Function at 0x14007c7b0
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x14008a010]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov r14, rdx
mov rsi, rcx
mov edx, 0xc
lea rcx, [rbp + 0x50]
call fcn.140080e90
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14007e2c0
mov rbx, rax
mov qword [rbp - 0x80], rax
mov r8, rax
lea rdx, [rbp - 0x10]
call fcn.140082130
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14007c855
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14007c850
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007c933
mov rcx, r8
call fcn.14008279c
xor edi, edi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x70]
call fcn.14007e120
nop
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae r8, qword [rbp - 0x10]
mov rax, qword [rbp]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x70]
call fcn.14007e560
nop
mov r13, qword [rsi + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 1
jb 0x14007d1a5
mov r12, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x14007c8f9
mov r12, qword [rsi]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
lea r15, [r13 + 1]
mov edi, 0xf
lea rbx, [rsp + 0x60]
lea eax, [rdi + 7]
lea rdx, [rdi - 0x10]
cmp r15, rdi
jbe 0x14007c99a
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x14007c93a
mov rdi, rcx
jmp 0x14007c941
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp rdi, rax
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14007c984
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007d1ab
mov rcx, rax
call fcn.140082510
test rax, rax
je 0x14007c97d
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14007c995
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14007c993
call fcn.140082510
mov rbx, rax
jmp 0x14007c995
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rdi
mov r8, r13
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r13], 0x5c
mov byte [rbx + r15], 0
mov r9, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14007c9c9
mov r9, qword [r14]
lea r12, [r14 + 0x10]
mov qword [rbp - 0x80], r12
mov rdi, qword [r12]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14007ca1e
lea rax, [rcx + rdi]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x60]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
lea rax, [rsp + 0x60]
jmp 0x14007ca30
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.14007f560
xor r8d, r8d
mov qword [rbp - 0x50], r8
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x38], r8
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r8
mov qword [rax + 0x18], 0xf
mov byte [rax], r8b
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14007caa0
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ca98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007ca98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
xor r8d, r8d
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov r13, qword [rsi + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 1
jb 0x14007d1b1
cmp qword [rsi + 0x18], 0x10
jb 0x14007cadb
mov rsi, qword [rsi]
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x58], r8
lea r15, [r13 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x40]
cmp r15, rbx
jbe 0x14007cb7c
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14007cb0e
mov rbx, rcx
jmp 0x14007cb1b
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14007cb65
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007d1b7
mov rcx, rax
call fcn.140082510
test rax, rax
je 0x14007cb5e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14007cb77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14007cb74
call fcn.140082510
mov rdi, rax
jmp 0x14007cb77
mov rdi, r8
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, r13
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r13], 0x5c
mov byte [rdi + r15], 0
lea r9, [rbp + 0x30]
mov r13, qword [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae r9, r13
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
mov rdi, qword [rbp + 0x40]
cmp rdi, rax
ja 0x14007cbfc
lea rax, [rcx + rdi]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x40]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
lea rax, [rsp + 0x40]
jmp 0x14007cc12
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.14007f560
mov r13, qword [rbp + 0x30]
xor ebx, ebx
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14007cc7d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cc78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007cc78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
lea r8, str.AssignedAccessConfiguration_XVBGJG7H68GRLRWPGZUU0RS4JB3RBSJFZFIA
lea rdx, str.SOFTWAREMicrosoftWindowsAssignedAccessConfiguration
lea rcx, [rbp - 0x30]
call fcn.140080110
nop
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp - 0x20]
sub rax, rcx
cmp rax, 4
jb 0x14007d1bd
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae r9, qword [rbp - 0x30]
mov qword [rsp + 0x30], 4
lea rax, str..exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.14007f960
nop
lea r8, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae r8, qword [rsp + 0x60]
mov rax, qword [rsp + 0x70]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.14007e560
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14007cd63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cd5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007cd5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], bx
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14007cd83
mov rdx, qword [r14]
lea rcx, [rbp + 0x10]
mov rsi, qword [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rcx, rsi
mov r8, qword [rbp + 0x20]
cmp r8, qword [r12]
jne 0x14007cdb8
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14007cdb8
mov eax, ebx
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x40]
jmp 0x14007cef8
mov r15, qword [0x14008a0d8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 4
jb 0x14007d1c3
lea rax, [0x14008a0c8]
cmp qword [0x14008a0e0], 0x10
cmovae rax, qword [0x14008a0c8]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], rbx
lea r12, [r15 + 4]
mov edi, 0xf
lea rbx, [rsp + 0x40]
cmp r12, rdi
jbe 0x14007ce93
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x14007ce21
mov rdi, rcx
jmp 0x14007ce2e
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14007ce79
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007d19f
mov rcx, rax
call fcn.140082510
test rax, rax
je 0x14007cf2f
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rbp - 0x78]
jmp 0x14007ce8e
test rcx, rcx
je 0x14007ce8c
call fcn.140082510
mov rbx, rax
mov rax, qword [rbp - 0x78]
jmp 0x14007ce8e
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [rbx + r15], 0x6578652e
mov byte [rbx + r12], 0
cmp qword [r14 + 0x18], 0x10
jb 0x14007cec2
mov r14, qword [r14]
lea rcx, [rsp + 0x40]
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0x50]
mov rax, qword [rbp - 0x80]
cmp r8, qword [rax]
jne 0x14007cf01
mov rdx, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14007cf01
mov eax, 1
mov r14b, 1
test eax, eax
je 0x14007cf66
jmp 0x14007cf04
xor r14b, r14b
cmp rdi, 0x10
jb 0x14007cf3e
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14007cf36
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007cf36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14008279c
test r14b, r14b
jne 0x14007cf66
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
nop
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14007cfa5
lea rdx, [rax + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14007cf9c
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007cf9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14008279c
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14007cfe8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cfe3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007cfe3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
xor ebx, ebx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], bx
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14007d038
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d033
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007d033
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14007d086
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d081
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007d081
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rax, qword [rbp + 0x48]
cmp rax, 0x10
jb 0x14007d0d5
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14007d0cc
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007d0cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.14008279c
nop
lea rcx, [rbp + 0x70]
call fcn.14007e030
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14007d122
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d11d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007d11d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
mov qword [rbp], rbx
mov qword [rbp + 8], 7
mov word [rbp - 0x10], bx
mov rdx, qword [rbp + 0x68]
cmp rdx, 8
jb 0x14007d175
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d170
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007d170
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008279c
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1400824f0
mov rbx, qword [rsp + 0x250]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001560
nop
call fcn.140001600
int3
call fcn.140001560
nop
call fcn.140001600
int3
call fcn.140001560
nop
call fcn.140001600
nop
call fcn.140001600
int3