Function at 0x1400206a0
Capabilities:
Check if file exists
Delete file
Get file attributes
Set file attributes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov qword [rbp - 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x358], rbx
mov rax, qword [0x1402a98a8]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov byte [rsp + 0x31], r9b
mov rbx, r8
mov rdi, rdx
mov qword [rsp + 0x58], rdx
mov rsi, rcx
mov qword [rsp + 0x60], rcx
xor r14d, r14d
lea rax, [0x1402be7b0]
mov qword [rbp - 0x68], rax
mov rcx, rax
call fcn.140160230
test eax, eax
je 0x140020716
mov ecx, eax
call fcn.14016039c
nop
mov byte [rsp + 0x30], 0
mov r13d, r14d
mov dword [rsp + 0x3c], r14d
xor r9d, r9d
lea r8, [rbp - 0x20]
mov edx, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov edx, 0x7e
lea rcx, [rbp - 0x20]
call fcn.14019fed0
test rax, rax
je 0x14002075f
mov r8d, 0x104
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea rcx, [rbp - 0x20]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14002079f
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r13d, eax
mov dword [rsp + 0x3c], eax
cmp eax, 0xffffffff
je 0x14002079f
mov edx, eax
and edx, 6
setne byte [rsp + 0x30]
test edx, edx
je 0x14002079f
mov edx, eax
and edx, 0xfffffff9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ebx, dword [rdi + 0x4c]
lea rcx, [rsp + 0x68]
call fcn.140147700
nop
mov edx, r14d
cmp ebx, 4
cmovne edx, ebx
lea rcx, [rsp + 0x68]
call fcn.140148160
mov eax, dword [rdi + 0x50]
mov dword [rsp + 0x34], eax
lea r8, [0x1401e7530]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x68]
call fcn.140147f70
test rax, rax
jne 0x1400207ea
lea r14d, [rax + 1]
jmp 0x140020b3d
mov r9, qword [rdi + 0x18]
xor r8d, r8d
mov edx, 0x936
mov rcx, qword [rsi + 8]
call fcn.14000fa10
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d6
mov rcx, qword [rsi + 8]
call fcn.14000fa10
mov r15, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9d8
mov rcx, qword [rsi + 8]
call fcn.14000fa10
mov rbx, rax
mov qword [rsp + 0x48], rax
mov r12, r14
mov r14d, 1
cmp dword [rsp + 0x34], 0xffffffff
jne 0x140020866
movsxd r8, r15d
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140147fa0
mov r12, rax
test r15d, r15d
jne 0x14002093d
mov r12d, r14d
jmp 0x14002093d
call fcn.14000ca20
mov qword [rsp + 0x40], rax
xor eax, eax
test r15d, r15d
jle 0x140020939
mov ecx, 0x20004
mov edi, eax
mov rsi, rbx
mov r14, qword [rsp + 0x40]
mov r13d, dword [rsp + 0x34]
nop
mov ebx, r15d
sub ebx, edi
cmp ebx, ecx
cmovg ebx, ecx
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x34], eax
movsxd rdx, edi
add rdx, rsi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8d, 0xfde9
mov rcx, r14
call fcn.140028080
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x34]
mov r8d, r13d
mov rdx, rax
mov rcx, r14
call fcn.14002c0e0
sub ebx, dword [rsp + 0x40]
movsxd r8, dword [rsp + 0x38]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140147fa0
mov r12, rax
add edi, ebx
cmp edi, r15d
mov eax, 0
mov ecx, 0x20004
jl 0x140020890
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov r14d, 1
mov r13d, dword [rsp + 0x3c]
mov rbx, qword [rsp + 0x48]
test r15d, r15d
cmove r12, r14
movsxd r8, r15d
mov rdx, rbx
mov rcx, rsi
call fcn.14001e760
mov ebx, eax
lea rcx, [rsp + 0x68]
call fcn.140147f20
cmp r12, 1
je 0x14002097d
mov r9, qword [rsi + 0x10]
xor r8d, r8d
mov edx, 0x936
mov rcx, qword [rsi + 8]
call fcn.14000fa10
mov r14d, 2
jmp 0x140020b3d
cmp byte [rsp + 0x30], 0
je 0x140020991
mov edx, r13d
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp byte [rsp + 0x31], 0
je 0x1400209b7
mov r9, qword [rsi + 0x10]
xor r8d, r8d
mov edx, 0x936
mov rcx, qword [rsi + 8]
call fcn.14000fa10
xor ebx, ebx
mov r14d, ebx
jmp 0x140020b3d
mov r8d, ebx
lea rdx, [rbp - 0x20]
mov rcx, rdi
call fcn.140020c00
mov byte [rdi + 0x48], 0
movzx eax, byte [rdi + 8]
test al, al
je 0x1400209ea
mov rcx, qword [rdi]
mov r8d, 2
mov rdx, rdi
mov rcx, qword [rcx]
call fcn.1400956b0
movzx eax, byte [rdi + 8]
mov dword [rdi + 0xa0], r14d
test al, al
je 0x140020a09
mov rcx, qword [rdi]
mov r8d, 0x20
mov rdx, rdi
mov rcx, qword [rcx]
call fcn.1400956b0
mov rcx, rdi
call fcn.14001dd20
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7de
mov rcx, qword [rsi + 8]
call fcn.14000fa10
mov r9, qword [rsi + 0x10]
xor r8d, r8d
mov edx, 0x936
mov rcx, qword [rsi + 8]
call fcn.14000fa10
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.14001eec0
nop
xor ebx, ebx
cmp qword [rbp - 0x50], rbx
je 0x140020aee
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x30], xmm1
mov word [rbp - 0x40], bx
lea rcx, [rdi + 0xe0]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x140020a89
xor r8d, r8d
lea rdx, [rbp - 0x40]
call fcn.140006d70
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140020ac9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020b92
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], bx
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r14d, ebx
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140020b2d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020b8c
call fcn.1401812c4
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], bx
lea rcx, [rsp + 0x68]
call fcn.140147750
nop
lea rcx, [0x1402be7b0]
call fcn.140160290
test eax, eax
je 0x140020b5f
mov ecx, eax
call fcn.14016039c
mov eax, r14d
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.1401813e0
mov rbx, qword [rsp + 0x358]
add rsp, 0x300
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
int3