Function at 0x140009550
Capabilities:
Check if file exists
Get file attributes
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x140214ec8]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov byte [rsp + 0x38], r8b
mov rsi, rdx
mov qword [rsp + 0x48], rdx
mov rdi, rcx
xor r14d, r14d
lea rcx, [rbp + 0x100]
xor edx, edx
mov r8d, 0x104
mov ebx, r14d
mov r15d, r14d
call fcn.1400ad590
xorps xmm0, xmm0
mov eax, 0x1fe5
xor r13b, r13b
mov word [rsp + 0x34], ax
xor eax, eax
mov dword [rsp + 0x3c], r13d
test dword [rdi + 0x24], 0x80000004
mov r12d, r14d
mov r14b, 1
mov dword [rbp + 0x20], eax
movups xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x30], r14d
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
jne 0x140009615
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x14000961f
cmp dword [rax], ebx
je 0x14000961f
cmp dword [rax + 4], 1
jne 0x140009694
mov ebx, 0xbb9
jmp 0x1400098a1
xor edx, edx
lea rcx, [rbp + 0x320]
mov r8d, 0x104
call fcn.1400ad590
lea rcx, [0x140127924]
test rsi, rsi
lea rax, [0x140127920]
mov edx, 0x104
cmovne rax, rcx
lea r9, [rdi + 0x28]
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x20], rax
mov r8d, 2
call fcn.140013cf0
mov rcx, qword [rdi + 0xb8]
lea r9, [0x140127a14]
lea r8, [rbp + 0x320]
mov edx, 2
call fcn.140010440
cmp byte [rdi + 0x23], 2
jae 0x140009694
mov dword [rdi + 0x20], 0x2000000
cmp qword [rdi + 0xb0], rbx
je 0x140009cd2
mov rax, qword [rdi + 0xb8]
test rax, rax
je 0x140009cd2
cmp dword [rax], 1
jne 0x140009cd2
cmp qword [rax + 8], rbx
je 0x140009cd2
lea rcx, [rdi + 0xc8]
mov edx, 0x100
call fcn.14000d130
cmp byte [rdi + 0x8a], bl
lea r14, [rdi + 0x49]
movzx edx, byte [rdi + 0x23]
mov ecx, 0x28
mov esi, 0x8a
mov byte [rsp + 0x34], dl
cmove esi, ecx
mov ecx, 0x20
add rsi, rdi
cmp dl, 1
jne 0x140009719
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0xc1fe5
jmp 0x1400097a4
cmp dl, 2
jne 0x140009cc8
mov eax, dword [rdi + 0x20]
mov dword [rbp - 0x6c], eax
mov eax, dword [rdi + 0x24]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], 0x941fe5
test rsi, rsi
jne 0x14000973f
mov rax, r15
jmp 0x14000974f
mov rdx, rcx
mov rcx, rsi
call fcn.1400d5838
mov ecx, 0x20
mov rdx, rcx
mov r9, rax
lea rcx, [rbp - 0x64]
mov r8, rsi
call fcn.14000c410
test r14, r14
jne 0x14000976b
mov rax, r15
jmp 0x140009778
mov edx, 0x40
mov rcx, r14
call fcn.1400d5838
mov r9, rax
lea rcx, [rbp - 0x44]
mov r8, r14
mov edx, 0x40
call fcn.14000c410
mov eax, dword [rdi + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
mov dword [rbp + 0x1c], r15d
movups xmmword [rbp + 0xc], xmm0
mov dword [rbp + 0x20], eax
call fcn.14000fb00
mov qword [rsp + 0x40], rax
mov r15, rax
test rax, rax
jne 0x1400097c0
mov ebx, 0x708
jmp 0x14000989c
mov r9, qword [rdi + 0xb8]
lea rax, str..tmp
lea r8, [0x140127c8c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x100]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c230
lea r9, [0x140127c94]
mov edx, 2
lea r8, [rbp + 0x100]
mov rcx, r15
call fcn.140010150
test eax, eax
je 0x140009818
mov ebx, 0xbbb
jmp 0x14000989c
mov rcx, r15
call fcn.14000fd00
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
mov qword [rsp + 0x50], rax
mov r14, rax
call fcn.1400105b0
mov rcx, rax
movzx eax, word [rbp - 0x6e]
cmp rcx, rax
je 0x14000984c
mov ebx, 0xbba
jmp 0x14000989c
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x140009a8f
cmp byte [rsp + 0x34], 2
mov r13d, ebx
movzx eax, byte [rsp + 0x38]
mov r15, rbx
cmovae r13d, eax
mov r14d, 0x1000
test r13b, r13b
je 0x14000996b
mov rcx, rsi
call fcn.14000fd40
mov r14, rax
cmp rax, 1
jae 0x14000996b
mov ebx, 0xbba
mov r15, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x30]
mov rcx, r15
call fcn.14000fb30
test r12, r12
je 0x1400098b6
mov rcx, r12
call fcn.1400bb254
test ebx, ebx
jne 0x140009cf3
test r14b, r14b
je 0x140009cf3
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x104
call fcn.1400ad590
mov r9, qword [rdi + 0xb8]
lea rax, str..temp
lea r8, [0x140127c8c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x210]
mov ecx, 0x104
mov r9, qword [r9 + 8]
call fcn.14000c230
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x100]
call fcn.1400bd8d8
test eax, eax
jne 0x140009cf3
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.14000c030
test eax, eax
je 0x140009cdc
mov rcx, qword [rdi + 0xb8]
mov rcx, qword [rcx + 8]
call fcn.1400bdbbc
test eax, eax
je 0x140009cdc
lea rcx, [rbp + 0x210]
call fcn.1400bdbbc
mov ebx, 0xbbc
jmp 0x140009cf3
mov rcx, r14
call fcn.14000c0c0
mov r12, rax
test rax, rax
jne 0x140009985
mov ebx, 0x708
jmp 0x140009897
mov rcx, rsi
call fcn.14000ffa0
test eax, eax
je 0x1400099a0
mov ebx, 0xbbb
jmp 0x140009897
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.1400101f0
mov rsi, rax
test rax, rax
je 0x140009a6e
xor ebx, ebx
test r13b, r13b
je 0x1400099f6
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x22
mov qword [rsp + 0x5c], r12
mov dword [rsp + 0x64], r14d
mov dword [rsp + 0x68], r14d
call fcn.14000d450
mov ebx, eax
test eax, eax
jne 0x1400099f6
mov r12, qword [rsp + 0x5c]
mov r14d, dword [rsp + 0x64]
mov esi, dword [rsp + 0x68]
test ebx, ebx
jne 0x140009a6e
mov dword [rsp + 0x70], 0x22
mov qword [rsp + 0x74], r12
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x80], esi
test r15, r15
jne 0x140009a33
lea rcx, [rsp + 0x70]
call fcn.14000e590
mov ecx, dword [rsp + 0x3c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rsp + 0x3c], ecx
mov rcx, qword [rsp + 0x40]
mov r8, rsi
mov rdx, r12
call fcn.1400105b0
cmp rax, rsi
jne 0x140009a69
mov r8, rsi
lea rcx, [rdi + 0xc8]
mov rdx, r12
call fcn.14000d210
add r15, rsi
mov rsi, qword [rsp + 0x48]
xor ebx, ebx
jmp 0x1400099a0
mov ebx, 0xbba
mov rcx, qword [rsp + 0x48]
call fcn.14000fa70
mov r15, qword [rsp + 0x40]
test ebx, ebx
jne 0x14000989c
mov r13d, dword [rsp + 0x3c]
jmp 0x140009b0e
cmp dword [rdi + 0xc0], 0x5359454b
jne 0x140009b13
xor esi, esi
nop dword [rax]
mov rcx, qword [rdi + 0xb0]
cmp esi, dword [rcx]
jae 0x140009b0e
mov eax, esi
imul r14, rax, 0x2c
add r14, qword [rcx + 8]
test byte [r14], 1
je 0x140009b08
