Function at 0x1800101a0
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rbp + 0x17], rax
imul ebx, r8d, 0x154
mov eax, r8d
mov r15d, r8d
mov dword [rbp - 0x39], r8d
mov qword [rbp - 0x31], r9
mov r13, rcx
mov qword [rbp - 0x29], rdx
mov r8d, 0x74
mov dword [rbp - 0x51], eax
mov dword [rbp - 0x69], ebx
cmp eax, ebx
mov ebx, dword [rbp - 0x61]
ja 0x18001029f
mov r15, qword [rbp - 9]
lea r10d, [r8 - 0x30]
mov r14d, dword [rbp - 0x61]
lea r11d, [r8 - 0xb]
mov r12d, dword [rbp - 0x61]
mov edi, dword [rbp - 0x61]
mov esi, dword [rbp - 0x61]
mov ecx, dword [rbp - 0x69]
nop word [rax + rax]
cmp eax, 0xa1e
ja 0x180010391
je 0x1800106d4
sub eax, 0x2c
je 0x180010380
sub eax, 0x1e
je 0x180010354
sub eax, 0x77
je 0x180010315
sub eax, 0x69
je 0x180010264
cmp eax, 0x4da
jne 0x18001028d
mov word [rbp + 3], r10w
mov word [rbp + 4], r11w
jmp 0x18001028d
mov rdx, qword [r9]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov qword [rbp - 0x59], rax
mov r9, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x29]
mov r8d, 0x74
lea r10d, [r8 - 0x30]
lea r11d, [r8 - 0xb]
mov ecx, dword [rbp - 0x69]
imul eax, dword [rbp - 0x39], 0x22
add dword [rbp - 0x51], eax
mov eax, dword [rbp - 0x51]
cmp eax, ecx
jbe 0x180010220
mov r15d, dword [rbp - 0x39]
imul r14d, r15d, 0x2da
mov edi, r15d
cmp r15d, r14d
ja 0x1800106d4
mov rsi, qword [rbp - 9]
mov ecx, 0x6e
lea r12d, [rcx - 9]
nop
cmp edi, 0x25d0
ja 0x180010650
je 0x180010647
mov eax, edi
sub eax, 0x2c
je 0x180010637
sub eax, 0x95
je 0x1800105f2
sub eax, 0x69
je 0x1800106d4
sub eax, 0xb8e
je 0x1800105e8
cmp eax, 0xc8c
jne 0x1800106bf
mov word [rbp + 0x13], r12w
mov word [rbp + 0x14], cx
jmp 0x1800106bf
test r13, r13
je 0x1800105dc
mov r8d, 0xb2
mov rdx, r13
xor ecx, ecx
call fcn.18005d210
test al, al
je 0x180010274
mov r8d, 0xd7
mov dword [rbp - 0x49], 0
mov rdx, r13
lea rcx, [rbp - 0x49]
call fcn.180048e40
jmp 0x180010274
mov rdx, r9
mov rcx, r13
call qword [r13]
test al, al
je 0x1800105d3
mov r9, qword [rbp - 0x31]
mov rax, qword [r9 + 8]
cmp qword [r9], rax
je 0x1800105d3
mov byte [rbp - 0x59], 1
jmp 0x180010278
mov dword [rbp - 1], 0x736f48
mov word [rbp + 2], r8w
jmp 0x18001028d
cmp eax, 0xbdc
je 0x1800105c0
cmp eax, 0x1a63
je 0x1800105b7
cmp eax, 0x3405
je 0x1800103c9
cmp eax, 0x4da7
jne 0x18001028d
mov ecx, dword [r13 + 8]
add ecx, r14d
mov dword [r13 + 0xc], ecx
jmp 0x18001028a
mov eax, dword [rdx]
lea r8, [rbp - 0x41]
mov dword [rbp - 0x41], eax
mov rdx, r15
mov eax, dword [r9]
mov ecx, 0x116
lea r9, [rbp - 0x49]
mov dword [rbp - 0x49], eax
call fcn.18003bfe0
cmp eax, 0xffffffff
je 0x1800105dc
mov ebx, 0x85
cmp ebx, 0x85
ja 0x18001046f
je 0x18001045d
cmp ebx, 2
je 0x180010449
cmp ebx, 0x49
je 0x180010428
cmp ebx, 0x4e
jne 0x1800104ba
mov r12d, dword [pe_dos_header]
and r12d, 0xff0000
jmp 0x1800104ba
mov eax, dword [pe_dos_header]
lea r8, [rbp - 0x21]
mov r9, r15
mov dword [rbp - 0x21], eax
mov edx, 0x26
xor ecx, ecx
call fcn.180006ae0
mov edi, eax
jmp 0x1800104ba
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm0
mov qword [r15 + 0x20], rax
jmp 0x1800104ba
test r15, r15
je 0x180010468
mov edi, dword [r15 + 0x10]
jmp 0x1800104ba
mov edi, 0xffffffff
jmp 0x1800104ba
cmp ebx, 0x1d16
je 0x1800104cc
cmp ebx, 0x1f14
je 0x180010489
cmp ebx, 0x34fe
je 0x1800104cc
jmp 0x1800104ba
mov eax, dword [pe_dos_header]
lea r8, [rbp - 0x19]
shl eax, 0x18
btr r12d, 0x15
or eax, r12d
mov qword [rsp + 0x20], 0
mov r9, r15
mov dword [rbp - 0x19], eax
mov edx, 0x103
xor ecx, ecx
call fcn.180059880
add ebx, 0x3479
cmp ebx, 0x16f4f
jbe 0x1800103f7
xor eax, eax
mov dword [r13 + 8], edi
mov qword [rsp + 0x48], rax
xor r9d, r9d
mov qword [rsp + 0x40], rax
mov r8, r15
mov dword [rsp + 0x38], 0x118
xor edx, edx
mov qword [rsp + 0x30], rax
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.1800450c0
mov dword [r13 + 0x10], eax
mov ebx, 0xa8
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xa7
je 0x18001059d
sub eax, 1
je 0x180010557
sub eax, 3
je 0x180010573
cmp eax, 1
jne 0x180010567
mov eax, dword [pe_dos_header]
lea r8, [rbp - 0x11]
mov dword [rbp - 0x61], eax
lea rdx, [rbp - 0x61]
mov eax, dword [r15]
mov ecx, 0x3a
mov dword [rbp - 0x11], eax
call fcn.1800593b0
cmp eax, 0xffffffff
jne 0x180010567
mov esi, eax
jmp 0x18001059d
test r15, r15
je 0x180010562
mov esi, dword [r15 + 8]
jmp 0x180010567
mov esi, 0xffffffff
dec ebx
cmp ebx, 0xa4
ja 0x180010510
jmp 0x18001059d
mov rax, qword [0x180073ee8]
lea rdx, [rbp - 0x41]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov r8d, 0x11f
mov dword [rbp - 0x41], 0xffffffff
xor ecx, ecx
call fcn.180021380
mov rsi, rax
mov r8, r15
mov edx, 0x8e
xor ecx, ecx
mov r14d, esi
call fcn.180034f70
mov rbx, rax
jmp 0x180010274
mov r15, qword [r13]
jmp 0x18001028d
mov dword [rbp + 5], 0x426b73
mov dword [rbp + 8], 0x636f6c
jmp 0x18001028d
mov byte [rbp - 0x59], 0
jmp 0x1800106d4
mov dword [rbp - 0x59], 0xffffffff
jmp 0x1800106d4
mov word [rbp + 0x12], r8w
jmp 0x1800106bf
mov ecx, dword [r13 + 0x10]
mov r8d, 0xb2
add ecx, ebx
mov rdx, r13
mov dword [r13 + 0x14], ecx
xor ecx, ecx
call fcn.18005d210
test al, al
je 0x18001062b
mov r9d, 0x14d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180053590
mov dword [rbp - 0x59], 0
jmp 0x1800106ba
mov dword [rbp + 0xb], 0x6e496b
mov dword [rbp + 0xe], 0x78456f66
jmp 0x1800106bf
mov word [rbp + 0x15], r8w
xor esi, esi
jmp 0x1800106bf
cmp edi, 0x325c
je 0x1800106a1
cmp edi, 0x37ca
je 0x1800106d4
cmp edi, 0x3ee8
je 0x180010672
cmp edi, 0x4b74
je 0x1800106d4
jmp 0x1800106bf
lea rdx, [rbp - 9]
mov rcx, rsi
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov r8d, 2
lea rdx, str.Camera_Indicator_Active
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
cmp qword [r13 + 0x40], 0
setne byte [rbp - 0x59]
jmp 0x1800106ba
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [r13 + 0x40], rax
mov qword [rbp - 9], 0
mov ecx, 0x6e
imul eax, r15d, 0x49
mov r8d, 0x74
add edi, eax
cmp edi, r14d
jbe 0x1800102c0
mov rax, qword [rbp - 0x59]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1800604b0
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret