Function at 0x140006ff8
Capabilities:
Delete file
Get common file path
Set current directory

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa38]
sub rsp, 0xb38
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov rax, qword [0x140042038]
xor rax, rsp
mov qword [rbp + 0xa20], rax
mov rbx, r9
mov qword [rsp + 0x40], rbx
mov rsi, r8
mov r14, rdx
mov rdi, rcx
lea rcx, [rsp + 0x48]
call fcn.140001834
nop
lea rcx, [rsp + 0x68]
call fcn.140001834
nop
lea rcx, [rbp - 0x58]
call fcn.140001834
nop
lea rcx, [rbp - 0x78]
call fcn.140001834
nop
mov r8, rsi
mov rcx, rsi
call fcn.140011820
mov r8, r14
mov rcx, r14
call fcn.140011820
mov r8, rbx
mov rcx, rbx
call fcn.140011820
xor ebx, ebx
cmp word [r14], bx
jne 0x1400070a8
mov edx, 0xa02b
mov rcx, rdi
call fcn.140004c40
mov ebx, 0xffff
jmp 0x1400072f5
lea r15, [0x140037ce8]
lea rax, [rbp + 0x410]
lea r9, [rbp + 0x610]
lea r8, [rbp + 0x210]
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x20], rax
cmp word [rsi], bx
je 0x1400070fa
mov rcx, rsi
call fcn.140017530
lea rdx, [0x140037cf8]
lea rcx, [rbp + 0x410]
call fcn.140017dcc
test eax, eax
setne al
mov byte [rdi + 0x1713], al
jmp 0x140007145
mov rcx, r14
call fcn.140017530
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140017878
lea rdx, [rbp + 0x210]
mov rcx, rsi
call fcn.14001784c
lea rdx, [rbp + 0x610]
mov rcx, rsi
call fcn.14001784c
lea rdx, [0x140037cf8]
cmp byte [rdi + 0x1713], bl
cmovne rdx, r15
mov rcx, rsi
call fcn.14001784c
lea rdx, [0x140037970]
lea rcx, [rbp - 0x30]
call fcn.14000454c
nop
lea r8, [rbp - 0x30]
lea rdx, [rsp + 0x48]
call fcn.1400058fc
nop
lea rcx, [rbp - 0x30]
call fcn.1400016b0
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x58]
call fcn.140003608
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x78]
call fcn.140003608
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.140003608
lea rdx, str..tok
lea rcx, [rbp - 0x58]
call fcn.14000a610
mov rdx, r15
lea rcx, [rbp - 0x78]
call fcn.14000a610
lea rdx, [0x140037cf8]
lea rcx, [rsp + 0x68]
call fcn.14000a610
lea rdx, [rbp - 0x58]
call fcn.1400059f8
lea rdx, [rbp - 0x78]
call fcn.1400059f8
lea rdx, [rsp + 0x68]
call fcn.1400059f8
lea rdx, [rbp + 0x810]
mov r15d, 0x104
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea r9, [rbp - 0x10]
lea r8, [rbp]
mov edx, r15d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x140007218
mov word [rax], bx
lea rcx, [rbp]
call fcn.1400165e8
test rax, rax
je 0x140007233
cmp word [rbp + rax*2 - 2], 0x5c
jne 0x140007233
mov word [rbp + rax*2 - 2], bx
lea rcx, [rbp]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov r15, qword [rbp - 0x78]
mov qword [rsp + 0x30], r15
mov r12, qword [rbp - 0x58]
mov qword [rsp + 0x28], r12
mov r13, qword [rsp + 0x68]
mov qword [rsp + 0x20], r13
mov r9, qword [rsp + 0x40]
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call fcn.140007344
mov r14d, eax
lea rcx, [rdi + 0x1718]
call fcn.14000cf20
mov rcx, qword [rdi + 0x1818]
test rcx, rcx
je 0x140007299
mov edx, 1
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
mov qword [rdi + 0x1818], rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test r14d, r14d
je 0x1400072cd
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test r14d, r14d
jne 0x1400072f5
cmp byte [rdi + 0x1710], bl
je 0x1400072f5
mov edx, 0xa032
mov rcx, rdi
call fcn.140004d64
nop
lea rcx, [rbp - 0x78]
call fcn.1400016b0
nop
lea rcx, [rbp - 0x58]
call fcn.1400016b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400016b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400016b0
mov eax, ebx
mov rcx, qword [rbp + 0xa20]
xor rcx, rsp
call fcn.140015ef0
add rsp, 0xb38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret