Function at 0x101dfb60
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10251b30
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push esi
push edi
mov eax, dword [0x1037c990]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
mov ebx, dword [ebp + 0x10]
mov al, bl
and al, 1
movzx ecx, al
push ecx
lea ecx, [ebp - 0x2c]
call fcn.101f5ff0
mov byte [ebp - 4], 1
shr ebx, 1
mov edi, dword [ebp + 8]
test bl, 1
je 0x101dfbea
mov ecx, edi
call fcn.101dc6d0
test al, al
je 0x101dfbea
mov byte [ebp - 4], 2
mov ecx, edi
call fcn.101dd850
mov dword [ebp - 4], 1
jmp 0x101dfbea
push edi
lea edx, [ebp - 0x18]
push edx
mov ecx, esi
call fcn.101dc330
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c]
push eax
mov ecx, esi
call fcn.101dc200
mov byte [ebp - 4], 5
mov eax, dword [eax]
xor ecx, ecx
cmp byte [ebp + 0xc], cl
sete cl
or ecx, 2
push ecx
mov edx, dword [ebp - 0x18]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
sete bl
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
call fcn.10004720
test bl, bl
je 0x101dfd4f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp ebx, 5
je 0x101dfc51
cmp ebx, 0x20
jne 0x101dfde2
mov eax, dword [ebp + 0x10]
shr eax, 1
test al, 1
je 0x101dfde2
cmp byte [ebp + 0xc], 0
jne 0x101dfde2
mov ecx, edi
call fcn.101dc6d0
test al, al
je 0x101dfde2
push SysReAllocString
mov ecx, esi
call fcn.101dd4d0
test al, al
jne 0x101dfcc6
add esi, 0x18
push esi
push str.Source_file
lea eax, [ebp + 0xc]
push eax
call fcn.10002820
mov byte [ebp - 4], 6
push str._failed_access_test
push eax
lea ecx, [ebp + 0x10]
push ecx
call fcn.100029d0
add esp, 0x18
mov byte [ebp - 4], 7
mov eax, dword [eax]
push eax
push 0x70a
push str..FilePath.cpp
push ebx
call fcn.10054b00
lea ecx, [ebp - 0x48]
call fcn.10056ab0
mov byte [ebp - 4], 8
mov byte [ebp - 4], 9
push 1
lea edx, [ebp - 0x64]
push edx
mov ecx, edi
call fcn.101df020
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x48]
call fcn.10056770
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x64]
call fcn.10056b10
lea eax, [ebp + 0xc]
push eax
mov ecx, esi
call fcn.101dc200
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push 3
mov ecx, dword [ebp - 0x18]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
sete bl
mov byte [ebp - 4], 9
lea ecx, [ebp + 0xc]
call fcn.10004720
test bl, bl
je 0x101dfd38
push 0
push 0
call fcn.100563c0
lea ecx, [ebp - 0x48]
call fcn.101de8b0
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x48]
call fcn.10056b10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.10004720
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.101f6080
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
jle 0x101dfdf2
and ebx, 0xffff
or ebx, 0x80070000
push 0
push 0x72d
push str..FilePath.cpp
push ebx
call fcn.100048f0
push str.While_moving
lea ecx, [ebp + 0xc]
call fcn.100044a0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x14]
add ecx, 0x18
push ecx
push eax
lea edx, [ebp + 0x10]
push edx
call fcn.100549c0
mov byte [ebp - 4], 0x11
push str._to
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100029d0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp + 8]
push ecx
push eax
lea edx, [ebp - 0x64]
push edx
call fcn.101da4e0
add esp, 0x24
mov byte [ebp - 4], 0x13
add eax, 0x18
push eax
mov eax, dword [ebp - 0x20]
push eax
call fcn.101d3e00
push str.While_moving
lea ecx, [ebp + 0xc]
call fcn.100044a0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x14]
add ecx, 0x18
push ecx
push eax
lea edx, [ebp + 0x10]
push edx
call fcn.100549c0
mov byte [ebp - 4], 0x15
push str._to
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100029d0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp + 8]
push ecx
push eax
lea edx, [ebp - 0x64]
push edx
call fcn.101da4e0
add esp, 0x24
mov byte [ebp - 4], 0x17
mov eax, dword [eax + 0x18]
push eax
push 0x737
push str..FilePath.cpp
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.100942f0
int3