Function at 0x1400016c0
Capabilities:
Delete file
Move file

Disassembly:
jmp 0x1400016c0
mov byte [rsp + 8], cl
push rsi
push rdi
sub rsp, 0x558
mov rdi, rsp
mov ecx, 0x156
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
movzx ecx, byte [rsp + 0x570]
mov rax, qword [0x14000b028]
xor rax, rsp
mov qword [rsp + 0x540], rax
mov dword [rsp + 0x20], 0
lea r8, [0x140007a30]
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x478]
call qword [sym.imp.MSVCR100.dll__dupenv_s]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x140001749
lea rcx, str.Error_fetching_USERPROFILE._n
call qword [sym.imp.MSVCR100.dll_printf]
lea rcx, [0x140007a60]
call qword [sym.imp.MSVCR100.dll_perror]
mov eax, dword [rsp + 0x20]
jmp 0x14000199d
mov rdx, qword [rsp + 0x478]
lea rcx, [rsp + 0x40]
call fcn.140001055
lea rdx, str..accessibility.properties
lea rcx, [rsp + 0x40]
call fcn.140001028
mov rdx, qword [rsp + 0x478]
lea rcx, [rsp + 0x260]
call fcn.140001055
lea rdx, str..acce__ibility.properties
lea rcx, [rsp + 0x260]
call fcn.140001028
mov rcx, qword [rsp + 0x478]
call qword [sym.imp.MSVCR100.dll_free]
lea r8, [0x140007a2c]
lea rdx, [rsp + 0x40]
lea rcx, [0x14000b178]
call qword [sym.imp.MSVCR100.dll_fopen_s]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x140001895
movzx eax, byte [rsp + 0x570]
test eax, eax
je 0x140001888
lea r8, [0x140007a3c]
lea rdx, [rsp + 0x40]
lea rcx, [0x14000b178]
call qword [sym.imp.MSVCR100.dll_fopen_s]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x140001820
lea rdx, [rsp + 0x40]
lea rcx, str.Couldnt_create_file:__s_n
call qword [sym.imp.MSVCR100.dll_printf]
lea rcx, [0x140007ac4]
call qword [sym.imp.MSVCR100.dll_perror]
jmp 0x140001886
lea rax, [rsp + 0x4c0]
lea rcx, str.assistive_technologiescom.sun.java.accessibility.AccessBridge_n
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x500]
mov rdi, rax
xor eax, eax
mov ecx, 0x24
rep stosb byte [rdi], al
lea rdx, str.screen_magnifier_presenttrue_n
lea rcx, [rsp + 0x4c0]
call fcn.140001014
lea rdx, [rsp + 0x4c0]
mov rcx, qword [0x14000b178]
call qword [sym.imp.MSVCR100.dll_fprintf]
mov rcx, qword [0x14000b178]
call qword [sym.imp.MSVCR100.dll_fclose]
jmp 0x140001890
mov dword [rsp + 0x20], 0
jmp 0x140001999
lea r8, [0x140007a84]
lea rdx, [rsp + 0x260]
lea rcx, [0x14000b170]
call qword [sym.imp.MSVCR100.dll_fopen_s]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x1400018e7
lea rdx, [rsp + 0x260]
lea rcx, str.Couldnt_open_temp_file:__s_n
call qword [sym.imp.MSVCR100.dll_printf]
lea rcx, [0x140007b50]
call qword [sym.imp.MSVCR100.dll_perror]
mov eax, dword [rsp + 0x20]
jmp 0x14000199d
movzx eax, byte [rsp + 0x570]
test eax, eax
je 0x1400018fa
call fcn.14000100f
jmp 0x1400018ff
call fcn.140001005
mov rcx, qword [0x14000b178]
call qword [sym.imp.MSVCR100.dll_fclose]
mov rcx, qword [0x14000b170]
call qword [sym.imp.MSVCR100.dll_fclose]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCR100.dll_remove]
test eax, eax
je 0x140001951
lea rdx, [rsp + 0x40]
lea rcx, str.Couldnt_remove_file:__s_n
call qword [sym.imp.MSVCR100.dll_printf]
lea rcx, [0x140007b74]
call qword [sym.imp.MSVCR100.dll_perror]
call qword [sym.imp.MSVCR100.dll__errno]
mov eax, dword [rax]
jmp 0x14000199d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x260]
call qword [sym.imp.MSVCR100.dll_rename]
test eax, eax
je 0x140001999
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x260]
lea rcx, str.Couldnt_rename__s_to__s._n
call qword [sym.imp.MSVCR100.dll_printf]
lea rcx, str.Error
call qword [sym.imp.MSVCR100.dll_perror]
call qword [sym.imp.MSVCR100.dll__errno]
mov eax, dword [rax]
jmp 0x14000199d
mov eax, dword [rsp + 0x20]
mov rdi, rax
mov rcx, rsp
lea rdx, [0x140008550]
call fcn.140002fb0
mov rax, rdi
mov rcx, qword [rsp + 0x540]
xor rcx, rsp
call fcn.140002f90
add rsp, 0x558
pop rdi
pop rsi
ret