Function at 0x10004fb60
Capabilities:
Check if file exists
Get common file path
Get file attributes
Move file
Set current directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x880
mov rax, qword [0x1000af140]
xor rax, rsp
mov qword [rsp + 0x870], rax
mov r12b, r8b
mov r13d, edx
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, dword [0x1000b7ce0]
xor ebx, ebx
mov esi, eax
test r9d, r9d
je 0x10004fe40
mov rbp, qword [0x1000b7cf0]
mov rdx, rbp
cmp qword [rdx], rdi
je 0x10004fbcb
inc ebx
add rdx, 0x218
cmp ebx, r9d
jb 0x10004fbb8
cmp ebx, r9d
jae 0x10004fe40
mov r14d, 0x104
lea rcx, [rsp + 0x660]
xor edx, edx
mov r8, r14
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x660]
mov edi, ebx
imul rdi, rdi, 0x218
mov edx, dword [rdi + rbp + 8]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea rcx, [rsp + 0x30]
mov r8, r14
xor edx, edx
call sub.msvcrt.dll_memset
lea rdx, [rsp + 0x30]
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea rcx, [rsp + 0x660]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
and r13d, 0x28
cmp r13b, 0x28
jne 0x10004fc7d
lea r9, [rsp + 0x240]
lea rcx, [0x10001c0e0]
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r14d
call sub.SHELL32.dll_SHGetFolderPathEx
test eax, eax
js 0x10004fd9b
lea rcx, [rsp + 0x240]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rcx, [0x10001fa00]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
je 0x10004fd9b
mov rcx, qword [0x1000bafb8]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
je 0x10004fd9b
mov rax, qword [0x1000b7cf0]
lea rcx, [rsp + 0x450]
mov rdx, r14
lea r8, [rdi + rax + 0xc]
call sub.msvcrt.dll_wcscpy_s
lea r8, [0x10001fa20]
lea rcx, [rsp + 0x450]
mov rdx, r14
call sub.msvcrt.dll_wcscat_s
test r12b, r12b
je 0x10004fdbb
mov rax, qword [0x1000b7cf0]
lea rcx, [rsp + 0x240]
mov rdx, r14
lea r8, [rdi + rax + 0xc]
call sub.msvcrt.dll_wcscpy_s
lea r8, [0x10001fa30]
lea rcx, [rsp + 0x240]
mov rdx, r14
call sub.msvcrt.dll_wcscat_s
mov r11, qword [0x1000b7cf0]
lea rcx, [rdi + r11 + 0xc]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10004fdbb
mov rax, qword [0x1000b7cf0]
lea rdx, [rsp + 0x240]
mov r8d, 1
lea rcx, [rdi + rax + 0xc]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x10004fdbb
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov r11, qword [0x1000b7cf0]
lea rcx, [rsp + 0x240]
mov qword [rsp + 0x28], rcx
mov edx, 0xc5
lea rax, [rdi + r11 + 0xc]
lea r9, [0x10001fa40]
lea r8, [0x10001faa0]
lea ecx, [rdx - 0x45]
mov qword [rsp + 0x20], rax
call fcn.100065cf8
jmp 0x10004fda6
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rcx, [0x1000b7ce0]
mov edx, ebx
call fcn.100050834
xor eax, eax
jmp 0x10004fe40
mov rax, qword [0x1000b7cf0]
lea rcx, [rsp + 0x450]
mov r8d, 1
lea rdx, [rdi + rax + 0xc]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x10004fe25
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov r11, qword [0x1000b7cf0]
mov edx, 0xcf
lea rax, [rdi + r11 + 0xc]
lea r9, [0x10001fab0]
lea r8, [0x10001faa0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x450]
lea ecx, [rdx - 0x4f]
mov qword [rsp + 0x20], rax
call fcn.100065cf8
xor esi, esi
lea rcx, [0x1000b7ce0]
mov edx, ebx
call fcn.100050834
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov eax, esi
mov rcx, qword [rsp + 0x870]
xor rcx, rsp
call fcn.1000a2150
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret