Function at 0x1400701d8
Capabilities:
Delete file
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5fb0]
mov eax, 0x60b0
call fcn.140001a50
sub rsp, rax
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x6108], rbx
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x5fa0], rax
mov r13, r8
mov qword [rsp + 0x50], r8
mov r15, rdx
mov rbx, rcx
xor edi, edi
mov dword [rsp + 0x70], edi
xor edx, edx
lea r8d, [rdi + 0x2c]
lea rcx, [rsp + 0x74]
call sub.msvcrt.dll_memset
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14002e0cc
nop
lea rsi, [0x14010ea73]
cmp qword [rax + 8], rdi
cmovne rsi, qword [rax + 8]
mov rdi, qword [rbx + 0x30]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__time64]
mov r14, rax
lea r8, [rsp + 0x70]
mov rdx, rsi
mov rcx, rdi
call fcn.1400982ac
mov r12, rax
cmp dword [rdi + 0x94], 0
je 0x1400702a5
test rax, rax
jne 0x1400702a5
cmp dword [rdi + 0x220], 0xffffffdb
jne 0x1400702a5
mov rdx, r14
mov rcx, rdi
call fcn.140099304
test eax, eax
je 0x14007026c
mov rcx, qword [rsp + 0x60]
xor edi, edi
test rcx, rcx
je 0x1400702b7
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
test r12, r12
jne 0x1400702ef
mov rax, qword [rbx + 0x30]
cmp dword [rax + 0x220], 0xffffffdb
jne 0x1400702d6
mov rcx, rbx
call fcn.14006fbc0
jmp 0x14007023f
mov qword [rsp + 0x30], rdi
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140099ebc
xor al, al
jmp 0x140070455
lea rax, vtable.micro::files::QFile.0
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rdi
lea r15, [0x14012da68]
mov rdx, r15
cmp qword [r13 + 8], rdi
cmovne rdx, qword [r13 + 8]
mov r8d, 0x1000
lea rcx, [rsp + 0x38]
call fcn.1400e82c4
cmp qword [rsp + 0x40], rdi
je 0x140070439
movsxd rsi, dword [rbp - 0x7c]
xor r14b, r14b
mov r13d, 1
test rsi, rsi
je 0x140070409
mov r15d, r13d
mov ecx, 0x6000
mov rax, rsi
sub rax, rdi
cmp rax, rcx
jae 0x14007035b
mov ecx, esi
sub ecx, edi
movsxd r8, ecx
lea rdx, [rbp - 0x60]
mov rcx, r12
call fcn.140092810
mov r13, rax
test eax, eax
jle 0x1400703df
and dword [rsp + 0x30], 0
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x30]
mov r8d, eax
lea rdx, [rbp - 0x60]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.DLL_WriteFile]
movsxd rax, r13d
mov qword [rsp + 0x30], rax
add rdi, rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400703d6
mov rax, qword [rcx]
mov r8, rsi
mov rdx, rdi
call qword [rax + 0x28]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x30]
call qword [rax + 0x40]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x48]
movzx r14d, r14b
test al, al
cmovne r14d, r15d
test r14b, r14b
je 0x140070347
test r14b, r14b
jne 0x1400703fc
cmp r13d, 0xffffffdb
jne 0x1400703fc
cmp rdi, rsi
jae 0x1400703fc
mov rcx, rbx
call fcn.14006fbc0
jmp 0x140070347
lea r15, [0x14012da68]
mov r13d, 1
mov rcx, r12
call fcn.1400930e4
xor edi, edi
test r14b, r14b
je 0x14007043c
lea rcx, [rsp + 0x38]
call fcn.1400e8500
mov rax, qword [rsp + 0x50]
cmp qword [rax + 8], rdi
cmovne r15, qword [rax + 8]
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov r13b, dil
lea rax, vtable.micro::files::QFile.0
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x38]
call fcn.1400e8500
mov al, r13b
mov rcx, qword [rbp + 0x5fa0]
xor rcx, rsp
call fcn.140001010
mov rbx, qword [rsp + 0x6108]
add rsp, 0x60b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret