Function at 0x71e500
Capabilities:
Delete file
Move file

Disassembly:
push rbp
push rbx
sub rsp, 0xe8
mov rbp, rsp
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xa8], rbp
nop
lea rcx, [rbp + 0xc8]
lea rdx, [0x0071e9cc]
call fcn.004480b0
mov rcx, qword [0x004d30d0]
mov dl, 1
mov r8, qword [0x00796280]
lea r9, [0x0071e9e0]
mov qword [rsp + 0x20], 0xa
call fcn.0050eb40
mov qword [rbp + 0xd0], rax
nop
mov rcx, qword [0x0070a688]
mov dl, 1
call fcn.00713ef0
mov qword [rbp + 0xd8], rax
nop
mov rcx, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0xd0]
mov r8b, 1
call fcn.00714140
mov rcx, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0xc8]
call fcn.00715710
nop
mov rcx, qword [rbp + 0xd8]
call fcn.0040d850
nop
mov rcx, qword [rbp + 0xd0]
call fcn.0040d850
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0xc8]
lea r8, [0x0071e9fc]
call fcn.00412270
mov rcx, qword [rbp + 0xa0]
lea rdx, [0x0071ea14]
call fcn.0071e270
lea rcx, [rbp + 0x90]
lea rdx, [0x0071ea48]
call fcn.004480b0
lea rcx, [rbp + 0x98]
mov edx, 3
mov r8, qword [rbp + 0x90]
lea r9, [0x0071ea64]
lea rax, [0x0071ea84]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rax, qword [rbp + 0x98]
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x88]
mov edx, 3
mov r8, qword [rbp + 0xc8]
lea r9, [0x0071e9fc]
lea rax, [0x0071eaa4]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rcx, qword [rbp + 0x88]
call fcn.00411e50
mov rbx, rax
mov rcx, qword [rbp + 0xc0]
call fcn.00411e50
mov rcx, rbx
mov rdx, rax
call sub.kernel32.dll_MoveFileW
lea rcx, [rbp + 0x80]
mov rdx, qword [rbp + 0xc8]
lea r8, [0x0071eabc]
call fcn.00412270
mov rcx, qword [rbp + 0x80]
lea rdx, [0x0071ea14]
call fcn.0071e270
lea rcx, [rbp + 0x70]
lea rdx, [0x0071ea48]
call fcn.004480b0
lea rcx, [rbp + 0x78]
mov edx, 3
mov r8, qword [rbp + 0x70]
lea r9, [0x0071ea64]
lea rax, [0x0071ead4]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0xb8], rax
lea rcx, [rbp + 0x68]
mov edx, 3
mov r8, qword [rbp + 0xc8]
lea r9, [0x0071eabc]
lea rax, [0x0071eaa4]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rcx, qword [rbp + 0x68]
call fcn.00411e50
mov rbx, rax
mov rcx, qword [rbp + 0xb8]
call fcn.00411e50
mov rcx, rbx
mov rdx, rax
call sub.kernel32.dll_MoveFileW
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0xc8]
lea r8, [0x0071eaf4]
call fcn.00412270
mov rcx, qword [rbp + 0x60]
lea rdx, [0x0071ea14]
call fcn.0071e270
lea rcx, [rbp + 0x50]
lea rdx, [0x0071ea48]
call fcn.004480b0
lea rcx, [rbp + 0x58]
mov edx, 3
mov r8, qword [rbp + 0x50]
lea r9, [0x0071ea64]
lea rax, [0x0071eb0c]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0xb0], rax
lea rcx, [rbp + 0x48]
mov edx, 3
mov r8, qword [rbp + 0xc8]
lea r9, [0x0071eaf4]
lea rax, [0x0071eaa4]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rcx, qword [rbp + 0x48]
call fcn.00411e50
mov rbx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00411e50
mov rcx, rbx
mov rdx, rax
call sub.kernel32.dll_MoveFileW
mov ecx, 0xc8
call sub.kernel32.dll_Sleep
lea rcx, [rbp + 0x40]
mov edx, 3
mov r8, qword [rbp + 0xc8]
lea r9, [0x0071e9fc]
lea rax, [0x0071eb2c]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rcx, qword [rbp + 0x40]
call fcn.00411e50
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp + 0x38]
mov edx, 3
mov r8, qword [rbp + 0xc8]
lea r9, [0x0071eabc]
lea rax, [0x0071eb2c]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rcx, qword [rbp + 0x38]
call fcn.00411e50
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp + 0x30]
mov edx, 3
mov r8, qword [rbp + 0xc8]
lea r9, [0x0071eaf4]
lea rax, [0x0071eb2c]
mov qword [rsp + 0x20], rax
call fcn.004123a0
mov rcx, qword [rbp + 0x30]
call fcn.00411e50
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
nop
lea rcx, [rbp + 0x30]
mov edx, 0xf
call fcn.00410b50
lea rcx, [rbp + 0xc8]
call fcn.00410a70
lea rsp, [rbp + 0xe8]
pop rbx
pop rbp
ret