Function at 0x14001e430
Capabilities:
Delete file
Get file attributes
Move file
Set file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov dword [rsp + 0x20], r9d
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor edi, edi
test r8, r8
mov rbp, r8
mov r15, rdx
mov r14, rcx
je 0x14001e4a9
mov r10d, 0x7fffffff
mov rax, r8
mov r11d, edi
nop
cmp word [rax], di
je 0x14001e48a
add rax, 2
sub r10, 1
jne 0x14001e470
mov r11d, 0x80070057
mov rax, rdi
jmp 0x14001e4a2
test r10, r10
jne 0x14001e49a
mov r11d, 0x80070057
mov rax, rdi
jmp 0x14001e4a2
mov eax, 0x7fffffff
sub rax, r10
test r11d, r11d
jns 0x14001e4b2
jmp 0x14001e4af
mov r11d, 0x80070057
mov rax, rdi
test r11d, r11d
mov r9, rdi
mov r13d, 0x100
cmovns r9, rax
test rcx, rcx
je 0x14001e507
mov rcx, r13
mov rax, r14
mov r8d, edi
cmp word [rax], di
je 0x14001e4ea
add rax, 2
sub rcx, 1
jne 0x14001e4d0
mov r8d, 0x80070057
mov rdx, rdi
jmp 0x14001e500
test rcx, rcx
jne 0x14001e4fa
mov r8d, 0x80070057
mov rdx, rdi
jmp 0x14001e500
mov rdx, r13
sub rdx, rcx
test r8d, r8d
jns 0x14001e510
jmp 0x14001e50d
mov r8d, 0x80070057
mov rdx, rdi
mov eax, edi
test r8d, r8d
mov ecx, 0x40
cmovns eax, edx
lea eax, [rax + r9 + 0x104]
movsxd rbx, eax
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
test rbx, rbx
mov r12d, 0x7ffffffe
mov rsi, rax
je 0x14001e584
cmp rbx, 0x7fffffff
ja 0x14001e584
mov rdx, r12
mov r8, rbp
mov rcx, rax
sub rdx, rbx
sub r8, rax
lea rax, [rdx + rbx]
test rax, rax
je 0x14001e578
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14001e578
mov word [rcx], ax
add rcx, 2
sub rbx, 1
jne 0x14001e556
jmp 0x14001e57d
test rbx, rbx
jne 0x14001e581
sub rcx, 2
mov word [rcx], di
mov rdx, r14
mov rcx, rsi
call fcn.1400202c0
test rbp, rbp
je 0x14001e5d6
mov ecx, 0x7fffffff
mov rax, rbp
mov edx, edi
nop
cmp word [rax], dx
je 0x14001e5b9
add rax, 2
sub rcx, 1
jne 0x14001e5a0
mov edx, 0x80070057
mov rax, rdi
jmp 0x14001e5d0
test rcx, rcx
jne 0x14001e5c8
mov edx, 0x80070057
mov rax, rdi
jmp 0x14001e5d0
mov eax, 0x7fffffff
sub rax, rcx
test edx, edx
jns 0x14001e5de
jmp 0x14001e5db
mov edx, 0x80070057
mov rax, rdi
test edx, edx
mov r8, rdi
cmovns r8, rax
test r15, r15
je 0x14001e625
mov rcx, r13
mov rax, r15
mov edx, edi
cmp word [rax], dx
je 0x14001e60d
add rax, 2
sub rcx, 1
jne 0x14001e5f4
mov edx, 0x80070057
mov r13, rdi
jmp 0x14001e61f
test rcx, rcx
jne 0x14001e61c
mov edx, 0x80070057
mov r13, rdi
jmp 0x14001e61f
sub r13, rcx
test edx, edx
jns 0x14001e62f
jmp 0x14001e62a
mov edx, 0x80070057
mov r13, rdi
test edx, edx
cmovns edi, r13d
mov ecx, 0x40
lea eax, [rdi + r8 + 0x104]
movsxd rbx, eax
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
test rbx, rbx
mov rdi, rax
je 0x14001e694
cmp rbx, 0x7fffffff
ja 0x14001e694
sub r12, rbx
mov rcx, rax
sub rbp, rax
lea rax, [r12 + rbx]
test rax, rax
je 0x14001e686
movzx eax, word [rcx + rbp]
test ax, ax
je 0x14001e686
mov word [rcx], ax
add rcx, 2
sub rbx, 1
jne 0x14001e665
jmp 0x14001e68b
test rbx, rbx
jne 0x14001e68f
sub rcx, 2
mov word [rcx], 0
mov rdx, r15
mov rcx, rdi
call fcn.1400202c0
mov eax, dword [rsp + 0x68]
bt eax, 9
jae 0x14001e6cf
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov rcx, rsi
and eax, 0xfffffffc
bts eax, 7
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x14001e72b
bt eax, 0xa
jae 0x14001e6e4
mov rdx, rdi
mov rcx, rsi
call fcn.14001e200
test eax, eax
js 0x14001e6a9
mov rbx, rdi
test rdi, rdi
cmove rbx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov rcx, rbx
and eax, 0xfffffffc
bts eax, 7
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test rdi, rdi
jne 0x14001e719
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x14001e72b
mov r8d, 1
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GlobalHandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalHandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov eax, ebx
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret