Function at 0x140005c10
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x14011e878]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
xorps xmm0, xmm0
mov qword [rbp - 0x60], 0x200
xor edi, edi
mov dword [rbp - 0x58], 0x144
movdqu xmmword [rsp + 0x38], xmm0
mov r14, rcx
mov rax, rdx
movdqa xmm0, xmmword [0x1400df8c0]
lea rcx, [rsp + 0x38]
xorps xmm1, xmm1
mov qword [rsp + 0x70], rcx
movdqu xmmword [rsp + 0x58], xmm0
mov word [rbp - 0x53], di
lea rdx, [rsp + 0x70]
xorps xmm0, xmm0
mov byte [rbp - 0x51], dil
mov rcx, rax
movdqa xmmword [rbp - 0x80], xmm0
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rsp + 0x78], rdi
movdqa xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x54], dil
call fcn.140002f50
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x30], rdi
call fcn.140002250
test al, al
je 0x140005df0
lea r8, [0x1400df484]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
test eax, eax
jne 0x140005df0
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
lea rax, [rbx + 1]
cmp rax, rcx
jbe 0x140005d6d
mov r8, qword [rsp + 0x48]
test r8, r8
jne 0x140005d25
cmp qword [rsp + 0x38], rdi
jne 0x140005d1e
lea ecx, [rdi + 1]
call fcn.1400d545c
mov r8, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x60]
jmp 0x140005d32
sub rcx, r8
lea rax, [rcx + 1]
shr rax, 1
add rcx, rax
sub rbx, r8
lea rsi, [rbx + 1]
cmp rcx, rsi
cmovae rsi, rcx
mov rcx, r8
test rsi, rsi
jne 0x140005d53
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, rdi
jmp 0x140005d5c
mov rdx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
lea rcx, [rsi + rax]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rcx
add rbx, rax
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rdx, [0x1400df4c0]
mov byte [rbx], dil
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
dec qword [rsp + 0x50]
call fcn.1400079c0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r8d, 9
lea rcx, [rbp - 0x50]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x140005f0e
call fcn.1400023f0
mov r9, r14
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x50]
xor ecx, ecx
lea rdx, str.Moving_the_file___ws__into___ws__has_failed___ws_._Deleting_the_temp_file.
call fcn.14002a3c0
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x140005e0a
call fcn.1400023f0
mov r9, rax
lea r8, [rbp - 0x50]
lea rdx, str.Impossible_to_create_or_open_the_Temp_file___ws___ws_
xor ecx, ecx
call fcn.14002a3c0
lea r8, [0x1400df484]
mov qword [rsp + 0x30], rdi
mov rdx, r14
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
test eax, eax
je 0x140005e48
call fcn.1400023f0
mov r9, rax
lea rdx, str.Impossible_to_open_the_file___ws___ws_
mov r8, r14
xor ecx, ecx
call fcn.14002a3c0
xor bl, bl
jmp 0x140005f10
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
lea rax, [rbx + 1]
cmp rax, rcx
jbe 0x140005ed8
mov r8, qword [rsp + 0x48]
test r8, r8
jne 0x140005e90
cmp qword [rsp + 0x38], rdi
jne 0x140005e89
lea ecx, [r8 + 1]
call fcn.1400d545c
mov r8, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x60]
jmp 0x140005e9d
sub rcx, r8
lea rax, [rcx + 1]
shr rax, 1
add rcx, rax
sub rbx, r8
lea rsi, [rbx + 1]
cmp rcx, rsi
cmovae rsi, rcx
mov rcx, r8
test rsi, rsi
jne 0x140005ebb
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140005ec7
mov rdx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov rdi, rax
lea rcx, [rsi + rdi]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rcx
add rbx, rdi
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
mov byte [rbx], 0
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
dec qword [rsp + 0x50]
call fcn.1400079c0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x80]
mov edx, 1
call fcn.1400d5498
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x40]
mov edx, 1
call fcn.1400d5498
movzx eax, bl
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1400d51a0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret