Function at 0x14003f750
Capabilities:
Delete file
Move file

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
mov qword [rsp + 0xc8], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rsi, rcx
lea rbx, [rcx + 0x40]
mov qword [rax + 8], rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov ecx, 8
call sub.MSVCR90.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor ebp, ebp
test rax, rax
je 0x14003f7a5
lea rcx, [rsp + 0x40]
mov qword [rax], rcx
jmp 0x14003f7a8
mov rax, rbp
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
call fcn.140041190
mov qword [rsp + 0x70], rax
mov byte [rax + 0x41], 1
mov rax, qword [rsp + 0x70]
mov qword [rax + 8], rax
mov rax, qword [rsp + 0x70]
mov qword [rax], rax
mov rax, qword [rsp + 0x70]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x78], rbp
mov rdi, rbp
add rsi, 0x10
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
movabs r12, 0xa7d36bd75acbe1d9
mov rax, r12
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14003f8c0
nop word [rax + rax]
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, r12
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x14003f84a
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi + 0x18]
lea rdx, [rax + rbp + 0x410]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
nop
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x40]
call fcn.140040050
nop
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
inc rdi
add rbp, 0x61a
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, r12
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x14003f820
mov rax, qword [rsp + 0x70]
mov r12, qword [rax]
mov r15, qword [rsp + 0x40]
movabs rbx, 0xa7d36bd75acbe1d9
nop word [rax + rax]
mov rdi, qword [rsp + 0x70]
test r15, r15
je 0x14003f8f1
cmp r15, qword [rsp + 0x40]
je 0x14003f8f7
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp r12, rdi
je 0x14003fd8b
test r15, r15
jne 0x14003f910
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor r11d, r11d
jmp 0x14003f913
mov r11, qword [r15]
cmp r12, qword [r11 + 0x30]
jne 0x14003f91f
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
lea rdx, [r12 + 0x18]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rcx, rax
call fcn.140010aa0
test al, al
jne 0x14003fd10
xor r13d, r13d
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14003fb51
xor ebp, ebp
nop dword [rax]
test r15, r15
jne 0x14003f980
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor r11d, r11d
jmp 0x14003f983
mov r11, qword [r15]
cmp r12, qword [r11 + 0x30]
jne 0x14003f98f
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp qword [r12 + 0x38], 8
jb 0x14003f99e
mov rdi, qword [r12 + 0x20]
jmp 0x14003f9a3
lea rdi, [r12 + 0x20]
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003f9cd
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rbp + 0x410]
sub rdi, rcx
nop dword [rax]
movzx edx, word [rcx]
movzx eax, word [rcx + rdi]
sub edx, eax
jne 0x14003f9f3
add rcx, 2
test eax, eax
jne 0x14003f9e0
test edx, edx
jne 0x14003fb1f
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003fa25
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi + 0x18]
cmp byte [rax + rbp + 0x618], 0
jne 0x14003fa73
mov rcx, qword [rsi + 0x20]
sub rcx, rax
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003fa5c
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rbp + 0x208]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x14003fb1f
mov rcx, qword [rsi + 0x20]
sub rcx, rax
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003fa9c
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi + 0x18]
cmp byte [rax + rbp + 0x618], 1
jne 0x14003fb1f
mov rcx, qword [rsi + 0x20]
sub rcx, rax
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003fad3
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rdi, qword [rsi + 0x18]
add rdi, rbp
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003fb04
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rbp + 0x208]
mov r8d, 1
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
inc r13
add rbp, 0x61a
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0xa
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jb 0x14003f970
mov rbp, qword [rsi + 0x20]
cmp qword [rsi + 0x18], rbp
jbe 0x14003fb61
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
test r15, r15
jne 0x14003fb71
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor r11d, r11d
jmp 0x14003fb74
mov r11, qword [r15]
cmp r12, qword [r11 + 0x30]
jne 0x14003fb80
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
lea rdx, [r12 + 0x18]
lea rcx, [rsp + 0x120]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rdi, rax
mov qword [rsp + 0x198], rax
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rdi, qword [rsi + 0x20]
cmp qword [rsi + 0x18], rdi
jbe 0x14003fbe0
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdi
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0xd0], xmm0
mov rdi, qword [rsi + 0x18]
cmp rdi, qword [rsi + 0x20]
jbe 0x14003fc0b
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov rax, qword [rsi]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rdi
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x90], xmm0
lea r9, [rsp + 0xf8]
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0xe0]
call fcn.140041240
lea rdx, [rsp + 0x80]
mov rcx, qword [rax]
mov qword [rdx], rcx
mov rax, qword [rax + 8]
mov qword [rdx + 8], rax
mov rdi, qword [rsp + 0x88]
test rsi, rsi
je 0x14003fc7a
cmp qword [rsi + 0x18], rdi
ja 0x14003fc7a
cmp rdi, qword [rsi + 0x20]
jbe 0x14003fc80
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov r13, qword [rsi]
cmp qword [rsi + 0x18], rbp
ja 0x14003fc8f
cmp rbp, qword [rsi + 0x20]
jbe 0x14003fc95
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
test r13, r13
je 0x14003fc9f
cmp r13, qword [rsi]
je 0x14003fca5
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp rdi, rbp
je 0x14003fd02
mov r13, qword [rsi + 0x20]
mov rcx, r13
sub rcx, rbp
mov rax, rbx
imul rcx
lea r14, [rcx + rdx]
sar r14, 0xa
mov rax, r14
shr rax, 0x3f
add r14, rax
imul r14, r14, 0x61a
add r14, rdi
cmp rbp, r13
je 0x14003fcfe
sub rdi, rbp
nop
lea rcx, [rdi + rbp]
mov rdx, rbp
mov r8d, 0x61a
call sub.MSVCR90.dll_memcpy
add rbp, 0x61a
cmp rbp, r13
jne 0x14003fce0
mov qword [rsi + 0x20], r14
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
test r15, r15
jne 0x14003fd1b
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp byte [r12 + 0x41], 0
je 0x14003fd2e
call qword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
jmp 0x14003f8e0
mov rax, qword [r12 + 0x10]
cmp byte [rax + 0x41], 0
jne 0x14003fd61
mov r12, rax
mov rax, qword [rax]
cmp byte [rax + 0x41], 0
jne 0x14003f8e0
nop dword [rax]
mov r12, rax
mov rax, qword [rax]
cmp byte [rax + 0x41], 0
je 0x14003fd50
jmp 0x14003f8e0
mov rax, qword [r12 + 8]
cmp byte [rax + 0x41], 0
jne 0x14003fd83
nop dword [rax]
cmp r12, qword [rax + 0x10]
jne 0x14003fd83
mov r12, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x41], 0
je 0x14003fd70
mov r12, rax
jmp 0x14003f8e0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x30], rcx
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x80], xmm0
movaps xmm1, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x90], xmm1
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x40]
call fcn.140040ac0
mov rcx, qword [rsp + 0x70]
call sub.MSVCR90.dll_void___cdecl_operator_delete_void____ptr64_
xor ebp, ebp
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rbp
mov rcx, qword [rsp + 0x40]
call sub.MSVCR90.dll_void___cdecl_operator_delete_void____ptr64_
nop
mov rcx, qword [rsp + 0x190]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret