Function at 0x140009510
Capabilities:
Check if file exists
Get file attributes
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x140214ec8]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov byte [rsp + 0x38], r8b
mov rsi, rdx
mov qword [rsp + 0x48], rdx
mov rdi, rcx
xor r14d, r14d
lea rcx, [rbp + 0x100]
xor edx, edx
mov r8d, 0x104
mov ebx, r14d
mov r15d, r14d
call fcn.1400ad180
xorps xmm0, xmm0
mov eax, 0x1fe5
xor r13b, r13b
mov word [rsp + 0x34], ax
xor eax, eax
mov dword [rsp + 0x3c], r13d
test dword [rdi + 0x24], 0x80000004
mov r12d, r14d
mov r14b, 1
mov dword [rbp + 0x20], eax
movups xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x30], r14d
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
jne 0x1400095d5
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x1400095df
cmp dword [rax], ebx
je 0x1400095df
cmp dword [rax + 4], 1
jne 0x140009654
mov ebx, 0xbb9
jmp 0x140009861
xor edx, edx
lea rcx, [rbp + 0x320]
mov r8d, 0x104
call fcn.1400ad180
lea rcx, [0x140127924]
test rsi, rsi
lea rax, [0x140127920]
mov edx, 0x104
cmovne rax, rcx
lea r9, [rdi + 0x28]
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x20], rax
mov r8d, 2
call fcn.140013cb0
mov rcx, qword [rdi + 0xb8]
lea r9, [0x140127a14]
lea r8, [rbp + 0x320]
mov edx, 2
call fcn.140010400
cmp byte [rdi + 0x23], 2
jae 0x140009654
mov dword [rdi + 0x20], 0x2000000
cmp qword [rdi + 0xb0], rbx
je 0x140009c92
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x140009c92
cmp dword [rax], 1
jne 0x140009c92
cmp qword [rax + 8], rbx
je 0x140009c92
lea rcx, [rdi + 0xc8]
mov edx, 0x100
call fcn.14000d0f0
cmp byte [rdi + 0x8a], bl
lea r14, [rdi + 0x49]
movzx edx, byte [rdi + 0x23]
mov ecx, 0x28
mov esi, 0x8a
mov byte [rsp + 0x34], dl
cmove esi, ecx
mov ecx, 0x20
add rsi, rdi
cmp dl, 1
jne 0x1400096d9
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0xc1fe5
jmp 0x140009764
cmp dl, 2
jne 0x140009c88
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0x941fe5
test rsi, rsi
jne 0x1400096ff
mov rax, r15
jmp 0x14000970f
mov rdx, rcx
mov rcx, rsi
call fcn.1400d5428
mov ecx, 0x20
mov rdx, rcx
mov r9, rax
lea rcx, [rbp - 0x64]
mov r8, rsi
call fcn.14000c3d0
test r14, r14
jne 0x14000972b
mov rax, r15
jmp 0x140009738
mov edx, 0x40
mov rcx, r14
call fcn.1400d5428
mov r9, rax
lea rcx, [rbp - 0x44]
mov r8, r14
mov edx, 0x40
call fcn.14000c3d0
mov eax, dword [rdi + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
mov dword [rbp + 0x1c], r15d
movups xmmword [rbp + 0xc], xmm0
mov dword [rbp + 0x20], eax
call fcn.14000fac0
mov qword [rsp + 0x40], rax
mov r15, rax
test rax, rax
jne 0x140009780
mov ebx, 0x708
jmp 0x14000985c
mov r9, qword [rdi + 0xb8]
lea rax, str..tmp
lea r8, [0x140127c8c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x100]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c1f0
lea r9, [0x140127c94]
mov edx, 2
lea r8, [rbp + 0x100]
mov rcx, r15
call fcn.140010110
test eax, eax
je 0x1400097d8
mov ebx, 0xbbb
jmp 0x14000985c
mov rcx, r15
call fcn.14000fcc0
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
mov qword [rsp + 0x50], rax
mov r14, rax
call fcn.140010570
mov rcx, rax
movzx eax, word [rbp - 0x6e]
cmp rcx, rax
je 0x14000980c
mov ebx, 0xbba
jmp 0x14000985c
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x140009a4f
cmp byte [rsp + 0x34], 2
mov r13d, ebx
movzx eax, byte [rsp + 0x38]
mov r15, rbx
cmovae r13d, eax
mov r14d, 0x1000
test r13b, r13b
je 0x14000992b
mov rcx, rsi
call fcn.14000fd00
mov r14, rax
cmp rax, 1
jae 0x14000992b
mov ebx, 0xbba
mov r15, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x30]
mov rcx, r15
call fcn.14000faf0
test r12, r12
je 0x140009876
mov rcx, r12
call fcn.1400bae44
test ebx, ebx
jne 0x140009cb3
test r14b, r14b
je 0x140009cb3
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x104
call fcn.1400ad180
mov r9, qword [rdi + 0xb8]
lea rax, str..temp
lea r8, [0x140127c8c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x210]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c1f0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x100]
call fcn.1400bd4c8
test eax, eax
jne 0x140009cb3
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.14000bff0
test eax, eax
je 0x140009c9c
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.1400bd7ac
test eax, eax
je 0x140009c9c
lea rcx, [rbp + 0x210]
call fcn.1400bd7ac
mov ebx, 0xbbc
jmp 0x140009cb3
mov rcx, r14
call fcn.14000c080
mov r12, rax
test rax, rax
jne 0x140009945
mov ebx, 0x708
jmp 0x140009857
mov rcx, rsi
call fcn.14000ff60
test eax, eax
je 0x140009960
mov ebx, 0xbbb
jmp 0x140009857
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.1400101b0
mov rsi, rax
test rax, rax
je 0x140009a2e
xor ebx, ebx
test r13b, r13b
je 0x1400099b6
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x22
mov qword [rsp + 0x5c], r12
mov dword [rsp + 0x64], r14d
mov dword [rsp + 0x68], r14d
call fcn.14000d410
mov ebx, eax
test eax, eax
jne 0x1400099b6
mov r12, qword [rsp + 0x5c]
mov r14d, dword [rsp + 0x64]
mov esi, dword [rsp + 0x68]
test ebx, ebx
jne 0x140009a2e
mov dword [rsp + 0x70], 0x22
mov qword [rsp + 0x74], r12
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x80], esi
test r15, r15
jne 0x1400099f3
lea rcx, [rsp + 0x70]
call fcn.14000e550
mov ecx, dword [rsp + 0x3c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rsp + 0x3c], ecx
mov rcx, qword [rsp + 0x40]
mov r8, rsi
mov rdx, r12
call fcn.140010570
cmp rax, rsi
jne 0x140009a29
mov r8, rsi
lea rcx, [rdi + 0xc8]
mov rdx, r12
call fcn.14000d1d0
add r15, rsi
mov rsi, qword [rsp + 0x48]
xor ebx, ebx
jmp 0x140009960
mov ebx, 0xbba
mov rcx, qword [rsp + 0x48]
call fcn.14000fa30
mov r15, qword [rsp + 0x40]
test ebx, ebx
jne 0x14000985c
mov r13d, dword [rsp + 0x3c]
jmp 0x140009ace
cmp dword [rdi + 0xc0], 0x5359454b
jne 0x140009ad3
xor esi, esi
nop dword [rax]
mov rcx, qword [rdi + 0xb0]
cmp esi, dword [rcx]
jae 0x140009ace
mov eax, esi
imul r14, rax, 0x2c
add r14, qword [rcx + 8]
test byte [r14], 1
je 0x140009ac8
mov eax, dword [rdi + 0x24]
bt eax, 0x1e
jae 0x140009a8b
btr eax, 0x1e
mov dword [rdi + 0x24], eax
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.14000ace0
mov ebx, eax
cmp eax, 0xbbb
jne 0x140009ac0
mov rdx, qword [r14 + 8]
mov rcx, qword [rdi + 0xb0]
call fcn.140006290
test eax, eax
jne 0x14000985c
xor ebx, ebx
dec esi
jmp 0x140009ac8
test eax, eax
jne 0x14000985c
inc esi
test ebx, ebx
je 0x140009a60
mov r14, qword [rsp + 0x50]
lea rcx, [rdi + 0xc8]
call fcn.14000cf00
cmp byte [rsp + 0x34], 2
jne 0x14000985c
test r13b, r13b
je 0x140009af8
or dword [rbp - 0x68], 0x40000000
jmp 0x140009aff
and dword [rbp - 0x68], 0xbfffffff
movzx eax, byte [rdi + 0xca]
lea rdx, [rdi + 0xcc]
cmp al, 0x20
jb 0x140009b18
mov eax, 0x20
jmp 0x140009b1d
test rax, rax
je 0x140009b45
lea rcx, [rbp - 4]
mov r8, rax
test rdx, rdx
je 0x140009b30
call fcn.1400ad4b0
jmp 0x140009b45
call fcn.1400ad180
call fcn.1400bce48
mov dword [rax], 0x16
call fcn.1400bcc9c
mov rax, qword [rdi + 0x130]
mov rcx, r15
shr rax, 3
mov dword [rbp + 0x1c], eax
call fcn.14000fcc0
xor r8d, r8d
mov rdx, r14
mov rcx, r15
mov rsi, rax
call fcn.140010370
test eax, eax
js 0x140009805
lfence
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.140010570
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x140009805
lfence
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.140010370
test eax, eax
js 0x140009805
call fcn.14000fac0
mov rsi, rax
test ebx, ebx
jne 0x140009c7b
test rax, rax
je 0x140009c7b
mov r8, qword [rdi + 0xb8]
lea r9, [0x140127a14]
xor edx, edx
mov rcx, rax
mov r8, qword [r8 + 8]
call fcn.140010110
test eax, eax
jne 0x140009c7b
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0xc0], eax
mov r14d, 0x94
movzx eax, word [rbp - 0x6e]
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
cmp ax, r14w
ja 0x140009c73
mov r8d, eax
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.1400101b0
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x140009c73
mov r8d, r14d
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400ad3b0
mov ecx, dword [rsp + 0x30]
test eax, eax
movzx ecx, cl
mov eax, 0
cmove ecx, eax
mov dword [rsp + 0x30], ecx
mov rcx, rsi
call fcn.14000fa30
mov rcx, rsi
call fcn.14000faf0
jmp 0x14000985c
mov ebx, 0x3ea
jmp 0x14000985c
mov ebx, 0x8fc
jmp 0x140009861
mov rdx, qword [rdi + 0xb8]
lea rcx, [rbp + 0x210]
mov rdx, qword [rdx + 8]
call fcn.1400bd4c8
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140009cff
bt eax, 0xa
jae 0x140009cff
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140009cef
test al, 0x10
je 0x140009cef
lea rcx, [rbp + 0x100]
call fcn.1400d89e4
jmp 0x140009cfb
lea rcx, [rbp + 0x100]
call fcn.1400bd7ac
test eax, eax
jne 0x140009d22
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x100]
call fcn.1400d849c
test eax, eax
jne 0x140009d22
lea rcx, [rbp + 0x100]
call fcn.1400bd7ac
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400ab870
mov rbx, qword [rsp + 0x590]
add rsp, 0x540
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret