Function at 0x14004b0e0
Capabilities:
Move file

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7b8]
sub rsp, 0x8b8
mov qword [rbp - 0x78], 0xfffffffffffffffe
mov r12, r8
mov r14, rdx
mov rdi, rcx
mov dword [rcx + 0x18], 0
mov rdx, qword [rdx + 8]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
mov rdx, qword [r14 + 8]
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rcx, [rbp - 0x70]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov rdx, rax
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rax, vtable.CSABString.0
mov qword [rsp + 0x70], rax
lea rax, [rbp - 0x70]
mov r15, 0xffffffffffffffff
mov r13, r15
inc r13
cmp byte [rax + r13], 0
jne 0x14004b184
mov dword [rbp - 0x80], r13d
lea eax, [r13 + 1]
mov ebx, eax
mov ecx, eax
call fcn.140247068
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14004b1b8
mov r8d, ebx
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.1402496a0
mov dword [rbp - 0x7c], 1
mov dword [rsp + 0x38], 0
cmp dword [rbp + 0x818], 0
jbe 0x14004b84c
nop dword [rax]
nop dword [rax + rax]
lea r12, vtable.CSABString.0
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov dword [rsp + 0x50], ebx
lea ecx, [rbx + 0x10]
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov dword [rsp + 0x54], 1
mov rcx, qword [r14 + 8]
call qword [sym.imp.SHLWAPI.dll_PathGetDriveNumberA]
cmp eax, 0xffffffff
jne 0x14004b296
add rdi, 0xc
test rsi, rsi
je 0x14004b238
mov rcx, rsi
call fcn.140247060
mov qword [rsp + 0x48], rbx
test rdi, rdi
je 0x14004b277
mov rbx, r15
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14004b240
mov dword [rsp + 0x50], ebx
lea eax, [rbx + 1]
mov r14d, eax
mov ecx, eax
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14004b296
mov r8d, r14d
mov rdx, rdi
mov rcx, rax
call fcn.1402496a0
jmp 0x14004b296
xor ebx, ebx
mov dword [rsp + 0x50], ebx
lea ecx, [rbx + 0x10]
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsp + 0x20], r12
lea rax, [rbp + 0x3a0]
mov rdi, r15
inc rdi
cmp byte [rax + rdi], 0
jne 0x14004b2a5
mov dword [rsp + 0x30], edi
lea eax, [rdi + 1]
mov r12d, eax
mov ecx, eax
call fcn.140247068
mov r15, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b2de
mov r8d, r12d
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call fcn.1402496a0
mov dword [rsp + 0x34], 1
lea ecx, [rbx + 1]
add ecx, edi
call fcn.140247068
mov r14, rax
test rsi, rsi
je 0x14004b31e
mov rcx, rsi
mov rdx, rax
sub rdx, rsi
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004b301
mov rcx, rsi
call fcn.140247060
mov qword [rsp + 0x48], r14
jmp 0x14004b323
mov qword [rsp + 0x48], rax
test r14, r14
je 0x14004b34e
mov ecx, ebx
add rcx, r14
mov r8, r12
mov rdx, r15
call fcn.1402496a0
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [r14 + rbx], 0
jne 0x14004b340
mov dword [rsp + 0x50], ebx
test r15, r15
je 0x14004b35b
mov rcx, r15
call fcn.140247060
lea r15, vtable.CSABString.0
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x30], 1
mov ecx, 2
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b390
movzx ecx, word [0x140287e84]
mov word [rax], cx
mov dword [rsp + 0x34], 1
lea ecx, [rbx + 2]
call fcn.140247068
mov rdi, rax
test r14, r14
je 0x14004b3ce
mov rcx, r14
mov rdx, rax
sub rdx, r14
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004b3b1
mov rcx, r14
call fcn.140247060
mov qword [rsp + 0x48], rdi
jmp 0x14004b3d3
mov qword [rsp + 0x48], rax
test rdi, rdi
je 0x14004b3fd
mov edx, ebx
movzx ecx, word [rsi]
mov word [rdx + rdi], cx
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14004b3f0
mov dword [rsp + 0x50], ebx
test rsi, rsi
je 0x14004b40a
mov rcx, rsi
call fcn.140247060
lea ecx, [rbx + 1]
add ecx, r13d
call fcn.140247068
mov r12, rax
test rdi, rdi
je 0x14004b44d
mov rcx, rdi
mov rdx, rax
sub rdx, rdi
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004b430
mov rcx, rdi
call fcn.140247060
mov qword [rsp + 0x48], r12
jmp 0x14004b452
mov qword [rsp + 0x48], rax
test r12, r12
je 0x14004b484
lea r8d, [r13 + 1]
mov ecx, ebx
