Function at 0x6308e5d9
Capabilities:
Create thread
Move file

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x86c
mov dword [esp + 4], 0x63163880
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308eae4
mov dword [esp + 4], 0x63163480
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308eae4
mov dword [esp + 4], 0x63163680
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308eae4
mov dword [esp + 4], 0x63163980
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308eae4
mov dword [esp + 4], 0x63163780
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308eae4
mov dword [esp + 4], 0x63163380
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308eae4
cmp byte [0x630c3301], 0
je 0x6308e70c
lea eax, [ebp - 0x818]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x630815a2
mov dword [esp + 4], 0
mov dword [esp + 0x14], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
test eax, eax
je 0x6308e6e4
mov dword [esp], 0x309
call dword [sym.imp.KERNEL32.dll_Sleep]
push eax
jmp 0x6308e70c
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], str.Error
mov dword [esp + 4], str.There_was_an_unexpected_error_in_the_program:_n_nThe_filename__directory_name_or_volume_label_syntax_is_incorrect._n_0x8007007B__n_nPlease_close_the_program_and_try_again._n
mov dword [esp], 0
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], 0x63163880
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308e746
lea edi, [ebp - 0x818]
mov esi, 0x630c3140
mov ecx, 0x2a
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x818]
lea edi, [ebp - 0x770]
mov ebx, esi
jmp 0x6308e76b
mov dword [esp + 8], 0
mov dword [esp + 4], 0x630c433a
mov dword [esp], 0x63163880
call fcn.630851db
jmp 0x6308e724
add esi, 0x18
cmp edi, esi
je 0x6308e7e4
mov dword [esp + 4], esi
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
je 0x6308e764
mov dword [esp], 0
lea esi, [ebp - 0x858]
call sub.msvcrt.dll_time
mov edx, dword [0x630c3304]
mov dword [esp + 4], 0x630c434c
mov edi, esi
mov dword [esp], esi
dec edx
imul edx, edx, 0xfffeae80
add edx, eax
mov dword [esp + 8], edx
call sub.msvcrt.dll_sprintf
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x630c4350
not ecx
mov dword [esp + 4], esi
mov dword [esp], 0x6315dc80
dec ecx
mov dword [esp + 0x10], ecx
call fcn.63085390
mov esi, 0x630c3200
mov ecx, 0x40
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x818]
lea edi, [ebp - 0x718]
mov dword [esp + 4], esi
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
je 0x6308e834
call fcn.6308b0b7
mov dword [esp + 4], 0x630c5118
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
jne 0x6308e83d
jmp 0x6308ea77
add esi, 0x40
cmp esi, edi
jne 0x6308e7fe
jmp 0x6308e817
mov dword [esp], 0x6315d480
call fcn.6308532c
test al, al
jne 0x6308e866
mov dword [esp], 0x6315cc80
call fcn.6308532c
test al, al
jne 0x6308e8e6
jmp 0x6308e961
lea esi, [ebp - 0x858]
xor eax, eax
mov ecx, 0x200
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, 8
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0xf
mov dword [esp], esi
call fcn.6308563f
mov dword [esp + 4], 0x6315d480
mov dword [esp], ebx
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], esi
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], str..tmp
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], ebx
mov dword [esp], 0x6315d480
call dword [sym.imp.msvcrt.dll__wrename]
mov dword [esp + 4], 3
mov dword [esp], 0x6315d480
call fcn.6308c9d8
jmp 0x6308e84d
lea esi, [ebp - 0x858]
xor eax, eax
mov ecx, 0x200
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, 8
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0xf
mov dword [esp], esi
call fcn.6308563f
mov dword [esp + 4], 0x6315cc80
mov dword [esp], ebx
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], esi
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], str..tmp
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], ebx
mov dword [esp], 0x6315cc80
call dword [sym.imp.msvcrt.dll__wrename]
mov dword [esp + 4], 1
mov dword [esp], 0x6315cc80
call fcn.6308c9d8
mov dword [esp], 0x6315bc80
call fcn.6308532c
test al, al
je 0x6308e9ec
lea esi, [ebp - 0x858]
xor eax, eax
mov ecx, 0x200
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, 8
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0xf
mov dword [esp], esi
call fcn.6308563f
mov dword [esp + 4], 0x6315bc80
mov dword [esp], ebx
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], esi
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], str..tmp
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], ebx
mov dword [esp], 0x6315bc80
call dword [sym.imp.msvcrt.dll__wrename]
mov dword [esp + 4], 5
mov dword [esp], 0x6315bc80
call fcn.6308c9d8
mov dword [esp], 0x6315c480
call fcn.6308532c
test al, al
je 0x6308ea77
lea esi, [ebp - 0x858]
xor eax, eax
mov ecx, 0x200
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, 8
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0xf
mov dword [esp], esi
call fcn.6308563f
mov dword [esp + 4], 0x6315c480
mov dword [esp], ebx
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], esi
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], str..tmp
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], ebx
mov dword [esp], 0x6315c480
call dword [sym.imp.msvcrt.dll__wrename]
mov dword [esp + 4], 2
mov dword [esp], 0x6315c480
call fcn.6308c9d8
call fcn.63085402
mov dword [0x63159468], eax
mov dword [esp + 4], 0x63163680
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
je 0x6308ea9e
call fcn.6308e4b1
mov dword [esp + 4], 0x63163480
mov dword [esp], 0x6315fc80
call fcn.6308579a
test al, al
je 0x6308eabb
call fcn.6308e12d
call fcn.6308e1c4
mov dword [esp], eax
call fcn.630b8540
call fcn.630b8740
jmp 0x6308ea81
mov byte [0x630c3301], 0
jmp 0x6308e68d