Function at 0x1400182b0
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5010]
mov eax, 0x5110
call fcn.140071ae0
sub rsp, rax
mov rax, qword [0x1400f0158]
xor rax, rsp
mov qword [rbp + 0x5000], rax
lea r14, [rcx + 0x28]
mov qword [rsp + 0x40], r14
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x140018304
mov rdx, qword [r14]
lea r8, str.driversetchosts.tmp
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
xor edi, edi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
lea rax, [rbp - 0x30]
mov r12, 0xffffffffffffffff
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x140018335
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.140003fa0
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rcx, qword [rbp - 0x70]
lea rdx, [0x1400b7518]
call fcn.14008b728
mov r15, rax
mov qword [rsp + 0x38], rax
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400183ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400183a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a2e
call fcn.140071a3c
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], di
xor bl, bl
test r15, r15
je 0x1400189f6
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x1400183d6
mov rdx, qword [r14]
lea r8, str.driversetchosts
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
lea rax, [rbp - 0x30]
mov r8, r12
nop
inc r8
cmp word [rax + r8*2], di
jne 0x140018400
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x70]
call fcn.140003fa0
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
lea rdx, [0x1400b751c]
call fcn.14008b728
mov rsi, rax
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001847d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018478
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a34
call fcn.140071a3c
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
test rsi, rsi
je 0x140018870
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor ebx, ebx
mov r13d, ebx
mov qword [rsp + 0x30], rbx
mov rcx, rsi
call fcn.14008b824
mov rdi, qword [rsp + 0x28]
test eax, eax
jne 0x1400185c5
mov r8, rsi
mov edx, 0x2710
lea rcx, [rbp + 0x1e0]
call fcn.14008b528
lea rdx, str.windscribe
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
jne 0x1400185b8
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], bx
lea rax, [rbp + 0x1e0]
mov r8, r12
inc r8
cmp word [rax + r8*2], 0
jne 0x140018512
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x50]
call fcn.140003fa0
nop
cmp rdi, r13
je 0x14001855a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x50], bx
add rdi, 0x20
mov qword [rsp + 0x28], rdi
jmp 0x14001857b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.140010860
mov r13, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400185b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400185b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a3a
call fcn.140071a3c
mov rcx, rsi
call fcn.14008b824
jmp 0x1400184b7
mov rsi, qword [rsp + 0x20]
mov rbx, rsi
cmp rsi, rdi
je 0x1400187b7
movabs rcx, 0x7ffffffffffffffe
lea rax, [rdi - 0x20]
xor r10d, r10d
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x60], r10
mov qword [rsp + 0x68], r10
mov r14, qword [rbx + 0x10]
mov r15, rbx
cmp qword [rbx + 0x18], 8
jb 0x140018607
mov r15, qword [rbx]
cmp r14, 8
jae 0x14001861d
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x50], xmm0
mov esi, 7
jmp 0x140018658
mov rsi, r14
or rsi, 7
cmp rsi, rcx
cmova rsi, rcx
lea rdx, [rsi + 1]
lea rcx, [rsp + 0x50]
call fcn.140003f10
mov qword [rsp + 0x50], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.140079530
lea rax, [rdi - 0x20]
xor r10d, r10d
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x60], r14
cmp rbx, rax
jne 0x140018741
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x140018741
mov rcx, rbx
mov r9, qword [rbx + 0x18]
cmp r9, 8
jb 0x140018688
mov rcx, qword [rbx]
lea r8, [rsp + 0x50]
cmp rsi, 8
cmovae r8, qword [rsp + 0x50]
mov rax, r12
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x1400186a0
cmp word [r8 + rax*2 - 2], 0xa
jne 0x140018741
lea r8, [rdx - 1]
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x40], r10
mov qword [rbp - 0x38], 7
cmp rdx, r8
cmovb r8, rdx
mov rdx, rbx
cmp r9, 8
jb 0x1400186df
mov rdx, qword [rbx]
lea rcx, [rbp - 0x50]
call fcn.140003fa0
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001872a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018725
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a46
call fcn.140071a3c
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rbp - 0x40]
movups xmmword [rsp + 0x60], xmm1
mov rsi, qword [rsp + 0x68]
lea rcx, [rsp + 0x50]
cmp rsi, 8
cmovae rcx, qword [rsp + 0x50]
mov r15, qword [rsp + 0x38]
mov rdx, r15
call fcn.14008b5f8
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400187a0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001879b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a4c
call fcn.140071a3c
add rbx, 0x20
cmp rbx, rdi
jne 0x1400185d6
mov rsi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
call fcn.14008b7c0
mov bl, 1
test rsi, rsi
je 0x140018870
mov rbx, rsi
cmp rsi, rdi
je 0x14001882f
xor eax, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x140018817
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140018810
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140018a40
mov rcx, r8
call fcn.140071a3c
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
add rbx, 0x20
cmp rbx, rdi
jne 0x1400187d6
sub r13, rsi
and r13, 0xffffffffffffffe0
mov rax, rsi
cmp r13, 0x1000
jb 0x14001885b
add r13, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a40
mov rdx, r13
mov rcx, rsi
call fcn.140071a3c
mov rcx, r15
call fcn.14008b7c0
jmp 0x140018880
mov rcx, r15
call fcn.14008b7c0
test bl, bl
je 0x1400189f6
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x14001888d
mov rdx, qword [r14]
lea r8, str.driversetchosts
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
xor edi, edi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], di
lea rax, [rbp - 0x30]
mov r8, r12
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], di
jne 0x1400188c0
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.140003fa0
nop
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rbx, qword [rbp - 0x70]
cmp qword [r14 + 0x18], 8
jb 0x1400188f0
mov r14, qword [r14]
lea r8, str.driversetchosts.tmp
mov rdx, r14
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
lea rax, [rbp + 0x1e0]
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x140018920
mov r8, r12
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x70]
call fcn.140003fa0
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
mov r8d, 1
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
setne bl
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x1400189a4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001899f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a52
call fcn.140071a3c
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400189f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400189ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018a28
call fcn.140071a3c
movzx eax, bl
jmp 0x1400189f8
xor al, al
mov rcx, qword [rbp + 0x5000]
xor rcx, rsp
call fcn.140071b40
lea r11, [rsp + 0x5110]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140085c7c
int3
call fcn.140085c7c
int3
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
int3