Function at 0x14007efc0
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x140177090]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rdi, rdx
mov rsi, rcx
mov qword [rbp + 0x1f], rcx
xor r14d, r14d
mov dword [rbp - 0x39], r14d
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rcx], r14b
mov dword [rbp - 0x39], 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x27], xmm0
mov qword [rbp + 0x37], rax
mov qword [rbp - 9], r14
mov dword [rbp - 1], 1
mov qword [rbp - 0x11], r14
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp + 0x17], al
xor edx, edx
xor ecx, ecx
call fcn.140023fa0
mov rbx, rax
xor edx, edx
xor ecx, ecx
call fcn.140023fa0
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x11]
call fcn.1400241d0
mov byte [rbp + 0x17], 1
lea r9, str..fetch
mov rdx, rdi
lea rcx, [rbp + 0x27]
call fcn.140024250
mov dword [rbp - 0x39], 3
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x14007f08c
mov rax, qword [rcx]
lea edx, [r14 + 1]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp + 7], r14
mov rcx, qword [rbp + 0xf]
test rcx, rcx
je 0x14007f0a4
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp + 0xf], r14
mov byte [rbp + 0x17], 0
lea rcx, [rbp - 0x11]
call fcn.14001b870
nop
mov rcx, qword [rbp + 0x27]
cmp rcx, qword [rbp + 0x2f]
je 0x14007f1f1
cmp qword [rcx + 0x18], 8
jb 0x14007f0ca
mov rcx, qword [rcx]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea rdx, [0x14014ce5c]
test rax, rax
cmovne rdx, rax
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x19], 7
mov word [rbp - 0x31], r14w
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007f100
lea rcx, [rbp - 0x31]
call fcn.1400088b0
mov dword [rbp - 0x39], DosDateTimeToVariantTime
xor r8d, r8d
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x31]
call fcn.140025500
nop
lea rcx, [rbp - 0x31]
call fcn.140008840
nop
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x31], 0
mov dword [rbp - 0x39], 0x1f
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x11]
call fcn.14001a4c0
lea rax, [rbp - 0x31]
cmp rsi, rax
je 0x14007f18a
mov rcx, rsi
call fcn.140008a50
movups xmm0, xmmword [rbp - 0x31]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp - 0x21]
movups xmmword [rsi + 0x10], xmm1
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x31], 0
mov dword [rbp - 0x39], reloc.WS2_32.dll_ntohs
lea rcx, [rbp - 0x31]
call fcn.140008a50
nop
lea rcx, [rbp - 0x11]
call fcn.140008840
mov rdi, qword [rbp + 0x2f]
mov rbx, qword [rbp + 0x27]
cmp rbx, rdi
je 0x14007f1f1
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14007f1be
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14007f1e8
mov edx, 0x80
mov rcx, rbx
call fcn.1400262d0
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14007f1e2
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
add rbx, 0x20
cmp rbx, rdi
jne 0x14007f1b1
cmp qword [rsi + 0x10], 0
jne 0x14007f20e
mov r8d, 2
lea rdx, [0x140153e50]
mov rcx, rsi
call fcn.140008ab0
nop
lea rcx, [rbp + 0x27]
call fcn.140024560
mov rax, rsi
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400e9d60
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret