Function at 0x1022187
Capabilities:
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa4
mov eax, dword [0x111027c]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x1c], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x3c], edi
mov eax, dword [0x111024c]
mov esi, 0x111024c
mov ebx, 0x10023f8
cmp eax, esi
je 0x10221d8
test byte [eax + 0x1c], 1
je 0x10221d8
cmp byte [eax + 0x19], 4
jb 0x10221d8
push ebx
push 0x125
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
push dword [edi + 0xe8]
or dword [ebp - 0x38], 0xffffffff
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
call fcn.010831a6
test al, 8
jne 0x102223c
mov eax, dword [0x111024c]
cmp eax, esi
je 0x1022768
test byte [eax + 0x1c], 1
je 0x1022768
cmp byte [eax + 0x19], 4
jb 0x1022768
push dword [edi + 0xe8]
push ebx
push 0x126
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fa8
jmp 0x1022768
cmp dword [edi + 0x140], 0
jne 0x1022275
mov dword [ebp - 0x1c], 0x80070057
mov eax, dword [0x111024c]
cmp eax, esi
je 0x1022768
test byte [eax + 0x1c], 1
je 0x1022768
cmp byte [eax + 0x19], 2
jb 0x1022768
push ebx
push 0x127
jmp 0x10222ee
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
call fcn.01022072
mov dword [ebp - 0x1c], eax
test eax, eax
jge 0x10222c1
mov eax, dword [0x111024c]
cmp eax, esi
je 0x1022768
test byte [eax + 0x1c], 1
je 0x1022768
cmp byte [eax + 0x19], 2
jb 0x1022768
push dword [ebp - 0x1c]
push ebx
push 0x128
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fa8
jmp 0x1022768
cmp dword [ebp - 0x20], 0
jne 0x10222fe
mov eax, dword [0x111024c]
cmp eax, esi
je 0x1022768
test byte [eax + 0x1c], 1
je 0x1022768
cmp byte [eax + 0x19], 4
jb 0x1022768
push ebx
push 0x129
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
jmp 0x1022768
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [edi + 0x140]
call fcn.010df4ce
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1022768
push 0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x34]
call fcn.010d4b56
mov dword [ebp - 0x1c], eax
test eax, eax
jge 0x1022376
mov eax, dword [0x111024c]
cmp eax, esi
je 0x1022768
test byte [eax + 0x1c], 1
je 0x1022768
cmp byte [eax + 0x19], 2
jb 0x1022768
push dword [ebp - 0x1c]
push dword [ebp - 0x34]
push 0x10023f8
push 0x12a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
jmp 0x1022768
cmp dword [ebp - 0x18], 0
je 0x102275b
mov esi, 0x1007124
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
cmp dword [ebp - 0x28], esi
je 0x102239f
push dword [ebp - 0x28]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x30], esi
je 0x10223b0
push dword [ebp - 0x30]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
call fcn.0107ed85
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x1022768
push 3
push 0x1002ae4
push dword [ebp - 0x28]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x1022418
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 4
jb 0x1022728
push dword [ebp - 0x18]
push 0x10023f8
push 0x12b
jmp 0x102262f
mov esi, dword [ebp - 0x28]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1022420
sub eax, edx
sar eax, 1
cmp eax, 0x24
jae 0x1022469
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 4
jb 0x1022728
push dword [ebp - 0x18]
push 0x10023f8
push 0x12c
jmp 0x102262f
xor eax, eax
mov word [esi + 0x48], ax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
je 0x10224b6
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 4
jb 0x1022728
push dword [ebp - 0x18]
push 0x10023f8
push 0x12d
jmp 0x102262f
push 4
pop ecx
mov edi, 0x1007124
lea esi, [ebp - 0x14]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x1022728
and dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 0x2c]
test edx, edx
jbe 0x10224f9
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x2c], ecx
mov esi, dword [ebp - 0x2c]
push 4
pop ecx
lea edi, [ebp - 0x14]
xor ebx, ebx
repe cmpsd dword [esi], dword es:[edi]
je 0x10224f9
inc dword [ebp - 0x1c]
add dword [ebp - 0x2c], 0x70
cmp dword [ebp - 0x1c], edx
jb 0x10224de
cmp dword [ebp - 0x1c], edx
jb 0x1022534
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 3
jb 0x1022728
push dword [ebp - 0x18]
push 0x10023f8
push 0x12e
jmp 0x102262f
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0xfc]
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x40], edx
test edx, edx
jbe 0x1022583
mov edx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x30]
imul edx, edx, 0x70
mov esi, dword [ecx + 0x7c]
add eax, edx
mov edi, dword [eax + 0x40]
movzx ebx, word [eax + 0x3c]
add esi, 0x62
push dword [esi + 2]
movzx eax, word [esi]
push eax
push edi
push ebx
call fcn.0101ade0
cmp al, 1
je 0x1022583
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
add esi, 0x138
cmp eax, dword [ebp - 0x40]
jb 0x1022560
mov ebx, dword [ebp - 0x2c]
cmp ebx, dword [ebp - 0x40]
jne 0x10225d9
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 4
jb 0x1022728
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
imul eax, eax, 0x70
add eax, dword [ecx + 0x30]
lea ecx, [ebp - 0xa4]
push eax
call fcn.0107c998
push eax
mov eax, dword [0x111024c]
push 0x10023f8
push 0x12f
jmp 0x102262f
mov esi, dword [ebp - 0x1c]
imul ebx, ebx, 0x138
mov eax, dword [ebp - 0x3c]
imul esi, esi, 0x70
mov eax, dword [eax + 0x7c]
lea edi, [ebx + eax + 0x44]
mov eax, dword [ebp - 0x20]
add esi, dword [eax + 0x30]
push 4
pop ecx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x102263f
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 4
jb 0x1022728
push dword [ebp - 0x18]
push 0x10023f8
push 0x130
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
jmp 0x1022728
cmp dword [ebp - 0x24], eax
je 0x1022651
push dword [ebp - 0x24]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
and dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x7c]
lea edx, [ebp - 0x24]
push edx
add eax, ebx
push dword [eax + 0x54]
add eax, 0x44
push eax
push dword [ecx + 0x140]
call fcn.010df4ce
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1022768
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10226d9
test byte [eax + 0x1c], 1
je 0x10226d9
cmp byte [eax + 0x19], 4
jb 0x10226d9
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
add eax, ebx
mov ecx, dword [eax + 0x58]
mov esi, ecx
test ecx, ecx
jne 0x10226a8
mov esi, 0x10027a8
add eax, 0x44
push eax
lea ecx, [ebp - 0xa4]
call fcn.0107c998
push esi
push eax
push dword [ebp - 0x24]
mov eax, dword [0x111024c]
push dword [ebp - 0x18]
push 0x10023f8
push 0x131
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019a96
push dword [ebp - 0x24]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x1022728
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1022728
test byte [eax + 0x1c], 1
je 0x1022728
cmp byte [eax + 0x19], 3
jb 0x1022728
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x24]
mov eax, dword [0x111024c]
push dword [ebp - 0x18]
push 0x10023f8
push 0x132
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010198ad
xor esi, esi
cmp dword [ebp - 0x18], esi
je 0x102273b
push dword [ebp - 0x18]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x18], esi
push esi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x34]
call fcn.010d4cff
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x1022768
cmp dword [ebp - 0x18], esi
jne 0x1022380
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [ebp - 0x38], 0xffffffff
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
cmp dword [ebp - 0x24], edi
je 0x102277d
push dword [ebp - 0x24]
call esi
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x34], edi
je 0x102278a
push dword [ebp - 0x34]
call esi
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x18], edi
je 0x1022797
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x28], edi
je 0x10227a4
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x30], edi
je 0x10227b1
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x20], edi
je 0x10227cb
push dword [ebp - 0x20]
call fcn.01087cb0
cmp dword [ebp - 0x20], edi
je 0x10227cb
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x38], 0xffffffff
pop edi
pop esi
pop ebx
je 0x10227dd
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0106f798
leave
ret