Function at 0x140003fd0
Capabilities:
Check if file exists
Delete file
Execute command
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x14000b010]
xor rax, rsp
mov qword [rbp + 0x130], rax
lea rcx, str.config
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140004028
lea rcx, str.config
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
xor r14d, r14d
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
lea r8d, [rax + 0xe]
lea rdx, str.fps_config.ini
lea rcx, [rsp + 0x60]
call fcn.140005b50
lea rax, [rsp + 0x60]
mov qword [rbp - 0x20], rax
mov qword [rbp - 8], r14
mov qword [rbp], r14
lea ecx, [r14 + 0x60]
call fcn.140006f5c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 8], rax
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], r14
lea ecx, [r14 + 0x40]
call fcn.140006f5c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 8], rax
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rcx, qword [rsp + 0x60]
lea rdx, [0x140008504]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
lea rbx, [r14 - 1]
test rax, rax
jne 0x1400040e7
mov edi, ebx
jmp 0x140004105
lea r9, [rbp - 0x10]
mov rdx, rsi
mov rcx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
call fcn.140001330
mov edi, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov dword [rbp - 0x10], edi
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14000414b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004143
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400071e8
mov edi, dword [rbp - 0x10]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
test edi, edi
je 0x140004539
lea rcx, [0x140008790]
call fcn.1400010b0
lea rcx, [0x1400087e8]
call fcn.1400010b0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xf
mov r8d, 0xc
lea rdx, str.YuanShen.exe
lea rcx, [rsp + 0x40]
call fcn.140005b50
lea rcx, [rsp + 0x40]
call fcn.140002c20
movabs r12, 0x7ffffffff4143dff
movabs r15, 0x7fffffffffffffff
test eax, eax
jne 0x14000429f
nop
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xf
mov r8d, 0x11
lea rdx, str.GenshinImpact.exe
lea rcx, [rsp + 0x40]
call fcn.140005b50
lea rcx, [rsp + 0x40]
call fcn.140002c20
test eax, eax
jne 0x14000429f
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x14000422a
imul rax, rax, 0x64
jmp 0x140004245
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, r12
jge 0x140004256
add rax, 0xbebc200
mov qword [rbp - 0x20], rax
jmp 0x14000425a
mov qword [rbp - 0x20], r15
lea rcx, [rbp - 0x20]
call fcn.1400067a0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xf
mov r8d, 0xc
lea rdx, str.YuanShen.exe
lea rcx, [rsp + 0x40]
call fcn.140005b50
lea rcx, [rsp + 0x40]
call fcn.140002c20
test eax, eax
je 0x1400041d0
mov r8d, eax
xor edx, edx
mov ecx, 0x101001
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x14000438f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov qword [rbp - 0x20], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0x400
mov r8d, edi
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xf
mov rdx, qword [rbp - 0x20]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140004307
mov r8, rbx
lea rcx, [rsp + 0x40]
call fcn.140005b50
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae r8, qword [rsp + 0x40]
mov edx, edi
lea rcx, str.OpenProcess_failed___d_:__s
call fcn.1400010b0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140004757
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004385
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004385
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400071e8
jmp 0x140004757
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp - 0x18], 0x104
lea r9, [rbp - 0x18]
lea r8, [rbp + 0x20]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameA]
lea rax, [rbp + 0x20]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400043c0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rdi, [0x14000b168]
mov rcx, rdi
call fcn.140005b50
mov ebx, dword [0x14000b160]
mov rdx, rdi
lea rcx, [rbp - 0x40]
call fcn.140005a70
mov edx, ebx
mov rcx, rax
call fcn.140002d70
xor edx, edx
lea rcx, str.UnityWndClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
jne 0x140004480
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140004430
imul rax, rax, 0x64
jmp 0x14000444b
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r12
jge 0x14000445c
add rax, 0xbebc200
mov qword [rbp - 0x20], rax
jmp 0x140004460
mov qword [rbp - 0x20], r15
lea rcx, [rbp - 0x20]
call fcn.1400067a0
xor edx, edx
lea rcx, str.UnityWndClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
je 0x140004412
mov dword [rbp + 0x18], 0x103
nop word [rax + rax]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageA]
lea rdx, [rbp + 0x18]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x1400044ce
imul rax, rax, 0x64
jmp 0x1400044e9
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, r12
jge 0x1400044fa
add rax, 0xbebc200
mov qword [rbp - 0x20], rax
jmp 0x1400044fe
mov qword [rbp - 0x20], r15
lea rcx, [rbp - 0x20]
call fcn.1400067a0
cmp dword [rbp + 0x18], 0x103
je 0x140004490
mov edx, 0xffffffff
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140008858]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004757
lea rax, [rsp + 0x40]
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xf
xor r8d, r8d
lea rdx, [0x1400084fa]
lea rcx, [rsp + 0x40]
call fcn.140005b50
nop
lea rax, [rbp - 0x80]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov r8d, 4
lea rdx, str.Path
lea rcx, [rbp - 0x80]
call fcn.140005b50
nop
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov r8d, 7
lea rdx, str.Setting
lea rcx, [rbp - 0x60]
call fcn.140005b50
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x10]
call fcn.140001810
mov rbx, rax
lea rdi, [0x14000b168]
cmp rdi, rax
je 0x140004666
mov rdx, qword [0x14000b180]
cmp rdx, 0x10
jb 0x14000462b
mov rcx, qword [0x14000b168]
inc rdx
cmp rdx, 0x1000
jb 0x140004626
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004698
mov rcx, r8
call fcn.1400071e8
movdqa xmm0, xmmword [0x140008bc0]
movdqu xmmword [0x14000b178], xmm0
mov byte [0x14000b168], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x14000b168], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x14000b178], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400046a4
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000469f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000469f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400071e8
mov ebx, dword [0x14000b160]
lea rax, [rbp - 0x60]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov r8d, 3
lea rdx, [0x140008870]
lea rcx, [rbp - 0x60]
call fcn.140005b50
nop
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov r8d, 7
lea rdx, str.Setting
lea rcx, [rbp - 0x80]
call fcn.140005b50
nop
mov r9d, ebx
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x10]
call fcn.140001c30
mov dword [0x14000b160], eax
cmp qword [0x14000b180], 0x10
cmovae rdi, qword [0x14000b168]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x140004757
lea rcx, [0x140008878]
call fcn.1400010b0
lea rcx, str.config.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.140003fd0
nop
mov r8, qword [rbp + 8]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 8]
lea rcx, [rbp + 8]
call fcn.140006a40
mov edx, 0x40
mov rcx, qword [rbp + 8]
call fcn.1400071e8
mov rcx, qword [rbp - 8]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x1400047c7
nop dword [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rbp - 8]
lea rcx, [rbp - 8]
call fcn.140006b00
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.140006ce0
mov edx, 0x60
mov rcx, rbx
call fcn.1400071e8
cmp byte [rdi + 0x19], 0
je 0x140004790
mov rcx, qword [rbp - 8]
mov edx, 0x60
call fcn.1400071e8
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140006dc0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret