Function at 0x1400df45c
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x4f80]
mov eax, 0x5080
call fcn.140120c90
sub rsp, rax
mov rax, qword [0x14015e020]
xor rax, rsp
mov qword [rbp + 0x4f70], rax
mov esi, 0x800
lea rdx, [rbp + 0x2f70]
mov r8d, esi
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
dec eax
lea edi, [rsi - 2]
cmp eax, edi
ja 0x1400df76a
mov r8d, esi
lea rdx, [rbp + 0x3f70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
dec eax
cmp eax, edi
ja 0x1400df76a
lea rcx, [rbp + 0x2f70]
call fcn.1400c8f34
lea rcx, [rbp + 0x3f70]
mov r15, rax
call fcn.1400c8f34
xor r12d, r12d
mov rdi, rax
cmp word [rax], r12w
je 0x1400df76a
mov rdx, rax
mov rcx, r15
call fcn.1400c6274
test eax, eax
je 0x1400df76a
mov rcx, rbx
call fcn.1400c8f34
mov rcx, rax
mov rdx, rdi
call fcn.1400c6274
test eax, eax
jne 0x1400df76a
movzx eax, r12w
lea r14d, [rsi - 1]
mov word [rbp + 0xf70], ax
mov edi, r12d
test ax, ax
jne 0x1400df5d8
lea rdx, [rbp + 0xf70]
mov rcx, rbx
sub rcx, rdx
lea rax, [rbp + 0xf70]
mov r8, r14
movzx edx, word [rcx + rax]
test dx, dx
je 0x1400df577
mov word [rax], dx
add rax, 2
sub r8, 1
jne 0x1400df561
lea rcx, [rbp + 0xf70]
mov word [rax], r12w
call fcn.1400c8f34
mov rcx, rax
lea r8, str.rtmp_d
mov rdx, rsi
mov r9d, edi
call fcn.1400c8b0c
lea rcx, [rbp + 0xf70]
call fcn.1400d1ee4
cmp eax, 0xffffffff
je 0x1400df5b9
mov eax, r12d
mov word [rbp + 0xf70], ax
jmp 0x1400df5c0
movzx eax, word [rbp + 0xf70]
add edi, 0x7b
cmp edi, 0x2710
jl 0x1400df541
test ax, ax
je 0x1400df76a
lea rdx, [rbp + 0x1f70]
mov rcx, rbx
sub rcx, rdx
lea rax, [rbp + 0x1f70]
movzx edx, word [rcx + rax]
test dx, dx
je 0x1400df602
mov word [rax], dx
add rax, 2
sub r14, 1
jne 0x1400df5ec
lea rcx, [rbp + 0x1f70]
mov word [rax], r12w
call fcn.1400c8f34
lea rdx, [rbp + 0x1f70]
mov rcx, rax
sub rcx, rdx
mov rdx, r15
sar rcx, 1
sub rsi, rcx
mov rcx, rax
mov r8, rsi
call fcn.1400c8ae0
lea rdx, [rbp + 0xf70]
lea rcx, [rbp + 0x1f70]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x1400df76a
or qword [rsp + 0x28], 0xffffffffffffffff
lea rsi, [0x140149968]
mov rcx, rbx
mov qword [rsp + 0x20], rsi
mov word [rsp + 0x5a], r12w
mov dil, r12b
mov word [rsp + 0x40], 0x100
mov byte [rsp + 0x30], r12b
mov dword [rsp + 0x34], r12d
mov word [rsp + 0x38], r12w
mov dword [rbp + 0xf5c], r12d
mov byte [rsp + 0x58], r12b
mov byte [rsp + 0x42], 1
mov word [rsp + 0x48], r12w
mov dword [rsp + 0x44], 0x100
mov dword [rsp + 0x3c], r12d
mov qword [rsp + 0x50], r12
call fcn.1400d1ee4
cmp eax, 0xffffffff
jne 0x1400df6cd
mov r8d, 0x12
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.1400d1268
mov dil, al
lea rdx, [rbp + 0x1f70]
lea rcx, [rbp + 0xf70]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test dil, dil
je 0x1400df71d
lea rcx, [rsp + 0x20]
call fcn.1400d13bc
cmp dword [rsp + 0x34], r12d
jne 0x1400df71d
cmp qword [rsp + 0x28], 0xffffffffffffffff
je 0x1400df70c
mov rax, qword [rsp + 0x20]
lea rcx, [rsp + 0x20]
call qword [rax + 0x10]
cmp byte [rsp + 0x41], r12b
je 0x1400df71d
lea rcx, [rsp + 0x5a]
call fcn.1400d2214
cmp qword [rsp + 0x28], 0xffffffffffffffff
mov qword [rsp + 0x20], rsi
je 0x1400df766
cmp byte [rsp + 0x39], r12b
jne 0x1400df766
cmp byte [rsp + 0x40], r12b
je 0x1400df75c
cmp dword [rsp + 0x34], r12d
jne 0x1400df766
lea rcx, [rsp + 0x20]
call fcn.1400d13bc
cmp byte [rsp + 0x41], r12b
je 0x1400df766
lea rcx, [rsp + 0x5a]
call fcn.1400d2214
jmp 0x1400df766
lea rcx, [rsp + 0x20]
call fcn.1400d13bc
mov al, 1
jmp 0x1400df76c
xor al, al
mov rcx, qword [rbp + 0x4f70]
xor rcx, rsp
call fcn.1400eb9c0
lea r11, [rsp + 0x5080]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret