Function at 0x4ba100
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d2019
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x2a0
mov eax, dword [0x671330]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x38], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 0x39], al
movzx ecx, byte [ebp - 0x39]
test ecx, ecx
je 0x4ba173
lea edx, [ebp + 8]
push edx
mov ecx, dword [ebp - 0x38]
add ecx, 0x114
call fcn.00431200
jmp 0x4ba45a
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x114
call fcn.00431200
call dword [sym.imp.Dbglog.dll_struct_boost::logging::level::holder_no_ts____cdecl_g_l_filter_void_]
mov dword [ebp - 0xac], eax
push 0xbb8
mov ecx, dword [ebp - 0xac]
call fcn.0040a130
mov byte [ebp - 0x3a], al
movzx ecx, byte [ebp - 0x3a]
test ecx, ecx
jne 0x4ba1b1
jmp 0x4ba235
call dword [sym.imp.Dbglog.dll_struct_boost::logging::logger_holder_struct_boost::logging::logger_format_write_struct_boost::logging::default___struct_boost::logging::default___struct_boost::logging::writer::threading::ts_write__struct_boost::logging::default___struct_boost::logging::lock_resource_finder::single_thread______cdecl_g_l_void_]
mov dword [ebp - 0xb0], eax
mov edx, dword [ebp - 0xb0]
push edx
call fcn.004048b0
add esp, 4
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.00402ad0
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x48], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x48]
call fcn.00402a30
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
call fcn.00402d20
mov dword [ebp - 0x50], eax
push 0x5ea664
mov edx, dword [ebp - 0x50]
push edx
call fcn.00409d00
add esp, 8
mov dword [ebp - 0x54], eax
push str.Failed_to_decrypt_log_db._Making_backup_and_creating_a_new_one...
mov eax, dword [ebp - 0x54]
push eax
call fcn.00409d00
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x160]
call fcn.00402a50
push 1
mov ecx, dword [ebp - 0x38]
add ecx, 0xfc
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00493f10
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x38]
add ecx, 0x40
call fcn.00416be0
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x4ba272
mov ecx, dword [ebp - 0x38]
add ecx, 0x40
call fcn.005c4700
push 0x5ea66c
mov edx, dword [ebp - 0x38]
add edx, 0x20
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.004232d0
add esp, 0xc
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 4
push 1
lea ecx, [ebp - 0x34]
call fcn.0040bfe0
push eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x20
call fcn.0040bfe0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4ba436
call dword [sym.imp.Dbglog.dll_struct_boost::logging::level::holder_no_ts____cdecl_g_l_filter_void_]
mov dword [ebp - 0x5c], eax
push 0xfa0
mov ecx, dword [ebp - 0x5c]
call fcn.0040a130
mov byte [ebp - 0x3b], al
movzx ecx, byte [ebp - 0x3b]
test ecx, ecx
jne 0x4ba2df
jmp 0x4ba436
call dword [sym.imp.Dbglog.dll_struct_boost::logging::logger_holder_struct_boost::logging::logger_format_write_struct_boost::logging::default___struct_boost::logging::default___struct_boost::logging::writer::threading::ts_write__struct_boost::logging::default___struct_boost::logging::lock_resource_finder::single_thread______cdecl_g_l_void_]
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x60]
push edx
call fcn.004048b0
add esp, 4
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x208]
push eax
mov ecx, dword [ebp - 0x64]
call fcn.00402ad0
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x6c], ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x6c]
call fcn.00402a30
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
call fcn.00402d20
mov dword [ebp - 0x74], eax
push 0x5ea718
mov edx, dword [ebp - 0x74]
push edx
call fcn.00409d00
add esp, 8
mov dword [ebp - 0x78], eax
push 0x5ea710
mov eax, dword [ebp - 0x78]
push eax
call fcn.00409d00
add esp, 8
mov dword [ebp - 0x7c], eax
push 0x5ea6dc
mov ecx, dword [ebp - 0x7c]
push ecx
call fcn.00409d00
add esp, 8
mov dword [ebp - 0x80], eax
push 0x5ea6cc
mov edx, dword [ebp - 0x80]
push edx
call fcn.00409d00
add esp, 8
mov dword [ebp - 0x84], eax
push 0x5ea688
mov eax, dword [ebp - 0x84]
push eax
call fcn.0040a4b0
add esp, 8
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x88]
push edx
call fcn.0040e860
add esp, 8
mov dword [ebp - 0x8c], eax
push 0x5ea684
mov eax, dword [ebp - 0x8c]
push eax
call fcn.0040a4b0
add esp, 8
mov dword [ebp - 0x90], eax
push 0x5ea67c
mov ecx, dword [ebp - 0x90]
push ecx
call fcn.00409d00
add esp, 8
mov dword [ebp - 0x94], eax
push 0x416260
mov ecx, dword [ebp - 0x94]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, dword [ebp - 0x98]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int_]
mov dword [ebp - 0x9c], eax
push 0x5ea678
mov edx, dword [ebp - 0x9c]
push edx
call fcn.00409d00
add esp, 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x208]
call fcn.00402a50
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx]
call eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34]
call fcn.0040a7f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00494390
jmp 0x4ba52c
mov dword [ebp - 4], 0
jmp 0x4ba53c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00418b40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00544286
mov esp, ebp
pop ebp
ret 0xc