Function at 0x11dc6230
Capabilities:
Move file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x11fb5626
push eax
mov eax, dword [esp + 0x18]
mov dword fs:[0], esp
sub esp, 0x418
push ebx
xor ebx, ebx
push ebp
push esi
cmp eax, ebx
push edi
je 0x11dc6399
mov ecx, 0x1212b318
call fcn.11de9ff0
lea ecx, [esp + 0x10]
xor esi, esi
call fcn.11e923e0
mov ebp, dword [esp + 0x43c]
lea eax, [esp + 0x10]
push ebx
push eax
push ebp
mov ecx, 0x1212b5c0
mov dword [esp + 0x43c], ebx
call fcn.11d70140
test eax, eax
je 0x11dc62ad
lea ecx, [esp + 0x10]
call fcn.11e925e0
test eax, eax
jbe 0x11dc62ad
lea ecx, [esp + 0x10]
call fcn.11e92ce0
mov esi, eax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a]
mov word [esp + 0x18], bx
rep stosd dword es:[edi], eax
push 0xffff4501
mov dword [esp + 0x18], 0x11fcadb8
stosw word es:[edi], ax
call fcn.11ee5c40
mov edx, dword [esp + 0x43c]
push ebx
push 1
lea ecx, [esp + 0x24]
push ebx
push ecx
push 2
push ebx
push esi
push 1
push ebp
push edx
mov byte [esp + 0x45c], 1
call fcn.11ee4550
mov esi, eax
push ebx
neg esi
sbb esi, esi
mov byte [esp + 0x460], bl
inc esi
call fcn.11ee5c40
add esp, 0x30
cmp esi, ebx
je 0x11dc637d
lea eax, [esp + 0x18]
push eax
call fcn.11e67d05
add esp, 4
test eax, eax
jbe 0x11dc637d
lea ecx, [esp + 0x18]
push ecx
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
je 0x11dc637d
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x222]
mov word [esp + 0x220], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x220]
push edx
push 0x120afdc8
push ebp
stosw word es:[edi], ax
call fcn.11dc64e0
add esp, 0xc
test eax, eax
je 0x11dc637d
lea eax, [esp + 0x220]
lea ecx, [esp + 0x18]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [esp + 0x10]
mov dword [esp + 0x430], 0xffffffff
call fcn.11e92540
cmp esi, ebx
jne 0x11dc64b6
mov esi, dword [esp + 0x448]
cmp esi, ebx
je 0x11dc6488
push esi
call fcn.11e67d05
add esp, 4
test eax, eax
jbe 0x11dc6488
mov edx, dword [esp + 0x438]
push edx
call fcn.11dbbda0
mov ebp, eax
add esp, 4
cmp ebp, ebx
je 0x11dc6488
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a]
mov word [esp + 0x18], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x103
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.11e674bf
lea ecx, [esp + 0x24]
push ecx
call fcn.11e67d05
mov esi, eax
mov eax, 0x5c
add esp, 0x10
cmp word [esp + esi*2 + 0x16], ax
lea edi, [esp + esi*2 + 0x18]
je 0x11dc641a
mov word [edi - 2], ax
lea edx, [esp + 0x18]
push ebp
push edx
call fcn.11e67470
mov ecx, dword [esp + 0x440]
add esp, 8
lea eax, [esp + 0x18]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, ebx
je 0x11dc6488
mov ebp, dword [esp + 0x444]
push ebp
call fcn.11dbbda0
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x11dc64b6
mov ecx, 0x104
xor eax, eax
sub ecx, esi
push edx
mov esi, ecx
lea edx, [esp + 0x1c]
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
push edx
and ecx, 3
rep stosb byte es:[edi], al
call fcn.11e67470
add esp, 8
lea eax, [esp + 0x18]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x11dc64b6
mov ecx, dword [esp + 0x438]
push str.Backup_
push ecx
mov ecx, 0x1212b028
call fcn.11ce50b0
push str.Backup_
mov ecx, 0x1212b028
mov edx, dword [esp + 0x448]
push edx
call fcn.11ce50b0
mov ecx, dword [esp + 0x428]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x424
ret 0x14