Function at 0x14000aa30
Capabilities:
Check if file exists
Delete file
Move file

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x148
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x140023010]
xor rax, rsp
mov qword [rsp + 0x118], rax
mov rdi, r9
mov rsi, r8
mov r14, rdx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x70], r9
xor ebx, ebx
mov rcx, rdx
lea r15, [rdx + 0x18]
mov qword [rsp + 0x58], r15
cmp qword [r15], 8
jb 0x14000aa91
mov rcx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14000ab80
mov rdx, qword [r15]
cmp rdx, 8
jb 0x14000aadd
mov rcx, qword [r14]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000aad8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b5eb
mov rcx, r8
call fcn.140017264
mov qword [r14 + 0x10], rbx
mov qword [r15], 7
mov word [r14], bx
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14000ab2b
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000ab26
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b5f2
mov rcx, r8
call fcn.140017264
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 7
mov word [rsi], bx
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x14000ab79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14000ab74
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b5f9
mov rcx, r8
call fcn.140017264
xor al, al
jmp 0x14000b5ab
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0x88], xmm1
mov word [rsp + 0x78], bx
movups xmmword [rsp + 0x98], xmm0
movdqu xmmword [rsp + 0xa8], xmm1
mov word [rsp + 0x98], bx
mov qword [rsp + 0x48], rbx
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], 4
mov qword [rsp + 0xd0], 0xf
mov dword [rsp + 0xb8], 0x6b636c2e
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.140008c40
nop
mov r8, rax
mov rdx, r14
lea rcx, [rsp + 0xd8]
call fcn.140009fe0
mov r12, rax
lea rax, [rsp + 0x78]
cmp rax, r12
je 0x14000aca7
mov rdx, qword [rsp + 0x90]
cmp rdx, 8
jb 0x14000ac66
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ac61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ace6
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0x88], xmm0
mov word [rsp + 0x78], bx
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rsp + 0x88], xmm1
mov qword [r12 + 0x10], rbx
mov qword [r12 + 0x18], 7
mov word [r12], bx
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x14000acf2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aced
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000aced
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0xe8], xmm0
mov word [rsp + 0xd8], bx
mov rdx, qword [rsp + 0x110]
cmp rdx, 8
jb 0x14000ad56
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0x108], xmm0
mov word [rsp + 0xf8], bx
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x14000adb5
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000adb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000adb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rcx, qword [rsp + 0x78]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
mov qword [rsp + 0x48], rax
cmp rax, 0xffffffffffffffff
jne 0x14000afb8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 8
jb 0x14000ae54
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b047
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0xa8], xmm0
mov word [rsp + 0x98], bx
mov rdx, qword [rsp + 0x90]
cmp rdx, 8
jb 0x14000aeb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aead
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0a8
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0x88], xmm0
mov word [rsp + 0x78], bx
mov rdx, qword [r15]
cmp rdx, 8
jb 0x14000af06
mov rcx, qword [r14]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000af01
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b29f
mov rcx, r8
call fcn.140017264
mov qword [r14 + 0x10], rbx
mov qword [r15], 7
mov word [r14], bx
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14000af54
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000af4f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b2a6
mov rcx, r8
call fcn.140017264
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 7
mov word [rsi], bx
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x14000afa2
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000af9d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b2ad
mov rcx, r8
call fcn.140017264
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
xor al, al
jmp 0x14000b5ba
call fcn.14000a500
test rax, rax
jne 0x14000b1ba
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14000b008
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 8
jb 0x14000b053
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b04e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b04e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0xa8], xmm0
mov word [rsp + 0x98], bx
mov rdx, qword [rsp + 0x90]
cmp rdx, 8
jb 0x14000b0b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b0af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b0af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0x88], xmm0
mov word [rsp + 0x78], bx
mov rdx, qword [r15]
cmp rdx, 8
jb 0x14000b108
mov rcx, qword [r14]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000b103
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b29f
mov rcx, r8
call fcn.140017264
mov qword [r14 + 0x10], rbx
mov qword [r15], 7
mov word [r14], bx
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14000b156
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000b151
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b2a6
mov rcx, r8
call fcn.140017264
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 7
mov word [rsi], bx
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x14000b1a4
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000b19f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b2ad
mov rcx, r8
call fcn.140017264
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
xor al, al
jmp 0x14000b5ba
mov rax, qword [rsi + 0x10]
mov r9, rsi
cmp qword [rsi + 0x18], 8
jb 0x14000b1cb
mov r9, qword [rsi]
mov rcx, r14
mov r12, qword [r15]
cmp r12, 8
jb 0x14000b1da
mov rcx, qword [r14]
mov qword [rsp + 0x20], rax
mov rdx, qword [r14 + 0x10]
call fcn.1400055e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc8], xmm1
cmp qword [r14 + 0x10], rax
cmovb rax, qword [r14 + 0x10]
mov rdx, r14
cmp r12, 8
jb 0x14000b214
mov rdx, qword [r14]
mov r8, rax
lea rcx, [rsp + 0xb8]
call fcn.1400056c0
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14000b232
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0xb8]
call fcn.140003380
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov rdx, qword [rsp + 0xb0]
cmp rdx, 8
jb 0x14000b2b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b2b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b2b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140017264
movups xmmword [rsp + 0x98], xmm6
movups xmmword [rsp + 0xa8], xmm7
mov rdx, qword [rsp + 0xd0]
cmp rdx, 8
jb 0x14000b314
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b30f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b30f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
lea rdx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rdx, qword [rsp + 0x98]
mov rcx, r14
cmp qword [r15], 8
jb 0x14000b33a
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
call fcn.14000a500
lea r8, [rsp + 0x98]
mov rdx, qword [rsp + 0x50]
mov rcx, rax
call fcn.14000a2d0
test eax, eax
je 0x14000b38f
mov rdx, r14
cmp qword [r15], 8
jb 0x14000b36a
mov rdx, qword [r14]
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
xor r12b, r12b
jmp 0x14000b392
mov r12b, 1
mov rcx, qword [0x140123b40]
test rcx, rcx
je 0x14000b3af
mov edx, 1
call fcn.140017264
mov qword [0x140123b40], rbx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14000b3f3
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
jmp 0x14000b40f
mov rdx, qword [rsp + 0xb0]
cmp rdx, 8
jb 0x14000b45a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b455
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b455
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0xa8], xmm0
mov word [rsp + 0x98], bx
mov rdx, qword [rsp + 0x90]
cmp rdx, 8
jb 0x14000b4bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b4b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b4b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017264
movdqa xmm0, xmmword [0x14001dd60]
movdqu xmmword [rsp + 0x88], xmm0
mov word [rsp + 0x78], bx
mov rdx, qword [r15]
cmp rdx, 8
jb 0x14000b50f
mov rcx, qword [r14]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000b50a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b5eb
mov rcx, r8
call fcn.140017264
mov qword [r14 + 0x10], rbx
mov qword [r15], 7
mov word [r14], bx
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14000b55d
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000b558
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b5f2
mov rcx, r8
call fcn.140017264
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 7
mov word [rsi], bx
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x14000b5a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14000b5a2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b5f9
mov rcx, r8
call fcn.140017264
movzx eax, r12b
mov word [rdi], bx
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov rcx, qword [rsp + 0x118]
xor rcx, rsp
call fcn.140016f60
movaps xmm6, xmmword [rsp + 0x130]
movaps xmm7, xmmword [rsp + 0x120]
add rsp, 0x148
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3