Function at 0x140201000
Capabilities:
Create directory
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov rdi, r8
mov rbx, rdx
mov r12, rcx
lea rcx, [rbp + 0x38]
call fcn.1401ce040
nop
mov r8d, 5
lea rdx, str.Temp
lea rcx, [rbp + 0x38]
call fcn.140002740
lea rcx, [rbp + 0x38]
call fcn.1401fcd60
xor edx, edx
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov rdx, qword [rbx]
lea r9, [rbp + 0x38]
mov r8, rdx
mov rdx, qword [rdx]
lea rcx, [rbp - 0x18]
call fcn.140200b10
mov rdi, qword [rdi]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140201095
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x38]
call fcn.1401fced0
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x140201080
lea rcx, [rbp - 0x10]
call fcn.1401f2b70
nop
lea rcx, [rbp - 0x38]
call fcn.1401ce040
nop
lea r8, str.UserInfo
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14001db30
lea r8, [rbp + 0x38]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1401f2c10
movzx edi, al
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
or ebx, 0xffffffff
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1402010f2
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140201110
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test dil, dil
je 0x14020123b
lea rcx, [rbp - 0x28]
call fcn.1401ce040
nop
lea r8, str.UserInfo
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14001db30
nop
lea r8, [0x14034d640]
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.14001db30
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14020116a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140201188
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x14042f270]
mov rax, qword [0x14042f270]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, str.Data
test rdx, 0xffffffffffff0000
jne 0x1402011d3
movzx esi, dx
xor edx, edx
mov ecx, esi
call fcn.140001440
test rax, rax
je 0x1402011e3
mov r8d, esi
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140031cc0
jmp 0x1402011e3
mov r8d, 4
lea rcx, [rbp + 0x40]
call fcn.140032960
nop
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x40]
mov rcx, r12
call fcn.140200e80
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140201212
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14020123b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x38]
call fcn.1401fcd60
nop
lea rcx, [rbp - 0x10]
call fcn.1401f26d0
nop
mov rax, qword [rbp + 0x38]
lea rdx, [rax - 0x18]
lock xadd dword [rdx + 0x10], ebx
dec ebx
test ebx, ebx
jg 0x14020126b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movzx eax, dil
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret