Function at 0x1400e8e50
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x220
mov rax, qword [0x140653828]
xor rax, rsp
mov qword [rsp + 0x210], rax
mov r14, rcx
xor r15d, r15d
mov dword [rsp + 0x44], r15d
mov ebx, r15d
mov qword [rsp + 0x48], rbx
cmp byte [rcx + 0x58], r15b
je 0x1400e8ec1
test dl, dl
jne 0x1400e8ec1
mov rdx, qword [rcx + 0x50]
lea rcx, [rsp + 0x48]
call fcn.1400ce170
mov rbx, qword [rsp + 0x48]
jmp 0x1400e8ec1
lea r12, [r14 + 0x78]
lea rcx, [r12 + 8]
call fcn.1400c23f0
test rax, rax
jne 0x1400e8eec
mov rax, qword [r12]
movsxd rcx, dword [rax + 4]
add rcx, r12
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rax, qword [r12]
movsxd rcx, dword [rax + 4]
add rcx, 0x78
add rcx, r14
xor r8d, r8d
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
lea rdi, [r14 + 0x1d8]
mov edx, dword [r14 + 0x208]
mov rcx, rdi
call fcn.1400e9bf0
lea rax, [0x14015dae8]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x44], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0xd0], r15
mov dword [rsp + 0xd8], 4
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400e8fb5
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x60]
call fcn.14003c4b0
lea rdx, [0x14015f2ec]
mov rcx, rax
call fcn.140001a80
mov edx, 1
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x60]
call fcn.1400552c0
nop
mov rsi, qword [rax + 0x10]
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x60]
call fcn.1400552c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400e9014
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x160], xmm1
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.1400038e0
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x1400e9085
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e9080
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e9080
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
movdqa xmm0, xmmword [0x14014dec0]
movdqu xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x1d0], 0
mov rdx, qword [rsp + 0x208]
cmp rdx, 0x10
jb 0x1400e90e4
inc rdx
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e90df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e90df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
movdqa xmm0, xmmword [0x14014dec0]
movdqu xmmword [rsp + 0x200], xmm0
mov byte [rsp + 0x1f0], 0
call fcn.1400b5530
mov r13, rax
lea rcx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rcx, qword [rsp + 0x150]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
je 0x1400e912f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea rdx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rdx, qword [rsp + 0x150]
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400e9156
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
jne 0x1400e9165
mov r9d, r15d
jmp 0x1400e916e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r9d, dword [rax]
lea r8, [rsp + 0x150]
mov rdx, rdi
mov rcx, r13
call fcn.1400e84c0
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400e918e
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
je 0x1400e919e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea rsi, [r14 + 0x180]
mov rcx, qword [rsi + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0xe
jb 0x1400e9620
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1400e91cd
mov rax, qword [rsi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_ntohl
lea r9, str.Renaming_file
mov r8, rsi
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x190]
call fcn.1400a13a0
nop
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1400e9250
lea rax, [rcx + 4]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x190]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x190]
mov dword [rax + rcx], 0x206f7420
mov byte [rax + rcx + 4], 0
lea rax, [rsp + 0x190]
jmp 0x1400e9274
mov qword [rsp + 0x20], 4
lea r9, str._to
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rsp + 0x190]
call fcn.140003cd0
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x180], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x170], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x180], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400e92be
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x170]
call fcn.140006350
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1c0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1c0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x1b0]
mov rcx, r13
call fcn.1400b5a20
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x1400e9363
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e935e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e935e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
movdqa xmm0, xmmword [0x14014dec0]
movdqu xmmword [rsp + 0x1c0], xmm0
mov byte [rsp + 0x1b0], 0
mov rdx, qword [rsp + 0x188]
cmp rdx, 0x10
jb 0x1400e93c2
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e93bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e93bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
movdqa xmm0, xmmword [0x14014dec0]
movdqu xmmword [rsp + 0x180], xmm0
mov byte [rsp + 0x170], 0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x1400e9421
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e941c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e941c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400e942e
mov rdx, qword [rdi]
mov rcx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1400e943b
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
je 0x1400e944e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r15d, dword [rax]
mov r9d, r15d
mov r8, rdi
mov rdx, rsi
mov rcx, r13
call fcn.1400e84c0
mov edx, send
mov rcx, r14
call fcn.1400e8b70
mov r8, rsi
mov rdx, r12
mov rcx, r13
call fcn.1400e83c0
lea rcx, [rsp + 0x50]
call fcn.1400d2130
lea rdx, [r14 + 0x1f8]
lea rcx, [rsp + 0x50]
call fcn.1400d1580
test al, al
je 0x1400e9523
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x170]
mov rcx, r14
call fcn.1400e7850
mov rdx, rax
mov rcx, rdi
call fcn.140045270
mov rdx, qword [rsp + 0x188]
cmp rdx, 0x10
jb 0x1400e9503
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e94fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e94fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x190]
mov rcx, r14
call fcn.1400e7480
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1f8], xmm0
mov rdx, qword [rsp + 0x168]
cmp rdx, 0x10
jb 0x1400e9569
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e9564
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e9564
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131388
movdqa xmm0, xmmword [0x14014dec0]
movdqu xmmword [rsp + 0x160], xmm0
mov byte [rsp + 0x150], 0
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x5c], edx
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x68]
call fcn.140048710
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
test rbx, rbx
je 0x1400e95f3
mov rcx, rbx
call fcn.1400e3c20
nop
mov rcx, qword [rsp + 0x210]
xor rcx, rsp
call fcn.140131030
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140005540
nop
int3