Function at 0x1400b03b0
Capabilities:
Move file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x140282300]
xor rax, rsp
mov qword [rbp + 0x200], rax
xor ebx, ebx
mov r8d, 0x104
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
lea rax, [rbp + 0xf0]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], bl
jne 0x1400b0422
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x48]
call fcn.140002740
nop
lea rdi, [rsp + 0x48]
mov r15, qword [rsp + 0x48]
mov r12, qword [rsp + 0x60]
cmp r12, 0xf
cmova rdi, r15
lea rbx, [0x14013e434]
lea r13, [0x14013e436]
mov r14, qword [rsp + 0x58]
test r14, r14
je 0x1400b04c8
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
movzx eax, byte [rcx]
mov byte [rbp + rax - 0x10], 1
inc rcx
cmp rcx, r13
jne 0x1400b0480
lea rax, [r14 - 1]
mov r8, rsi
cmp rax, rsi
cmovb r8, rax
add r8, rdi
movzx eax, byte [r8]
cmp byte [rbp + rax - 0x10], 0
jne 0x1400b04c3
nop dword [rax]
cmp r8, rdi
je 0x1400b04c8
dec r8
movzx eax, byte [r8]
cmp byte [rbp + rax - 0x10], 0
je 0x1400b04b0
sub r8, rdi
jmp 0x1400b04cb
mov r8, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
cmp r14, r8
cmovb r8, r14
lea rdx, [rsp + 0x48]
cmp r12, 0xf
cmova rdx, r15
lea rcx, [rbp - 0x58]
call fcn.140002740
nop
lea rdi, [rsp + 0x48]
mov r15, qword [rsp + 0x48]
mov r12, qword [rsp + 0x60]
cmp r12, 0xf
cmova rdi, r15
mov r14, qword [rsp + 0x58]
test r14, r14
je 0x1400b0577
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memset
nop dword [rax]
movzx eax, byte [rbx]
mov byte [rbp + rax - 0x10], 1
inc rbx
cmp rbx, r13
jne 0x1400b0530
lea rax, [r14 - 1]
mov rcx, rsi
cmp rax, rcx
cmovb rcx, rax
add rcx, rdi
movzx eax, byte [rcx]
cmp byte [rbp + rax - 0x10], 0
jne 0x1400b0572
nop dword [rax + rax]
cmp rcx, rdi
je 0x1400b0577
dec rcx
movzx eax, byte [rcx]
cmp byte [rbp + rax - 0x10], 0
je 0x1400b0560
sub rcx, rdi
jmp 0x1400b057a
mov rcx, rsi
inc rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
cmp r14, rcx
jb 0x1400b090c
sub r14, rcx
cmp r14, 0xffffffffffffffff
cmovb rsi, r14
lea rdx, [rsp + 0x48]
cmp r12, 0xf
cmova rdx, r15
add rdx, rcx
mov r8, rsi
lea rcx, [rbp - 0x38]
call fcn.140002740
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xor eax, eax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rax
mov r8d, 0x22
lea rdx, str.ServiceHub.TestWindowStoreHost.exe
lea rcx, [rbp - 0x78]
call fcn.140002740
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rbp - 0x48]
sub rax, r13
cmp rax, 1
jb 0x1400b0900
lea r12, [rbp - 0x58]
mov rsi, qword [rbp - 0x58]
mov r14, qword [rbp - 0x40]
cmp r14, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
lea r15, [r13 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x20]
cmp r15, rbx
jbe 0x1400b06b5
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400b0677
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400da760
test rax, rax
je 0x1400b075c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400b06b0
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400b0690
xor edi, edi
jmp 0x1400b06b0
cmp rcx, 0x1000
jb 0x1400b06a8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400b0906
jmp 0x1400b0658
call fcn.1400da760
mov rdi, rax
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], rbx
mov r8, r13
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r13], 0x5c
mov byte [rdi + r15], 0
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova rdx, qword [rbp - 0x78]
mov r8, qword [rbp - 0x68]
lea rcx, [rsp + 0x20]
call fcn.1400155c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400b0768
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b0763
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b0763
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400da79c
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x1400b07c4
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b07bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b07bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400da79c
movdqa xmm0, xmmword [0x1400e6f60]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400b0816
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b0810
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b0810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400da79c
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400b0855
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b084f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b084f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400da79c
nop
cmp r14, 0xf
jbe 0x1400b0890
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400b0887
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b0887
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400da79c
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400b08d0
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b08cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b08cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400da79c
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.1400dab60
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140013f10
nop
call fcn.140013ec0
nop
call fcn.140013f30
int3