Function at 0x140032f38
Capabilities:
Delete directory
Delete file

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
sub rsp, 0x2c0
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x140197b10]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov edi, edx
mov rsi, rcx
xor ecx, ecx
mov ebx, ecx
mov eax, edx
and eax, 1
mov dword [rsp + 0x38], eax
and edi, 0xfffffffe
cmp word [rsi], cx
je 0x1400331af
mov rbp, rsi
mov qword [rsp + 0x50], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, dword [rsp + 0x38]
cdqe
lea rsi, [rsi + rax*2]
mov qword [rsp + 0x48], rsi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov edx, 0x5c
cmp dx, word [rbp + rcx*2 - 2]
jne 0x140032fce
lea esi, [rdx - 0x5a]
mov dword [rsp + 0x28], esi
dec eax
cdqe
xor ecx, ecx
mov word [rbp + rax*2], cx
jmp 0x140032fe6
mov rcx, rbp
call fcn.1400cf330
xor ecx, ecx
mov esi, ecx
cmp eax, ecx
lea eax, [rcx + 1]
cmovne esi, eax
mov dword [rsp + 0x28], esi
mov rdx, rbp
lea rcx, [rsp + 0x20]
call fcn.140071240
nop
xor eax, eax
cmp esi, eax
je 0x14003300d
lea rdx, [0x1401492d8]
lea rcx, [rsp + 0x20]
call fcn.140063600
xor eax, eax
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.1400cf3b0
xor edx, edx
lea r8d, [rdx + 0x5c]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.SHLWAPI.dll_StrRChrW]
xor ecx, ecx
cmp rax, rcx
je 0x140033041
mov word [rax], cx
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
movsxd rcx, eax
mov rax, qword [rsp + 0x20]
mov edx, 0x5c
mov word [rax + rcx*2 - 2], dx
mov rax, qword [rsp + 0x20]
xor edx, edx
mov word [rax + rcx*2], dx
cmp qword [rsp + 0x30], rdx
je 0x140033135
mov rbp, rcx
xor esi, esi
mov rax, qword [rsp + 0x20]
mov word [rax + rbp*2], si
lea rdx, [rsp + 0x8c]
lea rcx, [rsp + 0x20]
call fcn.140063600
test byte [rsp + 0x60], 0x10
jne 0x1400330d6
cmp edi, esi
je 0x1400330c4
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, esi
jne 0x140033110
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, esi
mov eax, 1
cmove ebx, eax
jmp 0x140033110
mov rcx, qword [rsp + 0x20]
call fcn.14002c3f8
cmp eax, esi
je 0x140033110
mov ebx, eax
jmp 0x140033110
cmp word [rsp + 0x8c], 0x2e
jne 0x1400330fe
movzx eax, word [rsp + 0x8e]
cmp ax, si
je 0x140033110
cmp ax, 0x2e
jne 0x1400330fe
cmp word [rsp + 0x90], si
je 0x140033110
mov edx, edi
mov rcx, qword [rsp + 0x20]
call fcn.140032f38
neg eax
sbb ecx, ecx
and ebx, ecx
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, esi
jne 0x14003307b
mov esi, dword [rsp + 0x28]
mov rbp, qword [rsp + 0x50]
xor eax, eax
jmp 0x140033147
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
xor eax, eax
cmp ebx, eax
lea ecx, [rax + 1]
cmove ebx, ecx
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x14003315f
cmp rcx, 0xffffffffffffffff
je 0x14003315f
call qword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
cmp esi, eax
je 0x140033195
xor esi, esi
cmp edi, esi
je 0x140033188
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp eax, esi
jne 0x140033195
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, esi
lea eax, [rsi + 1]
cmove ebx, eax
jmp 0x140033195
mov rcx, rbp
call fcn.14002c3f8
cmp eax, esi
cmovne ebx, eax
lea rcx, [rsp + 0x20]
call fcn.14005b520
mov rsi, qword [rsp + 0x48]
xor eax, eax
cmp word [rsi], ax
jne 0x140032f82
mov eax, ebx
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.14010bcc0
mov rbx, qword [rsp + 0x2f0]
add rsp, 0x2c0
pop rdi
pop rsi
pop rbp
ret