Function at 0x140015f60
Capabilities:
Delete file
Get common file path
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push rsi
lea rbp, [r11 - 0x1f8]
sub rsp, 0x2e8
mov rax, qword [0x1400b1008]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov qword [r11 - 0x20], r14
xor edx, edx
mov qword [r11 - 0x28], r15
mov r14, rcx
xor r15d, r15d
lea rcx, [rbp - 0x60]
mov r8d, 0x104
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x70], r15
xor sil, sil
mov qword [rsp + 0x68], r15
mov qword [rbp - 0x80], r15
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x70], r15
call fcn.140068930
lea r8, [rsp + 0x68]
mov qword [rsp + 0x60], r15
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x58], r15
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x50], r15
mov qword [rbp - 0x78], r15
call fcn.140016b00
test al, al
je 0x1400162c0
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x98]
test eax, eax
js 0x1400162c0
mov rcx, qword [rbp - 0x80]
lea rdx, [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x88]
test eax, eax
js 0x1400162c0
mov rcx, qword [rsp + 0x78]
lea r8, [rsp + 0x70]
mov qword [rsp + 0x318], r12
mov r12d, 1
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x40]
test eax, eax
js 0x1400162b8
mov rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x50]
test eax, eax
js 0x1400162b8
lea rdx, [rbp + 0xb0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
je 0x1400162b8
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea r9, [rbp + 0xb0]
mov edx, 0x104
lea r8, str._s_llu.bat
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x60]
call fcn.14000f3f0
lea r8, [0x1400a62d4]
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x58]
call fcn.14006aa10
cmp qword [rsp + 0x58], r15
je 0x1400162b8
mov rdx, qword [rsp + 0x60]
lea rcx, str.del___ls__r_n_s_r_ndel____f0_exit
mov r8, r14
mov qword [rsp + 0x308], rbx
call fcn.140015f00
movsxd rbx, eax
cmp ebx, 0xffffffff
je 0x1400162b0
mov ecx, ebx
mov qword [rsp + 0x310], rdi
add ecx, r12d
mov qword [rsp + 0x2e0], r13
mov r13, 0xffffffffffffffff
cmovb rcx, r13
call fcn.14006bdc0
mov rdi, rax
test rax, rax
je 0x1400162a0
mov r9, qword [rsp + 0x60]
lea ecx, [rbx + 1]
movsxd rdx, ecx
lea r8, str.del___ls__r_n_s_r_ndel____f0_exit
mov rcx, rax
mov qword [rsp + 0x20], r14
call fcn.14000f3f0
mov r8d, ebx
mov rdx, rdi
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharToOemBuffA]
test eax, eax
je 0x140016298
mov r9, qword [rsp + 0x58]
mov r8, rbx
mov edx, r12d
mov rcx, rdi
call fcn.14006a7a0
cmp rax, rbx
jne 0x140016298
mov rcx, rdi
call fcn.14006ac0c
mov rcx, qword [rsp + 0x58]
call fcn.140069e78
mov rdx, qword [rsp + 0x60]
lea r8, [0x1400a7800]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x58], r15
call fcn.14006a9b8
cmp qword [rsp + 0x50], r15
je 0x1400162a0
lea rdx, [rbp - 0x60]
lea rcx, str.__s_
call fcn.140015f00
movsxd rbx, eax
cmp ebx, r13d
je 0x1400162a0
mov ecx, ebx
add ecx, r12d
cmovb rcx, r13
call fcn.14006bdc0
mov rdi, rax
test rax, rax
je 0x1400162a0
lea ecx, [rbx + 1]
movsxd rdx, ecx
lea r9, [rbp - 0x60]
mov rcx, rax
lea r8, str.__s_
call fcn.14000f3f0
mov r8d, ebx
mov rdx, rdi
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharToOemBuffA]
test eax, eax
je 0x140016298
mov r9, qword [rsp + 0x50]
mov r8, rbx
mov edx, r12d
mov rcx, rdi
call fcn.14006a7a0
cmp rax, rbx
jne 0x140016298
mov rcx, rdi
call fcn.14006ac0c
mov rcx, qword [rsp + 0x50]
call fcn.140069e78
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp - 0x78]
xorps xmm1, xmm1
mov qword [rsp + 0x30], r12
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x28], rdx
xor r9d, r9d
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x50], r15
lea r8d, [r15 + 2]
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
unpckhpd xmm1, xmm1
movaps xmmword [rsp + 0x30], xmm0
movsd qword [rsp + 0x40], xmm1
mov qword [rsp + 0x20], r15
call qword [rax + 0x68]
test eax, eax
js 0x1400162a0
mov ecx, 0x1f4
movzx esi, r12b
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400162a0
mov rcx, rdi
call fcn.14006ac0c
mov rdi, qword [rsp + 0x310]
mov r13, qword [rsp + 0x2e0]
mov rbx, qword [rsp + 0x308]
mov r12, qword [rsp + 0x318]
mov rcx, qword [rbp - 0x78]
mov r15, qword [rsp + 0x2d0]
mov r14, qword [rsp + 0x2d8]
test rcx, rcx
je 0x1400162df
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400162ee
call fcn.140069e78
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400162fd
call fcn.140069e78
test sil, sil
jne 0x14001631c
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14001632c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14001632c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14001633c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14001634c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14001635b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14001636b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14001637a
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x140016389
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
movzx eax, sil
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.14001a6d0
add rsp, 0x2e8
pop rsi
pop rbp
ret