Function at 0x1000f458
Capabilities:
Move file

Disassembly:
push 0x2c
mov eax, 0x1005c828
call fcn.1003230f
mov edi, ecx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x18], esi
call fcn.10023c2a
test eax, eax
je 0x1000f4b1
mov ebx, 0x384
push ebx
call fcn.10023c32
pop ecx
test eax, eax
je 0x1000f4b1
push str.DoSnapShot
push ebx
call fcn.100248d5
pop ecx
pop ecx
cmp eax, 2
jne 0x1000f4b1
push dword [0x1007b714]
push dword [0x1007b710]
push ebx
call fcn.10023c3b
add esp, 0xc
cmp dword [edi + 0x12c], esi
jne 0x1000f4c8
mov ecx, edi
call fcn.1000ed65
cmp eax, esi
jl 0x1000f6bc
lea eax, [ebp - 0x20]
push eax
call fcn.10031e3f
pop ecx
mov dword [ebp - 0x20], eax
push esi
lea eax, [ebp - 0x20]
push eax
xor eax, eax
cmp byte [ebp + 8], al
mov ecx, edi
setne al
mov dword [ebp - 0x1c], edx
inc eax
inc eax
push eax
call fcn.1000e62f
push esi
lea eax, [ebp - 0x20]
push eax
push 4
mov ecx, edi
call fcn.1000e62f
lea eax, [ebp - 0x10]
push eax
push str.RapidSnapshotCount
push 0x10062664
mov ecx, edi
call fcn.1000cfb6
lea eax, [ebp - 0x14]
push eax
push str.TimerSnapshotCount
push 0x10062644
mov ecx, edi
call fcn.1000cfb6
lea eax, [ebp - 0x18]
push eax
push 0x100626ac
mov ebx, 0x100626a0
push ebx
mov ecx, edi
call fcn.1000cfb6
lea esi, [edi + 0x54]
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.1000e11a
jmp 0x1000f57d
lea ecx, [ebp - 0x28]
call fcn.1000ca49
cmp dword [eax + 4], 0
je 0x1000f575
lea ecx, [ebp - 0x28]
call fcn.1000ca49
push dword [ebp - 0x1c]
mov ecx, dword [eax + 4]
push dword [ebp - 0x20]
call fcn.1002d0ab
lea ecx, [ebp - 0x28]
call fcn.1000ca78
mov eax, dword [esi + 0x18]
push esi
push eax
lea ecx, [ebp - 0x30]
call fcn.1000e11a
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x28]
call fcn.1000c7e8
test al, al
je 0x1000f551
cmp byte [ebp + 8], 0
je 0x1000f5a5
inc dword [ebp - 0x10]
jmp 0x1000f5a8
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
lea esi, [eax + ecx]
push str.Pump.log
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
call fcn.1000c727
and dword [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.100013fb
push esi
lea eax, [ebp - 0x30]
push str.Pump__d.log
push eax
mov byte [ebp - 4], 1
call fcn.10001266
add esp, 0xc
push dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
push eax
mov ecx, edi
call fcn.1000c727
push dword [ebp - 0x24]
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea ecx, [ebp - 0x28]
call fcn.10001636
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0
call fcn.10001636
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.10001636
cmp byte [ebp + 8], 0
mov ecx, edi
je 0x1000f634
push dword [ebp - 0x10]
push str.RapidSnapshotCount
push 0x10062664
jmp 0x1000f641
push dword [ebp - 0x14]
push str.TimerSnapshotCount
push 0x10062644
call fcn.1000d346
push esi
push str.SnapshotCount
push 0x10062684
mov ecx, edi
call fcn.1000d346
inc dword [ebp - 0x18]
push dword [ebp - 0x18]
mov ecx, edi
push 0x100626ac
push ebx
call fcn.1000d346
lea esi, [edi + 0x78]
mov eax, dword [esi + 0x18]
push esi
push dword [eax]
lea ecx, [ebp - 0x28]
call fcn.1000e87a
push esi
push dword [esi + 0x18]
jmp 0x1000f6a2
lea ecx, [ebp - 0x28]
call fcn.1000cac7
mov eax, dword [eax + 8]
push 0
mov ecx, eax
call fcn.1000f458
lea ecx, [ebp - 0x28]
call fcn.1000caf6
push esi
push dword [esi + 0x18]
lea ecx, [ebp - 0x30]
call fcn.1000e87a
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x28]
call fcn.1000c898
test al, al
je 0x1000f682
xor eax, eax
call fcn.100323e7
ret 4