Function at 0x1400057c8
Capabilities:
Get file size
Move file
Set file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x3e0
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x140051010]
xor rax, rsp
mov qword [rbp + 0x2c8], rax
xor ebx, ebx
mov qword [rbp + 0x278], rcx
mov rdi, r8
lea rsi, [rbp + 0x258]
mov r14, rcx
mov r13d, 0xff
lea r15d, [rbx + 4]
lea r12d, [rbx + 1]
mov eax, dword [rdi]
lea ecx, [rax - 1]
mov dword [rdi], ecx
test eax, eax
jne 0x140005842
mov rcx, rdi
call fcn.1400037a0
mov dword [rdi], r13d
mov ecx, r13d
mov eax, dword [rdi + 0x400]
jmp 0x140005846
mov eax, dword [rdi + rcx*4 + 4]
mov dword [rsi], eax
add rsi, 4
sub r15, r12
jne 0x140005821
lea rsi, [rbp + 0x280]
mov r15d, 0xa
mov eax, ecx
dec ecx
mov dword [rdi], ecx
test eax, eax
jne 0x14000587e
mov rcx, rdi
call fcn.1400037a0
mov dword [rdi], r13d
mov ecx, r13d
mov eax, dword [rdi + 0x400]
jmp 0x140005882
mov eax, dword [rdi + rcx*4 + 4]
mov dword [rsi], eax
add rsi, 4
sub r15, r12
jne 0x14000585e
movups xmm0, xmmword [rbp + 0x280]
mov rax, qword [rbp + 0x2a0]
lea rcx, [rbp + 0x190]
movups xmm1, xmmword [rbp + 0x290]
mov qword [rbp + 0x250], rax
movups xmmword [rbp + 0x2a8], xmm0
movups xmmword [rbp + 0x2b8], xmm1
call fcn.140001638
movups xmm6, xmmword [rbp + 0x258]
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x190]
movdqu xmmword [rbp + 0x240], xmm6
call fcn.1400017c4
mov edi, 0x80
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], edi
xor r9d, r9d
mov r8d, r12d
mov edx, 0xc0000000
mov rcx, r14
lea r15d, [rdi - 0x7d]
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
or r13, 0xffffffffffffffff
cmp rsi, r13
jne 0x140005a67
cmp eax, 0x20
jne 0x1400059eb
lea rcx, [0x140053af8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x258], xmm0
movdqu xmmword [rbp + 0x268], xmm1
inc r13
cmp word [r14 + r13*2], bx
jne 0x140005951
mov r8, r13
lea rcx, [rbp + 0x258]
mov rdx, r14
call fcn.14000a578
mov rdx, qword [0x140054960]
cmp rdx, qword [0x140054968]
je 0x1400059c1
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], rbx
movups xmm0, xmmword [rbp + 0x258]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x268]
movdqa xmm0, xmmword [0x14004a2d0]
movups xmmword [rdx + 0x10], xmm1
add qword [0x140054960], 0x20
movdqu xmmword [rbp + 0x268], xmm0
mov word [rbp + 0x258], bx
jmp 0x1400059cd
lea r8, [rbp + 0x258]
call fcn.14000ae70
lea rcx, [rbp + 0x258]
call fcn.140009c3c
lea rcx, [0x140053af8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x140005d80
cmp eax, 5
jne 0x140005d80
mov edx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov r8d, r12d
mov edx, 0xc0000000
mov dword [rsp + 0x20], r15d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, r13
jne 0x140005a67
mov rcx, r14
call fcn.14000434c
test eax, eax
je 0x140005d80
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov r8d, r12d
mov edx, 0xc0000000
mov dword [rsp + 0x20], r15d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, r13
je 0x140005d80
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x60], rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x140005d77
mov rcx, qword [rsp + 0x60]
cmp rcx, 0x2710
jl 0x140005d77
cmp dword [rbp + 0x348], ebx
je 0x140005ab8
cmp rcx, qword [0x140054948]
jle 0x140005ab8
xchg qword [0x140054948], rcx
mov rcx, qword [rsp + 0x60]
movups xmm6, xmmword [rbp + 0x258]
movabs rax, 0xa3d70a3d70a3d70b
mov qword [rsp + 0x50], rbx
imul rcx
mov r8d, 1
mov dword [rsp + 0x40], ebx
add rdx, rcx
mov qword [rsp + 0x48], r8
sar rdx, 6
mov r12, rbx
mov rax, rdx
mov r9d, 0x800000
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*4]
shl rax, 3
cmp rcx, 0x19000
jle 0x140005b27
cmp rax, r9
jle 0x140005b27
cqo
mov qword [rsp + 0x50], r9
and edx, 0x7fffff
mov r12d, r9d
add rax, rdx
sar rax, 0x17
mov qword [rsp + 0x48], rax
jmp 0x140005b2c
mov dword [rsp + 0x40], r8d
xor edx, edx
lea rcx, [rbp - 0x20]
mov r8d, 0x1a8
call fcn.14001d4a0
mov r9d, 0x100
lea r8, [rbp + 0x2a8]
mov edx, 2
lea rcx, [rbp - 0x20]
call fcn.14000eb20
lea r8, [rbp + 0x250]
lea rcx, [rbp - 0x20]
call fcn.14000f220
mov r15d, ebx
mov dword [rbp + 0x250], ebx
mov rdi, rbx
cmp dword [rsp + 0x40], ebx
je 0x140005c37
mov eax, dword [rsp + 0x60]
mov ecx, eax
mov dword [rsp + 0x40], eax
call fcn.1400224e4
mov r12, rax
test rax, rax
je 0x140005d4e
mov r8d, dword [rsp + 0x40]
lea r9, [rsp + 0x58]
mov rdx, rax
mov rcx, rsi
call fcn.140005750
test eax, eax
je 0x140005d46
mov r8d, dword [rsp + 0x58]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x20]
mov r9, r12
mov qword [rsp + 0x20], r8
mov rdx, r12
mov qword [rsp + 0x48], rbx
call fcn.14000f390
test eax, eax
jne 0x140005c04
lea rax, [rbp + 0x278]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x20]
call fcn.14000f8a0
test eax, eax
jne 0x140005d46
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call fcn.140005674
test eax, eax
je 0x140005d46
mov r8d, dword [rsp + 0x58]
lea r9, [rsp + 0x58]
mov rdx, r12
mov rcx, rsi
call fcn.1400056d8
mov r15d, eax
jmp 0x140005d46
mov rcx, r12
call fcn.1400224e4
mov r12, rax
test rax, rax
je 0x140005d4e
mov dword [rbp + 0x250], ebx
cmp qword [rsp + 0x48], rbx
jle 0x140005d46
mov r13, qword [rsp + 0x50]
mov r14d, ebx
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.140005674
mov r15d, eax
test eax, eax
je 0x140005d34
lea r9, [rsp + 0x58]
mov r8d, r13d
mov rdx, r12
mov rcx, rsi
call fcn.140005750
mov r15d, eax
test eax, eax
je 0x140005d34
mov r8d, dword [rsp + 0x58]
cmp r8, r13
jne 0x140005d34
lea rax, [rsp + 0x50]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x20]
mov r9, r12
mov qword [rsp + 0x20], r8
mov rdx, r12
call fcn.14000f390
test eax, eax
jne 0x140005d34
lea rax, [rbp + 0x258]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x20]
call fcn.14000f8a0
test eax, eax
jne 0x140005d1c
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.140005674
test eax, eax
je 0x140005d1c
mov r8d, dword [rsp + 0x58]
lea r9, [rsp + 0x58]
mov rdx, r12
mov rcx, rsi
call fcn.1400056d8
mov r15d, eax
test eax, eax
je 0x140005d34
inc r14d
add rdi, 0x800000
mov eax, r14d
cmp rax, qword [rsp + 0x48]
jl 0x140005c64
mov dword [rbp + 0x250], r14d
or r13, 0xffffffffffffffff
mov r14, qword [rbp + 0x278]
mov rcx, r12
call fcn.1400224d0
lea rcx, [rbp - 0x20]
call fcn.14000fa20
mov eax, dword [rbp + 0x250]
test eax, eax
jne 0x140005daf
test r15d, r15d
jne 0x140005daf
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a8], xmm0
movups xmmword [rbp + 0x2b8], xmm0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2c8]
xor rcx, rsp
call fcn.14001b1a0
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movups xmm0, xmmword [rbp + 0x280]
mov dword [rsp + 0x74], eax
mov r12d, 2
movups xmm1, xmmword [rbp + 0x290]
mov rax, qword [rsp + 0x60]
mov r8d, r12d
movaps xmmword [rbp - 0x80], xmm0
mov rdx, rbx
movsd xmm0, qword [rbp + 0x2a0]
mov rcx, rsi
movsd qword [rbp - 0x60], xmm0
movups xmm0, xmmword [0x140053958]
mov dword [rsp + 0x70], 0x1020102
movaps xmmword [rbp - 0x70], xmm1
movups xmm1, xmmword [0x140053968]
mov qword [rsp + 0x78], rax
movups xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x28], 0x3040304
movdqu xmmword [rbp - 0x58], xmm6
movups xmmword [rbp - 0x38], xmm1
call fcn.140005674
lea r9, [rsp + 0x58]
mov rcx, rsi
lea r8d, [r12 + 0x6a]
lea rdx, [rsp + 0x70]
call fcn.1400056d8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, str..mallab
mov edi, eax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [rax + 1]
mov eax, r12d
add esi, edi
mov ecx, esi
mul rcx
cmovo rax, r13
mov rcx, rax
call fcn.1400224e4
mov rdi, rax
test rax, rax
je 0x140005d80
mov r9, r14
mov qword [rsp + 0x20], r15
lea r8, [0x1400489f0]
mov edx, esi
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_wnsprintfW]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov rcx, rdi
call fcn.1400224d0
jmp 0x140005d80