Function at 0x140017580
Capabilities:
Move file

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x120
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov rax, qword [0x1400d2478]
xor rax, rsp
mov qword [rsp + 0x118], rax
mov rdi, r8
mov qword [rsp + 0x60], r8
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0x48], rcx
mov qword [r11 - 0x48], rdx
xor eax, eax
mov dword [rsp + 0x40], eax
mov qword [r11 - 0xa0], 7
mov qword [r11 - 0xa8], rax
mov word [rsp + 0xa0], ax
lea r8d, [rax + 0xa]
lea rdx, str.RenameLogs
lea rcx, [r11 - 0xc0]
call fcn.140001870
nop
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae r9, qword [rsp + 0xa0]
lea rax, str.Function_start
mov qword [rsp + 0x20], rax
mov edx, 0x32
lea r8d, [rdx - 0x31]
mov rcx, rsi
call fcn.1400144a0
mov rax, qword [rdi + 0x28]
mov rcx, qword [rax]
mov qword [rsp + 0x58], rcx
mov rax, qword [rdi]
mov qword [rsp + 0x50], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
mov r12, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
xor esi, esi
mov rbx, qword [rdi + 0x28]
test r12, r12
je 0x140017673
cmp r12, qword [rdi]
je 0x140017678
call fcn.1400679f0
cmp r13, rbx
je 0x140017ba2
test r12, r12
jne 0x140017690
call fcn.1400679f0
mov r11, rsi
jmp 0x140017694
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x14001769f
call fcn.1400679f0
cmp dword [r13 + 0x38], 0
jne 0x140017b7b
test r12, r12
jne 0x1400176b9
call fcn.1400679f0
mov r11, rsi
jmp 0x1400176bd
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x1400176c8
call fcn.1400679f0
mov ebx, dword [r13 + 0x44]
shl rbx, 0x20
test r12, r12
jne 0x1400176df
call fcn.1400679f0
mov r11, rsi
jmp 0x1400176e3
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x1400176ee
call fcn.1400679f0
mov eax, dword [r13 + 0x48]
add rbx, rax
cmp rbx, 0x1312d00
jle 0x140017b7b
test r12, r12
jne 0x140017711
call fcn.1400679f0
mov r11, rsi
jmp 0x140017715
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x140017720
call fcn.1400679f0
cmp qword [r13 + 0x30], 8
jb 0x14001772d
mov rcx, qword [r13 + 0x18]
jmp 0x140017731
lea rcx, [r13 + 0x18]
lea rdx, str._OLD_
call fcn.140067a28
test rax, rax
jne 0x140017b7b
mov qword [rsp + 0x90], 7
mov qword [rsp + 0x88], rsi
mov word [rsp + 0x78], si
mov qword [rsp + 0x108], 7
mov qword [rsp + 0x100], rsi
mov word [rsp + 0xf0], si
mov qword [rsp + 0xe0], 7
mov qword [rsp + 0xd8], rsi
mov word [rsp + 0xc8], si
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140001500
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x14001786d
test rdi, rdi
je 0x140017856
cmp rdi, 0xffffffffffffffff
jbe 0x1400177d1
or rcx, 0xffffffffffffffff
jmp 0x1400177d5
lea rcx, [rdi - 1]
lea rax, [rsp + 0x78]
mov rsi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x90]
cmp rbp, 8
cmovae rax, rsi
lea rbx, [rax + rcx*2]
nop word [rax + rax]
mov ecx, 1
lea rax, [0x1400ad338]
movzx edx, word [rbx]
nop
cmp word [rax], dx
je 0x140017834
add rax, 2
sub rcx, 1
jne 0x140017810
lea rcx, [rsp + 0x70]
call fcn.1400016d0
cmp rbx, rax
je 0x140017856
sub rbx, 2
jmp 0x140017800
lea rax, [rsp + 0x78]
cmp rbp, 8
cmovae rax, rsi
sub rbx, rax
sar rbx, 1
cmp rbx, 0xffffffffffffffff
je 0x140017856
lea rax, [rbx + 1]
cmp rdi, rax
je 0x14001786d
mov r8d, 1
lea rdx, [0x1400ad338]
lea rcx, [rsp + 0x70]
call fcn.14000a130
test r12, r12
jne 0x14001787e
call fcn.1400679f0
xor esi, esi
mov r11, rsi
jmp 0x140017884
mov r11, qword [r12]
xor esi, esi
cmp r13, qword [r11 + 0x28]
jne 0x14001788f
call fcn.1400679f0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [r13 + 0x10]
lea rcx, [rsp + 0x70]
call fcn.140001720
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0xc0]
call fcn.140001500
mov r8d, 5
lea rdx, str._OLD_
lea rcx, [rsp + 0x70]
