Function at 0x1400d8ba8
Capabilities:
Delete directory
Delete file

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x14049e048]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov bl, dl
add rcx, 0xc
cmp word [rcx], 0
je 0x1400d8d75
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
call qword [sym.imp.AdDownloaderCore.dll_Ordinal_11]
mov rdx, rax
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__11]
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call fcn.1400d9bd8
test al, al
je 0x1400d8c1a
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test bl, bl
jne 0x1400d8d6b
mov ebx, VarDateFromDisp
mov edx, ebx
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
lea r8, [0x140334cb4]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x40]
call fcn.140037a38
nop
lea r8, str.pkg.mediumimagelibrary4.xml
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140037a38
nop
lea rcx, [rbp - 0x40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [0x140334cb4]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x38]
call fcn.140037a38
nop
lea r8, str.MediumImageLibrary4.exe
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140037a38
nop
lea rcx, [rbp - 0x38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rbp - 0x18]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call fcn.1400d9bd8
test al, al
je 0x1400d8cd4
lea rcx, [rbp - 0x18]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x20]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call fcn.1400d9bd8
test al, al
je 0x1400d8cfd
lea rcx, [rbp - 0x20]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x30]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov edx, ebx
lea rcx, [rbp - 0x30]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x30]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea rcx, [rbp - 0x40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140088c50
mov rbx, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret