Function at 0x1003f305
Capabilities:
Move file
Set file attributes

Disassembly:
mov eax, 0x100d9b31
call fcn.100ac440
sub esp, 0x274
mov eax, dword [0x1011c710]
push esi
xor eax, ebp
push edi
mov dword [ebp - 0x10], eax
mov esi, ecx
call fcn.100c6d12
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
and dword [ebp - 4], 0
lea edi, [esi + 0xc0]
push 0x5c
mov ecx, edi
call fcn.10003e18
cmp eax, 0xffffffff
jle 0x1003f389
mov ecx, dword [edi]
mov ecx, dword [ecx - 0xc]
sub ecx, eax
dec ecx
push ecx
lea eax, [ebp - 0x27c]
push eax
mov ecx, edi
call fcn.10008b05
push eax
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 1
call fcn.10001eb6
mov ecx, dword [ebp - 0x27c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0
call fcn.10001199
mov eax, dword [esi + 0xd4]
push 0
push eax
call fcn.100927bd
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x26c], eax
jne 0x1003f3ab
or esi, 0xffffffff
jmp 0x1003f5c0
push ebx
lea ebx, [esi + 0xd8]
push ebx
lea ecx, [ebp - 0x274]
call fcn.1000174b
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
mov byte [ebp - 4], 2
je 0x1003f407
mov eax, dword [ebp - 0x274]
mov eax, dword [eax - 0xc]
dec eax
push eax
lea ecx, [ebp - 0x274]
call fcn.10020bb8
cmp al, 0x5c
je 0x1003f3f4
push 0x100e2ac4
lea ecx, [ebp - 0x274]
call fcn.10007475
push dword [ebp - 0x274]
push dword [ebp - 0x26c]
call fcn.10090d37
pop ecx
pop ecx
mov ebx, dword [ebp - 0x26c]
lea eax, [ebp - 0x13c]
push eax
push 0xffffffffffffffff
push ebx
call fcn.10090cf8
add esp, 0xc
test eax, eax
jne 0x1003f433
mov eax, dword [ebp - 0x13c]
test eax, eax
mov dword [ebp - 0x280], eax
jg 0x1003f453
push ebx
call fcn.10090d66
test al, al
pop ecx
push ebx
je 0x1003f446
call fcn.10092825
jmp 0x1003f44b
call fcn.10092fef
or esi, 0xffffffff
jmp 0x1003f5b0
and dword [ebp - 0x278], 0
test eax, eax
jle 0x1003f58c
mov ebx, str.everyone
lea eax, [ebp - 0x268]
push eax
push dword [ebp - 0x278]
push dword [ebp - 0x26c]
call fcn.10090cf8
add esp, 0xc
test eax, eax
jne 0x1003f569
push eax
lea ecx, [ebp - 0x274]
call fcn.1000192d
mov ecx, dword [esi + 0x7c]
push 0x10000000
push ebx
push eax
call fcn.1006df5a
push 0
mov ecx, edi
call fcn.1000192d
mov ecx, dword [esi + 0x7c]
push 0x10000000
push ebx
push eax
call fcn.1006df5a
mov eax, dword [edi]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push dword [ebp - 0x270]
push dword [ebp - 0x278]
push dword [ebp - 0x26c]
call fcn.1009280c
add esp, 0xc
test eax, eax
je 0x1003f54f
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x27c]
call fcn.1000174b
push str..bak
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 3
call fcn.10007475
push 1
push dword [ebp - 0x27c]
push dword [ebp - 0x270]
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push dword [ebp - 0x270]
push dword [ebp - 0x278]
push dword [ebp - 0x26c]
call fcn.1009280c
mov ecx, dword [ebp - 0x27c]
add esp, 0xc
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.10001199
inc dword [ebp - 0x278]
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x280]
jl 0x1003f467
jmp 0x1003f58c
push dword [ebp - 0x26c]
call fcn.10090d66
test al, al
pop ecx
push dword [ebp - 0x26c]
je 0x1003f586
call fcn.10092825
jmp 0x1003f58b
call fcn.10092fef
pop ecx
push dword [ebp - 0x26c]
call fcn.10090d66
test al, al
pop ecx
push dword [ebp - 0x26c]
je 0x1003f5a9
call fcn.10092825
jmp 0x1003f5ae
call fcn.10092fef
xor esi, esi
pop ecx
mov ecx, dword [ebp - 0x274]
add ecx, 0xfffffff0
call fcn.10001199
pop ebx
mov ecx, dword [ebp - 0x270]
add ecx, 0xfffffff0
call fcn.10001199
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
mov eax, esi
xor ecx, ebp
pop esi
call fcn.100ac33f
leave
ret