Function at 0x18000138e
Capabilities:
Delete directory
Delete file

Disassembly:
jmp 0x180014ed0
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rdi, rcx
lea rcx, [rbp + 0x17]
call fcn.18000216c
lea rcx, [rbp + 0x3f]
call fcn.180001c44
nop
mov rdx, qword [rdi]
lea rcx, [rbp + 0x17]
call fcn.180003562
test al, al
je 0x1800150f4
mov ebx, dword [rbp + 0x37]
mov eax, ebx
shr eax, 4
test al, 1
jne 0x180014f3d
mov ecx, 0x10b
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1800150f4
shr ebx, 0xa
not bl
mov rcx, qword [rbp + 0x3f]
call fcn.180001316
and bl, 1
je 0x1800150d5
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.180003e18
nop
mov ebx, dword [rbp - 9]
cmp dword [rbp - 5], ebx
jne 0x180014f75
lea rcx, [rbp - 0x11]
call fcn.180004020
mov ebx, dword [rbp - 9]
mov rcx, qword [rbp - 0x11]
mov eax, ebx
mov edx, 0x5c
mov word [rcx + rax*2], dx
inc ebx
lea rsi, [rbx + rbx]
xor eax, eax
mov word [rsi + rcx], ax
mov edx, ebx
mov dword [rbp - 9], ebx
cmp dword [rbp - 5], ebx
jne 0x180014fa6
lea rcx, [rbp - 0x11]
call fcn.180004020
mov edx, dword [rbp - 9]
mov rcx, qword [rbp - 0x11]
mov eax, edx
mov r8d, 0x2a
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rbp - 9], edx
mov qword [rbp - 1], 0xffffffffffffffff
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 7]
call fcn.180003e18
nop
lea rcx, [rbp + 0x17]
call fcn.18000216c
lea rcx, [rbp + 0x3f]
call fcn.180001c44
nop
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 1]
call fcn.180004b9c
test al, al
je 0x1800150af
cmp ebx, dword [rbp - 9]
jae 0x180015014
mov dword [rbp - 9], ebx
mov rax, qword [rbp - 0x11]
xor ecx, ecx
mov word [rsi + rax], cx
lea rdx, [rbp + 0x3f]
lea rcx, [rbp - 0x11]
call fcn.1800042c8
mov eax, dword [rbp + 0x37]
shr eax, 4
test al, 1
je 0x180015038
lea rcx, [rbp - 0x11]
call fcn.18000138e
test al, al
jmp 0x180015070
mov rdi, qword [rbp - 0x11]
mov rcx, rdi
call fcn.18000386e
cmp eax, 0xffffffff
je 0x180015065
mov edx, eax
and dl, 0x11
cmp dl, 1
jne 0x180015065
and eax, 0xfffffffe
mov edx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x180015088
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x180015088
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 1]
call fcn.180004b9c
test al, al
je 0x1800150ab
jmp 0x180015002
mov rcx, qword [rbp + 0x3f]
call fcn.180001316
nop
mov rcx, qword [rbp + 7]
call fcn.180001316
lea rcx, [rbp - 1]
call fcn.180004aa2
nop
mov rcx, qword [rbp - 0x11]
jmp 0x1800150f8
mov rdi, qword [rbp + 0x67]
mov rcx, qword [rbp + 0x3f]
call fcn.180001316
nop
mov rcx, qword [rbp + 7]
call fcn.180001316
lea rcx, [rbp - 1]
call fcn.180004aa2
nop
mov rcx, qword [rbp - 0x11]
call fcn.180001316
xor edx, edx
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x1800150fd
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
setne al
jmp 0x1800150ff
mov rcx, qword [rbp + 0x3f]
call fcn.180001316
xor al, al
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret