Function at 0x102952b
Capabilities:
Check if file exists
Delete file
Get file attributes
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x420
mov eax, dword [0x1032c0c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
mov dword [ebp - 0x420], esi
mov ebx, 0x100467c
cmp esi, edi
jne 0x1029567
push 0x1004734
push 0xc2
push ebx
call fcn.01028938
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x102956c
sub eax, edx
sar eax, 1
cmp eax, 0xfd
jb 0x1029591
push 0x100470c
push 0xc3
push ebx
call fcn.01028938
cmp dword [ebp + 0xc], 2
jae 0x10295a7
push 0x10046fc
push 0xc4
push ebx
call fcn.01028938
mov eax, dword [0x1032370]
cmp eax, 0x1032370
je 0x10295d1
test byte [eax + 0x1c], 1
je 0x10295d1
cmp byte [eax + 0x19], 4
jb 0x10295d1
push 0x1004460
push 0x11
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01005393
mov ebx, 0x208
push ebx
lea eax, [ebp - 0x414]
push edi
push eax
call sub.msvcrt.dll_memset
push ebx
lea eax, [ebp - 0x20c]
push edi
push eax
call sub.msvcrt.dll_memset
push 0x1004470
push edi
push esi
mov edi, 0x10046e8
push edi
mov esi, 0x104
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.0100cfad
add esp, 0x30
mov dword [ebp - 0x418], eax
test eax, eax
jl 0x1029804
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1029676
mov eax, dword [0x1032370]
cmp eax, 0x1032370
je 0x102982e
test byte [eax + 0x1c], 1
je 0x1029809
cmp byte [eax + 0x19], 4
jb 0x1029809
lea ecx, [ebp - 0x20c]
push ecx
push 0x1004460
push 0x12
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01007db4
jmp 0x1029804
push ebx
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x1004470
push dword [ebp + 0xc]
lea eax, [ebp - 0x20c]
push dword [ebp - 0x420]
push edi
push esi
push eax
call fcn.0100cfad
add esp, 0x24
mov dword [ebp - 0x418], eax
test eax, eax
jl 0x1029804
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x10296fa
mov eax, dword [0x1032370]
cmp eax, 0x1032370
je 0x10296ff
test byte [eax + 0x1c], 1
je 0x10296ff
cmp byte [eax + 0x19], 3
jb 0x10296ff
push dword [ebp - 0x418]
lea ecx, [ebp - 0x20c]
push ecx
push 0x1004460
push 0x13
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01007e21
mov eax, dword [0x1032370]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x41c], ecx
test ecx, ecx
jbe 0x1029809
jmp 0x102971c
mov edi, 0x10046e8
mov esi, 0x104
mov eax, dword [ebp - 0x41c]
push 0x1004470
dec eax
push eax
push dword [ebp - 0x420]
lea eax, [ebp - 0x414]
push edi
push esi
push eax
call fcn.0100cfad
add esp, 0x18
mov dword [ebp - 0x418], eax
test eax, eax
jl 0x1029804
push 1
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x1029773
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x10297b2
lea eax, [ebp - 0x20c]
push eax
call fcn.01029077
push ebx
lea eax, [ebp - 0x414]
push 0
mov ecx, 0x82
lea esi, [ebp - 0x414]
lea edi, [ebp - 0x20c]
push eax
rep movsd dword es:[edi], dword [esi]
call sub.msvcrt.dll_memset
add esp, 0xc
dec dword [ebp - 0x41c]
jne 0x1029712
jmp 0x1029804
test eax, eax
jle 0x10297c0
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x418], eax
mov eax, dword [0x1032370]
cmp eax, 0x1032370
je 0x102982e
test byte [eax + 0x1c], 1
je 0x1029809
cmp byte [eax + 0x19], 3
jb 0x1029809
push dword [ebp - 0x418]
lea ecx, [ebp - 0x20c]
push ecx
lea ecx, [ebp - 0x414]
push ecx
push 0x1004460
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01007e94
mov eax, dword [0x1032370]
cmp eax, 0x1032370
je 0x102982e
test byte [eax + 0x1c], 1
je 0x102982e
cmp byte [eax + 0x19], 4
jb 0x102982e
push 0x1004460
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01005393
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x418]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01026693
leave
ret 8