call fcn.14000a130
test r12, r12
jne 0x1400178e3
call fcn.1400679f0
mov r11, rsi
jmp 0x1400178e7
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x1400178f2
call fcn.1400679f0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [r13 + 0x10]
lea rcx, [rsp + 0xe8]
call fcn.140001500
mov r8d, 5
lea rdx, str._OLD_
lea rcx, [rsp + 0xe8]
call fcn.14000a130
mov ebp, 4
mov ebx, esi
nop dword [rax + rax]
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rcx, qword [rsp + 0x78]
xor edx, edx
call fcn.140067f44
test eax, eax
jne 0x1400179e6
lea r8d, [rax + 1]
lea rdx, [0x1400adccc]
lea rcx, [rsp + 0x70]
call fcn.14000a130
mov r8d, 1
lea rdx, [0x1400adccc]
lea rcx, [rsp + 0xe8]
call fcn.14000a130
inc ebx
cmp ebx, 0x64
jl 0x140017930
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rax, qword [rsp + 0xc8]
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae r9, qword [rsp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, str.Error_deleting_file:__s
mov qword [rsp + 0x20], rax
mov edx, reloc.Cabinet.dll_FDICreate
lea r8d, [rdx - 0x13]
mov rcx, qword [rsp + 0x48]
call fcn.1400144a0
jmp 0x140017aa3
lea rdx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x140017aa9
lea ebp, [rax + 0xd]
lea rsi, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rsi, qword [rsp + 0x78]
lea rdi, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rdi, qword [rsp + 0xc8]
lea rbx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae rbx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
lea rax, [0x1400adcd0]
mov qword [rsp + 0x20], rax
mov r9, rbx
lea edx, [rbp + 7]
lea r8d, [rbp - 0xc]
mov rcx, qword [rsp + 0x48]
call fcn.1400144a0
xor esi, esi
mov dword [rsp + 0x40], ebp
jmp 0x140017ae0
test r12, r12
jne 0x140017ab8
call fcn.1400679f0
mov r11, rsi
jmp 0x140017abc
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x140017ac7
call fcn.1400679f0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xe8]
lea rcx, [r13 + 0x10]
call fcn.140001500
nop
cmp qword [rsp + 0xe0], 8
jb 0x140017af8
mov rcx, qword [rsp + 0xc8]
call fcn.140065920
mov qword [rsp + 0xe0], 7
mov qword [rsp + 0xd8], rsi
mov word [rsp + 0xc8], si
cmp qword [rsp + 0x108], 8
jb 0x140017b2c
mov rcx, qword [rsp + 0xf0]
call fcn.140065920
mov qword [rsp + 0x108], 7
mov qword [rsp + 0x100], rsi
mov word [rsp + 0xf0], si
cmp qword [rsp + 0x90], 8
jb 0x140017b5d
mov rcx, qword [rsp + 0x78]
call fcn.140065920
mov qword [rsp + 0x90], 7
mov qword [rsp + 0x88], rsi
mov word [rsp + 0x78], si
mov rdi, qword [rsp + 0x60]
test r12, r12
jne 0x140017b8a
call fcn.1400679f0
mov r11, rsi
jmp 0x140017b8e
mov r11, qword [r12]
cmp r13, qword [r11 + 0x28]
jne 0x140017b99
call fcn.1400679f0
mov r13, qword [r13]
jmp 0x140017665
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae r9, qword [rsp + 0xa0]
mov edi, dword [rsp + 0x40]
mov dword [rsp + 0x28], edi
lea rax, str.Return_code__0x_x_
mov qword [rsp + 0x20], rax
mov edx, 0x28
lea r8d, [rdx - 0x27]
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.1400144a0
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae r9, qword [rsp + 0xa0]
lea rax, str.Function_end
mov qword [rsp + 0x20], rax
mov edx, 0x32
lea r8d, [rdx - 0x31]
mov rcx, rbx
call fcn.1400144a0
nop
cmp qword [rsp + 0xb8], 8
jb 0x140017c36
mov rcx, qword [rsp + 0xa0]
call fcn.140065920
mov qword [rsp + 0xb8], 7
mov qword [rsp + 0xb0], rsi
mov word [rsp + 0xa0], si
cmp qword [r15 + 0x20], 8
jb 0x140017c62
mov rcx, qword [r15 + 8]
call fcn.140065920
mov qword [r15 + 0x20], 7
mov qword [r15 + 0x18], rsi
mov word [r15 + 8], si
mov eax, edi
mov rcx, qword [rsp + 0x118]
xor rcx, rsp
call fcn.140064b70
mov rbx, qword [rsp + 0x178]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret