Function at 0x140145300
Capabilities:
Delete file
Move file

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0x4e0
mov qword [rsp + 0x450], 0xfffffffffffffffe
mov rax, qword [rsp + 0x4f0]
cmp dword [rax + 0x220], 0
jne 0x140145335
xor eax, eax
jmp 0x140145b1b
mov rax, qword [rsp + 0x4f0]
mov rax, qword [rax]
mov edx, dword [rsp + 0x4f8]
mov rcx, qword [rsp + 0x4f0]
call qword [rax + 0x30]
mov qword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x4f0]
add rcx, 0x508
call fcn.14000f140
mov rcx, qword [rsp + 0x4f0]
add rcx, 0x4d0
lea r8, [rsp + 0x60]
mov edx, dword [rsp + 0x4f8]
call fcn.14001e1f0
test eax, eax
je 0x1401453a1
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0x84], 0
jne 0x1401453c9
mov rcx, qword [rsp + 0x4f0]
add rcx, 0x508
mov rax, qword [rsp + 0x4f0]
mov rax, qword [rax + 0x508]
call qword [rax + 0x28]
xor eax, eax
jmp 0x140145b1b
mov rcx, qword [rsp + 0x4f0]
add rcx, 0x508
mov rax, qword [rsp + 0x4f0]
mov rax, qword [rax + 0x508]
call qword [rax + 0x28]
mov r9, qword [rsp + 0x60]
mov r9, qword [r9 + 0x50]
mov r8, qword [rsp + 0x60]
mov r8, qword [r8 + 0x48]
lea rdx, str._s_save_to_small__s
xor ecx, ecx
call fcn.1400de020
mov rcx, qword [rsp + 0x60]
call fcn.14001cd90
mov r8d, 1
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140140ff0
lea rcx, [rsp + 0x30]
call fcn.140078c60
nop
mov dword [rsp + 0x58], 0
cmp dword [rsp + 0x58], 0xffffffff
je 0x140145af5
mov rcx, qword [rsp + 0x60]
add rcx, 0x50
lea r9, [rsp + 0x58]
lea r8, [0x140249c14]
lea rdx, [rsp + 0x80]
call fcn.140006620
nop
lea rcx, [rsp + 0x80]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x140145490
lea rcx, [rsp + 0x80]
call fcn.140007060
jmp 0x140145af5
mov dword [rsp + 0x88], 0
mov dword [rsp + 0x3d4], 0
jmp 0x1401454b9
mov eax, dword [rsp + 0x3d4]
add eax, 1
mov dword [rsp + 0x3d4], eax
movsxd rbx, dword [rsp + 0x3d4]
lea rcx, [rsp + 0x30]
call fcn.1400202c0
cmp rbx, rax
jge 0x140145508
movsxd rdx, dword [rsp + 0x3d4]
lea rcx, [rsp + 0x30]
call fcn.140050190
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.14001b000
movzx eax, al
test eax, eax
je 0x140145506
mov dword [rsp + 0x88], 1
jmp 0x140145508
jmp 0x1401454a8
cmp dword [rsp + 0x88], 0
je 0x140145524
lea rcx, [rsp + 0x80]
call fcn.140007060
jmp 0x14014543c
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x30]
call fcn.14000d830
lea rax, [rsp + 0x3f8]
mov qword [rsp + 0x400], rax
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x400]
call fcn.140001430
mov qword [rsp + 0x458], rax
mov rcx, qword [rsp + 0x458]
call fcn.1401e5e90
cmp eax, 0x44c
jae 0x140145589
lea rcx, [rsp + 0x80]
call fcn.140007060
jmp 0x14014543c
mov rcx, qword [rsp + 0x60]
add rcx, 0x58
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x140145627
mov edx, dword [rsp + 0x4f8]
mov rcx, qword [rsp + 0x4f0]
call fcn.14013fb00
mov dword [rsp + 0x3d8], eax
cmp dword [rsp + 0x3d8], 0
jne 0x1401455d9
lea rcx, [rsp + 0x80]
call fcn.140007060
jmp 0x14014543c
lea rcx, [rsp + 0x3e0]
call fcn.140002d10
nop
mov r8d, dword [rsp + 0x3d8]
lea rdx, [0x14024ac68]
lea rcx, [rsp + 0x3e0]
call fcn.140002ba0
mov rcx, qword [rsp + 0x60]
add rcx, 0x58
lea rdx, [rsp + 0x3e0]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x3e0]
call fcn.140007060
lea rcx, [rsp + 0x90]
call fcn.14000e170
nop
mov dword [rsp + 0x228], 1
lea rcx, [rsp + 0x90]
call fcn.1401e4480
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x68]
call fcn.140001430
nop
mov dword [rsp + 0x3d0], 0
cmp dword [rsp + 0x3d0], 0
jl 0x1401458dc
lea r9, [rsp + 0x3d0]
lea r8, [0x140248ff4]
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x68]
call fcn.140006620
nop
lea rcx, [rsp + 0x3f0]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401456c1
