Function at 0x651c40
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x857060]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0xc]
mov eax, esi
push edi
mov edi, dword [ebp + 8]
cmp dword [esi + 0x14], 8
jb 0x651c66
mov eax, dword [esi]
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x651c70
mov ecx, dword [edi]
push 9
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
setne cl
test eax, eax
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 9], cl
jne 0x651f61
cmp byte [ebp + 0x10], 0
je 0x651f61
call eax
cmp eax, 5
jne 0x651f59
test ebx, ebx
je 0x651cd4
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x651cb2
mov edx, dword [esi]
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x651cbc
mov ecx, dword [edi]
mov eax, dword [ebx]
push edx
push ecx
push str.Failed_to_rename_path__s_to__s._Trying_to_set_administrative_permissions.
push 0x799430
push 0x799430
push 0x1e
push ebx
jmp 0x651d50
mov edx, dword [0x87d0dc]
test edx, edx
je 0x651d16
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x651ce8
mov ecx, dword [esi]
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x651cf2
mov eax, dword [edi]
push ecx
push eax
push str.Failed_to_rename_path__s_to__s._Trying_to_set_administrative_permissions.
push 0x799430
push 0x799430
push 0x799430
push str.OOBEUtils
push 0x1e
call edx
add esp, 0x20
jmp 0x651d56
mov ecx, dword [0x87d0e0]
test ecx, ecx
je 0x651d56
cmp dword [esi + 0x14], 8
mov dword [ebp - 0x10], esi
jb 0x651d2e
mov eax, dword [esi]
mov dword [ebp - 0x10], eax
cmp dword [edi + 0x14], 8
mov edx, edi
jb 0x651d38
mov edx, dword [edi]
push dword [ebp - 0x10]
mov eax, dword [ecx]
push edx
push str.Failed_to_rename_path__s_to__s._Trying_to_set_administrative_permissions.
push 0x799430
push 0x799430
push 0x1e
push ecx
call dword [eax + 0x34]
add esp, 0x1c
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x10], edi
jb 0x651d64
mov eax, dword [edi]
mov dword [ebp - 0x10], eax
push 0x44
push 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 8], 0x44
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x651e75
lea ecx, [ebp - 8]
push ecx
push eax
push 0
push 0x1a
call dword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
test eax, eax
je 0x651daf
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push eax
sub esp, 0x14
push dword [ebp - 0x14]
call fcn.0054f900
add esp, 0x1c
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x18], 0
jne 0x651e75
test ebx, ebx
je 0x651de7
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x651dd0
mov ecx, dword [edi]
mov eax, dword [ebx]
push ecx
push str.Trying_to_back_up_folder__s_after_setting_permissions
push str.FileUtils
push 0x799430
push 0x1e
push ebx
jmp 0x651e47
mov ecx, dword [0x87d0dc]
test ecx, ecx
je 0x651e1e
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x651dfb
mov eax, dword [edi]
push eax
push str.Trying_to_back_up_folder__s_after_setting_permissions
push 0x799430
push 0x799430
push str.FileUtils
push str.OOBEUtils
push 0x1e
call ecx
add esp, 0x1c
jmp 0x651e4d
mov ecx, dword [0x87d0e0]
test ecx, ecx
je 0x651e4d
cmp dword [edi + 0x14], 8
mov edx, edi
jb 0x651e32
mov edx, dword [edi]
mov eax, dword [ecx]
push edx
push str.Trying_to_back_up_folder__s_after_setting_permissions
push str.FileUtils
push 0x799430
push 0x1e
push ecx
call dword [eax + 0x34]
add esp, 0x18
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x651e57
mov ecx, dword [esi]
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x651e61
mov eax, dword [edi]
push 9
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
setne cl
jmp 0x651f5c
test ebx, ebx
je 0x651eb7
cmp dword [edi + 0x14], 8
jb 0x651e81
mov edi, dword [edi]
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebx]
call eax
push eax
push edi
push str.Failed_to_set_permissions_for_path__s._LastError:__d
push str.FileUtils
push 0x799430
push 0x32
push ebx
call dword [esi + 0x34]
add esp, 0x1c
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret
cmp dword [0x87d0dc], 0
je 0x651f08
cmp dword [edi + 0x14], 8
jb 0x651ec8
mov edi, dword [edi]
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
push eax
push edi
push str.Failed_to_set_permissions_for_path__s._LastError:__d
push 0x799430
push 0x799430
push str.FileUtils
push str.OOBEUtils
push 0x32
call dword [0x87d0dc]
add esp, 0x20
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret
mov esi, dword [0x87d0e0]
test esi, esi
je 0x652037
cmp dword [edi + 0x14], 8
jb 0x651f1e
mov edi, dword [edi]
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [esi]
call eax
push eax
push edi
push str.Failed_to_set_permissions_for_path__s._LastError:__d
push str.FileUtils
push 0x799430
push 0x32
push dword [0x87d0e0]
call dword [esi + 0x34]
add esp, 0x1c
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret
mov cl, byte [ebp - 9]
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
test cl, cl
jne 0x65204a
call eax
mov edx, eax
test ebx, ebx
je 0x651fb1
cmp dword [esi + 0x14], 8
jb 0x651f79
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x651f81
mov edi, dword [edi]
mov eax, dword [ebx]
push edx
push esi
push edi
push str.Failed_to_rename_path__s_to__s._LastError:__d
push str.FileUtils
push 0x799430
push 0x32
push ebx
call dword [eax + 0x34]
add esp, 0x20
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret
mov eax, dword [0x87d0dc]
test eax, eax
je 0x652000
cmp dword [esi + 0x14], 8
jb 0x651fc2
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x651fca
mov edi, dword [edi]
push edx
push esi
push edi
push str.Failed_to_rename_path__s_to__s._LastError:__d
push 0x799430
push 0x799430
push str.FileUtils
push str.OOBEUtils
push 0x32
call eax
add esp, 0x24
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x87d0e0]
test ecx, ecx
je 0x652037
cmp dword [esi + 0x14], 8
jb 0x652012
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x65201a
mov edi, dword [edi]
mov eax, dword [ecx]
push edx
push esi
push edi
push str.Failed_to_rename_path__s_to__s._LastError:__d
push str.FileUtils
push 0x799430
push 0x32
push ecx
call dword [eax + 0x34]
add esp, 0x20
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006d0965
mov esp, ebp
pop ebp
ret