Function at 0x14008e130
Capabilities:
Delete directory
Delete file
Set file attributes

Disassembly:
push rbp
push rdi
push r13
push r14
push r15
sub rsp, 0xa0
xor ebp, ebp
mov qword [rsp + 0x40], rcx
mov r14, r9
mov r13, r8
mov r15, rdx
mov rdi, rcx
test rdx, rdx
jne 0x14008e16a
xor eax, eax
add rsp, 0xa0
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
cmp dword [0x140455d78], ebp
jne 0x14008e177
call fcn.14005db60
mov qword [rsp + 0x98], rbx
cmp qword [r15 + 0x7d], rbp
jbe 0x14008e37c
mov rax, qword [r15 + 0x75]
mov qword [rsp + 0x88], r12
mov rbx, qword [rax]
cmp rbx, rax
je 0x14008e335
mov qword [rsp + 0x90], rsi
nop dword [rax]
cmp dword [0x140455b64], ebp
jne 0x14008e328
cmp qword [rbx + 0x38], 8
lea rdi, [rbx + 0x20]
jb 0x14008e1cc
mov rdx, qword [rdi]
jmp 0x14008e1cf
mov rdx, rdi
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rbp
mov word [rsp + 0x50], bp
cmp word [rdx], bp
jne 0x14008e1ec
mov r8, rbp
jmp 0x14008e1fa
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], bp
jne 0x14008e1f0
lea rcx, [rsp + 0x50]
call fcn.14004db90
lea rcx, [rsp + 0x50]
call fcn.14007d390
mov rax, qword [rbx + 0x40]
test byte [rax + 0x38], 0x10
je 0x14008e273
cmp qword [rdi + 0x18], 8
jb 0x14008e222
mov rdi, qword [rdi]
mov edx, 1
mov rcx, rdi
lea r8d, [rdx + 2]
call fcn.140052070
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x14008e25a
xor r9d, r9d
lea rdx, [0x14007f9a0]
mov r8, rdi
mov rcx, rax
call fcn.140052330
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x14008e294
cmp qword [rdi + 0x18], 8
jb 0x14008e27d
mov rdi, qword [rdi]
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14008e2d0
mov rax, qword [rbx + 0x40]
mov rcx, qword [rax + 0x28]
test rcx, rcx
jle 0x14008e2a8
add qword [r14], rcx
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x14008e2ba
call fcn.140125e14
mov qword [rbx + 0x40], rbp
mov r8, rbx
lea rdx, [rsp + 0x48]
lea rcx, [r15 + 0x75]
call fcn.1400678a0
mov rbx, qword [rax]
jmp 0x14008e31e
cmp byte [rbx + 0x19], bpl
jne 0x14008e31e
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], bpl
jne 0x14008e2fe
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], bpl
jne 0x14008e31e
nop dword [rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], bpl
je 0x14008e2f0
jmp 0x14008e31e
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], bpl
jne 0x14008e31b
cmp rbx, qword [rax + 0x10]
jne 0x14008e31b
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], bpl
je 0x14008e308
mov rbx, rax
cmp rbx, qword [r15 + 0x75]
jne 0x14008e1b0
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x90]
mov rax, qword [r15 + 0x7d]
mov r12, qword [rsp + 0x88]
test rax, rax
sete bpl
test rax, rax
jne 0x14008e35b
cmp byte [r15 + 0x70], 1
jne 0x14008e35b
mov rax, qword [r15 + 0x68]
add qword [r14], rax
mov eax, dword [r13]
xor r9d, r9d
inc eax
mov edx, 0x4cd
mov dword [r13], eax
mov rcx, qword [rdi + 8]
movsxd r8, eax
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14008e3e6
cmp byte [r15 + 0x70], 1
jne 0x14008e3ff
cmp qword [r15 + 0x20], 8
lea rbx, [r15 + 8]
jb 0x14008e393
mov rdx, qword [rbx]
jmp 0x14008e396
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.14004d8f0
mov rcx, rax
call fcn.14007d390
mov eax, dword [r13]
xor r9d, r9d
inc eax
mov edx, 0x4cd
mov dword [r13], eax
mov rcx, qword [rdi + 8]
movsxd r8, eax
call qword [sym.imp.USER32.dll_PostMessageW]
cmp qword [rbx + 0x18], 8
jb 0x14008e3d1
mov rbx, qword [rbx]
mov rcx, rbx
call fcn.14007fad0
mov ebp, eax
test eax, eax
je 0x14008e3ff
mov rcx, qword [r15 + 0x68]
add qword [r14], rcx
test ebp, ebp
je 0x14008e3ff
mov r8, qword [r14]
xor r9d, r9d
mov rcx, qword [rdi + 8]
mov edx, 0x4ce
call qword [sym.imp.USER32.dll_PostMessageW]
cmp dword [0x140455d78], 0
mov rbx, qword [rsp + 0x98]
jne 0x14008e416
call qword [sym.imp.ADVAPI32.dll_RevertToSelf]
mov eax, ebp
add rsp, 0xa0
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret