Function at 0x14001f620
Capabilities:
Delete file
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov rsi, rdx
mov r13, rcx
xor ebx, ebx
cmp qword [rsi + 0x18], 7
mov rcx, rsi
jbe 0x14001f656
mov rcx, qword [rsi]
and qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp ebx, 3
jg 0x14001f8ba
cmp rax, 0xffffffffffffffff
jne 0x14001f69b
mov rcx, rsi
call fcn.14001f1c8
inc ebx
jmp 0x14001f649
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
xor edi, edi
xorps xmm0, xmm0
mov r12d, eax
movdqu xmmword [rbp - 0x29], xmm0
test eax, eax
je 0x14001f6e6
mov ecx, r12d
cmp r12, 0x1000
jb 0x14001f6ca
call fcn.1400080f4
jmp 0x14001f6cf
call fcn.1400541b4
lea rdi, [rax + r12]
mov rcx, rax
mov rdx, rdi
mov rbx, rax
call fcn.140021328
mov r14, rdi
jmp 0x14001f6ee
mov r14, qword [rbp - 0x21]
mov rbx, qword [rbp - 0x29]
and qword [rsp + 0x20], 0
lea r9, [rbp + 0x7f]
mov r8d, r12d
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rbp + 0x7f], r12d
je 0x14001f758
mov r14, qword [rbp + 0x77]
cmp qword [r14 + 0x10], 0
je 0x14001f72b
cmp qword [rsi + 0x18], 7
mov rcx, rsi
jbe 0x14001f725
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x14001f8be
mov r15d, 0x1000
jmp 0x14001f891
mov rdx, rdi
mov rcx, rbx
call fcn.140054430
jmp 0x14001f8be
movdqa xmm1, xmmword [0x14008cff0]
lea rcx, [rbp + 0xf]
xorps xmm0, xmm0
xor r12d, r12d
movups xmmword [rbp - 0x11], xmm0
sub r14, rbx
mov word [rbp - 0x11], r12w
mov r8, r14
mov qword [rbp + 0x1f], r12
mov rdx, rbx
movdqu xmmword [rbp - 1], xmm1
movdqu xmmword [rbp + 0xf], xmm0
call fcn.140009cc8
mov rax, qword [rbp + 0x77]
lea rcx, [rbp - 0x11]
mov rdx, rax
cmp qword [rax + 0x10], r12
cmove rdx, rsi
call fcn.140009624
mov rax, qword [r13 + 0x28]
lea rcx, [r13 + 0x20]
cmp rax, qword [r13 + 0x30]
je 0x14001f7c8
lea rdx, [rbp - 0x11]
mov rcx, rax
call fcn.140008130
add qword [r13 + 0x28], 0x38
jmp 0x14001f7d4
lea r8, [rbp - 0x11]
mov rdx, rax
call fcn.140020c58
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, qword [rbp + 0x77]
cmp qword [r14 + 0x10], r12
je 0x14001f7fa
cmp qword [rsi + 0x18], 7
mov rcx, rsi
jbe 0x14001f7f4
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rbp + 0xf]
mov r15d, 0x1000
test rcx, rcx
je 0x14001f842
mov rdx, qword [rbp + 0x1f]
mov rax, rcx
sub rdx, rcx
cmp rdx, r15
jb 0x14001f831
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f8e9
call fcn.140054430
xorps xmm0, xmm0
mov qword [rbp + 0x1f], r12
movdqu xmmword [rbp + 0xf], xmm0
mov rdx, qword [rbp + 7]
cmp rdx, 7
jbe 0x14001f87a
mov rcx, qword [rbp - 0x11]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, r15
jb 0x14001f875
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f8e9
call fcn.140054430
movdqa xmm0, xmmword [0x14008cff0]
mov word [rbp - 0x11], r12w
movdqu xmmword [rbp - 1], xmm0
test rbx, rbx
je 0x14001f8be
sub rdi, rbx
mov rax, rbx
cmp rdi, r15
jb 0x14001f748
mov rbx, qword [rbx - 8]
add rdi, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f8e9
jmp 0x14001f748
mov r14, qword [rbp + 0x77]
mov rcx, rsi
call fcn.140007a6c
mov rcx, r14
call fcn.140007a6c
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14005af0c
int3