Function at 0x140017ab0
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5020]
mov eax, 0x5120
call fcn.140071ae0
sub rsp, rax
mov rax, qword [0x1400f0158]
xor rax, rsp
mov qword [rbp + 0x5010], rax
mov rdi, rcx
lea r14, [rcx + 0x28]
mov qword [rsp + 0x48], r14
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x140017b07
mov rdx, qword [r14]
lea r8, str.driversetchosts.tmp
lea rcx, [rbp - 0x20]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
xor r13d, r13d
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
lea rax, [rbp - 0x20]
mov r12, 0xffffffffffffffff
mov r8, r12
nop dword [rax]
inc r8
cmp word [rax + r8*2], r13w
jne 0x140017b40
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x68]
call fcn.140003fa0
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [0x1400b7518]
call fcn.14008b728
mov rsi, rax
mov qword [rsp + 0x20], rax
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140017bb9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017bb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001827f
call fcn.140071a3c
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
xor bl, bl
test rsi, rsi
je 0x140018247
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x140017be2
mov rdx, qword [r14]
lea r8, str.driversetchosts
lea rcx, [rbp - 0x20]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
lea rax, [rbp - 0x20]
mov r8, r12
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], r13w
jne 0x140017c10
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x78]
call fcn.140003fa0
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
lea rdx, [0x1400b751c]
call fcn.14008b728
mov r15, rax
mov qword [rsp + 0x50], rax
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140017c8d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017c88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018285
call fcn.140071a3c
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
test r15, r15
je 0x1400180bb
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov rsi, r13
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x40], r13
mov rcx, r15
call fcn.14008b824
test eax, eax
jne 0x140017dfd
lea rbx, [rdi + 8]
mov rdi, qword [rsp + 0x38]
nop word [rax + rax]
mov r8, r15
mov edx, 0x2710
lea rcx, [rbp + 0x1f0]
call fcn.14008b528
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140017d01
mov rdx, qword [rbx]
lea rcx, [rbp + 0x1f0]
call fcn.140079d70
test rax, rax
jne 0x140017dec
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r13w
lea rax, [rbp + 0x1f0]
mov r8, r12
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140017d40
lea rdx, [rbp + 0x1f0]
lea rcx, [rsp + 0x58]
call fcn.140003fa0
nop
cmp rdi, rsi
je 0x140017d89
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x68]
movups xmmword [rdi + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x58], r13w
add rdi, 0x20
mov qword [rsp + 0x38], rdi
jmp 0x140017daf
lea r8, [rsp + 0x58]
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.140010860
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov rdi, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140017dec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017de7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001828b
call fcn.140071a3c
mov rcx, r15
call fcn.14008b824
test eax, eax
jne 0x140017e02
jmp 0x140017ce0
mov rdi, qword [rsp + 0x38]
mov r13, qword [rsp + 0x30]
mov rbx, r13
cmp r13, rdi
je 0x140017ff9
movabs rcx, 0x7ffffffffffffffe
lea rax, [rdi - 0x20]
xor r10d, r10d
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x70], r10
mov r14, qword [rbx + 0x10]
mov r15, rbx
cmp qword [rbx + 0x18], 8
jb 0x140017e44
mov r15, qword [rbx]
cmp r14, 8
jae 0x140017e5a
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x58], xmm0
mov esi, 7
jmp 0x140017e95
mov rsi, r14
or rsi, 7
cmp rsi, rcx
cmova rsi, rcx
lea rdx, [rsi + 1]
lea rcx, [rsp + 0x58]
call fcn.140003f10
mov qword [rsp + 0x58], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.140079530
lea rax, [rdi - 0x20]
xor r10d, r10d
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], r14
cmp rbx, rax
jne 0x140017f81
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x140017f81
mov rcx, rbx
mov r9, qword [rbx + 0x18]
cmp r9, 8
jb 0x140017ec5
mov rcx, qword [rbx]
lea r8, [rsp + 0x58]
cmp rsi, 8
cmovae r8, qword [rsp + 0x58]
mov rax, r12
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x140017ee0
cmp word [r8 + rax*2 - 2], 0xa
jne 0x140017f81
lea r8, [rdx - 1]
mov qword [rbp - 0x48], r10
mov qword [rbp - 0x38], r10
mov qword [rbp - 0x30], 7
cmp rdx, r8
cmovb r8, rdx
mov rdx, rbx
cmp r9, 8
jb 0x140017f1f
mov rdx, qword [rbx]
lea rcx, [rbp - 0x48]
call fcn.140003fa0
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140017f6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017f65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018291
call fcn.140071a3c
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rbp - 0x38]
movups xmmword [rsp + 0x68], xmm1
mov rsi, qword [rsp + 0x70]
lea rcx, [rsp + 0x58]
cmp rsi, 8
cmovae rcx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x20]
mov rdx, rsi
call fcn.14008b5f8
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140017fe0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017fdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018297
call fcn.140071a3c
add rbx, 0x20
cmp rbx, rdi
jne 0x140017e13
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x50]
jmp 0x140017ffe
mov rsi, qword [rsp + 0x20]
mov rcx, r15
call fcn.14008b7c0
mov bl, 1
test r13, r13
je 0x1400180bb
mov rbx, r13
xor r15d, r15d
cmp r13, rdi
je 0x140018078
nop dword [rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14001805f
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14001805a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001829d
mov rcx, r8
call fcn.140071a3c
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
add rbx, 0x20
cmp rbx, rdi
jne 0x140018020
mov rdx, qword [rsp + 0x28]
sub rdx, r13
and rdx, 0xffffffffffffffe0
mov rax, r13
cmp rdx, 0x1000
jb 0x1400180a9
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001829d
mov rcx, r13
call fcn.140071a3c
mov rcx, rsi
call fcn.14008b7c0
jmp 0x1400180ce
mov rcx, rsi
call fcn.14008b7c0
test bl, bl
je 0x140018247
xor r15d, r15d
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x1400180db
mov rdx, qword [r14]
lea r8, str.driversetchosts
lea rcx, [rbp - 0x20]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
lea rax, [rbp - 0x20]
mov r8, r12
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140018110
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x68]
call fcn.140003fa0
nop
lea rbx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rbx, qword [rbp - 0x68]
cmp qword [r14 + 0x18], 8
jb 0x140018141
mov r14, qword [r14]
lea r8, str.driversetchosts.tmp
mov rdx, r14
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 7
lea rax, [rbp + 0x1f0]
inc r12
cmp word [rax + r12*2], 0
jne 0x140018170
mov r8, r12
lea rdx, [rbp + 0x1f0]
lea rcx, [rsp + 0x78]
call fcn.140003fa0
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
mov r8d, 1
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
setne bl
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400181f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400181ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400182a3
call fcn.140071a3c
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r15w
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140018242
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001823d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018279
call fcn.140071a3c
movzx eax, bl
jmp 0x140018249
xor al, al
mov rcx, qword [rbp + 0x5010]
xor rcx, rsp
call fcn.140071b40
lea r11, [rsp + 0x5120]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140085c7c
int3
call fcn.140085c7c
int3
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
int3