lea rcx, [rsp + 0x3f0]
call fcn.140007060
jmp 0x1401458dc
xor edx, edx
lea rcx, [rsp + 0x3f0]
call fcn.140006e50
movzx r8d, ax
lea rdx, [0x14024ac78]
lea rcx, [rsp + 0x3f0]
call fcn.140002ba0
lea rcx, [rsp + 0x3e8]
call fcn.140002d10
nop
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x408]
call fcn.140109710
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x468], rax
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.1400fb640
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0x468]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x478]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
mov r9, qword [r9 + 0x108]
mov r8, qword [rsp + 0x3f0]
lea rdx, [0x14024ac88]
lea rcx, [rsp + 0x3e8]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x410]
call fcn.140007060
nop
lea rcx, [rsp + 0x408]
call fcn.140007060
lea rcx, [rsp + 0x3e8]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x418]
call fcn.140109710
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x488], rax
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x420]
call fcn.1400fb640
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0x488]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x498]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
mov r9, qword [r9 + 0x48]
mov r8, qword [rsp + 0x3f0]
lea rdx, [0x14024aca8]
lea rcx, [rsp + 0x3e8]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x420]
call fcn.140007060
nop
lea rcx, [rsp + 0x418]
call fcn.140007060
lea rcx, [rsp + 0x3e8]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x3e8]
call fcn.140007060
nop
lea rcx, [rsp + 0x3f0]
call fcn.140007060
jmp 0x14014566b
lea rcx, [rsp + 0x78]
call fcn.140002d10
nop
lea rcx, [rsp + 0x70]
call fcn.140002d10
nop
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x428]
call fcn.140109710
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x4a8], rax
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x430]
call fcn.1400fb640
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x4b8], rax
mov rax, qword [rsp + 0x4a8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x4b8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
mov r9, qword [r9 + 0x108]
mov r8, qword [rsp + 0x60]
mov r8, qword [r8 + 0x58]
lea rdx, [0x14024acc8]
lea rcx, [rsp + 0x78]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x430]
call fcn.140007060
nop
lea rcx, [rsp + 0x428]
call fcn.140007060
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x438]
call fcn.140109710
mov qword [rsp + 0x4c0], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x4c8], rax
lea rcx, [rsp + 0x80]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.1400fb640
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0x4d8], rax
mov rax, qword [rsp + 0x4c8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x4d8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
mov r9, qword [r9 + 0x108]
mov r8, qword [rsp + 0x60]
mov r8, qword [r8 + 0x58]
lea rdx, [0x14024ace0]
lea rcx, [rsp + 0x70]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x440]
call fcn.140007060
nop
lea rcx, [rsp + 0x438]
call fcn.140007060
lea rcx, [rsp + 0x70]
call fcn.140050200
mov rbx, rax
lea rcx, [rsp + 0x78]
call fcn.140050200
mov r8d, 1
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
nop
lea rcx, [rsp + 0x70]
call fcn.140007060
nop
lea rcx, [rsp + 0x78]
call fcn.140007060
nop
lea rcx, [rsp + 0x68]
call fcn.140007060
nop
lea rcx, [rsp + 0x90]
call fcn.140005e30
nop
lea rcx, [rsp + 0x80]
call fcn.140007060
jmp 0x14014543c
mov rcx, qword [rsp + 0x60]
call fcn.14001cdc0
mov dword [rsp + 0x448], 1
lea rcx, [rsp + 0x30]
call fcn.140078f24
mov eax, dword [rsp + 0x448]
add rsp, 0x4e0
pop rbx
ret