Function at 0x10186bd
Capabilities:
Copy file
Delete file
Get file attributes
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
xor ebx, ebx
cmp dword [ebp + 0xc], ebx
mov dword [ebp - 0xc], ebx
jne 0x10186d7
xor eax, eax
jmp 0x10188dd
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push edi
push dword [ebp + 8]
call esi
mov edi, 0x4000
test edi, eax
je 0x1018732
lea ecx, [ebp - 8]
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
call fcn.01016c8d
test eax, eax
je 0x101872a
push ebx
push dword [ebp + 8]
call dword [ebp - 8]
test eax, eax
jne 0x101872a
mov dword [ebp - 0xc], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 0xc]
push 0x1006388
push 2
call fcn.01028201
add esp, 0x10
lea ecx, [ebp - 8]
call fcn.01016c79
cmp dword [ebp + 0x10], ebx
je 0x1018881
test byte [0x102be48], 1
jne 0x1018755
or dword [0x102be48], 1
call fcn.010171de
mov dword [0x102be44], eax
cmp dword [0x102be44], 5
jne 0x1018881
mov ebx, 0x208
push ebx
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
mov dword [ebp + 0x10], eax
je 0x101878c
push ebx
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
mov dword [ebp - 4], eax
jne 0x101879b
push dword [ebp + 0x10]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x10188db
mov ebx, 0x104
push ebx
push eax
push dword [ebp + 0xc]
call fcn.010181dc
push dword [ebp - 4]
call fcn.01016cfc
push dword [0x102be40]
push dword [ebp - 4]
push 0x100636c
push ebx
push dword [ebp + 0x10]
call fcn.0100d4d1
add esp, 0x14
push dword [ebp + 0x10]
inc dword [0x102be40]
call fcn.01016f8a
test eax, eax
jne 0x10187b2
push dword [ebp - 4]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov ebx, dword [ebp + 0x10]
pop ecx
push 0
push ebx
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1018878
cmp dword [ebp - 0xc], 0
je 0x1018845
push ebx
call esi
test edi, eax
je 0x1018845
xor esi, esi
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
call fcn.01016c8d
test eax, eax
je 0x101883d
push esi
push ebx
call dword [ebp - 0x10]
test eax, eax
jne 0x101883d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 0xc]
push 0x1006388
push 2
call fcn.01028201
add esp, 0x10
lea ecx, [ebp - 0x10]
call fcn.01016c79
push 1
push dword [ebp + 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, eax
test esi, esi
push ebx
je 0x1018867
push 0x103
push dword [ebp + 8]
call fcn.0100c535
jmp 0x101886d
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov eax, esi
jmp 0x10188db
push ebx
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
xor ebx, ebx
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push dword [ebp + 0xc]
mov ebx, eax
call esi
test edi, eax
je 0x10188d9
xor esi, esi
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
call fcn.01016c8d
test eax, eax
je 0x10188d1
push esi
push dword [ebp + 0xc]
call dword [ebp - 0x10]
test eax, eax
jne 0x10188d1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 0xc]
push 0x1006388
push 2
call fcn.01028201
add esp, 0x10
lea ecx, [ebp - 0x10]
call fcn.01016c79
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10