Function at 0x140007b70
Capabilities:
Delete file
Get common file path
Move file
Write file on windows

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
mov eax, 0x1190
call fcn.14008a6e0
sub rsp, rax
lea rbp, [rsp + 0x40]
mov rax, qword [0x1418089d0]
xor rax, rbp
mov qword [rbp + 0x1140], rax
mov qword [rbp + 0x438], 0xffffffffffffffff
mov qword [rbp + 0x440], 0xffffffffffffffff
mov dword [rbp + 0x430], 0
lea rax, [rbp + 0x880]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x670]
lea r8, [rbp + 0xcb0]
lea rdx, [rbp + 0xa90]
mov rcx, qword [rbp + 0x1168]
call fcn.140071e1c
lea rdx, [rbp + 0xa90]
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [rbp + 0xcb0]
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov rdx, qword [rbp + 0x1168]
lea rcx, [rbp + 0x450]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, str..bak
lea rcx, [rbp + 0x450]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea r9, [rbp + 0x220]
xor r8d, r8d
lea rdx, [0x140093930]
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
jne 0x140007c63
jmp 0x140007fd9
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x438], rax
cmp qword [rbp + 0x438], 0xffffffffffffffff
jne 0x140007caa
jmp 0x140007fd9
cmp dword [rbp + 0x1170], 0xffffffff
jne 0x140007cc3
mov rax, qword [rbp + 0x1160]
mov eax, dword [rax + 0x4c]
mov dword [rbp + 0x1170], eax
movsxd rcx, dword [rbp + 0x1170]
lea rax, [0x1400c21c8]
mov rax, qword [rax + rcx*8]
mov qword [rbp + 0xec8], rax
mov rcx, qword [rbp + 0xec8]
call fcn.140071ac0
mov dword [rbp + 0xca4], eax
mov rcx, qword [rbp + 0x1160]
add rcx, 0x58
call fcn.14000a070
mov dword [rbp + 0x664], eax
call fcn.140001540
mov dword [rbp + 0xca0], eax
mov dword [rbp + 0xed0], 0
jmp 0x140007d2a
mov eax, dword [rbp + 0xed0]
add eax, 1
mov dword [rbp + 0xed0], eax
mov eax, dword [rbp + 0x664]
cmp dword [rbp + 0xed0], eax
jge 0x140007edd
movsxd rdx, dword [rbp + 0xed0]
mov rcx, qword [rbp + 0x1160]
add rcx, 0x58
call fcn.14000a760
mov eax, dword [rax + 8]
mov dword [rbp + 0xed8], eax
cmp dword [rbp + 0xed8], 0
jle 0x140007e80
movsxd rdx, dword [rbp + 0xed0]
mov rcx, qword [rbp + 0x1160]
add rcx, 0x58
call fcn.14000a760
mov rax, qword [rax]
mov qword [rbp + 0x668], rax
cmp qword [rbp + 0x668], 0
jne 0x140007da4
mov qword [rbp + 0x1130], 0
jmp 0x140007e39
mov rcx, qword [rbp + 0x668]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [rbp + 0x660], eax
cmp dword [rbp + 0x660], 0x3fffffff
jle 0x140007dd3
mov qword [rbp + 0x1138], 0
jmp 0x140007e2b
movsxd rdx, dword [rbp + 0x660]
shl rdx, 1
movsxd rcx, dword [rbp + 0x660]
shl rcx, 1
mov rax, rcx
add rax, 0xf
cmp rax, rcx
ja 0x140007dfd
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.14008a6e0
sub rsp, rax
lea rcx, [rsp + 0x40]
mov r9d, dword [rbp + 0xca0]
mov r8d, edx
mov rdx, qword [rbp + 0x668]
call fcn.140009520
mov qword [rbp + 0x1138], rax
mov rax, qword [rbp + 0x1138]
mov qword [rbp + 0x1130], rax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xed4]
mov r8d, dword [rbp + 0xed8]
mov rdx, qword [rbp + 0x1130]
mov rcx, qword [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140007e6d
jmp 0x140007fd9
mov eax, dword [rbp + 0xed4]
cmp dword [rbp + 0xed8], eax
je 0x140007e80
jmp 0x140007fd9
mov eax, dword [rbp + 0x664]
sub eax, 1
cmp dword [rbp + 0xed0], eax
jge 0x140007ed8
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xed4]
mov r8d, dword [rbp + 0xca4]
mov rdx, qword [rbp + 0xec8]
mov rcx, qword [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140007ec5
jmp 0x140007fd9
mov eax, dword [rbp + 0xed4]
cmp dword [rbp + 0xca4], eax
je 0x140007ed8
jmp 0x140007fd9
jmp 0x140007d1b
mov rcx, qword [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x438], 0xffffffffffffffff
mov rax, qword [rbp + 0x1160]
cmp dword [rax + 0x50], 0
je 0x140007f6b
lea rdx, [rbp + 0xee0]
mov rcx, qword [rbp + 0x1168]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rbp + 0x440], rax
cmp qword [rbp + 0x440], 0xffffffffffffffff
je 0x140007f69
lea rcx, [rbp + 0x450]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [rbp + 0x450]
mov rcx, qword [rbp + 0x1168]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x140007f51
jmp 0x140007fd9
mov rcx, qword [rbp + 0x440]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rbp + 0x440], 0xffffffffffffffff
jmp 0x140007f78
mov rcx, qword [rbp + 0x1168]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rbp + 0x1168]
lea rcx, [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x140007f92
jmp 0x140007fd9
cmp dword [rbp + 0x1178], 0
je 0x140007fcf
mov rax, qword [rbp + 0x1160]
mov rax, qword [rax]
xor edx, edx
mov rcx, qword [rbp + 0x1160]
call qword [rax + 0xa8]
mov r11, qword [rbp + 0x1160]
mov rax, qword [rbp + 0x1160]
mov eax, dword [rax + 0xa8]
mov dword [r11 + 0xac], eax
mov dword [rbp + 0x430], 1
cmp qword [rbp + 0x440], 0xffffffffffffffff
je 0x140007ff0
mov rcx, qword [rbp + 0x440]
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp qword [rbp + 0x438], 0xffffffffffffffff
je 0x140008007
mov rcx, qword [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [rbp + 0x430]
mov rcx, qword [rbp + 0x1140]
xor rcx, rbp
call fcn.140071250
lea rsp, [rbp + 0x1150]
pop rbp
ret