Function at 0x1000f136
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x26c0
call fcn.1002fb29
mov eax, dword [0x100400b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [ebp - 0x26bc], eax
xor ebx, ebx
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x26c0], eax
mov eax, dword [ebp + 0x24]
push edi
mov dword [ebp - 0x26b8], eax
mov edi, ecx
mov eax, dword [ebp + 0x2c]
push 0x1048
mov dword [ebp - 0x26b4], eax
lea eax, [ebp - 0x1664]
push ebx
push eax
mov dword [ebp - 0x26b0], edx
call fcn.1001e894
push 0x1048
lea eax, [ebp - 0x26ac]
push ebx
push eax
call fcn.1001e894
add esp, 0x18
test esi, esi
je 0x1000f47b
mov ecx, 0x104
test edi, edi
je 0x1000f264
xor eax, eax
mov edx, ecx
push ecx
lea ecx, [ebp - 0x20c]
cmp ax, word [esi]
je 0x1000f25c
push esi
call fcn.1001a3af
test eax, eax
je 0x1000f250
lea eax, [ebp - 0x20c]
push 0x28
push eax
call fcn.1001ddb2
pop ecx
pop ecx
test eax, eax
je 0x1000f20f
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x1000f20a
push 0x20
pop ecx
cmp cx, word [eax - 2]
jne 0x1000f20a
xor ecx, ecx
mov word [eax - 2], cx
jmp 0x1000f20f
xor ecx, ecx
mov word [eax], cx
xor eax, eax
cmp ax, word [ebp - 0x20c]
je 0x1000f250
push 0x2e
push edi
call fcn.1001a3af
pop ecx
pop ecx
push ebx
mov edx, 0x104
lea ecx, [ebp - 0x20c]
mov esi, eax
call fcn.1001a3af
test eax, eax
je 0x1000f250
push esi
mov edx, 0x104
lea ecx, [ebp - 0x20c]
call fcn.1001a3af
test eax, eax
jne 0x1000f26e
push ecx
lea ecx, [ebp - 0x20c]
mov edx, 0x104
push edi
call fcn.1001a3af
jmp 0x1000f266
mov eax, ebx
test eax, eax
je 0x1000f47b
mov ecx, dword [ebp - 0x26b0]
test ecx, ecx
je 0x1000f2fe
test edi, edi
je 0x1000f2fe
mov esi, ecx
lea edx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x1000f285
sub esi, edx
lea eax, [ebp - 0x414]
sar esi, 1
cmp ecx, eax
je 0x1000f2b4
push ecx
push ecx
mov edx, 0x104
mov ecx, eax
call fcn.1001a3af
test eax, eax
je 0x1000f47b
push 0x5c
pop eax
cmp ax, word [ebp + esi*2 - 0x416]
je 0x1000f2e5
push 0xffffffffffffffff
push 0x100393f0
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1000f47b
push edi
mov edx, 0x104
lea ecx, [ebp - 0x414]
call fcn.1001a3af
mov ecx, dword [ebp - 0x26b0]
jmp 0x1000f300
mov eax, ebx
test eax, eax
je 0x1000f47b
test ecx, ecx
je 0x1000f38a
mov esi, ecx
lea edx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x1000f311
sub esi, edx
lea eax, [ebp - 0x61c]
sar esi, 1
cmp ecx, eax
je 0x1000f340
push ecx
push ecx
mov edx, 0x104
mov ecx, eax
call fcn.1001a3af
test eax, eax
je 0x1000f47b
push 0x5c
pop eax
cmp ax, word [ebp + esi*2 - 0x61e]
je 0x1000f371
push 0xffffffffffffffff
push 0x100393f0
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1000f47b
lea eax, [ebp - 0x20c]
mov edx, 0x104
push eax
lea ecx, [ebp - 0x61c]
call fcn.1001a3af
jmp 0x1000f38c
mov eax, ebx
test eax, eax
je 0x1000f47b
xor eax, eax
cmp ax, word [ebp - 0x414]
je 0x1000f469
cmp ax, word [ebp - 0x61c]
je 0x1000f469
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.1001a3af
pop ecx
pop ecx
test eax, eax
je 0x1000f46d
mov esi, dword [ebp - 0x26b4]
test esi, esi
je 0x1000f435
call fcn.1001a3af
test eax, eax
je 0x1000f435
xor eax, eax
lea ecx, [ebp - 0x414]
mov word [ebp - 0x1664], ax
mov word [ebp - 0x26ac], ax
call fcn.1001a3af
test eax, eax
lea eax, [ebp - 0x26ac]
push ecx
je 0x1000f410
push eax
push ecx
lea ecx, [ebp - 0x414]
jmp 0x1000f45c
push ecx
push eax
push ecx
lea eax, [ebp - 0x1664]
push eax
push esi
lea edx, [ebp - 0x61c]
lea ecx, [ebp - 0x414]
call fcn.1001a3af
xor ebx, ebx
test eax, eax
setns bl
jmp 0x1000f469
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.kernel32.dll_MoveFileW]
test eax, eax
je 0x1000f47b
push ecx
lea eax, [ebp - 0x26ac]
push eax
push ecx
lea ecx, [ebp - 0x61c]
lea edx, [ebp - 0x1664]
call fcn.1001a3af
mov ebx, eax
test ebx, ebx
je 0x1000f47b
lea eax, [ebp - 0x1664]
lea edi, [ebp - 0x26ac]
jmp 0x1000f481
mov eax, dword [ebp - 0x26b0]
push dword [ebp + 0x28]
mov ecx, dword [ebp - 0x26c0]
mov edx, edi
push dword [ebp - 0x26b8]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push eax
push dword [ebp - 0x26bc]
call fcn.1001a3af
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001c65c
leave
ret 0x28