mov eax, dword [rdi + 0x24]
bt eax, 0x1e
jae 0x140009acb
btr eax, 0x1e
mov dword [rdi + 0x24], eax
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.14000ad20
mov ebx, eax
cmp eax, 0xbbb
jne 0x140009b00
mov rdx, qword [r14 + 8]
mov rcx, qword [rdi + 0xb0]
call fcn.1400062d0
test eax, eax
jne 0x14000989c
xor ebx, ebx
dec esi
jmp 0x140009b08
test eax, eax
jne 0x14000989c
inc esi
test ebx, ebx
je 0x140009aa0
mov r14, qword [rsp + 0x50]
lea rcx, [rdi + 0xc8]
call fcn.14000cf40
cmp byte [rsp + 0x34], 2
jne 0x14000989c
test r13b, r13b
je 0x140009b38
or dword [rbp - 0x68], 0x40000000
jmp 0x140009b3f
and dword [rbp - 0x68], 0xbfffffff
movzx eax, byte [rdi + 0xca]
lea rdx, [rdi + 0xcc]
cmp al, 0x20
jb 0x140009b58
mov eax, 0x20
jmp 0x140009b5d
test rax, rax
je 0x140009b85
lea rcx, [rbp - 4]
mov r8, rax
test rdx, rdx
je 0x140009b70
call fcn.1400ad8c0
jmp 0x140009b85
call fcn.1400ad590
call fcn.1400bd258
mov dword [rax], 0x16
call fcn.1400bd0ac
mov rax, qword [rdi + 0x130]
mov rcx, r15
shr rax, 3
mov dword [rbp + 0x1c], eax
call fcn.14000fd00
xor r8d, r8d
mov rdx, r14
mov rcx, r15
mov rsi, rax
call fcn.1400103b0
test eax, eax
js 0x140009845
lfence
movzx r8d, word [rbp - 0x6e]
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.1400105b0
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x140009845
lfence
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.1400103b0
test eax, eax
js 0x140009845
call fcn.14000fb00
mov rsi, rax
test ebx, ebx
jne 0x140009cbb
test rax, rax
je 0x140009cbb
mov r8, qword [rdi + 0xb8]
lea r9, [0x140127a14]
xor edx, edx
mov rcx, rax
mov r8, qword [r8 + 8]
call fcn.140010150
test eax, eax
jne 0x140009cbb
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0xc0], eax
mov r14d, 0x94
movzx eax, word [rbp - 0x6e]
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
cmp ax, r14w
ja 0x140009cb3
mov r8d, eax
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.1400101f0
movzx ecx, word [rbp - 0x6e]
cmp rax, rcx
jne 0x140009cb3
mov r8d, r14d
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400ad7c0
mov ecx, dword [rsp + 0x30]
test eax, eax
movzx ecx, cl
mov eax, 0
cmove ecx, eax
mov dword [rsp + 0x30], ecx
mov rcx, rsi
call fcn.14000fa70
mov rcx, rsi
call fcn.14000fb30
jmp 0x14000989c
mov ebx, 0x3ea
jmp 0x14000989c
mov ebx, 0x8fc
jmp 0x1400098a1
mov rdx, qword [rdi + 0xb8]
lea rcx, [rbp + 0x210]
mov rdx, qword [rdx + 8]
call fcn.1400bd8d8
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140009d3f
bt eax, 0xa
jae 0x140009d3f
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140009d2f
test al, 0x10
je 0x140009d2f
lea rcx, [rbp + 0x100]
call fcn.1400d8df4
jmp 0x140009d3b
lea rcx, [rbp + 0x100]
call fcn.1400bdbbc
test eax, eax
jne 0x140009d62
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x100]
call fcn.1400d88ac
test eax, eax
jne 0x140009d62
lea rcx, [rbp + 0x100]
call fcn.1400bdbbc
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400abc80
mov rbx, qword [rsp + 0x590]
add rsp, 0x540
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret