Function at 0x140009530
Capabilities:
Check if file exists
Get file attributes
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x14021a328]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov byte [rsp + 0x38], r8b
mov rsi, rdx
mov qword [rsp + 0x48], rdx
mov rdi, rcx
xor r14d, r14d
lea rcx, [rbp + 0x100]
xor edx, edx
mov r8d, 0x104
mov ebx, r14d
mov r15d, r14d
call fcn.1400ae310
xorps xmm0, xmm0
mov eax, 0x1fe5
xor r13b, r13b
mov word [rsp + 0x34], ax
xor eax, eax
mov dword [rsp + 0x3c], r13d
test dword [rdi + 0x24], 0x80000004
mov r12d, r14d
mov r14b, 1
mov dword [rbp + 0x20], eax
movups xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x30], r14d
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
jne 0x1400095f5
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x1400095ff
cmp dword [rax], ebx
je 0x1400095ff
cmp dword [rax + 4], 1
jne 0x140009674
mov ebx, 0xbb9
jmp 0x140009881
xor edx, edx
lea rcx, [rbp + 0x320]
mov r8d, 0x104
call fcn.1400ae310
lea rcx, [0x140127974]
test rsi, rsi
lea rax, [0x140127970]
mov edx, 0x104
cmovne rax, rcx
lea r9, [rdi + 0x28]
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x20], rax
mov r8d, 2
call fcn.140013c70
mov rcx, qword [rdi + 0xb8]
lea r9, [0x140127a64]
lea r8, [rbp + 0x320]
mov edx, 2
call fcn.1400103d0
cmp byte [rdi + 0x23], 2
jae 0x140009674
mov dword [rdi + 0x20], 0x2000000
cmp qword [rdi + 0xb0], rbx
je 0x140009cb2
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x140009cb2
cmp dword [rax], 1
jne 0x140009cb2
cmp qword [rax + 8], rbx
je 0x140009cb2
lea rcx, [rdi + 0xc8]
mov edx, 0x100
call fcn.14000d0f0
cmp byte [rdi + 0x8a], bl
lea r14, [rdi + 0x49]
movzx edx, byte [rdi + 0x23]
mov ecx, 0x28
mov esi, 0x8a
mov byte [rsp + 0x34], dl
cmove esi, ecx
mov ecx, 0x20
add rsi, rdi
cmp dl, 1
jne 0x1400096f9
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0xc1fe5
jmp 0x140009784
cmp dl, 2
jne 0x140009ca8
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0x941fe5
test rsi, rsi
jne 0x14000971f
mov rax, r15
jmp 0x14000972f
mov rdx, rcx
mov rcx, rsi
call fcn.1400d5db8
mov ecx, 0x20
mov rdx, rcx
mov r9, rax
lea rcx, [rbp - 0x64]
mov r8, rsi
call fcn.14000c3f0
test r14, r14
jne 0x14000974b
mov rax, r15
jmp 0x140009758
mov edx, 0x40
mov rcx, r14
call fcn.1400d5db8
mov r9, rax
lea rcx, [rbp - 0x44]
mov r8, r14
mov edx, 0x40
call fcn.14000c3f0
mov eax, dword [rdi + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
mov dword [rbp + 0x1c], r15d
movups xmmword [rbp + 0xc], xmm0
mov dword [rbp + 0x20], eax
call fcn.14000fac0
mov qword [rsp + 0x40], rax
mov r15, rax
test rax, rax
jne 0x1400097a0
mov ebx, 0x708
jmp 0x14000987c
mov r9, qword [rdi + 0xb8]
lea rax, str..tmp
lea r8, [0x140127cdc]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x100]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c210
lea r9, [0x140127ce4]
mov edx, 2
lea r8, [rbp + 0x100]
mov rcx, r15
call fcn.1400100e0
test eax, eax
je 0x1400097f8
mov ebx, 0xbbb
jmp 0x14000987c
mov rcx, r15
call fcn.14000fc90
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
mov qword [rsp + 0x50], rax
mov r14, rax
call fcn.140010540
mov rcx, rax
movzx eax, word [rbp - 0x6e]
cmp rcx, rax
je 0x14000982c
mov ebx, 0xbba
jmp 0x14000987c
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x140009a6f
cmp byte [rsp + 0x34], 2
mov r13d, ebx
movzx eax, byte [rsp + 0x38]
mov r15, rbx
cmovae r13d, eax
mov r14d, 0x1000
test r13b, r13b
je 0x14000994b
mov rcx, rsi
call fcn.14000fcd0
mov r14, rax
cmp rax, 1
jae 0x14000994b
mov ebx, 0xbba
mov r15, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x30]
mov rcx, r15
call fcn.14000faf0
test r12, r12
je 0x140009896
mov rcx, r12
call fcn.1400bb754
test ebx, ebx
jne 0x140009cd3
test r14b, r14b
je 0x140009cd3
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x104
call fcn.1400ae310
mov r9, qword [rdi + 0xb8]
lea rax, str..temp
lea r8, [0x140127cdc]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x210]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c210
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x100]
call fcn.1400bce68
test eax, eax
jne 0x140009cd3
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.14000c010
test eax, eax
je 0x140009cbc
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.1400bd14c
test eax, eax
je 0x140009cbc
lea rcx, [rbp + 0x210]
call fcn.1400bd14c
mov ebx, 0xbbc
jmp 0x140009cd3
mov rcx, r14
call fcn.14000c0a0
mov r12, rax
test rax, rax
jne 0x140009965
mov ebx, 0x708
jmp 0x140009877
mov rcx, rsi
call fcn.14000ff30
test eax, eax
je 0x140009980
mov ebx, 0xbbb
jmp 0x140009877
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.140010180
mov rsi, rax
test rax, rax
je 0x140009a4e
xor ebx, ebx
test r13b, r13b
je 0x1400099d6
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x22
mov qword [rsp + 0x5c], r12
mov dword [rsp + 0x64], r14d
mov dword [rsp + 0x68], r14d
call fcn.14000d410
mov ebx, eax
test eax, eax
jne 0x1400099d6
mov r12, qword [rsp + 0x5c]
mov r14d, dword [rsp + 0x64]
mov esi, dword [rsp + 0x68]
test ebx, ebx
jne 0x140009a4e
mov dword [rsp + 0x70], 0x22
mov qword [rsp + 0x74], r12
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x80], esi
test r15, r15
jne 0x140009a13
lea rcx, [rsp + 0x70]
call fcn.14000e550
mov ecx, dword [rsp + 0x3c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rsp + 0x3c], ecx
mov rcx, qword [rsp + 0x40]
mov r8, rsi
mov rdx, r12
call fcn.140010540
cmp rax, rsi
jne 0x140009a49
mov r8, rsi
lea rcx, [rdi + 0xc8]
mov rdx, r12
call fcn.14000d1d0
add r15, rsi
mov rsi, qword [rsp + 0x48]
xor ebx, ebx
jmp 0x140009980
mov ebx, 0xbba
mov rcx, qword [rsp + 0x48]
call fcn.14000fa30
mov r15, qword [rsp + 0x40]
test ebx, ebx
jne 0x14000987c
mov r13d, dword [rsp + 0x3c]
jmp 0x140009aee
cmp dword [rdi + 0xc0], 0x5359454b
jne 0x140009af3
xor esi, esi
nop dword [rax]
mov rcx, qword [rdi + 0xb0]
cmp esi, dword [rcx]
jae 0x140009aee
mov eax, esi
imul r14, rax, 0x2c
add r14, qword [rcx + 8]
test byte [r14], 1
je 0x140009ae8
mov eax, dword [rdi + 0x24]
bt eax, 0x1e
jae 0x140009aab
btr eax, 0x1e
mov dword [rdi + 0x24], eax
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.14000ad00
mov ebx, eax
cmp eax, 0xbbb
jne 0x140009ae0
mov rdx, qword [r14 + 8]
mov rcx, qword [rdi + 0xb0]
call fcn.1400062b0
test eax, eax
jne 0x14000987c
xor ebx, ebx
dec esi
jmp 0x140009ae8
test eax, eax
jne 0x14000987c
inc esi
test ebx, ebx
je 0x140009a80
mov r14, qword [rsp + 0x50]
lea rcx, [rdi + 0xc8]
call fcn.14000cf00
cmp byte [rsp + 0x34], 2
jne 0x14000987c
test r13b, r13b
je 0x140009b18
or dword [rbp - 0x68], 0x40000000
jmp 0x140009b1f
and dword [rbp - 0x68], 0xbfffffff
movzx eax, byte [rdi + 0xca]
lea rdx, [rdi + 0xcc]
cmp al, 0x20
jb 0x140009b38
mov eax, 0x20
jmp 0x140009b3d
test rax, rax
je 0x140009b65
lea rcx, [rbp - 4]
mov r8, rax
test rdx, rdx
je 0x140009b50
call fcn.1400ae640
jmp 0x140009b65
call fcn.1400ae310
call fcn.1400bc8b4
mov dword [rax], 0x16
call fcn.1400bc708
mov rax, qword [rdi + 0x130]
mov rcx, r15
shr rax, 3
mov dword [rbp + 0x1c], eax
call fcn.14000fc90
xor r8d, r8d
mov rdx, r14
mov rcx, r15
mov rsi, rax
call fcn.140010340
test eax, eax
js 0x140009825
lfence
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.140010540
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x140009825
lfence
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.140010340
test eax, eax
js 0x140009825
call fcn.14000fac0
mov rsi, rax
test ebx, ebx
jne 0x140009c9b
test rax, rax
je 0x140009c9b
mov r8, qword [rdi + 0xb8]
lea r9, [0x140127a64]
xor edx, edx
mov rcx, rax
mov r8, qword [r8 + 8]
call fcn.1400100e0
test eax, eax
jne 0x140009c9b
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0xc0], eax
mov r14d, 0x94
movzx eax, word [rbp - 0x6e]
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
cmp ax, r14w
ja 0x140009c93
mov r8d, eax
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.140010180
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x140009c93
mov r8d, r14d
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400ae540
mov ecx, dword [rsp + 0x30]
test eax, eax
movzx ecx, cl
mov eax, 0
cmove ecx, eax
mov dword [rsp + 0x30], ecx
mov rcx, rsi
call fcn.14000fa30
mov rcx, rsi
call fcn.14000faf0
jmp 0x14000987c
mov ebx, 0x3ea
jmp 0x14000987c
mov ebx, 0x8fc
jmp 0x140009881
mov rdx, qword [rdi + 0xb8]
lea rcx, [rbp + 0x210]
mov rdx, qword [rdx + 8]
call fcn.1400bce68
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140009d1f
bt eax, 0xa
jae 0x140009d1f
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140009d0f
test al, 0x10
je 0x140009d0f
lea rcx, [rbp + 0x100]
call fcn.1400d95ec
jmp 0x140009d1b
lea rcx, [rbp + 0x100]
call fcn.1400bd14c
test eax, eax
jne 0x140009d42
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x100]
call fcn.1400d90a4
test eax, eax
jne 0x140009d42
lea rcx, [rbp + 0x100]
call fcn.1400bd14c
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400ac830
mov rbx, qword [rsp + 0x590]
add rsp, 0x540
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret