Function at 0x4316b0
Capabilities:
Move file

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x50
mov r14, qword [0x006d1040]
mov rbx, qword [0x0072d898]
lea r13, [0x0072d888]
mov rbp, rcx
mov rax, qword [r14]
mov qword [rsp + 0x48], rax
xor eax, eax
cmp rbx, r13
je 0x4314f0
lea r12, [rsp + 0x20]
lea rdi, [r12 + 0x10]
jmp 0x43149e
cmp rsi, rdi
je 0x43148e
mov rcx, rsi
call fcn.00670500
mov rcx, rbx
call fcn.0065f560
cmp rax, r13
mov rbx, rax
je 0x4314f0
mov rdx, qword [rbx + 0x28]
mov r8, qword [rbx + 0x30]
mov rcx, r12
mov qword [rsp + 0x20], rdi
add r8, rdx
call fcn.00430ae0
mov r8, qword [rsp + 0x28]
cmp r8, qword [rbp + 8]
mov rsi, qword [rsp + 0x20]
jne 0x431481
mov rdx, qword [rbp]
mov rcx, rsi
call fcn.00617610
test eax, eax
jne 0x431481
cmp rsi, rdi
je 0x4314e3
mov rcx, rsi
call fcn.00670500
mov rax, qword [rbx + 0x20]
jmp 0x4314f2
xor eax, eax
mov rdi, qword [rsp + 0x48]
xor rdi, qword [r14]
jne 0x43150b
add rsp, 0x50
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
call fcn.00582f30
nop
nop dword [rax + rax]
nop word cs:[rax + rax]
sub rsp, 0x38
mov rax, qword [0x006d1040]
mov rdx, qword [rax]
mov qword [rsp + 0x28], rdx
xor edx, edx
cmp byte [0x00675096], 0
jne 0x431550
mov rcx, qword [rsp + 0x28]
xor rcx, qword [rax]
jne 0x43156a
add rsp, 0x38
ret
mov rcx, qword [rsp + 0x28]
xor rcx, qword [rax]
jne 0x43156a
mov rcx, qword [0x0072d850]
add rsp, 0x38
jmp sub.msvcrt.dll_fflush
call fcn.00582f30
nop
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1b0
movaps xmmword [rsp + 0x1a0], xmm6
xor ebx, ebx
movapd xmm6, xmm1
mov rbp, rcx
mov rdi, qword [0x006d1040]
movsd xmm0, qword [0x0068e120]
movsd xmm1, qword [0x0068e128]
mov rax, qword [rdi]
mov qword [rsp + 0x198], rax
xor eax, eax
jmp 0x4315bc
divsd xmm6, xmm0
add rbx, 1
ucomisd xmm6, xmm0
ja 0x4315c8
ucomisd xmm1, xmm6
jbe 0x4315ce
cmp rbx, 6
jne 0x4315b4
lea rsi, [rsp + 0x20]
mov edx, 0x10
mov rcx, rsi
call fcn.00651a90
mov rax, qword [rsp + 0x20]
movapd xmm1, xmm6
mov rcx, rsi
mov rdx, qword [rax - 0x18]
add rdx, rsi
mov eax, dword [rdx + 0x18]
mov qword [rdx + 8], 2
and eax, 0xfffffefb
or eax, 4
mov dword [rdx + 0x18], eax
call fcn.00611ed0
mov r12, rax
lea rax, [0x0068e0c0]
mov rbx, qword [rax + rbx*8]
test rbx, rbx
je 0x431671
mov rcx, rbx
call fcn.006175e0
mov rdx, rbx
mov r8, rax
mov rcx, r12
call fcn.0065ec80
lea rdx, [rsi + 8]
mov rcx, rbp
call fcn.005d4680
mov rcx, rsi
call fcn.00652170
mov rsi, qword [rsp + 0x198]
xor rsi, qword [rdi]
mov rax, rbp
jne 0x431689
movaps xmm6, xmmword [rsp + 0x1a0]
add rsp, 0x1b0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rax, qword [r12]
mov rcx, qword [rax - 0x18]
add rcx, r12
mov edx, dword [rcx + 0x20]
or edx, 1
call fcn.0065ca30
jmp 0x431637
call fcn.00582f30
mov rbx, rax
mov rcx, rsi
call fcn.00652170
mov rcx, rbx
call fcn.0058e700
nop
nop dword [rax]
nop word cs:[rax + rax]
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x70
mov rbp, qword [0x006d1040]
lea rbx, [rsp + 0x40]
lea rsi, [rsp + 0x20]
mov r12, rcx
mov rcx, rbx
mov rax, qword [rbp]
mov qword [rsp + 0x68], rax
xor eax, eax
call fcn.005bfda0
mov rdx, r12
mov rcx, rsi
mov rdi, qword [rsp + 0x40]
call fcn.005bfda0
mov r8d, 1
mov rdx, rdi
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov rcx, qword [rsp + 0x20]
test eax, eax
setne dil
add rsi, 0x10
cmp rcx, rsi
je 0x43171e
call fcn.00670500
mov rcx, qword [rsp + 0x40]
add rbx, 0x10
cmp rcx, rbx
je 0x431731
call fcn.00670500
mov eax, edi
mov rdi, qword [rsp + 0x68]
xor rdi, qword [rbp]
jne 0x431749
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
call fcn.00582f30
mov rcx, qword [rsp + 0x20]
add rsi, 0x10
mov rdi, rax
cmp rcx, rsi
je 0x431764
call fcn.00670500
mov rcx, qword [rsp + 0x40]
add rbx, 0x10
cmp rcx, rbx
je 0x431777
call fcn.00670500
mov rcx, rdi
call fcn.0058e700
mov rdi, rax
jmp 0x431764