Function at 0x102a893
Capabilities:
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa8
push esi
push edi
lea ecx, [ebp - 0xa8]
call fcn.0101e0db
xor esi, esi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x20], esi
call fcn.01019631
lea ecx, [ebp - 0x1c]
call fcn.01019631
lea ecx, [ebp - 1]
mov dword [ebp - 0xc], esi
call fcn.0102a7e2
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x4c], esi
lea edi, [ebp - 0x48]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xa8]
push eax
push 0x1c
call fcn.01021c19
test eax, eax
jge 0x102a8fb
mov dword [ebp - 8], 1
jmp 0x102aaf7
lea eax, [ebp - 0x1c]
push eax
push esi
lea ecx, [ebp - 0xa8]
call fcn.0101ef8b
cmp eax, esi
mov dword [ebp - 8], eax
jl 0x102aaf7
push ebx
mov ebx, dword [ebp + 8]
mov esi, dword [ebx]
lea ecx, [ebp - 0x1c]
call fcn.010196f9
push eax
push esi
lea ecx, [ebp - 0x1c]
call fcn.0101998a
test eax, eax
jne 0x102aaf6
push eax
lea eax, [ebp - 0x2c]
push eax
push 3
lea ecx, [ebp - 1]
call fcn.0103aedb
test eax, eax
mov dword [ebp - 8], eax
jl 0x102aaf6
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 1]
call fcn.0103adeb
test eax, eax
mov dword [ebp - 8], eax
jl 0x102aaf6
cmp dword [ebp - 0xc], 0
je 0x102aaf6
and dword [ebp - 0xc], 0
push 0x5c
pop edi
push edi
lea ecx, [ebp - 0x2c]
call fcn.010198fd
mov esi, eax
test esi, esi
jle 0x102aaef
push edi
lea ecx, [ebp - 0x2c]
call fcn.0101987f
cmp esi, eax
je 0x102aaef
mov eax, dword [ebp - 0x2c]
and word [eax + esi*2], 0
mov eax, dword [ebx]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x1c]
call fcn.01019f85
test eax, eax
mov dword [ebp - 8], eax
jl 0x102aa13
push edi
lea ecx, [ebp - 0x1c]
call fcn.010198fd
mov esi, eax
test esi, esi
jle 0x102aa92
push edi
lea ecx, [ebp - 0x1c]
call fcn.0101987f
cmp esi, eax
je 0x102aa92
mov eax, dword [ebp - 0x1c]
and word [eax + esi*2], 0
push edi
lea ecx, [ebp - 0x1c]
call fcn.010198fd
mov esi, eax
test esi, esi
jle 0x102aa92
push edi
lea ecx, [ebp - 0x1c]
call fcn.0101987f
cmp esi, eax
je 0x102aa92
mov eax, dword [ebp - 0x1c]
and word [eax + esi*2], 0
lea ecx, [ebp - 0x2c]
call fcn.010196f9
mov esi, eax
xor ecx, ecx
push 2
lea edi, [esi + 2]
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
mov ebx, eax
test ebx, ebx
pop ecx
mov dword [ebp - 0x10], ebx
je 0x102aa89
lea eax, [edi + edi]
push eax
push 0
push ebx
call sub.msvcrt.dll_memset
lea eax, [esi + esi]
push eax
push dword [ebp - 0x2c]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x18
lea ecx, [ebp - 0x1c]
call fcn.010196f9
mov esi, eax
xor ecx, ecx
push 2
lea edi, [esi + 2]
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
mov ebx, eax
test ebx, ebx
pop ecx
mov dword [ebp - 0x20], ebx
jne 0x102aa9b
mov dword [ebp - 8], 0x8007000e
jmp 0x102aaf6
mov dword [ebp - 8], 1
jmp 0x102aaf6
lea eax, [edi + edi]
push eax
push 0
push ebx
call sub.msvcrt.dll_memset
lea eax, [esi + esi]
push eax
push dword [ebp - 0x1c]
push ebx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], eax
add esp, 0x18
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x40], ebx
mov word [ebp - 0x3c], 0x614
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
je 0x102aae2
mov dword [ebp - 8], 0x80004005
xor eax, eax
cmp dword [ebp - 8], eax
setge al
mov dword [ebp - 0xc], eax
jmp 0x102aaf6
mov dword [ebp - 8], 0x8000ffff
pop ebx
mov ecx, dword [ebp + 0xc]
xor esi, esi
cmp ecx, esi
je 0x102ab0e
cmp dword [ebp - 8], esi
jl 0x102ab0a
mov eax, dword [ebp - 0xc]
jmp 0x102ab0c
xor eax, eax
mov dword [ecx], eax
cmp dword [ebp - 0x10], esi
je 0x102ab1c
push dword [ebp - 0x10]
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
cmp dword [ebp - 0x20], esi
pop edi
pop esi
je 0x102ab2c
push dword [ebp - 0x20]
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
lea ecx, [ebp - 1]
call fcn.0103ad42
lea ecx, [ebp - 0x1c]
call fcn.01019f33
lea ecx, [ebp - 0x2c]
call fcn.01019f33
lea ecx, [ebp - 0xa8]
call fcn.0101c265
mov eax, dword [ebp - 8]
leave
ret 8