Function at 0x140050bf0
Capabilities:
Delete file
Encode data using xor
Get common file path
Read file on windows

Disassembly:
push rbx
sub rsp, 0x170
mov rax, qword [0x140063040]
xor rax, rsp
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x50]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x8010
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
cmp byte [0x14005a91b], 0
movsd xmm0, qword [str.haOGPVT]
mov eax, dword [str.__Y_CW6]
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x40], eax
je 0x140050d9f
xor ecx, ecx
cmp dword [0x140063090], 2
jl 0x140050d5f
movdqa xmm2, xmmword [0x14005ac30]
mov ecx, 8
movdqa xmm3, xmmword [0x14005ac40]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x14005afe0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14005ac80]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [str.haOGPVT]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14005ace0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14005ad30]
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [rsp + 0x38], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14005ac80]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rsp + 0x3c]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14005ace0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14005ad30]
xorps xmm2, xmm0
movd dword [rsp + 0x3c], xmm2
movsxd rax, ecx
lea r8, [rsp + 0x38]
add r8, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
inc ecx
sub al, dl
add al, 0x34
xor byte [r8 - 1], al
cmp ecx, 0xc
jl 0x140050d70
movzx eax, word [0x14005a90c]
lea rcx, [rsp + 0x50]
movzx r9d, byte [0x14005a90e]
lea r8, [rsp + 0x38]
mov word [rsp + 0x30], ax
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x140050dc0
xor edx, edx
nop dword [rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x140050dd0
xor byte [rsp + 0x31], 0x35
lea rdx, [rsp + 0x30]
xor r9b, 0x36
mov byte [rsp + 0x30], 0x72
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x32], r9b
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rbx, rax
test rax, rax
je 0x140050e6b
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov rcx, rbx
cmp eax, 0x60
jne 0x140050e65
xor r8d, r8d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov edx, 0x60
lea rcx, [0x140114330]
mov r9, rbx
lea r8d, [rdx - 0x5f]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x140050e70
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
call fcn.140050a30
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140051cb0
add rsp, 0x170
pop rbx
ret