Function at 0x14003aa04
Capabilities:
Copy file
Delete directory
Delete file
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
xor edi, edi
mov esi, 4
mov r15d, r8d
lea ebp, [rsi - 3]
lea r12d, [rsi - 1]
lea r13d, [rsi + 2]
mov r14b, dil
mov byte [rsp + 0x128], dil
mov byte [rsp + 0x43], dil
mov bl, dil
mov byte [rsp + 0x42], dil
mov byte [rsp + 0x40], dil
mov byte [rsp + 0x41], dil
jmp 0x14003ac95
lea rax, [rdx + 2]
lea rcx, [0x140113c4c]
mov r8d, ebp
cmp word [rax], 0x2d
cmove rdx, rax
mov qword [rsp + 0x118], rdx
lea rdx, [rsp + 0x118]
call fcn.14006402c
cmp al, dil
jne 0x14003ac9f
lea rdx, [rsp + 0x118]
lea rcx, str._simpleprogress
mov r8d, 0xf
call fcn.14006402c
cmp al, dil
je 0x14003aabe
mov esi, 0x100
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, str._progress
mov r8d, 9
call fcn.14006402c
cmp al, dil
je 0x14003aae5
mov si, di
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, [0x140117df4]
mov r8d, 5
call fcn.14006402c
cmp al, dil
je 0x14003ab0c
mov r14b, bpl
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, [0x140117df0]
mov r8d, 2
call fcn.14006402c
cmp al, dil
je 0x14003ab38
mov byte [rsp + 0x128], bpl
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, str._forceq
mov r8d, 7
call fcn.14006402c
cmp al, dil
je 0x14003ab5f
mov r15d, r12d
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, [0x140117ddc]
mov r8d, r13d
call fcn.14006402c
cmp al, dil
je 0x14003ab83
mov r15d, ebp
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, [0x140117dd8]
mov r8d, r12d
call fcn.14006402c
cmp al, dil
je 0x14003abad
mov byte [rsp + 0x40], 0x10
or r14b, 0x10
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, [0x140117dd4]
mov r8d, 2
call fcn.14006402c
cmp al, dil
je 0x14003abd6
mov byte [rsp + 0x43], 0x10
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, str._delme
mov r8d, r13d
call fcn.14006402c
cmp al, dil
je 0x14003abf9
mov bl, 0x10
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, [0x140117dc8]
mov r8d, r12d
call fcn.14006402c
cmp al, dil
je 0x14003ac1f
mov r14b, 2
mov byte [rsp + 0x42], r14b
jmp 0x14003ac8d
lea rdx, [rsp + 0x118]
lea rcx, str._delay
mov r8d, r13d
call fcn.14006402c
cmp al, dil
je 0x14003ac42
mov byte [rsp + 0x41], bpl
jmp 0x14003ac8d
mov rcx, qword [rsp + 0x118]
movzx eax, word [rcx]
cmp ax, di
je 0x14003ac80
mov edx, 9
lea r8d, [rdx + 0x17]
cmp dx, ax
ja 0x14003ac66
cmp ax, 0xd
jbe 0x14003ac80
cmp r8w, ax
je 0x14003ac80
add rcx, 2
mov qword [rsp + 0x118], rcx
mov ax, word [rcx]
cmp ax, di
jne 0x14003ac5b
lea rcx, [rsp + 0x118]
call fcn.140016ba0
mov rdx, qword [rsp + 0x118]
cmp word [rdx], 0x2d
je 0x14003aa61
lea rcx, [rsp + 0x118]
call fcn.140016ba0
cmp bl, dil
je 0x14003ad06
lea rdx, str.23:INDATA
lea rcx, [rsp + 0x128]
call fcn.14006d444
mov rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x128]
call fcn.14006175c
mov rdx, qword [rsp + 0x128]
lea rcx, [0x1401320e0]
call fcn.1400309a0
lea rcx, [rsp + 0x128]
mov rbx, rax
call fcn.140058efc
mov rax, rbx
jmp 0x14003b364
mov rcx, qword [rsp + 0x118]
cmp word [rcx], di
jne 0x14003ad1f
mov rax, 0xffffffff80070057
jmp 0x14003b364
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea ebx, [rbp + rax]
lea ecx, [rbx + rbx + 4]
movsxd rdx, ecx
lea rcx, [rsp + 0x90]
call fcn.140061694
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x90]
movsxd r11, ebx
add r11, r11
mov r8, r11
call fcn.14001d04c
mov rcx, qword [rsp + 0x90]
xor edx, edx
mov qword [rsp + 0x118], rcx
mov word [r11 + rcx], di
lea rcx, [rsp + 0x60]
lea r8d, [rdx + 0x30]
mov qword [rsp + 0x58], rdi
call fcn.1400f8760
lea rcx, [rsp + 0x118]
call fcn.140016ba0
mov rbx, qword [rsp + 0x118]
mov eax, 0x610
or si, ax
mov dword [rsp + 0x60], r12d
lea rcx, [rsp + 0x98]
mov word [rsp + 0x78], si
mov qword [rsp + 0x68], rbx
mov ebp, edi
mov rsi, rbx
mov dword [rsp + 0x50], edi
mov r12b, dil
call fcn.140061620
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], rdi
call fcn.140061620
lea rcx, [rsp + 0x98]
mov edx, 0xa
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rdi
lea r13, [rsp + 0x98]
call fcn.140061720
lea rcx, [rsp + 0xb0]
mov edx, 0xa
call fcn.140061720
movzx r11d, word [rbx]
cmp r11w, di
je 0x14003af6c
mov al, byte [rsp + 0x128]
cmp al, dil
je 0x14003ae9d
cmp r11w, 0x3b
jne 0x14003ae9d
mov word [rbx], di
add rbx, 2
mov qword [rsp + 0x48], rbx
cmp word [rsi], di
je 0x14003ae70
cmp r12b, dil
jne 0x14003ae62
mov r8b, 1
cmp r14b, dil
jne 0x14003ae65
mov r8b, dil
mov rdx, rsi
mov rcx, r13
call fcn.140020fd8
lea rcx, [rsp + 0x48]
call fcn.140016ba0
mov rbx, qword [rsp + 0x48]
mov al, byte [rsp + 0x128]
mov rsi, rbx
cmp r12b, dil
je 0x14003af5a
inc ebp
mov dword [rsp + 0x50], ebp
jmp 0x14003af5a
cmp r11w, 0x3e
jne 0x14003af5a
cmp word [rbx - 2], 0x3d
jne 0x14003aeb9
mov dword [rsp + 0x60], 2
jmp 0x14003aedd
cmp word [rbx - 2], 0x2d
jne 0x14003aeca
mov dword [rsp + 0x60], 1
jmp 0x14003aedd
cmp word [rbx + 2], 0x3e
jne 0x14003aedd
add rbx, 2
mov dword [rsp + 0x60], 4
lea rax, [rbx - 4]
cmp rax, rsi
jb 0x14003af0e
mov ecx, 9
lea ebp, [rcx + 0x17]
cmp cx, word [rax]
ja 0x14003aef9
cmp word [rax], 0xd
jbe 0x14003aefe
cmp bp, word [rax]
jne 0x14003af0a
mov word [rax], di
sub rax, 2
cmp rax, rsi
jae 0x14003aeee
mov ebp, dword [rsp + 0x50]
mov word [rbx - 2], di
mov word [rbx], di
lea rcx, [rsp + 0x48]
add rbx, 2
mov qword [rsp + 0x48], rbx
call fcn.140016ba0
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x70], rbx
cmp word [rsi], di
je 0x14003af45
xor r8d, r8d
mov rdx, rsi
mov rcx, r13
call fcn.140020fd8
mov al, byte [rsp + 0x128]
mov rsi, rbx
mov r12b, 1
lea r13, [rsp + 0xb0]
add rbx, 2
mov r11w, word [rbx]
cmp r11w, di
jne 0x14003ae38
cmp word [rsi], di
je 0x14003af8d
xor r8d, r8d
mov rdx, rsi
mov rcx, r13
call fcn.140020fd8
mov esi, 1
cmp r12b, dil
je 0x14003af92
add ebp, esi
jmp 0x14003af92
mov esi, 1
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x98]
cmp ebp, edi
mov word [rax + rcx*2], di
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xb0]
mov word [rax + rcx*2], di
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x70]
cmovg rax, qword [rsp + 0xb0]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r11d, dword [rsp + 0x60]
cmp r15d, edi
je 0x14003b027
cmp r11d, 3
jne 0x14003b027
test r15b, 2
je 0x14003b00d
lea rcx, [rsp + 0x58]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
cmp eax, edi
je 0x14003b33a
movsx edx, byte [rsp + 0x43]
mov rcx, qword [rsp + 0x98]
call fcn.1400210d0
mov rdi, rax
jmp 0x14003b33a
cmp byte [rsp + 0x41], dil
je 0x14003b06b
mov rdx, qword [rsp + 0x70]
cmp rdx, rdi
je 0x14003b03d
cmp word [rdx], di
jne 0x14003b040
mov rdx, rdi
mov rcx, qword [rsp + 0x68]
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
cmp eax, esi
je 0x14003b33a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
cmove eax, esi
mov edi, eax
jmp 0x14003b33a
cmp r14b, dil
je 0x14003b29e
cmp byte [rsp + 0x42], dil
je 0x14003b088
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x14003b051
cmp r11d, 3
jne 0x14003b1ca
cmp byte [rsp + 0x40], dil
je 0x14003b1ba
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x38], rdi
lea r13d, [r11 + 4]
mov ebp, 0x6000080
mov r12d, 0x80000000
lea rcx, [rsp + 0x128]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], r11d
mov r9d, r13d
mov r8d, r12d
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x20], rdi
call fcn.1400037bc
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbx, rdi
jne 0x14003b119
cmp eax, 2
jne 0x14003b1a1
mov rcx, qword [rsp + 0x128]
cmp rcx, rdi
je 0x14003b10f
cmp rcx, 0xffffffffffffffff
je 0x14003b10f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, 2
jmp 0x14003b33a
mov rcx, qword [rsp + 0x128]
cmp rcx, rdi
je 0x14003b132
cmp rcx, 0xffffffffffffffff
je 0x14003b132
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], ebp
lea rcx, [rsp + 0x128]
mov r9d, r13d
mov r8d, r12d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x20], rdi
call fcn.1400037bc
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbx, rdi
jne 0x14003b1a1
cmp eax, 2
jne 0x14003b1a1
mov rcx, qword [rsp + 0x128]
cmp rcx, rdi
je 0x14003b33a
cmp rcx, 0xffffffffffffffff
je 0x14003b33a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14003b33a
mov rcx, qword [rsp + 0x128]
cmp rcx, rdi
je 0x14003b1ba
cmp rcx, 0xffffffffffffffff
je 0x14003b1ba
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x14003b051
cmp r11d, 2
jne 0x14003b284
cmp byte [rsp + 0x40], dil
je 0x14003b26c
lea rdx, str.__dd__bs8M__
lea rcx, [rsp + 0x128]
call fcn.14006d444
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x128]
call fcn.14006175c
lea rdx, str.__0__
lea rcx, [rsp + 0x128]
call fcn.14006175c
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x128]
call fcn.14006175c
lea rdx, [0x140112864]
lea rcx, [rsp + 0x128]
call fcn.14006175c
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x110]
xor r8d, r8d
call fcn.1400a49d0
lea rcx, [rsp + 0x128]
mov rdi, rax
call fcn.140058efc
jmp 0x14003b33a
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
jmp 0x14003b051
cmp r11d, esi
jne 0x14003b29e
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x14003b051
cmp r11d, 4
jne 0x14003b322
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.14006d444
mov rcx, qword [rsp + 0x48]
call fcn.14005e204
cmp rax, rdi
jne 0x14003b2c9
mov rax, qword [rsp + 0x48]
jmp 0x14003b2cd
add rax, 2
mov word [rax], di
mov rcx, qword [rsp + 0x70]
call fcn.14005e204
cmp rax, rdi
jne 0x14003b2e6
mov rax, qword [rsp + 0x70]
jmp 0x14003b2ea
add rax, 2
lea rcx, [rsp + 0x48]
mov rdx, rax
call fcn.14006175c
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, esi
je 0x14003b318
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
cmove eax, esi
mov edi, eax
lea rcx, [rsp + 0x48]
jmp 0x14003b262
cmp ebp, 2
jl 0x14003b32c
or word [rsp + 0x78], si
lea rcx, [rsp + 0x58]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
movsxd rdi, eax
lea rcx, [rsp + 0xb0]
call fcn.140058efc
lea rcx, [rsp + 0x98]
call fcn.140058efc
lea rcx, [rsp + 0x90]
call fcn.140058efc
mov rax, rdi
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret