Function at 0x1400eb21c
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x4f80]
mov eax, 0x5080
call fcn.1401282a0
sub rsp, rax
mov rax, qword [0x14016a040]
xor rax, rsp
mov qword [rbp + 0x4f70], rax
mov esi, 0x800
lea rdx, [rbp + 0x2f70]
mov r8d, esi
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
dec eax
lea edi, [rsi - 2]
cmp eax, edi
ja 0x1400eb52a
mov r8d, esi
lea rdx, [rbp + 0x3f70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
dec eax
cmp eax, edi
ja 0x1400eb52a
lea rcx, [rbp + 0x2f70]
call fcn.1400d4b64
lea rcx, [rbp + 0x3f70]
mov r15, rax
call fcn.1400d4b64
xor r12d, r12d
mov rdi, rax
cmp word [rax], r12w
je 0x1400eb52a
mov rdx, rax
mov rcx, r15
call fcn.1400d1e98
test eax, eax
je 0x1400eb52a
mov rcx, rbx
call fcn.1400d4b64
mov rcx, rax
mov rdx, rdi
call fcn.1400d1e98
test eax, eax
jne 0x1400eb52a
movzx eax, r12w
lea r14d, [rsi - 1]
mov word [rbp + 0xf70], ax
mov edi, r12d
test ax, ax
jne 0x1400eb398
lea rdx, [rbp + 0xf70]
mov rcx, rbx
sub rcx, rdx
lea rax, [rbp + 0xf70]
mov r8, r14
movzx edx, word [rcx + rax]
test dx, dx
je 0x1400eb337
mov word [rax], dx
add rax, 2
sub r8, 1
jne 0x1400eb321
lea rcx, [rbp + 0xf70]
mov word [rax], r12w
call fcn.1400d4b64
mov rcx, rax
lea r8, str.rtmp_d
mov rdx, rsi
mov r9d, edi
call fcn.1400d473c
lea rcx, [rbp + 0xf70]
call fcn.1400ddbe8
cmp eax, 0xffffffff
je 0x1400eb379
mov eax, r12d
mov word [rbp + 0xf70], ax
jmp 0x1400eb380
movzx eax, word [rbp + 0xf70]
add edi, 0x7b
cmp edi, 0x2710
jl 0x1400eb301
test ax, ax
je 0x1400eb52a
lea rdx, [rbp + 0x1f70]
mov rcx, rbx
sub rcx, rdx
lea rax, [rbp + 0x1f70]
movzx edx, word [rcx + rax]
test dx, dx
je 0x1400eb3c2
mov word [rax], dx
add rax, 2
sub r14, 1
jne 0x1400eb3ac
lea rcx, [rbp + 0x1f70]
mov word [rax], r12w
call fcn.1400d4b64
lea rdx, [rbp + 0x1f70]
mov rcx, rax
sub rcx, rdx
mov rdx, r15
sar rcx, 1
sub rsi, rcx
mov rcx, rax
mov r8, rsi
call fcn.1400d4710
lea rdx, [rbp + 0xf70]
lea rcx, [rbp + 0x1f70]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x1400eb52a
or qword [rsp + 0x28], 0xffffffffffffffff
lea rsi, [0x140156378]
mov rcx, rbx
mov qword [rsp + 0x20], rsi
mov word [rsp + 0x5a], r12w
mov dil, r12b
mov word [rsp + 0x40], 0x100
mov byte [rsp + 0x30], r12b
mov dword [rsp + 0x34], r12d
mov word [rsp + 0x38], r12w
mov dword [rbp + 0xf5c], r12d
mov byte [rsp + 0x58], r12b
mov byte [rsp + 0x42], 1
mov word [rsp + 0x48], r12w
mov dword [rsp + 0x44], 0x100
mov dword [rsp + 0x3c], r12d
mov qword [rsp + 0x50], r12
call fcn.1400ddbe8
cmp eax, 0xffffffff
jne 0x1400eb48d
mov r8d, 0x12
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.1400dcf68
mov dil, al
lea rdx, [rbp + 0x1f70]
lea rcx, [rbp + 0xf70]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test dil, dil
je 0x1400eb4dd
lea rcx, [rsp + 0x20]
call fcn.1400dd0bc
cmp dword [rsp + 0x34], r12d
jne 0x1400eb4dd
cmp qword [rsp + 0x28], 0xffffffffffffffff
je 0x1400eb4cc
mov rax, qword [rsp + 0x20]
lea rcx, [rsp + 0x20]
call qword [rax + 0x10]
cmp byte [rsp + 0x41], r12b
je 0x1400eb4dd
lea rcx, [rsp + 0x5a]
call fcn.1400ddf18
cmp qword [rsp + 0x28], 0xffffffffffffffff
mov qword [rsp + 0x20], rsi
je 0x1400eb526
cmp byte [rsp + 0x39], r12b
jne 0x1400eb526
cmp byte [rsp + 0x40], r12b
je 0x1400eb51c
cmp dword [rsp + 0x34], r12d
jne 0x1400eb526
lea rcx, [rsp + 0x20]
call fcn.1400dd0bc
cmp byte [rsp + 0x41], r12b
je 0x1400eb526
lea rcx, [rsp + 0x5a]
call fcn.1400ddf18
jmp 0x1400eb526
lea rcx, [rsp + 0x20]
call fcn.1400dd0bc
mov al, 1
jmp 0x1400eb52c
xor al, al
mov rcx, qword [rbp + 0x4f70]
xor rcx, rsp
call fcn.1400f44c0
lea r11, [rsp + 0x5080]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret