Function at 0x5014bc
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x160
add ax, word [ebp - 0x6a]
mov eax, eax
mov dword [ebp - 0x144], ecx
call sub.KERNEL32.dll_MoveFileW
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x15c], ah
add dword [ebp - 0x79], ecx
mov ecx, 0x53db
mov ecx, edx
test dword [0x57bbe4], eax
je 0x501518
movzx edx, dh
mov dword [ebp - 0x11f], edx
mov cx, dx
mov eax, edx
mov eax, eax
mov eax, dword [ebp - 0x79]
and eax, eax
mov dword [ebp - 0xee], eax
mov dword [ebp - 0xe0], eax
add ecx, 0x42f8
sub edx, eax
mov edx, 0xa37d
sub edx, dword [ebp - 0x88]
lea eax, [ebp - 0x118]
mov edx, ecx
mov eax, dword [ebp - 0x1d]
add edx, dword [ebp - 0x111]
movzx edx, byte [ebp - 0x132]
cmp eax, 0x5a3d247f
js 0x501555
mov dword [ebp - 0x112], edx
add eax, 0x932a
lea eax, [ebp - 0xce]
mov edx, ecx
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0xd7], ecx
test dword [0x57b50d], eax
js 0x50156b
mov dword [ebp - 0x156], eax
mov eax, ecx
mov edx, dword [ebp - 0x10]
cmp eax, dword [0x57c322]
jb 0x5015a0
mov eax, dword [ebp - 0x127]
mov edx, eax
lea eax, [ebp - 0xc1]
add ecx, dword [0x57be52]
and ecx, eax
mov dword [ebp - 0x22], edx
movzx eax, al
mov dword [ebp - 0x158], edx
movzx ecx, byte [ebp - 0xab]
xor byte [ebp - 0x58], al
cmp eax, dword [0x57b07b]
je 0x5015bd
mov edx, ecx
mov ecx, 0xf36
sub ecx, ecx
mov edx, ecx
cmp eax, 0x1808e21a
jne 0x5015d4
mov dword [ebp - 0x21], ecx
mov eax, dword [ebp - 0x13]
mov eax, ecx
lea edx, [0x57be20]
mov eax, edx
mov al, byte [ebp - 0x153]
and dword [ebp - 0x126], ecx
lea edx, [ebp - 0x92]
add ecx, ecx
mov ecx, dword [ebp - 0x73]
test ecx, 0xe5f4d313
jno 0x501623
mov eax, dword [ebp - 0xc4]
and eax, edx
lea edx, [ebp - 0xa5]
sub edx, ecx
add ecx, dword [ebp - 0xd7]
mov dword [ebp - 0xf1], ecx
mov edx, dword [ebp - 0x102]
xor dword [ebp - 0x7c], edx
mov dword [ebp - 0x155], edx
mov ecx, eax
mov dword [ebp - 0x2d], eax
cmp edx, edx
je 0x501627
mov dword [ebp - 0x3b], ecx
mov ecx, eax
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xe0], eax
cmp eax, 0x74bea45
je 0x501667
add eax, 0x1e1c
mov byte [ebp - 0x10e], dl
mov ecx, eax
add dword [ebp - 0x5b], edx
add ecx, dword [ebp - 0x12]
mov dword [ebp - 0x58], edx
mov ecx, edx
mov dword [ebp - 0x14f], edx
add ecx, ecx
xor edx, dword [ebp - 0x124]
sub ecx, eax
mov edx, ecx
mov edx, 0x271f
mov edx, 0x3de4
mov eax, dword [ebp - 0x96]
mov ecx, dword [ebp - 0x5a]
mov eax, ecx
sub ax, ax
sub edx, edx
xor ecx, eax
mov ecx, edx
lea edx, [ebp - 0xef]
call sub.KERNEL32.dll_GetProcessTimes
movzx edx, cl
mov dword [ebp - 0x6d], eax
mov ecx, dword [ebp - 0x37]
sub ecx, dword [ebp - 0xb9]
mov dword [ebp - 0x7f], ecx
or ecx, dword [0x57b54b]
mov dword [ebp - 0xbd], ecx
mov dword [ebp - 0x51], edx
test dword [0x57bf1d], edx
jne 0x5016df
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0x103], ecx
or eax, dword [ebp - 0x114]
or eax, ecx
mov eax, 0x854b
mov ecx, ecx
mov eax, 0x1975
test dword [0x57bb3a], edx
jns 0x501712
and edx, 0x509d
mov edx, dword [ebp - 0xd4]
or eax, dword [ebp - 0x84]
mov ecx, dword [0x57b913]
mov ecx, edx
mov edx, dword [ebp - 0x131]
mov dword [ebp - 0x46], edx
mov edx, dword [ebp - 0x5d]
movzx eax, al
lea edx, [ebp - 0x12c]
mov ecx, eax
cmp edx, 0xec7dcc98
je 0x501738
movzx ecx, dx
test dword [0x57b854], eax
je 0x501736
and eax, dword [ebp - 0xe8]
mov eax, eax
add dword [ebp - 0x137], edx
cmp ecx, 0x67b3b230
je 0x50176f
mov edx, dword [ebp - 0xce]
add dword [ebp - 0x81], ecx
mov edx, dword [0x57bdaf]
mov eax, dword [ebp - 0x159]
mov dword [ebp - 0x55], ecx
mov cl, 0x6e
add edx, 0xcdd3
sub edx, 0x375d
add ecx, dword [ebp - 0x5a]
mov dword [ebp - 0xb1], ecx
mov dword [ebp - 0x40], edx
add cx, word [ebp - 0x48]
mov word [0x57beed], dx
cmp eax, 0x598d8115
jo 0x5017ec
mov word [ebp - 0x3e], ax
mov edx, dword [ebp - 0x49]
sub ecx, dword [ebp - 0x82]
mov dword [ebp - 0x29], eax
add dword [ebp - 0x48], ecx
mov dword [ebp - 0xf4], edx
movzx edx, dl
add edx, ecx
xor ecx, edx
call fcn.0050187c
sub dword [ebp - 0x42], eax
xor dword [ebp - 0x111], eax
mov eax, dword [ebp - 0x94]
and edx, 0x6fa0
add cx, word [ebp - 0x45]
and dword [ebp - 0x159], ecx
mov dword [ebp - 0x122], eax
sub edx, dword [ebp - 0x133]
sub dword [ebp - 0xc4], ecx
mov dword [ebp - 0x31], edx
mov dword [ebp - 0x14f], ecx
mov ah, al
mov dword [ebp - 0x15], edx
add eax, dword [ebp - 0x88]
mov ah, ch
and ecx, eax
and cx, cx
xor ecx, dword [ebp - 0x54]
mov dword [0x57c07b], edx
mov dword [ebp - 0x12a], eax
cmp eax, 0xb51c1ca
jmp 0x501818
add edx, 0x80d6
mov edx, 0x84f3
or edx, eax
mov edx, dword [ebp - 0x99]
cmp edx, edx
je 0x50182f
cmp edx, dword [0x57bcf3]
je 0x50184c
movzx ecx, byte [0x57c1c7]
xor eax, eax
sub edx, 0xb966
mov dword [ebp - 0x92], edx
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x68], edx
sub eax, 0x3896
mov dword [ebp - 0x153], eax
mov edx, 0xc5d2
and eax, dword [0x57bf81]
mov eax, dword [ebp - 0x119]
mov dword [ebp - 0x43], edx
mov dword [ebp - 0xa2], ecx
leave
ret