Function at 0x102220e
Capabilities:
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa4
mov eax, dword [0x111127c]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x1c], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x3c], edi
mov eax, dword [0x111124c]
mov esi, 0x111124c
mov ebx, 0x10023f8
cmp eax, esi
je 0x102225f
test byte [eax + 0x1c], 1
je 0x102225f
cmp byte [eax + 0x19], 4
jb 0x102225f
push ebx
push 0x126
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
push dword [edi + 0xe8]
or dword [ebp - 0x38], 0xffffffff
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
call fcn.01083215
test al, 8
jne 0x10222c3
mov eax, dword [0x111124c]
cmp eax, esi
je 0x10227ef
test byte [eax + 0x1c], 1
je 0x10227ef
cmp byte [eax + 0x19], 4
jb 0x10227ef
push dword [edi + 0xe8]
push ebx
push 0x127
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
jmp 0x10227ef
cmp dword [edi + 0x140], 0
jne 0x10222fc
mov dword [ebp - 0x1c], 0x80070057
mov eax, dword [0x111124c]
cmp eax, esi
je 0x10227ef
test byte [eax + 0x1c], 1
je 0x10227ef
cmp byte [eax + 0x19], 2
jb 0x10227ef
push ebx
push 0x128
jmp 0x1022375
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
call fcn.010220f9
mov dword [ebp - 0x1c], eax
test eax, eax
jge 0x1022348
mov eax, dword [0x111124c]
cmp eax, esi
je 0x10227ef
test byte [eax + 0x1c], 1
je 0x10227ef
cmp byte [eax + 0x19], 2
jb 0x10227ef
push dword [ebp - 0x1c]
push ebx
push 0x129
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
jmp 0x10227ef
cmp dword [ebp - 0x20], 0
jne 0x1022385
mov eax, dword [0x111124c]
cmp eax, esi
je 0x10227ef
test byte [eax + 0x1c], 1
je 0x10227ef
cmp byte [eax + 0x19], 4
jb 0x10227ef
push ebx
push 0x12a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
jmp 0x10227ef
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [edi + 0x140]
call fcn.010df5bc
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10227ef
push 0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x34]
call fcn.010d4c08
mov dword [ebp - 0x1c], eax
test eax, eax
jge 0x10223fd
mov eax, dword [0x111124c]
cmp eax, esi
je 0x10227ef
test byte [eax + 0x1c], 1
je 0x10227ef
cmp byte [eax + 0x19], 2
jb 0x10227ef
push dword [ebp - 0x1c]
push dword [ebp - 0x34]
push 0x10023f8
push 0x12b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
jmp 0x10227ef
cmp dword [ebp - 0x18], 0
je 0x10227e2
mov esi, 0x100cbcc
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
cmp dword [ebp - 0x28], esi
je 0x1022426
push dword [ebp - 0x28]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x30], esi
je 0x1022437
push dword [ebp - 0x30]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
call fcn.0107ecd3
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x10227ef
push 3
push 0x1002ae4
push dword [ebp - 0x28]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x102249f
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 4
jb 0x10227af
push dword [ebp - 0x18]
push 0x10023f8
push 0x12c
jmp 0x10226b6
mov esi, dword [ebp - 0x28]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x10224a7
sub eax, edx
sar eax, 1
cmp eax, 0x24
jae 0x10224f0
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 4
jb 0x10227af
push dword [ebp - 0x18]
push 0x10023f8
push 0x12d
jmp 0x10226b6
xor eax, eax
mov word [esi + 0x48], ax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
je 0x102253d
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 4
jb 0x10227af
push dword [ebp - 0x18]
push 0x10023f8
push 0x12e
jmp 0x10226b6
push 4
pop ecx
mov edi, 0x100cbcc
lea esi, [ebp - 0x14]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x10227af
and dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 0x2c]
test edx, edx
jbe 0x1022580
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x2c], ecx
mov esi, dword [ebp - 0x2c]
push 4
pop ecx
lea edi, [ebp - 0x14]
xor ebx, ebx
repe cmpsd dword [esi], dword es:[edi]
je 0x1022580
inc dword [ebp - 0x1c]
add dword [ebp - 0x2c], 0x70
cmp dword [ebp - 0x1c], edx
jb 0x1022565
cmp dword [ebp - 0x1c], edx
jb 0x10225bb
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 3
jb 0x10227af
push dword [ebp - 0x18]
push 0x10023f8
push 0x12f
jmp 0x10226b6
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0xfc]
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x40], edx
test edx, edx
jbe 0x102260a
mov edx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x30]
imul edx, edx, 0x70
mov esi, dword [ecx + 0x7c]
add eax, edx
mov edi, dword [eax + 0x40]
movzx ebx, word [eax + 0x3c]
add esi, 0x62
push dword [esi + 2]
movzx eax, word [esi]
push eax
push edi
push ebx
call fcn.0101aea0
cmp al, 1
je 0x102260a
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
add esi, 0x138
cmp eax, dword [ebp - 0x40]
jb 0x10225e7
mov ebx, dword [ebp - 0x2c]
cmp ebx, dword [ebp - 0x40]
jne 0x1022660
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 4
jb 0x10227af
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
imul eax, eax, 0x70
add eax, dword [ecx + 0x30]
lea ecx, [ebp - 0xa4]
push eax
call fcn.0107c80d
push eax
mov eax, dword [0x111124c]
push 0x10023f8
push 0x130
jmp 0x10226b6
mov esi, dword [ebp - 0x1c]
imul ebx, ebx, 0x138
mov eax, dword [ebp - 0x3c]
imul esi, esi, 0x70
mov eax, dword [eax + 0x7c]
lea edi, [ebx + eax + 0x44]
mov eax, dword [ebp - 0x20]
add esi, dword [eax + 0x30]
push 4
pop ecx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x10226c6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 4
jb 0x10227af
push dword [ebp - 0x18]
push 0x10023f8
push 0x131
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
jmp 0x10227af
cmp dword [ebp - 0x24], eax
je 0x10226d8
push dword [ebp - 0x24]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
and dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x7c]
lea edx, [ebp - 0x24]
push edx
add eax, ebx
push dword [eax + 0x54]
add eax, 0x44
push eax
push dword [ecx + 0x140]
call fcn.010df5bc
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10227ef
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1022760
test byte [eax + 0x1c], 1
je 0x1022760
cmp byte [eax + 0x19], 4
jb 0x1022760
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
add eax, ebx
mov ecx, dword [eax + 0x58]
mov esi, ecx
test ecx, ecx
jne 0x102272f
mov esi, 0x10027a8
add eax, 0x44
push eax
lea ecx, [ebp - 0xa4]
call fcn.0107c80d
push esi
push eax
push dword [ebp - 0x24]
mov eax, dword [0x111124c]
push dword [ebp - 0x18]
push 0x10023f8
push 0x132
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c29
push dword [ebp - 0x24]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x10227af
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10227af
test byte [eax + 0x1c], 1
je 0x10227af
cmp byte [eax + 0x19], 3
jb 0x10227af
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x24]
mov eax, dword [0x111124c]
push dword [ebp - 0x18]
push 0x10023f8
push 0x133
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019a40
xor esi, esi
cmp dword [ebp - 0x18], esi
je 0x10227c2
push dword [ebp - 0x18]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x18], esi
push esi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x34]
call fcn.010d4db1
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x10227ef
cmp dword [ebp - 0x18], esi
jne 0x1022407
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [ebp - 0x38], 0xffffffff
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
cmp dword [ebp - 0x24], edi
je 0x1022804
push dword [ebp - 0x24]
call esi
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x34], edi
je 0x1022811
push dword [ebp - 0x34]
call esi
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x18], edi
je 0x102281e
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x28], edi
je 0x102282b
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x30], edi
je 0x1022838
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x20], edi
je 0x1022852
push dword [ebp - 0x20]
call fcn.01087d19
cmp dword [ebp - 0x20], edi
je 0x1022852
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x38], 0xffffffff
pop edi
pop esi
pop ebx
je 0x1022864
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0106f5f8
leave
ret