add rcx, r12
mov rdx, qword [rsp + 0x78]
call fcn.1402496a0
mov r13, 0xffffffffffffffff
mov rax, r13
inc rax
cmp byte [r12 + rax], 0
jne 0x14004b474
mov dword [rsp + 0x50], eax
jmp 0x14004b48b
mov r13, 0xffffffffffffffff
mov rcx, qword [rbp + 0x820]
mov rax, qword [rcx]
mov r9d, 0x410
lea r8, [rbp - 0x70]
mov edx, dword [rsp + 0x38]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x58], r15
xor ebx, ebx
mov dword [rsp + 0x68], ebx
lea ecx, [rbx + 0x10]
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x60], rax
xor eax, eax
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov dword [rsp + 0x6c], 1
mov rcx, qword [rbp + 0x808]
mov rcx, qword [rcx + 8]
call qword [sym.imp.SHLWAPI.dll_PathGetDriveNumberA]
cmp eax, 0xffffffff
jne 0x14004b566
mov rdi, qword [rbp + 0x800]
add rdi, 0xc
test rsi, rsi
je 0x14004b505
mov rcx, rsi
call fcn.140247060
mov qword [rsp + 0x60], rbx
test rdi, rdi
je 0x14004b547
mov rbx, r13
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14004b510
mov dword [rsp + 0x68], ebx
lea eax, [rbx + 1]
mov r14d, eax
mov ecx, eax
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14004b566
mov r8d, r14d
mov rdx, rdi
mov rcx, rax
call fcn.1402496a0
jmp 0x14004b566
xor ebx, ebx
mov dword [rsp + 0x68], ebx
lea ecx, [rbx + 0x10]
call fcn.140247068
mov rsi, rax
mov qword [rsp + 0x60], rax
xor eax, eax
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsp + 0x20], r15
lea rax, [rbp + 0x3a0]
mov rdi, r13
inc rdi
cmp byte [rax + rdi], 0
jne 0x14004b575
mov dword [rsp + 0x30], edi
lea eax, [rdi + 1]
mov r15d, eax
mov ecx, eax
call fcn.140247068
mov r14, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b5ae
mov r8d, r15d
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call fcn.1402496a0
mov dword [rsp + 0x34], 1
lea ecx, [rdi + 1]
add ecx, ebx
call fcn.140247068
mov rdi, rax
test rsi, rsi
je 0x14004b5ee
mov rcx, rsi
mov rdx, rax
sub rdx, rsi
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004b5d1
mov rcx, rsi
call fcn.140247060
mov qword [rsp + 0x60], rdi
jmp 0x14004b5f3
mov qword [rsp + 0x60], rax
test rdi, rdi
je 0x14004b61d
mov ecx, ebx
add rcx, rdi
mov r8, r15
mov rdx, r14
call fcn.1402496a0
mov rbx, r13
nop dword [rax + rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14004b610
mov dword [rsp + 0x68], ebx
test r14, r14
je 0x14004b62a
mov rcx, r14
call fcn.140247060
lea r15, vtable.CSABString.0
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x30], 1
mov ecx, 2
call fcn.140247068
mov r14, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b65f
movzx ecx, word [0x140287e84]
mov word [rax], cx
mov dword [rsp + 0x34], 1
lea ecx, [rbx + 2]
call fcn.140247068
mov rsi, rax
test rdi, rdi
je 0x14004b69d
mov rcx, rdi
mov rdx, rax
sub rdx, rdi
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004b680
mov rcx, rdi
call fcn.140247060
mov qword [rsp + 0x60], rsi
jmp 0x14004b6a2
mov qword [rsp + 0x60], rax
test rsi, rsi
je 0x14004b6c1
mov edx, ebx
movzx ecx, word [r14]
mov word [rdx + rsi], cx
mov rbx, r13
inc rbx
cmp byte [rsi + rbx], 0
jne 0x14004b6b4
mov dword [rsp + 0x68], ebx
test r14, r14
je 0x14004b6ce
mov rcx, r14
call fcn.140247060
mov qword [rsp + 0x20], r15
lea rax, [rbp - 0x70]
mov rdi, r13
nop word [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14004b6e0
mov dword [rsp + 0x30], edi
lea eax, [rdi + 1]
mov r15d, eax
mov ecx, eax
call fcn.140247068
mov r14, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b716
mov r8d, r15d
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.1402496a0
mov dword [rsp + 0x34], 1
lea ecx, [rdi + 1]
add ecx, ebx
call fcn.140247068
mov rdi, rax
test rsi, rsi
je 0x14004b75d
mov rcx, rsi
mov rdx, rax
sub rdx, rsi
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004b740
mov rcx, rsi
call fcn.140247060
mov qword [rsp + 0x60], rdi
jmp 0x14004b762
mov qword [rsp + 0x60], rax
test rdi, rdi
je 0x14004b790
mov ecx, ebx
add rcx, rdi
mov r8, r15
mov rdx, r14
call fcn.1402496a0
mov r15, 0xffffffffffffffff
mov rax, r15
inc rax
cmp byte [rdi + rax], 0
jne 0x14004b781
mov dword [rsp + 0x68], eax
jmp 0x14004b797
mov r15, 0xffffffffffffffff
test r14, r14
je 0x14004b7a4
mov rcx, r14
call fcn.140247060
mov rdx, rdi
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_MoveFileA]
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14004b7cb
mov rcx, rax
call fcn.140247060
mov qword [rsp + 0x78], 0
lea rcx, [rbp - 0x70]
mov rax, r15
inc rax
cmp byte [rcx + rax], 0
jne 0x14004b7d2
mov r13d, eax
mov dword [rbp - 0x80], eax
inc eax
mov ebx, eax
mov ecx, eax
call fcn.140247068
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14004b806
mov r8d, ebx
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.1402496a0
nop
test rdi, rdi
je 0x14004b814
mov rcx, rdi
call fcn.140247060
nop
test r12, r12
je 0x14004b821
mov rcx, r12
call fcn.140247060
mov edi, dword [rsp + 0x38]
inc edi
mov dword [rsp + 0x38], edi
cmp edi, dword [rbp + 0x818]
mov rdi, qword [rbp + 0x800]
mov r14, qword [rbp + 0x808]
jb 0x14004b1e0
mov r12, qword [rbp + 0x810]
mov rcx, qword [r14 + 8]
call qword [sym.imp.SHLWAPI.dll_PathGetDriveNumberA]
cmp eax, 0xffffffff
jne 0x14004b867
lea rdx, [rdi + 0xc]
mov rcx, r12
call fcn.140004820
lea rax, vtable.CSABString.0
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x3a0]
mov rbx, r15
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14004b880
mov dword [rsp + 0x30], ebx
lea eax, [rbx + 1]
mov r14d, eax
mov ecx, eax
call fcn.140247068
mov rdi, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b8b9
mov r8d, r14d
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call fcn.1402496a0
mov dword [rsp + 0x34], 1
mov rsi, qword [r12 + 8]
mov ecx, dword [r12 + 0x10]
inc ebx
add ecx, ebx
call fcn.140247068
mov rbx, rax
test rsi, rsi
je 0x14004b90f
mov r8, rsi
mov r9, rax
sub r9, rsi
nop word [rax + rax]
movzx edx, byte [r8]
mov byte [r8 + r9], dl
lea r8, [r8 + 1]
test dl, dl
jne 0x14004b8f0
mov rcx, rsi
call fcn.140247060
mov qword [r12 + 8], rbx
jmp 0x14004b914
mov qword [r12 + 8], rax
test rbx, rbx
je 0x14004b942
mov ecx, dword [r12 + 0x10]
add rcx, rbx
mov r8, r14
mov rdx, rdi
call fcn.1402496a0
mov rcx, qword [r12 + 8]
mov rax, r15
inc rax
cmp byte [rcx + rax], 0
jne 0x14004b934
mov dword [r12 + 0x10], eax
test rdi, rdi
je 0x14004b94f
mov rcx, rdi
call fcn.140247060
lea rax, vtable.CSABString.0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 1
mov ecx, 2
call fcn.140247068
mov rdi, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14004b984
movzx ecx, word [0x140287e84]
mov word [rax], cx
mov dword [rsp + 0x34], 1
mov rsi, qword [r12 + 8]
mov ecx, dword [r12 + 0x10]
add ecx, 2
call fcn.140247068
mov rbx, rax
test rsi, rsi
je 0x14004b9ce
mov rdx, rsi
mov r8, rax
sub r8, rsi
nop
movzx eax, byte [rdx]
mov byte [rdx + r8], al
lea rdx, [rdx + 1]
test al, al
jne 0x14004b9b0
mov rcx, rsi
call fcn.140247060
mov qword [r12 + 8], rbx
jmp 0x14004b9d3
mov qword [r12 + 8], rax
test rbx, rbx
je 0x14004b9fe
mov ecx, dword [r12 + 0x10]
movzx eax, word [rdi]
mov word [rcx + rbx], ax
mov rbx, qword [r12 + 8]
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x14004b9f0
mov dword [r12 + 0x10], eax
test rdi, rdi
je 0x14004ba10
mov rcx, rdi
call fcn.140247060
mov rbx, qword [r12 + 8]
mov ecx, dword [r12 + 0x10]
inc ecx
add ecx, r13d
call fcn.140247068
mov rdi, rax
test rbx, rbx
je 0x14004ba4f
mov r8, rbx
mov rcx, rax
sub rcx, rbx
movzx edx, byte [r8]
mov byte [r8 + rcx], dl
lea r8, [r8 + 1]
test dl, dl
jne 0x14004ba30
mov rcx, rbx
call fcn.140247060
mov qword [r12 + 8], rdi
jmp 0x14004ba54
mov qword [r12 + 8], rax
mov rbx, qword [rsp + 0x78]
test rdi, rdi
je 0x14004ba8f
lea r8d, [r13 + 1]
mov ecx, dword [r12 + 0x10]
add rcx, rdi
mov rdx, rbx
call fcn.1402496a0
mov rcx, qword [r12 + 8]
nop word [rax + rax]
inc r15
cmp byte [rcx + r15], 0
jne 0x14004ba80
mov dword [r12 + 0x10], r15d
test rbx, rbx
je 0x14004ba9c
mov rcx, rbx
call fcn.140247060
mov eax, 1
add rsp, 0x8b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret