Function at 0x140009e00
Capabilities:
Check if file exists
Get file attributes
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x140210ef8]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov byte [rsp + 0x38], r8b
mov rsi, rdx
mov qword [rsp + 0x48], rdx
mov rdi, rcx
xor r14d, r14d
lea rcx, [rbp + 0x100]
xor edx, edx
mov r8d, 0x104
mov ebx, r14d
mov r15d, r14d
call fcn.1400a7d00
xorps xmm0, xmm0
mov eax, 0x1fe5
xor r13b, r13b
mov word [rsp + 0x34], ax
xor eax, eax
mov dword [rsp + 0x3c], r13d
test dword [rdi + 0x24], 0x80000004
mov r12d, r14d
mov r14b, 1
mov dword [rbp + 0x20], eax
movups xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x30], r14d
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
jne 0x140009ec5
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x140009ecf
cmp dword [rax], ebx
je 0x140009ecf
cmp dword [rax + 4], 1
jne 0x140009f44
mov ebx, 0xbb9
jmp 0x14000a14b
xor edx, edx
lea rcx, [rbp + 0x320]
mov r8d, 0x104
call fcn.1400a7d00
lea rcx, [0x140120ad4]
test rsi, rsi
lea rax, [0x140120ad0]
mov edx, 0x104
cmovne rax, rcx
lea r9, [rdi + 0x28]
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x20], rax
mov r8d, 2
call fcn.140014740
mov rcx, qword [rdi + 0xb8]
lea r9, [0x140120bc4]
lea r8, [rbp + 0x320]
mov edx, 2
call fcn.140010ea0
cmp byte [rdi + 0x23], 2
jae 0x140009f44
mov dword [rdi + 0x20], 0x2000000
cmp qword [rdi + 0xb0], rbx
je 0x14000a574
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x14000a574
cmp dword [rax], 1
jne 0x14000a574
cmp qword [rax + 8], rbx
je 0x14000a574
lea rcx, [rdi + 0xc8]
mov edx, 0x100
call fcn.14000dbc0
cmp byte [rdi + 0x8a], bl
lea r14, [rdi + 0x49]
movzx ecx, byte [rdi + 0x23]
mov esi, 0x8a
mov edx, 0x28
mov byte [rsp + 0x34], cl
cmove esi, edx
add rsi, rdi
cmp cl, 1
jne 0x140009fc4
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0xc1fe5
jmp 0x14000a04e
cmp cl, 2
jne 0x14000a56a
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0x941fe5
test rsi, rsi
jne 0x140009fea
mov rax, r15
jmp 0x140009ff7
mov edx, 0x20
mov rcx, rsi
call fcn.1400cf7a8
mov r9, rax
lea rcx, [rbp - 0x64]
mov r8, rsi
mov edx, 0x20
call fcn.14000cb70
test r14, r14
jne 0x14000a015
mov rax, r15
jmp 0x14000a022
mov edx, 0x40
mov rcx, r14
call fcn.1400cf7a8
mov r9, rax
lea rcx, [rbp - 0x44]
mov r8, r14
mov edx, 0x40
call fcn.14000cb70
mov eax, dword [rdi + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
mov dword [rbp + 0x1c], r15d
movups xmmword [rbp + 0xc], xmm0
mov dword [rbp + 0x20], eax
call fcn.140010590
mov qword [rsp + 0x40], rax
mov r15, rax
test rax, rax
jne 0x14000a06a
mov ebx, 0x708
jmp 0x14000a146
mov r9, qword [rdi + 0xb8]
lea rax, str..tmp
lea r8, [0x140120e44]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x100]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c990
lea r9, [0x140120e4c]
mov edx, 2
lea r8, [rbp + 0x100]
mov rcx, r15
call fcn.140010bb0
test eax, eax
je 0x14000a0c2
mov ebx, 0xbbb
jmp 0x14000a146
mov rcx, r15
call fcn.140010760
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
mov qword [rsp + 0x50], rax
mov r14, rax
call fcn.140011010
mov rcx, rax
movzx eax, word [rbp - 0x6e]
cmp rcx, rax
je 0x14000a0f6
mov ebx, 0xbba
jmp 0x14000a146
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x14000a33f
cmp byte [rsp + 0x34], 2
mov r13d, ebx
movzx eax, byte [rsp + 0x38]
mov r15, rbx
cmovae r13d, eax
mov r14d, 0x1000
test r13b, r13b
je 0x14000a215
mov rcx, rsi
call fcn.1400107a0
mov r14, rax
cmp rax, 1
jae 0x14000a215
mov ebx, 0xbba
mov r15, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x30]
mov rcx, r15
call fcn.1400105c0
test r12, r12
je 0x14000a160
mov rcx, r12
call fcn.1400b5144
test ebx, ebx
jne 0x14000a595
test r14b, r14b
je 0x14000a595
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x104
call fcn.1400a7d00
mov r9, qword [rdi + 0xb8]
lea rax, str..temp
lea r8, [0x140120e44]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x210]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c990
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x100]
call fcn.1400b6858
test eax, eax
jne 0x14000a595
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.14000c790
test eax, eax
je 0x14000a57e
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.1400b6b3c
test eax, eax
je 0x14000a57e
lea rcx, [rbp + 0x210]
call fcn.1400b6b3c
mov ebx, 0xbbc
jmp 0x14000a595
mov rcx, r14
call fcn.14000c820
mov r12, rax
test rax, rax
jne 0x14000a22f
mov ebx, 0x708
jmp 0x14000a141
mov rcx, rsi
call fcn.140010a00
test eax, eax
je 0x14000a250
mov ebx, 0xbbb
jmp 0x14000a141
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.140010c50
mov rsi, rax
test rax, rax
je 0x14000a31e
xor ebx, ebx
test r13b, r13b
je 0x14000a2a6
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x22
mov qword [rsp + 0x5c], r12
mov dword [rsp + 0x64], r14d
mov dword [rsp + 0x68], r14d
call fcn.14000dee0
mov ebx, eax
test eax, eax
jne 0x14000a2a6
mov r12, qword [rsp + 0x5c]
mov r14d, dword [rsp + 0x64]
mov esi, dword [rsp + 0x68]
test ebx, ebx
jne 0x14000a31e
mov dword [rsp + 0x70], 0x22
mov qword [rsp + 0x74], r12
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x80], esi
test r15, r15
jne 0x14000a2e3
lea rcx, [rsp + 0x70]
call fcn.14000f020
mov ecx, dword [rsp + 0x3c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rsp + 0x3c], ecx
mov rcx, qword [rsp + 0x40]
mov r8, rsi
mov rdx, r12
call fcn.140011010
cmp rax, rsi
jne 0x14000a319
mov r8, rsi
lea rcx, [rdi + 0xc8]
mov rdx, r12
call fcn.14000dca0
add r15, rsi
mov rsi, qword [rsp + 0x48]
xor ebx, ebx
jmp 0x14000a250
mov ebx, 0xbba
mov rcx, qword [rsp + 0x48]
call fcn.140010500
mov r15, qword [rsp + 0x40]
test ebx, ebx
jne 0x14000a146
mov r13d, dword [rsp + 0x3c]
jmp 0x14000a3be
cmp dword [rdi + 0xc0], 0x5359454b
jne 0x14000a3c3
xor esi, esi
nop dword [rax]
mov rcx, qword [rdi + 0xb0]
cmp esi, dword [rcx]
jae 0x14000a3be
mov eax, esi
imul r14, rax, 0x2c
add r14, qword [rcx + 8]
test byte [r14], 1
je 0x14000a3b8
mov eax, dword [rdi + 0x24]
bt eax, 0x1e
jae 0x14000a37b
btr eax, 0x1e
mov dword [rdi + 0x24], eax
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.14000b480
mov ebx, eax
cmp eax, 0xbbb
jne 0x14000a3b0
mov rdx, qword [r14 + 8]
mov rcx, qword [rdi + 0xb0]
call fcn.140006d20
test eax, eax
jne 0x14000a146
xor ebx, ebx
dec esi
jmp 0x14000a3b8
test eax, eax
jne 0x14000a146
inc esi
test ebx, ebx
je 0x14000a350
mov r14, qword [rsp + 0x50]
lea rcx, [rdi + 0xc8]
call fcn.14000d9d0
cmp byte [rsp + 0x34], 2
jne 0x14000a146
test r13b, r13b
je 0x14000a3e8
or dword [rbp - 0x68], 0x40000000
jmp 0x14000a3ef
and dword [rbp - 0x68], 0xbfffffff
lea rax, [rdi + 0xcc]
test rax, rax
je 0x14000a40c
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 4], xmm0
movups xmmword [rbp + 0xc], xmm1
jmp 0x14000a427
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
movups xmmword [rbp + 0xc], xmm0
call fcn.1400b62a4
mov dword [rax], 0x16
call fcn.1400b60f8
mov rax, qword [rdi + 0x130]
mov rcx, r15
shr rax, 3
mov dword [rbp + 0x1c], eax
call fcn.140010760
xor r8d, r8d
mov rdx, r14
mov rcx, r15
mov rsi, rax
call fcn.140010e10
test eax, eax
js 0x14000a0ef
lfence
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.140011010
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x14000a0ef
lfence
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.140010e10
test eax, eax
js 0x14000a0ef
call fcn.140010590
mov rsi, rax
test ebx, ebx
jne 0x14000a55d
test rax, rax
je 0x14000a55d
mov r8, qword [rdi + 0xb8]
lea r9, [0x140120bc4]
xor edx, edx
mov rcx, rax
mov r8, qword [r8 + 8]
call fcn.140010bb0
test eax, eax
jne 0x14000a55d
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0xc0], eax
mov r14d, 0x94
movzx eax, word [rbp - 0x6e]
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
cmp ax, r14w
ja 0x14000a555
mov r8d, eax
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.140010c50
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x14000a555
mov r8d, r14d
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400a7f30
mov ecx, dword [rsp + 0x30]
test eax, eax
movzx ecx, cl
mov eax, 0
cmove ecx, eax
mov dword [rsp + 0x30], ecx
mov rcx, rsi
call fcn.140010500
mov rcx, rsi
call fcn.1400105c0
jmp 0x14000a146
mov ebx, 0x3ea
jmp 0x14000a146
mov ebx, 0x8fc
jmp 0x14000a14b
mov rdx, qword [rdi + 0xb8]
lea rcx, [rbp + 0x210]
mov rdx, qword [rdx + 8]
call fcn.1400b6858
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x14000a5e1
bt eax, 0xa
jae 0x14000a5e1
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x14000a5d1
test al, 0x10
je 0x14000a5d1
lea rcx, [rbp + 0x100]
call fcn.1400d2fdc
jmp 0x14000a5dd
lea rcx, [rbp + 0x100]
call fcn.1400b6b3c
test eax, eax
jne 0x14000a604
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x100]
call fcn.1400d2a94
test eax, eax
jne 0x14000a604
lea rcx, [rbp + 0x100]
call fcn.1400b6b3c
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400a6220
mov rbx, qword [rsp + 0x590]
add rsp, 0x540
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret