Function at 0x140036810
Capabilities:
Check if file exists
Delete file
Move file

Disassembly:
jmp 0x140036810
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x1405c7418]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov edi, r9d
movzx r13d, r8b
movzx r12d, dl
mov rsi, rcx
xor r14d, r14d
mov dword [rsp + 0x20], r14d
test r8b, r8b
je 0x1400368a7
xor edx, edx
lea rcx, [rbp - 0x78]
call fcn.140050160
mov rbx, rax
mov dword [rsp + 0x20], 1
mov rdx, rsi
lea rcx, [rbp - 0x58]
call fcn.140033db0
nop
mov dword [rsp + 0x20], 3
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.14002d800
nop
lea ebx, [r14 + 7]
jmp 0x140036933
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], r14
mov r14, qword [rcx + 0x10]
mov r15, rsi
cmp qword [rcx + 0x18], 8
jb 0x1400368c6
mov r15, qword [rcx]
cmp r14, 8
jae 0x1400368df
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x68], xmm0
mov qword [rbp - 0x80], 7
jmp 0x140036921
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x68]
call fcn.140007f70
mov qword [rsp + 0x68], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1400ad430
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], r14
lea rax, [rsp + 0x68]
mov ebx, 8
xor r14d, r14d
mov dword [rsp + 0x20], ebx
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.14002d4d0
nop
test bl, 8
je 0x1400369a5
and ebx, 0xfffffff7
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x140036992
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003698d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fcb
call fcn.1400ab1c4
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r14w
test bl, 4
je 0x140036a02
and ebx, 0xfffffffb
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x1400369f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400369ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fd1
call fcn.1400ab1c4
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], r14w
test bl, 2
je 0x140036a5f
and ebx, 0xfffffffd
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x140036a4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036a49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fd7
call fcn.1400ab1c4
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], r14w
test bl, 1
je 0x140036abc
and ebx, 0xfffffffe
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x140036aab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036aa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fdd
call fcn.1400ab1c4
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r14w
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002d4d0
nop
test r13b, r13b
je 0x140036ce6
lea rdx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x140036b8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140036b8e
test r12b, r12b
je 0x140036c82
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov edx, 1
mov r8d, 0x10100
call fcn.1400704d0
mov rcx, rsi
call fcn.1400266a0
and eax, 0xfffffffe
mov edx, eax
mov rcx, rsi
call fcn.140026f20
lea rdx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x140036b8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x140036c82
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x140036be8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140036be3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036e6e
call fcn.1400ab1c4
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r14w
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x140036c3e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036c39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fc5
call fcn.1400ab1c4
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], r14w
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.1400ab7b0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test edi, edi
jle 0x140036e74
mov ebx, dword [rbp + 0x120]
dec edi
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x140036b8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140036b8e
test edi, edi
jle 0x140036e74
jmp 0x140036c90
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140036dd2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140036dd2
test r12b, r12b
je 0x140036d81
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
mov edx, 1
mov r8d, 0x10100
call fcn.1400704d0
lea rcx, [rsp + 0x28]
call fcn.1400266a0
and eax, 0xfffffffe
mov edx, eax
lea rcx, [rsp + 0x28]
call fcn.140026f20
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140036ba6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140036ba6
test edi, edi
jle 0x140036f2f
mov ebx, dword [rbp + 0x120]
nop
dec edi
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140036ba6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140036ba6
test edi, edi
jle 0x140036f2f
jmp 0x140036d90
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x140036e10
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036e0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036e6e
call fcn.1400ab1c4
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r14w
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x140036c3e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036c39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fc5
jmp 0x140036c39
call fcn.1400b1d8c
nop
lea rdx, [0x1403efe98]
lea rcx, [rbp - 0x78]
call fcn.140005380
nop
lea rcx, [rbp - 0x58]
call fcn.140005740
nop
mov r9d, 0x277
lea r8, [rbp - 0x78]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400057f0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rbp - 0x38]
call fcn.140005740
nop
lea r8, str.Move_file_
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400034a0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140003420
nop
lea r8, str._to_
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1400034a0
nop
lea r8, [rsp + 0x28]
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.140003420
nop
lea r8, [0x1403ed8ac]
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.1400034a0
nop
mov rcx, rax
call fcn.1400083b0
mov r8, rdi
mov edx, ebx
mov rcx, rax
call fcn.14001f0f0
nop
lea rdx, str.removeFile
lea rcx, [rbp - 0x78]
call fcn.140005380
nop
lea rcx, [rbp + 0x48]
call fcn.140005740
nop
mov r9d, 0x28e
lea r8, [rbp - 0x78]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400057f0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rbp + 0x28]
call fcn.140005740
nop
lea r8, str.DeleteFile_
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1400034a0
nop
lea r8, [rsp + 0x28]
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140003420
nop
lea r8, [0x1403ed8c4]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1400034a0
nop
mov rcx, rax
call fcn.1400083b0
mov r8, rdi
mov edx, ebx
mov rcx, rax
call fcn.14001f0f0
nop
call fcn.1400b1d8c
nop
call fcn.1400b1d8c
nop
call fcn.1400b1d8c
nop
call fcn.1400b1d8c
nop
call fcn.1400b1d8c
int3