Function at 0x180076960
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov ebx, dword [rsp + 0xb0]
mov r13d, r8d
mov r12, r9
mov r8, rdx
mov r14, rcx
lea eax, [r13 + 6]
mov dword [rsp + 0x58], eax
cmp r13d, eax
jae case.0x1800769ca.78
mov rbp, qword [rsp + 0x58]
lea rdx, [0x180000000]
mov rsi, qword [rsp + 0x58]
lea eax, [r13 - 0x45]
cmp eax, 0xc
ja case.0x1800769ca.70
mov ecx, dword [rdx + rax*4 + 0x76d0c]
add rcx, rdx
jmp rcx
mov eax, dword [r8]
lea rdx, [rsp + 0x40]
xor r9d, r9d
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0xb0]
mov dword [rsp + 0x30], 4
lea r8, [rsp + 0x38]
mov dword [rsp + 0x48], 4
mov dword [rsp + 0x40], 4
lea ecx, [r9 + 0x47]
mov qword [rsp + 0x20], rax
call fcn.180072000
mov r9, qword [r12]
lea rcx, [rsp + 0xb0]
mov edx, 1
lea r8d, [rdx + 3]
call qword [r14]
cmp rax, 4
jne 0x180076a5e
mov rax, qword [rsp + 0xa8]
mov edx, 1
mov r9, qword [r12]
mov r8d, dword [rax]
mov rcx, qword [rax + 8]
call qword [r14]
mov r8, qword [rsp + 0xa8]
mov rcx, rax
mov eax, dword [r8]
cmp rcx, rax
je 0x180076c5e
xor eax, eax
jmp 0x180076c75
mov eax, dword [r8 + 0x10]
lea rdx, [rsp + 0x38]
mov r15d, dword [rsp + 0x48]
lea r8, [rsp + 0x40]
xor r9d, r9d
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0xb0]
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x20], rax
lea ecx, [r9 + 0x47]
call fcn.180072000
mov r9, qword [r12]
lea rcx, [rsp + 0xb0]
mov r8d, r15d
mov edx, 1
call qword [r14]
cmp rax, r15
jne 0x180076a5e
mov r8, qword [rsp + 0xa8]
xor edi, edi
cmp dword [r8 + 0x10], edi
jbe 0x180076c5e
mov eax, dword [rsp + 0x30]
mov rdx, qword [r8 + 0x18]
mov r15d, eax
nop word [rax + rax]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x50]
xor r9d, r9d
mov r14d, edi
add r14, r14
lea ecx, [r9 + 0x47]
mov eax, dword [rdx + r14*8]
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.180072000
mov rax, qword [rsp + 0xa0]
lea rcx, [rsp + 0xb0]
mov r9, qword [r12]
mov r8, r15
mov edx, 1
call qword [rax]
cmp rax, r15
jne 0x180076a5e
mov rax, qword [rsp + 0xa8]
mov edx, 1
mov r9, qword [r12]
mov rax, qword [rax + 0x18]
mov r8d, dword [rax + r14*8]
mov rcx, qword [rax + r14*8 + 8]
mov rax, qword [rsp + 0xa0]
call qword [rax]
mov r8, qword [rsp + 0xa8]
mov rcx, rax
mov rdx, qword [r8 + 0x18]
mov eax, dword [rdx + r14*8]
cmp rcx, rax
jne 0x180076a5e
mov eax, dword [rsp + 0x30]
inc edi
cmp edi, dword [r8 + 0x10]
jb 0x180076ae0
mov r14, qword [rsp + 0xa0]
jmp 0x180076c5e
mov ebx, 1
jmp case.0x1800769ca.70
cmp dword [0x1800924b8], 0
je 0x180076c93
mov edi, 0xc2
nop dword [rax]
mov eax, edi
sub eax, 0xbe
je 0x180076c8d
sub eax, 1
je 0x180076c3f
sub eax, 1
je 0x180076c3a
sub eax, 1
je 0x180076c32
cmp eax, 1
jne 0x180076c48
mov r8d, 0x8e
mov dword [rsp + 0x34], 0xffffffff
mov rdx, r12
xor ecx, ecx
xor esi, esi
call fcn.1800540c0
mov rbp, rax
test rax, rax
je 0x180076c2b
mov r8d, 0x8e
mov rdx, r14
xor ecx, ecx
call fcn.1800540c0
mov rsi, rax
test rax, rax
je 0x180076c2b
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
mov dword [rsp + 0x34], eax
mov edi, 0xc2
jmp 0x180076c48
mov r13d, 0x51
jmp 0x180076c48
mov rcx, rbp
jmp 0x180076c42
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
dec edi
cmp edi, 0xbd
ja 0x180076bc0
mov r8, qword [rsp + 0xa8]
lea rdx, [0x180000000]
inc r13d
cmp r13d, dword [rsp + 0x58]
jb 0x1800769b3
mov eax, ebx
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [rsp + 0x34]
jmp 0x180076c75
mov rdx, r14
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
jmp 0x180076c75
mov eax, dword [r12]
lea rdx, [rsp + 0x58]
xor r9d, r9d
mov dword [rsp + 0x58], eax
xor r8d, r8d
lea ecx, [r9 + 0x55]
call fcn.18001eff0
test eax, eax
je 0x180076a5e
mov r8d, dword [r12]
cmp r8d, 0x10000
jb 0x180076d01
mov eax, 0x10624dd3
mul r8d
shr edx, 6
imul ecx, edx, 0x3e8
cmp r8d, ecx
je 0x180076d01
mov eax, 0xcccccccd
mul r8d
shr edx, 3
lea ecx, [rdx + rdx*4]
add ecx, ecx
cmp r8d, ecx
jne 0x180076a5e
mov eax, 1
jmp 0x180076c75