Function at 0x14003d550
Capabilities:
Check if file exists
Get file attributes
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x1402854d8]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov byte [rsp + 0x38], r8b
mov rsi, rdx
mov qword [rsp + 0x48], rdx
mov rdi, rcx
xor r14d, r14d
lea rcx, [rbp + 0x100]
xor edx, edx
mov r8d, 0x104
mov ebx, r14d
mov r15d, r14d
call fcn.140107f60
xorps xmm0, xmm0
mov eax, 0x1fe5
xor r13b, r13b
mov word [rsp + 0x34], ax
xor eax, eax
mov dword [rsp + 0x3c], r13d
test dword [rdi + 0x24], 0x80000004
mov r12d, r14d
mov r14b, 1
mov dword [rbp + 0x20], eax
movups xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x30], r14d
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
jne 0x14003d615
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x14003d61f
cmp dword [rax], ebx
je 0x14003d61f
cmp dword [rax + 4], 1
jne 0x14003d694
mov ebx, 0xbb9
jmp 0x14003d8a1
xor edx, edx
lea rcx, [rbp + 0x320]
mov r8d, 0x104
call fcn.140107f60
lea rcx, [0x1401840e4]
test rsi, rsi
lea rax, [0x1401840e0]
mov edx, 0x104
cmovne rax, rcx
lea r9, [rdi + 0x28]
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x20], rax
mov r8d, 2
call fcn.140049e50
mov rcx, qword [rdi + 0xb8]
lea r9, [0x1401841d4]
lea r8, [rbp + 0x320]
mov edx, 2
call fcn.140044aa0
cmp byte [rdi + 0x23], 2
jae 0x14003d694
mov dword [rdi + 0x20], 0x2000000
cmp qword [rdi + 0xb0], rbx
je 0x14003dcd2
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x14003dcd2
cmp dword [rax], 1
jne 0x14003dcd2
cmp qword [rax + 8], rbx
je 0x14003dcd2
lea rcx, [rdi + 0xc8]
mov edx, 0x100
call fcn.140041610
cmp byte [rdi + 0x8a], bl
lea r14, [rdi + 0x49]
movzx edx, byte [rdi + 0x23]
mov ecx, 0x28
mov esi, 0x8a
mov byte [rsp + 0x34], dl
cmove esi, ecx
mov ecx, 0x20
add rsi, rdi
cmp dl, 1
jne 0x14003d719
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0xc1fe5
jmp 0x14003d7a4
cmp dl, 2
jne 0x14003dcc8
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0x941fe5
test rsi, rsi
jne 0x14003d73f
mov rax, r15
jmp 0x14003d74f
mov rdx, rcx
mov rcx, rsi
call fcn.140130308
mov ecx, 0x20
mov rdx, rcx
mov r9, rax
lea rcx, [rbp - 0x64]
mov r8, rsi
call fcn.1400408f0
test r14, r14
jne 0x14003d76b
mov rax, r15
jmp 0x14003d778
mov edx, 0x40
mov rcx, r14
call fcn.140130308
mov r9, rax
lea rcx, [rbp - 0x44]
mov r8, r14
mov edx, 0x40
call fcn.1400408f0
mov eax, dword [rdi + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
mov dword [rbp + 0x1c], r15d
movups xmmword [rbp + 0xc], xmm0
mov dword [rbp + 0x20], eax
call fcn.140044160
mov qword [rsp + 0x40], rax
mov r15, rax
test rax, rax
jne 0x14003d7c0
mov ebx, 0x708
jmp 0x14003d89c
mov r9, qword [rdi + 0xb8]
lea rax, str..tmp
lea r8, [0x14018444c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x100]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.140040710
lea r9, [0x140184454]
mov edx, 2
lea r8, [rbp + 0x100]
mov rcx, r15
call fcn.1400447b0
test eax, eax
je 0x14003d818
mov ebx, 0xbbb
jmp 0x14003d89c
mov rcx, r15
call fcn.140044360
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
mov qword [rsp + 0x50], rax
mov r14, rax
call fcn.140044c10
mov rcx, rax
movzx eax, word [rbp - 0x6e]
cmp rcx, rax
je 0x14003d84c
mov ebx, 0xbba
jmp 0x14003d89c
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x14003da8f
cmp byte [rsp + 0x34], 2
mov r13d, ebx
movzx eax, byte [rsp + 0x38]
mov r15, rbx
cmovae r13d, eax
mov r14d, 0x1000
test r13b, r13b
je 0x14003d96b
mov rcx, rsi
call fcn.1400443a0
mov r14, rax
cmp rax, 1
jae 0x14003d96b
mov ebx, 0xbba
mov r15, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x30]
mov rcx, r15
call fcn.140044190
test r12, r12
je 0x14003d8b6
mov rcx, r12
call fcn.140115d24
test ebx, ebx
jne 0x14003dcf3
test r14b, r14b
je 0x14003dcf3
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x104
call fcn.140107f60
mov r9, qword [rdi + 0xb8]
lea rax, str..temp
lea r8, [0x14018444c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x210]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.140040710
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x100]
call fcn.1401183a8
test eax, eax
jne 0x14003dcf3
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.140040510
test eax, eax
je 0x14003dcdc
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.14011868c
test eax, eax
je 0x14003dcdc
lea rcx, [rbp + 0x210]
call fcn.14011868c
mov ebx, 0xbbc
jmp 0x14003dcf3
mov rcx, r14
call fcn.1400405a0
mov r12, rax
test rax, rax
jne 0x14003d985
mov ebx, 0x708
jmp 0x14003d897
mov rcx, rsi
call fcn.140044600
test eax, eax
je 0x14003d9a0
mov ebx, 0xbbb
jmp 0x14003d897
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.140044850
mov rsi, rax
test rax, rax
je 0x14003da6e
xor ebx, ebx
test r13b, r13b
je 0x14003d9f6
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x22
mov qword [rsp + 0x5c], r12
mov dword [rsp + 0x64], r14d
mov dword [rsp + 0x68], r14d
call fcn.140041930
mov ebx, eax
test eax, eax
jne 0x14003d9f6
mov r12, qword [rsp + 0x5c]
mov r14d, dword [rsp + 0x64]
mov esi, dword [rsp + 0x68]
test ebx, ebx
jne 0x14003da6e
mov dword [rsp + 0x70], 0x22
mov qword [rsp + 0x74], r12
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x80], esi
test r15, r15
jne 0x14003da33
lea rcx, [rsp + 0x70]
call fcn.140042c00
mov ecx, dword [rsp + 0x3c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rsp + 0x3c], ecx
mov rcx, qword [rsp + 0x40]
mov r8, rsi
mov rdx, r12
call fcn.140044c10
cmp rax, rsi
jne 0x14003da69
mov r8, rsi
lea rcx, [rdi + 0xc8]
mov rdx, r12
call fcn.1400416f0
add r15, rsi
mov rsi, qword [rsp + 0x48]
xor ebx, ebx
jmp 0x14003d9a0
mov ebx, 0xbba
mov rcx, qword [rsp + 0x48]
call fcn.1400440d0
mov r15, qword [rsp + 0x40]
test ebx, ebx
jne 0x14003d89c
mov r13d, dword [rsp + 0x3c]
jmp 0x14003db0e
cmp dword [rdi + 0xc0], 0x5359454b
jne 0x14003db13
xor esi, esi
nop dword [rax]
mov rcx, qword [rdi + 0xb0]
cmp esi, dword [rcx]
jae 0x14003db0e
mov eax, esi
imul r14, rax, 0x2c
add r14, qword [rcx + 8]
test byte [r14], 1
je 0x14003db08
mov eax, dword [rdi + 0x24]
bt eax, 0x1e
jae 0x14003dacb
btr eax, 0x1e
mov dword [rdi + 0x24], eax
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.14003ed90
mov ebx, eax
cmp eax, 0xbbb
jne 0x14003db00
mov rdx, qword [r14 + 8]
mov rcx, qword [rdi + 0xb0]
call fcn.14003a510
test eax, eax
jne 0x14003d89c
xor ebx, ebx
dec esi
jmp 0x14003db08
test eax, eax
jne 0x14003d89c
inc esi
test ebx, ebx
je 0x14003daa0
mov r14, qword [rsp + 0x50]
lea rcx, [rdi + 0xc8]
call fcn.140041420
cmp byte [rsp + 0x34], 2
jne 0x14003d89c
test r13b, r13b
je 0x14003db38
or dword [rbp - 0x68], 0x40000000
jmp 0x14003db3f
and dword [rbp - 0x68], 0xbfffffff
movzx eax, byte [rdi + 0xca]
lea rdx, [rdi + 0xcc]
cmp al, 0x20
jb 0x14003db58
mov eax, 0x20
jmp 0x14003db5d
test rax, rax
je 0x14003db85
lea rcx, [rbp - 4]
mov r8, rax
test rdx, rdx
je 0x14003db70
call fcn.140108290
jmp 0x14003db85
call fcn.140107f60
call fcn.140117d28
mov dword [rax], 0x16
call fcn.140117b7c
mov rax, qword [rdi + 0x130]
mov rcx, r15
shr rax, 3
mov dword [rbp + 0x1c], eax
call fcn.140044360
xor r8d, r8d
mov rdx, r14
mov rcx, r15
mov rsi, rax
call fcn.140044a10
test eax, eax
js 0x14003d845
lfence
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.140044c10
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x14003d845
lfence
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.140044a10
test eax, eax
js 0x14003d845
call fcn.140044160
mov rsi, rax
test ebx, ebx
jne 0x14003dcbb
test rax, rax
je 0x14003dcbb
mov r8, qword [rdi + 0xb8]
lea r9, [0x1401841d4]
xor edx, edx
mov rcx, rax
mov r8, qword [r8 + 8]
call fcn.1400447b0
test eax, eax
jne 0x14003dcbb
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0xc0], eax
mov r14d, 0x94
movzx eax, word [rbp - 0x6e]
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
cmp ax, r14w
ja 0x14003dcb3
mov r8d, eax
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.140044850
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x14003dcb3
mov r8d, r14d
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140108190
mov ecx, dword [rsp + 0x30]
test eax, eax
movzx ecx, cl
mov eax, 0
cmove ecx, eax
mov dword [rsp + 0x30], ecx
mov rcx, rsi
call fcn.1400440d0
mov rcx, rsi
call fcn.140044190
jmp 0x14003d89c
mov ebx, 0x3ea
jmp 0x14003d89c
mov ebx, 0x8fc
jmp 0x14003d8a1
mov rdx, qword [rdi + 0xb8]
lea rcx, [rbp + 0x210]
mov rdx, qword [rdx + 8]
call fcn.1401183a8
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x14003dd3f
bt eax, 0xa
jae 0x14003dd3f
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x14003dd2f
test al, 0x10
je 0x14003dd2f
lea rcx, [rbp + 0x100]
call fcn.1401338c4
jmp 0x14003dd3b
lea rcx, [rbp + 0x100]
call fcn.14011868c
test eax, eax
jne 0x14003dd62
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x100]
call fcn.14013337c
test eax, eax
jne 0x14003dd62
lea rcx, [rbp + 0x100]
call fcn.14011868c
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.140106650
mov rbx, qword [rsp + 0x590]
add rsp, 0x540
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret