Function at 0x14004dfa0
Capabilities:
Delete directory
Delete file
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x4b0]
sub rsp, 0x5b0
mov rax, qword [0x1401750b8]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
mov rsi, rdx
mov qword [rsp + 0x20], rdx
mov rdx, rcx
movzx edi, r8b
lea rcx, [rbp + 0x1c0]
mov r9d, 3
xor r8d, r8d
call fcn.140069dc0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x1c0]
call fcn.14006a290
cmp qword [rbp + 0x190], 0
movabs rdx, 0x7fffffffffffffff
je 0x14004e212
nop word [rax + rax]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1c0]
call fcn.14006a140
mov ebx, dword [rsp + 0x30]
test bl, 1
je 0x14004e06a
test dil, dil
jne 0x14004e048
mov eax, ebx
shr eax, 4
test al, 1
jne 0x14004e06a
cmp qword [rbp + 0x198], 8
lea rcx, [rbp + 0x180]
mov edx, ebx
cmovae rcx, qword [rbp + 0x180]
and edx, 0xfffffffe
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
shr ebx, 4
test bl, 1
je 0x14004e0b0
test dil, dil
je 0x14004e0d5
mov r8b, 1
lea rcx, [rbp + 0x180]
mov rdx, rsi
call fcn.14004dfa0
test al, al
je 0x14004e237
cmp qword [rbp + 0x198], 8
lea rcx, [rbp + 0x180]
cmovae rcx, qword [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x14004e0cd
cmp qword [rbp + 0x198], 8
lea rcx, [rbp + 0x180]
cmovae rcx, qword [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14004e237
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1c0]
call fcn.14006a290
mov rbx, rax
lea rax, [rbp + 0x180]
cmp rax, rbx
je 0x14004e190
mov rcx, qword [rbp + 0x198]
cmp rcx, 8
jb 0x14004e166
lea rax, [rcx + 1]
movabs rdx, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x180]
cmp rax, rdx
ja 0x14004e33a
add rax, rax
cmp rax, 0x1000
jb 0x14004e161
test cl, 0x1f
jne 0x14004e334
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004e32e
sub rcx, rax
cmp rcx, 8
jb 0x14004e328
cmp rcx, 0x27
ja 0x14004e322
mov rcx, rax
call fcn.140111e78
xor eax, eax
mov qword [rbp + 0x198], 7
mov rdx, rbx
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x180]
mov word [rbp + 0x180], ax
call fcn.140029ff0
mov rax, qword [rbp + 0x1b8]
cmp rax, 8
jb 0x14004e1fa
mov rcx, qword [rbp + 0x1a0]
inc rax
movabs rdx, 0x7fffffffffffffff
cmp rax, rdx
ja 0x14004e358
add rax, rax
cmp rax, 0x1000
jb 0x14004e1f5
test cl, 0x1f
jne 0x14004e352
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004e34c
sub rcx, rax
cmp rcx, 8
jb 0x14004e346
cmp rcx, 0x27
ja 0x14004e340
mov rcx, rax
call fcn.140111e78
cmp qword [rbp + 0x190], 0
jne 0x14004e020
movabs rdx, 0x7fffffffffffffff
mov rax, qword [rbp + 0x198]
cmp rax, 8
jb 0x14004e2e9
mov rcx, qword [rbp + 0x180]
inc rax
cmp rax, rdx
jbe 0x14004e2a5
jmp 0x14004e31c
mov rax, qword [rbp + 0x198]
cmp rax, 8
jb 0x14004e2a1
mov rcx, qword [rbp + 0x180]
inc rax
movabs rdx, 0x7fffffffffffffff
cmp rax, rdx
ja 0x14004e35e
add rax, rax
cmp rax, 0x1000
jb 0x14004e29c
test cl, 0x1f
jne 0x14004e364
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004e36a
sub rcx, rax
cmp rcx, 8
jb 0x14004e370
cmp rcx, 0x27
ja 0x14004e376
mov rcx, rax
call fcn.140111e78
xor bl, bl
jmp 0x14004e2eb
add rax, rax
cmp rax, 0x1000
jb 0x14004e2e4
test byte [rbp + 0x180], 0x1f
jne 0x14004e37c
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004e382
sub rcx, rax
cmp rcx, 8
jb 0x14004e388
cmp rcx, 0x27
ja 0x14004e38e
mov rcx, rax
call fcn.140111e78
mov bl, 1
lea rcx, [rbp + 0x1c0]
call fcn.14006a050
movzx eax, bl
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.140111850
mov rbx, qword [rsp + 0x5e0]
add rsp, 0x5b0
pop rdi
pop rsi
pop rbp
ret
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3
call fcn.140116070
int3