Function at 0x140041cc0
Capabilities:
Delete file
Move file
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x308
mov qword [rsp + 0xe8], 0xfffffffffffffffe
mov rax, qword [0x140322b20]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xe0], rax
lea rdx, [0x140259f24]
mov rcx, qword [rsp + 0xe0]
call fcn.14001f4b0
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x310]
add rax, 0x250
mov r9d, 0x40
mov r8, qword [rsp + 0xc0]
mov rdx, rax
lea rcx, [0x14032afa8]
call fcn.14004d730
mov qword [rsp + 0x40], rax
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x140041de0
cmp qword [rsp + 0x320], 0
je 0x140041d93
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0xa0], rax
jmp 0x140041d9f
mov qword [rsp + 0xa0], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
lea rdx, str._fsopen_use_time
mov rcx, qword [rsp + 0xa0]
call fcn.140008b90
mov ecx, dword [rsp + 0x60]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14025a2fc]
mov rcx, rax
call fcn.140008b90
cmp qword [rsp + 0x40], 0
jne 0x140041def
xor al, al
jmp 0x140042455
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
mov r8d, 2
xor edx, edx
mov rcx, qword [rsp + 0x40]
call fcn.1401fbc3c
mov rcx, qword [rsp + 0x40]
call fcn.1401fbfc4
mov dword [rsp + 0x50], eax
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x140041e9a
cmp qword [rsp + 0x320], 0
je 0x140041e4d
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0x80], rax
jmp 0x140041e59
mov qword [rsp + 0x80], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c], eax
lea rdx, str._fseekftell_use_time
mov rcx, qword [rsp + 0x80]
call fcn.140008b90
mov ecx, dword [rsp + 0x6c]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14025a504]
mov rcx, rax
call fcn.140008b90
cmp dword [rsp + 0x50], 0xa00000
jl 0x1400422f0
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x40]
call fcn.1401fbb28
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x140041f34
cmp qword [rsp + 0x320], 0
je 0x140041eed
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0x70], rax
jmp 0x140041ef6
mov qword [rsp + 0x70], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
lea rdx, [0x14024ef78]
mov rcx, qword [rsp + 0x70]
call fcn.140008b90
mov ecx, dword [rsp + 0x48]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14024ee84]
mov rcx, rax
call fcn.140008b90
lea rcx, [rsp + 0x1f0]
call fcn.14001f530
nop
lea rdx, [rsp + 0x1f0]
lea rcx, [0x14032af98]
call fcn.14002cce0
xor r9d, r9d
lea r8, [0x14024ef64]
lea rdx, [0x14024ef74]
lea rcx, [rsp + 0x1f0]
call fcn.14003c8f0
xor r9d, r9d
lea r8, [0x14024efdc]
lea rdx, [0x14024efec]
lea rcx, [rsp + 0x1f0]
call fcn.14003c8f0
xor r9d, r9d
lea r8, [0x14024f00c]
lea rdx, [0x14024f044]
lea rcx, [rsp + 0x1f0]
call fcn.14003c8f0
lea rcx, [rsp + 0x1f0]
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0x310]
add rcx, 0x150
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov qword [rsp + 0xd8], rax
mov rcx, qword [rsp + 0x310]
add rcx, 0x50
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str._s_s__s.log
lea rdx, [rsp + 0x270]
lea rcx, [0x14032af98]
call fcn.14002bda0
nop
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x270]
call fcn.140021b20
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0x310]
add rcx, 0x250
call fcn.140021b20
mov rcx, qword [rsp + 0xc8]
mov rdx, rcx
mov rcx, rax
call fcn.1401fa6b8
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x14004210a
cmp qword [rsp + 0x320], 0
je 0x1400420bd
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0x90], rax
jmp 0x1400420c9
mov qword [rsp + 0x90], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x58], eax
lea rdx, str.__trename_use_time
mov rcx, qword [rsp + 0x90]
call fcn.140008b90
mov ecx, dword [rsp + 0x58]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14024f284]
mov rcx, rax
call fcn.140008b90
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x310]
add rax, 0x250
mov rcx, rax
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x1400421b3
cmp qword [rsp + 0x320], 0
je 0x14004216c
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0x78], rax
jmp 0x140042175
mov qword [rsp + 0x78], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
lea rdx, str._DeleteFile_use_time
mov rcx, qword [rsp + 0x78]
call fcn.140008b90
mov ecx, dword [rsp + 0x68]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14024f5e4]
mov rcx, rax
call fcn.140008b90
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0xd0], rax
lea rdx, [0x14024f6f4]
mov rcx, qword [rsp + 0xd0]
call fcn.14001f4b0
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x310]
add rax, 0x250
mov r9d, 0x40
mov r8, qword [rsp + 0xb8]
mov rdx, rax
lea rcx, [0x14032afa8]
call fcn.14004d730
mov qword [rsp + 0x40], rax
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x1400422a3
cmp qword [rsp + 0x320], 0
je 0x140042256
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0x88], rax
jmp 0x140042262
mov qword [rsp + 0x88], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
lea rdx, [0x14024fff8]
mov rcx, qword [rsp + 0x88]
call fcn.140008b90
mov ecx, dword [rsp + 0x4c]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14024f964]
mov rcx, rax
call fcn.140008b90
cmp qword [rsp + 0x40], 0
jne 0x1400422d5
mov byte [rsp + 0x38], 0
lea rcx, [rsp + 0x270]
call fcn.140020590
nop
lea rcx, [rsp + 0x1f0]
call fcn.140020590
movzx eax, byte [rsp + 0x38]
jmp 0x140042455
lea rcx, [rsp + 0x270]
call fcn.140020590
nop
lea rcx, [rsp + 0x1f0]
call fcn.140020590
cmp qword [rsp + 0x40], 0
je 0x140042453
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
movsxd rax, dword [rsp + 0x330]
mov r9, qword [rsp + 0x40]
mov r8, rax
mov edx, 1
mov rcx, qword [rsp + 0x328]
call fcn.1401fc1ac
mov dword [rsp + 0x64], eax
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x1400423ad
cmp qword [rsp + 0x320], 0
je 0x140042360
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0x98], rax
jmp 0x14004236c
mov qword [rsp + 0x98], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
lea rdx, str._fwrite_use_time
mov rcx, qword [rsp + 0x98]
call fcn.140008b90
mov ecx, dword [rsp + 0x54]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14024fbbc]
mov rcx, rax
call fcn.140008b90
call fcn.1401fcb70
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x40]
call fcn.1401fbb28
call fcn.1401fcb70
mov dword [rsp + 0x34], eax
cmp qword [rsp + 0x320], 0
je 0x140042442
cmp qword [rsp + 0x320], 0
je 0x1400423f5
mov rax, qword [rsp + 0x320]
add rax, 0x10
mov qword [rsp + 0xa8], rax
jmp 0x140042401
mov qword [rsp + 0xa8], 0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
lea rdx, str._fclose_use_time
mov rcx, qword [rsp + 0xa8]
call fcn.140008b90
mov ecx, dword [rsp + 0x5c]
mov edx, ecx
mov rcx, rax
call fcn.1400212a0
lea rdx, [0x14024fc54]
mov rcx, rax
call fcn.140008b90
mov eax, dword [rsp + 0x330]
cmp dword [rsp + 0x64], eax
jne 0x140042453
mov al, 1
jmp 0x140042455
xor al, al
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.1401fe250
add rsp, 0x308
ret