Function at 0x5db050
Capabilities:
Move file

Disassembly:
push ebp
lea ebp, [esp - 0x7c]
sub esp, 0x7c
push 0xffffffffffffffff
push 0x6a11f8
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x729140]
xor eax, ebp
mov dword [ebp + 0x78], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x20], ebx
cmp byte [ebx + 0xe4], 0
je 0x5db095
xor al, al
jmp 0x5db306
lea esi, [ebx + 0x40]
mov ecx, esi
mov dword [ebp - 0x18], esi
call fcn.004ddfc0
test al, al
je 0x5db08e
lea ecx, [ebx + 0x58]
call fcn.004ddfc0
test al, al
je 0x5db08e
mov ecx, esi
call fcn.00405860
mov esi, eax
call fcn.00504100
push ecx
push esi
mov ecx, eax
call fcn.005041e0
test al, al
je 0x5db08e
lea ecx, [ebx + 0x58]
call fcn.00405860
mov esi, eax
call fcn.00504100
push ecx
push esi
mov ecx, eax
call fcn.005041e0
test al, al
je 0x5db08e
lea edi, [ebx + 0x70]
push str..tmp
mov edx, edi
lea ecx, [ebp + 0x48]
call fcn.00405e30
add esp, 4
mov dword [ebp - 4], 0
lea ecx, [ebp]
call fcn.004058d0
mov byte [ebp - 4], 1
lea ecx, [ebx + 0x10]
call fcn.00405860
push eax
lea ecx, [ebp + 0x48]
call fcn.00405860
push eax
lea ecx, [ebx + 0x58]
call fcn.00405860
push eax
lea eax, [ebp]
push str._m___s___s___s___h__s
push eax
call fcn.004d6990
mov eax, dword [ebx + 0xf0]
lea edx, [ebp]
mov ecx, dword [ebp - 0x18]
xor esi, esi
mov dword [ebp - 0x1c], eax
xor bl, bl
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], esi
push eax
push esi
mov dword [ebp - 0x10], esi
call fcn.004e8340
add esp, 0x1c
test al, al
je 0x5db184
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x1c]
mov ecx, esi
mov bl, 1
call fcn.004e8820
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov dword [eax + 0xe8], esi
test bl, bl
je 0x5db2e9
cmp esi, 0x2710
sete bl
jne 0x5db2e9
mov ecx, edi
mov dword [eax + 0xe8], 0
call fcn.004ddfc0
test al, al
je 0x5db1ca
push edi
lea eax, [ebp + 0x48]
push eax
call fcn.004fee30
mov bl, al
jmp 0x5db2e9
push 0xb
mov ecx, edi
call fcn.00405860
push eax
lea ecx, [ebp + 0x48]
call fcn.00405860
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExW]
push eax
call esi
test eax, eax
jne 0x5db2b8
lea ecx, [ebp + 0x18]
xor bl, bl
call fcn.004058d0
mov byte [ebp - 4], 2
lea edx, [ebp + 0x18]
lea ecx, [ebp + 0x48]
call fcn.004f8010
test al, al
movzx ebx, bl
mov ecx, 1
cmovne ebx, ecx
lea ecx, [ebp + 0x30]
call fcn.004058d0
mov byte [ebp - 4], 3
lea edx, [ebp + 0x30]
mov ecx, edi
call fcn.004f8010
test al, al
jne 0x5db231
test bl, bl
je 0x5db24b
push 0xb
lea ecx, [ebp + 0x30]
call fcn.00405860
push eax
lea ecx, [ebp + 0x18]
call fcn.00405860
push eax
call esi
test eax, eax
jne 0x5db2a0
mov ecx, edi
call fcn.004f7a10
cmp eax, 0xffffffff
je 0x5db2cf
push edi
lea ecx, [ebp + 0x60]
call fcn.00414330
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x60]
call fcn.004f7dd0
test al, al
je 0x5db2c3
lea edx, [ebp + 0x60]
mov ecx, edi
call fcn.004f7ab0
test al, al
je 0x5db2c3
mov edx, edi
lea ecx, [ebp + 0x48]
call fcn.004f7ab0
lea ecx, [ebp + 0x60]
test al, al
je 0x5db2bc
call fcn.004f7bc0
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x60]
call fcn.00405870
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x30]
call fcn.00405870
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x18]
call fcn.00405870
mov bl, 1
jmp 0x5db2e9
mov edx, edi
call fcn.004f7ab0
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x60]
call fcn.00405870
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x30]
call fcn.00405870
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x18]
call fcn.00405870
xor bl, bl
mov byte [ebp - 4], 0
lea ecx, [ebp]
call fcn.00405870
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x48]
call fcn.00405870
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x78]
xor ecx, ebp
call fcn.00634bf3
lea esp, [ebp + 0x7c]
pop ebp
ret