Function at 0x14009f500
Capabilities:
Check if file exists
Delete file

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x770
mov qword [r11 - 0x688], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x14029e8b8]
xor rax, rsp
mov qword [rsp + 0x760], rax
mov r12, rcx
xor edx, edx
mov r8d, 0x208
lea rcx, [r11 - 0x248]
call fcn.1401afc90
lea rax, [0x1401f5368]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], SafeArrayDestroy
movaps xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x120], xmm0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x130]
call fcn.140032a50
cmp qword [rax + 0x18], 8
jb 0x14009f59a
mov rax, qword [rax]
lea r8, str.usercenter.set
mov rdx, rax
lea rcx, [rsp + 0x550]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
mov rdx, qword [rsp + 0x148]
cmp rdx, 8
jb 0x14009f5fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009f5f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe22
call fcn.1401606e8
xor ebx, ebx
mov r13d, ebx
lea rcx, [rsp + 0x550]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14009fdf2
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x3c0], xmm0
mov byte [rsp + 0x3b0], bl
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x550]
call fcn.14009f100
test eax, eax
je 0x14009fdb3
xor eax, eax
mov qword [rsp + 0x4f8], rax
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], rax
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x518], rax
mov qword [rsp + 0x520], rax
lea rcx, [rsp + 0x4f8]
call fcn.1400c90e0
nop
lea rcx, [rsp + 0x4f8]
call fcn.1400cc980
mov r15, rax
xor eax, eax
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x440], rax
mov qword [rsp + 0x448], rax
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rax
xor edx, edx
lea rcx, [rsp + 0x438]
call fcn.1400c4ca0
nop
mov qword [rsp + 0x3e0], rbx
mov qword [rsp + 0x3e8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x3d0], bl
lea rdx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 0x10
cmovae rdx, qword [rsp + 0x3b0]
mov rax, qword [r15]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x14009f716
add r8, rdx
lea rcx, [rsp + 0x3d0]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x438]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test al, al
je 0x14009fccf
cmp qword [rsp + 0x3e0], 0
jne 0x14009fccf
xor eax, eax
mov qword [rsp + 0x3f0], rax
mov qword [rsp + 0x3f8], rax
mov qword [rsp + 0x400], rax
mov qword [rsp + 0x408], rax
mov qword [rsp + 0x410], rax
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0xf0], al
lea r8d, [rax + 4]
lea rdx, str.user
lea rcx, [rsp + 0xf0]
call fcn.14000d6b0
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x438]
lea rcx, [rsp + 0x3f0]
call fcn.140034680
nop
lea rcx, [rsp + 0x3f0]
call fcn.1400c6e20
test al, al
je 0x14009f8d1
lea rcx, [rsp + 0x3f0]
call fcn.1400c51d0
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 0x10
jb 0x14009f836
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009f831
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe28
call fcn.1401606e8
mov qword [rsp + 0x3e0], rbx
mov qword [rsp + 0x3e8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x3d0], 0
lea rcx, [rsp + 0x438]
call fcn.1400c51d0
nop
lea rcx, [rsp + 0x4f8]
call fcn.1400c9300
nop
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 0x10
jb 0x14009f8b1
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009f8ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe2e
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x3c0], xmm0
mov byte [rsp + 0x3b0], 0
xor eax, eax
jmp 0x14009fdf5
lea rcx, [rsp + 0x3f0]
call fcn.1400c7600
test al, al
je 0x14009fc24
mov rsi, rbx
mov edi, ebx
nop dword [rax + rax]
lea rcx, [rsp + 0x3f0]
call fcn.1400c8400
cmp edi, eax
jae 0x14009fa27
xor eax, eax
mov qword [rsp + 0x480], rax
mov qword [rsp + 0x488], rax
mov qword [rsp + 0x490], rax
mov qword [rsp + 0x498], rax
mov qword [rsp + 0x4a0], rax
mov edx, edi
lea rcx, [rsp + 0x3f0]
call fcn.1400c5520
mov rdx, rax
lea rcx, [rsp + 0x480]
call fcn.1400c4a70
nop
lea rcx, [rsp + 0x480]
call fcn.1400c6e20
test al, al
je 0x14009f974
lea rcx, [rsp + 0x480]
call fcn.1400c51d0
inc edi
jmp 0x14009f8f0
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x78], 0
mov r8d, 4
lea rdx, str.time
lea rcx, [rsp + 0x78]
call fcn.14000d6b0
nop
xor r8d, r8d
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x480]
call fcn.1400d50b0
movsxd rbx, eax
mov rdx, qword [rsp + 0x90]
cmp rdx, 0x10
jb 0x14009f9fe
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009f9f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe34
call fcn.1401606e8
nop
lea rcx, [rsp + 0x480]
call fcn.1400c51d0
mov eax, edi
cmp rsi, rbx
cmovge eax, r14d
mov r14d, eax
cmovge rbx, rsi
mov rsi, rbx
xor ebx, ebx
inc edi
jmp 0x14009f8f0
cmp r14d, 0xffffffff
je 0x14009fcc0
lea rcx, [rsp + 0x3f0]
call fcn.1400c8400
cmp r14d, eax
jae 0x14009fcc0
xor eax, eax
mov qword [rsp + 0x528], rax
mov qword [rsp + 0x530], rax
mov qword [rsp + 0x538], rax
mov qword [rsp + 0x540], rax
mov qword [rsp + 0x548], rax
xor edx, edx
lea rcx, [rsp + 0x528]
call fcn.1400c4ca0
nop
xor eax, eax
mov qword [rsp + 0x4d0], rax
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e8], rax
mov qword [rsp + 0x4f0], rax
lea r9, [rsp + 0x528]
mov r8d, r14d
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x3f0]
call fcn.1400c7210
nop
lea rcx, [rsp + 0x4d0]
call fcn.1400c6e20
test al, al
jne 0x14009fc04
xor eax, eax
mov qword [rsp + 0x4a8], rax
mov qword [rsp + 0x4b0], rax
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x4c8], rax
xor edx, edx
lea rcx, [rsp + 0x4a8]
call fcn.1400c4ca0
nop
lea rdx, str.user
lea rcx, [rsp + 0x4a8]
call fcn.1400c5850
lea rdx, [rsp + 0x4d0]
mov rcx, rax
call fcn.1400c52d0
lea rdx, [rsp + 0x418]
lea rcx, [rsp + 0x4a8]
call fcn.1400c86b0
nop
mov r8, qword [rsp + 0x428]
test r8, r8
je 0x14009fb91
lea rax, [rsp + 0x418]
cmp r12, rax
je 0x14009fb91
lea rdx, [rsp + 0x418]
cmp qword [rsp + 0x430], 0x10
cmovae rdx, qword [rsp + 0x418]
mov rcx, r12
call fcn.14000d6b0
mov r13d, 1
mov rdx, qword [rsp + 0x430]
cmp rdx, 0x10
jb 0x14009fbda
inc rdx
mov rcx, qword [rsp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009fbd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe3a
call fcn.1401606e8
mov qword [rsp + 0x428], rbx
mov qword [rsp + 0x430], 0xf
mov byte [rsp + 0x418], 0
lea rcx, [rsp + 0x4a8]
call fcn.1400c51d0
nop
lea rcx, [rsp + 0x4d0]
call fcn.1400c51d0
nop
lea rcx, [rsp + 0x528]
call fcn.1400c51d0
jmp 0x14009fcc0
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x438]
call fcn.1400c86b0
nop
mov r8, qword [rsp + 0x470]
test r8, r8
je 0x14009fc76
lea rax, [rsp + 0x460]
cmp r12, rax
je 0x14009fc76
lea rdx, [rsp + 0x460]
cmp qword [rsp + 0x478], 0x10
cmovae rdx, qword [rsp + 0x460]
mov rcx, r12
call fcn.14000d6b0
mov r13d, 1
mov rdx, qword [rsp + 0x478]
cmp rdx, 0x10
jb 0x14009fcc0
inc rdx
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009fcba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe40
call fcn.1401606e8
nop
lea rcx, [rsp + 0x3f0]
call fcn.1400c51d0
jmp 0x14009fcdd
lea rcx, [rsp + 0x550]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test r15, r15
je 0x14009fcf0
mov rax, qword [r15]
mov edx, 1
mov rcx, r15
call qword [rax]
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 0x10
jb 0x14009fd33
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009fd2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe46
call fcn.1401606e8
mov qword [rsp + 0x3e0], rbx
mov qword [rsp + 0x3e8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x3d0], 0
lea rcx, [rsp + 0x438]
call fcn.1400c51d0
nop
lea rcx, [rsp + 0x4f8]
call fcn.1400c9300
jmp 0x14009fdb3
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 0x10
jb 0x14009fdf2
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009fded
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009fe52
call fcn.1401606e8
mov eax, r13d
mov rcx, qword [rsp + 0x760]
xor rcx, rsp
call fcn.140160a40
lea r11, [rsp + 0x770]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
int3
call fcn.1401b3260
int3