Function at 0x10b0cb4
Capabilities:
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1d4
push ebx
push esi
push edi
lea ecx, [ebp - 0x1d4]
call fcn.0107e139
lea ecx, [ebp - 0x11c]
call fcn.0107e139
lea ecx, [ebp - 0x48]
call fcn.010424ee
lea ecx, [ebp - 0x3c]
call fcn.010424ee
lea ecx, [ebp - 0x54]
call fcn.010424ee
xor ebx, ebx
cmp dword [ebp + 8], ebx
je 0x10b1077
cmp dword [ebp + 0xc], ebx
je 0x10b1077
mov edi, dword [ebp + 0x10]
cmp edi, ebx
je 0x10b1077
mov eax, dword [ebp + 0x18]
cmp eax, ebx
je 0x10b0d18
mov byte [eax], bl
push dword [edi]
lea ecx, [ebp - 0x1d4]
push ebx
call fcn.0107f141
mov esi, eax
cmp esi, ebx
jl 0x10b107c
cmp dword [ebp + 0x14], ebx
je 0x10b0d90
lea ecx, [ebp - 0xc]
call fcn.010424ee
push dword [ebp + 0x14]
lea ecx, [ebp - 0x11c]
push ebx
call fcn.0107f141
mov esi, eax
cmp esi, ebx
jl 0x10b0d67
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.0107cd51
mov esi, eax
cmp esi, ebx
jge 0x10b0d74
lea ecx, [ebp - 0xc]
call fcn.01042e75
jmp 0x10b107c
push 0xffffffffffffffff
push dword [ebp - 0xc]
lea ecx, [ebp - 0x11c]
call fcn.0107e578
lea ecx, [ebp - 0xc]
mov esi, eax
call fcn.01042e75
jmp 0x10b0da0
push dword [edi]
lea ecx, [ebp - 0x11c]
push ebx
call fcn.0107f141
mov esi, eax
cmp esi, ebx
jl 0x10b107c
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.0107d6fa
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x30], esi
jl 0x10b107c
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp + 0xc]
push dword [eax + 0xc]
lea ecx, [ebp - 0x2c]
push dword [eax]
push dword [ebp + 8]
call fcn.010aff95
mov esi, dword [ebp - 0x30]
cmp esi, ebx
jl 0x10b106d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x54]
call fcn.010428ff
test eax, eax
je 0x10b106d
lea ecx, [ebp - 0xc]
call fcn.010424ee
lea ecx, [ebp - 0x18]
call fcn.010424ee
lea ecx, [ebp - 0xc0]
call fcn.0107e139
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x11c]
call fcn.0107cc83
mov esi, eax
cmp esi, ebx
jl 0x10b1052
push 0xffffffffffffffff
push dword [ebp - 0x24]
lea ecx, [ebp - 0x18]
call fcn.01042ec9
mov esi, eax
cmp esi, ebx
jl 0x10b1052
push 0xffffffffffffffff
push 0x1025458
lea ecx, [ebp - 0x18]
call fcn.01043145
mov esi, eax
cmp esi, ebx
jl 0x10b1052
push dword [ebp - 0x18]
lea ecx, [ebp - 0x11c]
call fcn.0107f28d
mov esi, eax
cmp esi, ebx
jl 0x10b1052
push dword [ebp - 0xc]
lea ecx, [ebp - 0x11c]
call fcn.0107f71c
mov esi, eax
cmp esi, ebx
jl 0x10b1052
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.0107a8b8
mov esi, eax
cmp esi, ebx
jl 0x10b1052
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0107c4e1
mov esi, eax
cmp esi, ebx
jl 0x10b1052
lea eax, [ebp - 0x3c]
push eax
push ebx
lea ecx, [ebp - 0x11c]
call fcn.0107f08b
mov esi, eax
cmp esi, ebx
jl 0x10b1052
lea eax, [ebp - 0x48]
push eax
push ebx
lea ecx, [ebp - 0x1d4]
call fcn.0107f08b
mov esi, eax
cmp esi, ebx
jl 0x10b1052
push dword [ebp - 0x48]
push 0x10253f0
call fcn.010a163c
push dword [ebp - 0x3c]
push 0x1025388
call fcn.010a163c
push dword [ebp - 0x3c]
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x10b0f6f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, ebx
jne 0x10b0f36
push 0x57
pop eax
cmp eax, ebx
jg 0x10b0f43
call esi
cmp eax, ebx
jne 0x10b0f56
push 0x57
pop eax
jmp 0x10b0f56
call esi
cmp eax, ebx
jne 0x10b0f4c
push 0x57
pop eax
and eax, 0xffff
or eax, 0x80070000
xor esi, esi
cmp eax, 0x800700b7
lea ecx, [ebp - 0xc0]
je 0x10b1058
inc esi
jmp 0x10b1058
push dword [ebp - 0x3c]
push dword [ebp - 0x48]
push 5
push 1
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
xor eax, eax
lea edi, [ebp - 0x64]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x3c]
mov word [ebp - 0x64], 8
call fcn.010429a5
mov esi, eax
cmp esi, ebx
jl 0x10b1052
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x64]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x800000c
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
mov esi, eax
lea eax, [ebp - 0x64]
push eax
call fcn.01082281
cmp esi, ebx
jl 0x10b1052
mov eax, dword [ebp + 0x18]
cmp eax, ebx
je 0x10b0fdb
mov byte [eax], 1
cmp dword [ebp + 0x14], ebx
je 0x10b1041
lea ecx, [ebp - 0x178]
call fcn.0107e139
push dword [ebp - 0x48]
lea ecx, [ebp - 0x178]
push ebx
call fcn.0107f141
mov esi, eax
cmp esi, ebx
lea ecx, [ebp - 0x178]
jge 0x10b100d
call fcn.0104163c
jmp 0x10b1052
push 0x1002298
call fcn.0107f28d
mov esi, eax
cmp esi, ebx
jge 0x10b1025
lea ecx, [ebp - 0x178]
jmp 0x10b1006
push 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x178]
push eax
call fcn.010b018f
lea ecx, [ebp - 0x178]
call fcn.0104163c
lea ecx, [ebp - 0x3c]
call fcn.0104356e
mov ecx, dword [ebp + 0x10]
push eax
call fcn.01042d41
lea ecx, [ebp - 0xc0]
call fcn.0104163c
lea ecx, [ebp - 0x18]
call fcn.01042e75
lea ecx, [ebp - 0xc]
call fcn.01042e75
lea ecx, [ebp - 0x2c]
call fcn.010aff74
jmp 0x10b107c
mov esi, 0x80004003
lea ecx, [ebp - 0x54]
call fcn.01042e75
lea ecx, [ebp - 0x3c]
call fcn.01042e75
lea ecx, [ebp - 0x48]
call fcn.01042e75
lea ecx, [ebp - 0x11c]
call fcn.0104163c
lea ecx, [ebp - 0x1d4]
call fcn.0104163c
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x14