Function at 0x1401191e0
Capabilities:
Check if file exists
Get file attributes
Move file

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
lea rbx, [rcx - 0x120]
mov edx, dword [rbx + 0x70]
cmp edx, 0x13
jg 0x14011946d
je 0x140119460
cmp edx, 0xa
jg 0x14011933f
je 0x140119330
sub edx, 1
je 0x140119323
sub edx, 1
je 0x140119316
sub edx, 1
je 0x140119309
sub edx, 1
je 0x1401192fc
sub edx, 1
je 0x1401192ef
sub edx, 1
je 0x1401192ac
sub edx, 1
je 0x140119271
sub edx, 1
je 0x140119264
cmp edx, 1
jne 0x140119594
mov rcx, rbx
call fcn.1401161f0
jmp 0x140119594
mov rcx, rbx
call fcn.1401160c0
jmp 0x140119594
mov rdi, qword [rbx + 0x150]
mov rcx, rdi
call fcn.140155960
cmp rax, 1
jbe 0x1401192a5
cmp word [rdi + rax*2 - 4], 0x3a
je 0x1401192a5
cmp word [rdi + rax*2 - 2], 0x5c
je 0x14011929e
cmp word [rdi + rax*2 - 2], 0x2f
jne 0x1401192a5
xor ecx, ecx
mov word [rdi + rax*2 - 2], cx
mov edx, 1
jmp 0x1401192e2
mov rdi, qword [rbx + 0x150]
mov rcx, rdi
call fcn.140155960
cmp rax, 1
jbe 0x1401192e0
cmp word [rdi + rax*2 - 4], 0x3a
je 0x1401192e0
cmp word [rdi + rax*2 - 2], 0x5c
je 0x1401192d9
cmp word [rdi + rax*2 - 2], 0x2f
jne 0x1401192e0
xor ecx, ecx
mov word [rdi + rax*2 - 2], cx
xor edx, edx
mov rcx, rbx
call fcn.140117f70
jmp 0x140119594
mov rcx, rbx
call fcn.140117c40
jmp 0x140119594
mov rcx, rbx
call fcn.140118790
jmp 0x140119594
mov rcx, rbx
call fcn.140116e10
jmp 0x140119594
mov rcx, rbx
call fcn.1401158f0
jmp 0x140119594
mov rcx, rbx
call fcn.140116900
jmp 0x140119594
xor edx, edx
mov rcx, rbx
call fcn.1401184a0
jmp 0x140119594
sub edx, 0xb
je 0x140119453
sub edx, 1
je 0x1401193fb
sub edx, 1
je 0x1401193d5
sub edx, 1
je 0x1401193c8
sub edx, 1
je 0x14011938d
sub edx, 1
je 0x14011938d
sub edx, 1
je 0x140119380
cmp edx, 1
jne 0x140119594
mov rcx, rbx
call fcn.1401178a0
jmp 0x140119594
mov rcx, rbx
call fcn.140118300
jmp 0x140119594
mov ecx, dword [rbx + 0x150]
cmp ecx, 0xffffffff
jne 0x1401193ae
mov dword [rbx + 0x14c], 6
mov rcx, 0xfffffffffffff00d
jmp 0x140119447
call fcn.140156620
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
test eax, eax
jne 0x140119447
jmp 0x14011940d
mov rcx, rbx
call fcn.140115eb0
jmp 0x140119594
mov edx, dword [rbx + 0x158]
mov rcx, qword [rbx + 0x150]
call fcn.140156e20
cmp eax, 0xffffffff
jne 0x140119445
call fcn.140150750
mov ecx, dword [rax]
mov dword [rbx + 0x14c], ecx
jmp 0x14011941b
mov rcx, qword [rbx + 0x150]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x140119425
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x14c], eax
mov ecx, eax
call fcn.14011bfd0
movsxd rcx, eax
jmp 0x140119447
test byte [rbx + 0x158], 2
je 0x140119445
and al, 0x11
cmp al, 1
jne 0x140119445
mov dword [rbx + 0x14c], 0xfffff030
mov ecx, 0xfffff030
jmp 0x14011941b
xor ecx, ecx
mov qword [rbx + 0x88], rcx
jmp 0x140119594
mov rcx, rbx
call fcn.1401163a0
jmp 0x140119594
mov rcx, rbx
call fcn.1401165a0
jmp 0x140119594
cmp edx, 0x1c
jg 0x14011952a
je 0x140119520
sub edx, 0x14
je 0x14011950f
sub edx, 1
je 0x1401194f0
sub edx, 1
je 0x1401194e3
sub edx, 1
je 0x1401194c7
sub edx, 1
je 0x1401194ba
sub edx, 1
je 0x1401194ad
sub edx, 1
je 0x140119445
cmp edx, 1
je 0x140119445
jmp 0x140119594
mov rcx, rbx
call fcn.140117350
jmp 0x140119594
mov rcx, rbx
call fcn.140118250
jmp 0x140119594
mov rdx, qword [rbx + 0x150]
xor r8d, r8d
mov rcx, qword [rbx + 0x160]
call qword [sym.imp.KERNEL32.dll_CreateHardLinkW]
jmp 0x1401193bc
mov rcx, rbx
call fcn.1401178e0
jmp 0x140119594
mov rdx, qword [rbx + 0x160]
mov r8d, 1
mov rcx, qword [rbx + 0x150]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x1401193bc
lea rdx, [0x140116610]
mov rcx, rbx
call fcn.140116770
jmp 0x140119594
mov rcx, rbx
call fcn.1401176f0
jmp 0x140119594
sub edx, 0x1d
je 0x14011958c
sub edx, 1
je 0x140119445
sub edx, 1
je 0x140119582
sub edx, 1
je 0x140119578
sub edx, 1
je 0x14011956e
sub edx, 1
je 0x140119564
sub edx, 1
je 0x14011955b
cmp edx, 1
jne 0x140119594
jmp 0x140119332
lea rdx, [0x140116670]
jmp 0x140119516
mov rcx, rbx
call fcn.1401180b0
jmp 0x140119594
mov rcx, rbx
call fcn.140115980
jmp 0x140119594
mov rcx, rbx
call fcn.1401171d0
jmp 0x140119594
mov rcx, rbx
call fcn.140116ca0
jmp 0x140119594
mov rcx, rbx
call fcn.1401159c0
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret