Function at 0x1000a53a
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x224
push ebx
push esi
push edi
push 0x31
push dword [0x100397e8]
mov dword [esp + 0x1c], 1
call fcn.1000c3b2
pop ecx
pop ecx
test eax, eax
je 0x1000a735
mov eax, dword [0x100397fc]
xor esi, esi
cmp eax, esi
jne 0x1000a589
mov eax, dword [0x10039720]
add eax, 0xb0
push eax
call fcn.100132a2
pop ecx
mov dword [0x100397fc], eax
push esi
push eax
mov eax, dword [0x10039720]
add eax, 0x438
push 0x10036048
push eax
call fcn.1000b60a
add esp, 0x10
mov dword [esp + 0x10], eax
cmp eax, esi
je 0x1000a735
mov edi, dword [sym.imp.GDI32.dll_ArcTo]
mov eax, dword [0x10039720]
add eax, 0x1878
push 0x1388
push eax
call fcn.1000fa69
mov ebx, eax
pop ecx
pop ecx
cmp ebx, esi
je 0x1000a727
push dword [esp + 0x10]
call fcn.1000b081
pop ecx
test eax, eax
jne 0x1000a614
push dword [esp + 0x10]
call fcn.100130e1
pop ecx
push esi
mov dword [esp + 0x18], eax
call fcn.1000cef9
pop ecx
cmp edx, esi
jg 0x1000a614
jl 0x1000a606
cmp eax, 0x2bcf
jae 0x1000a614
push esi
push esi
push str.TYyJP_ef6ku7rVCuQl4W4pTw4aw7U1p3RGC9EK1B9xgT2Ls_I2aOsBtEeIZYjOWh94.zGl8UBAlSA6msH_a3EiAd92OsyMJGqG_cw_ejWULvM9DBdQ4NJHl4_2YmvLCNb.Q0uQKzu2yw_1_2A9HGDR9VNOa99u7J12FVJ0akXcsanugerl__njPqcj_RUIGvJD_tGDX_QnagaX936s_C.c1.nN5jJUkS3msdHVG_bAIz9Y4Q9p_VrfEqW_Z2iMR2a3_OT_Re
push esi
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileA]
mov eax, dword [0x10039740]
push ebx
call dword [eax + 0x90]
mov eax, dword [0x10039740]
push ebx
call dword [eax + 0x30]
cmp dword [esp + 0x14], esi
jle 0x1000a727
lea eax, [esp + 0x18]
push eax
call fcn.1000cef9
pop ecx
push 0x45
push 0x5d
push 0x5d
push 0x2a
push 8
push 0x18
push 0x55
push 0x5f
push esi
call edi
push esi
call fcn.1000cef9
pop ecx
cmp edx, esi
jg 0x1000a673
jl 0x1000a665
cmp eax, 0x2bcf
jae 0x1000a673
push esi
push esi
push str.LGGhy2VfN1MfBU477WEZxpa3tCKydMG6j0vmC_XgwkA_cpkAr8myfm9w36IikEIvByc88ZWNht.H0_aQ_o03V7sYqRV._b7_jV2vjOapOreR.Q.UKgS5OGp_ObiM6YJfmSVxPFn4CKVlG5LBdIPekEvgGCqtB_MDxI6Io_hOtsrrpaZta1FPUgtvuGD__mcDw0wY8m_UT5EZ9mN8BeM742Y5bpuUJkFsV0mOEllZs9yYqUgZWvBrM5lEw9RDov8JK7hYSpYE9a_v648SM7EfY_q_VwqwAGa_bjD8.XEGQXU1werEq7qFLKMX_ljw.obTYfHJKC9wp9et9AM_6yjezQstg1SCEpNbBAxnrA3nEig_2_eKYinYFMW_C_sFr9w1_eOFEHK6wyk27_BfW6oyy4LaxjVNIL.l71ju2wLiHWDo_tG.U_E5zy75.jFCJlOP66KS__jNni7y1XO5rjQdRbefrZHeR813__pQYc_n2evTSO1U9xIRu1Y21gG2ni8yq_OTrixOiobd5e3peyt6OJHHzm5gynK_8.4Lqe3UpFUjVa_weBGZ4_4uDI_OZV0wwD_OEr.BHthE00_vTVgafSd90EUVT.uNmITZ_DeN6Ip0_wyFNAtNQ7i7l_HlZGMx57w_G9hLdEEhCRVnq9T07m4t_dYHDBEZI5gD_fsPbYCU4M1HeN_FU4NfX.y_1JI3gfiq_YgXt7.GJene_oIRBUooJTVuHPmH_L5Ahvbmv9x_bLxLdU5xVoor42H12phUeJcGXBY9QWQ84C4ooNiB5jYWsTDDtb9aYi7BbfP3na_0e.z_6ZygrNsSmIGu_MPYCwX9O6.7dpYeCuptPd3eiMcqyWK5X_xtXI3giwMitq_cC4fh9Dj8a.0Pq3f0q3KmXnpN_Z1hysiDtpaHME_bdAt8Z7mrRstwdEa_tfJdJnnu_9Vc3__LZ3te6ifCUeqF0GWRVg_zjbsV6F_PnRw_Lkk26PZj6EZRFV6sqJj.RlH_0tWtShGGKNB_Km7LyV_PVRJkaVDCUd582neGYijZ3pN8SecA2_I9OJZYRaF_C.h.BcKj7MV2z0pdQ.0bFYmBoTJX9mxFokYgMC2_HNR6vgWfXtI2Sbzb_hH9437KSFolCpoSTp7w4T0MNZ_0_oCVPA9S1p_K5r2__Saz_H_4_sobr__DoXDV93wEj_LMx0_GebQpP_UB_AlTexNpDuQ6pV5MZg94eKQw2up8q_AuGWxZ6_Mbz.4y_eBhP_CIGxlY_xjb_9ipBgCW7DfQPuUtrmAWh9.20qxht3lfzQgpk2K_a_W1VYRf4oGXfif4HTxl4XPsdWTB_9osBxjpD98aYHS9v_GXzLpsVizhnaMQ526lIm_V0HiaOaLS_HALtYNDJ35TcgdoEtrjUE4tSK2q3q_18vND_Nz36k2z_r_nJ.EuWXYHG_yPYSZ5b0UKz11HXvESk7sMgRhH9O5q7kC_hpr_ra8xHZ5AL05UUM6FN327b0fhnkcf7tqKAuFsM
push esi
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileA]
push 0x33
push dword [0x100397e8]
call fcn.1000c3b2
pop ecx
pop ecx
test eax, eax
jne 0x1000a6d9
push 0x12
push dword [0x100397e8]
call fcn.1000c3b2
pop ecx
pop ecx
test eax, eax
jne 0x1000a6a2
call fcn.100130b6
test eax, eax
je 0x1000a6d9
push esi
call fcn.1000cef9
pop ecx
push eax
push dword [esp + 0x14]
lea eax, [esp + 0x28]
push str._s._u
push 0x104
push eax
call fcn.1000ce46
add esp, 0x14
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x1000a5b5
push dword [esp + 0x10]
call fcn.100098f4
pop ecx
test eax, eax
js 0x1000a727
push 0x53
push 0x56
push 0x46
push 0xe
push 0x49
push 0x54
push 1
push 0x13
push esi
call edi
mov eax, dword [esp + 0x10]
call fcn.1000b15c
test eax, eax
jne 0x1000a5b5
push 0x24
push 0x4d
push 0x39
push 0x56
push 0x41
push 0x4c
push 0x4d
push 4
push esi
call dword [sym.imp.GDI32.dll_Arc]
jmp 0x1000a5b5
lea eax, [esp + 0x10]
push 0xfffffffffffffffe
push eax
call fcn.1000ab81
pop ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret