 0x2e003ac0
jmp 0x2e02f6cb
call fcn.2e03e006
test eax, eax
je 0x2e02f6d0
push 0x2e003a84
call fcn.2e03fc59
push dword [ebx + 0x214]
mov esi, dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call esi
mov edi, dword [ebp - 0x460]
push dword [edi + 0x214]
call esi
push edi
call fcn.2e02daa6
mov eax, dword [ebp - 0x464]
jmp 0x2e02f707
push esi
push 0x30303030
call fcn.2e0448b0
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.2e06e7f2
leave
ret 8