Function at 0x14005cb10
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xc68
mov qword [rsp + 0xc28], 0xfffffffffffffffe
mov rax, qword [0x1402aa808]
xor rax, rsp
mov qword [rsp + 0xc50], rax
lea rcx, [rsp + 0x3d0]
call fcn.140003370
nop
lea rcx, [rsp + 0x6e8]
call fcn.140003370
nop
lea rcx, [rsp + 0x3a0]
call fcn.140010b40
nop
lea rcx, [rsp + 0x398]
call fcn.1400521e0
mov qword [rsp + 0x3c8], 0
lea rcx, [rsp + 0x108]
call fcn.140010b40
nop
lea rcx, [rsp + 0x100]
call fcn.14005e440
mov dword [rsp + 0x388], 1
lea rcx, [rsp + 0x400]
call fcn.140065c10
nop
lea rcx, str.Kernel32.DLL
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0xf0], rax
cmp qword [rsp + 0xf0], 0
jne 0x14005cbe5
jmp 0x14005d700
lea rdx, [0x14020d6c0]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x6e0], rax
lea rdx, [0x14020d6d8]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xf8], rax
lea rdx, [0x14020d6e8]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x390], rax
lea rdx, [0x14020d6f8]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x3c0], rax
lea rdx, [0x14020d708]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x380], rax
lea rdx, str.CShortcut::DeleteShortcutW__________________________IN._n
mov ecx, 5
call fcn.14001c160
cmp dword [rsp + 0xc88], 0
jne 0x14005ccbd
cmp qword [rsp + 0xc78], 0
jne 0x14005ccbd
cmp qword [rsp + 0xc80], 0
jne 0x14005ccbd
lea rdx, str.CShortcut::DeleteShortcutW_pName_and_pTarget_are_NULL_on_not_DeadLinkOnly._n
mov ecx, 5
call fcn.14001c160
jmp 0x14005d700
cmp qword [rsp + 0xf8], 0
je 0x14005cce9
cmp qword [rsp + 0x390], 0
je 0x14005cce9
cmp qword [rsp + 0x6e0], 0
je 0x14005cce9
cmp qword [rsp + 0x3c0], 0
jne 0x14005ccff
lea rdx, str.CShortcut::DeleteShortcutW_Unicode_functions_address_is_invalid._n
mov ecx, 5
call fcn.14001c160
jmp 0x14005d700
mov rax, qword [rsp + 0xc70]
cmp dword [rax + 0x80], 1
jne 0x14005cedb
mov qword [rsp + 0x920], 0
mov dword [rsp + 0x928], 0x17
lea rcx, [0x14020d8c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x930], rax
lea rdx, str.CShortcut::DeleteShortcutW_CShortcut::user_all._n
mov ecx, 5
call fcn.14001c160
lea rdx, str.SHGetSpecialFolderPathW
mov rcx, qword [rsp + 0x930]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x920], rax
cmp qword [rsp + 0x920], 0
je 0x14005cea0
mov rax, qword [rsp + 0xc70]
add rax, 8
mov rcx, rax
call fcn.140003530
lea rdx, str.Desktop
mov rcx, rax
call fcn.1401ac890
test eax, eax
jne 0x14005cdb4
mov dword [rsp + 0x928], 0x19
jmp 0x14005ce4e
mov rax, qword [rsp + 0xc70]
add rax, 8
mov rcx, rax
call fcn.140003530
lea rdx, str.Programs
mov rcx, rax
call fcn.1401ac890
test eax, eax
jne 0x14005cde8
mov dword [rsp + 0x928], 0x17
jmp 0x14005ce4e
mov rax, qword [rsp + 0xc70]
add rax, 8
mov rcx, rax
call fcn.140003530
lea rdx, str.Start_Menu
mov rcx, rax
call fcn.1401ac890
test eax, eax
jne 0x14005ce1c
mov dword [rsp + 0x928], 0x16
jmp 0x14005ce4e
mov rax, qword [rsp + 0xc70]
add rax, 8
mov rcx, rax
call fcn.140003530
lea rdx, str.Startup
mov rcx, rax
call fcn.1401ac890
test eax, eax
jne 0x14005ce4e
mov dword [rsp + 0x928], 0x18
xor r9d, r9d
mov r8d, dword [rsp + 0x928]
lea rdx, [rsp + 0x710]
xor ecx, ecx
call qword [rsp + 0x920]
test eax, eax
je 0x14005ce9e
lea rdx, [rsp + 0x710]
lea rcx, [rsp + 0x38]
call fcn.1400033c0
nop
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x3a0]
call fcn.1400109f0
nop
lea rcx, [rsp + 0x38]
call fcn.140003430
jmp 0x14005ceb1
lea rdx, str.CShortcut::DeleteShortcutW_cannot_get_SHGetSpecialFolderPath_pointer._n
mov ecx, 5
call fcn.14001c160
cmp qword [rsp + 0x930], 0
je 0x14005ced6
mov rcx, qword [rsp + 0x930]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rsp + 0x930], 0
jmp 0x14005cf76
mov rax, qword [rsp + 0xc70]
add rax, 8
mov rcx, rax
call fcn.140003550
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14002f6c0
mov qword [rsp + 0xc30], rax
mov rax, qword [rsp + 0xc30]
mov qword [rsp + 0xc38], rax
mov rcx, qword [rsp + 0xc38]
call fcn.14002fd40
mov rdx, rax
lea rcx, [rsp + 0x938]
call fcn.140061140
nop
lea rcx, [rsp + 0x60]
call fcn.14002f710
lea rcx, [rsp + 0x938]
call fcn.140003530
lea r9, [rsp + 0x3a0]
mov r8, rax
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerShell_Folders
mov rcx, qword [rsp + 0xc70]
call fcn.14005e1e0
nop
lea rcx, [rsp + 0x938]
call fcn.140003430
lea rdx, [rsp + 0xbf0]
lea rcx, [rsp + 0x3a0]
call fcn.1400121b0
mov rax, qword [rax]
mov qword [rsp + 0x398], rax
jmp 0x14005cfb0
xor r8d, r8d
lea rdx, [rsp + 0xbf8]
lea rcx, [rsp + 0x398]
call fcn.14002f650
lea rdx, [rsp + 0xc00]
lea rcx, [rsp + 0x3a0]
call fcn.14002f230
mov rdx, rax
lea rcx, [rsp + 0x398]
call fcn.140004330
movzx eax, al
test eax, eax
je 0x14005d559
lea rcx, [rsp + 0x398]
call fcn.14002f630
mov rcx, rax
call fcn.140003530
mov rdx, rax
lea rcx, [rsp + 0x3d0]
call fcn.140010520
lea rdx, [0x14020b79c]
lea rcx, [rsp + 0x3d0]
call fcn.140010580
mov rax, qword [rsp + 0xc70]
add rax, 0x58
mov rcx, rax
call fcn.140003810
test rax, rax
je 0x14005d143
lea rcx, [rsp + 0x968]
call fcn.140061b70
nop
mov qword [rsp + 0x960], 0
mov rax, qword [rsp + 0xc70]
add rax, 0x58
mov rcx, rax
call fcn.140003530
mov r8w, 0x5c
mov rdx, rax
lea rcx, [rsp + 0x968]
call fcn.140061be0
mov qword [rsp + 0x998], 0
jmp 0x14005d09a
mov rax, qword [rsp + 0x998]
inc rax
mov qword [rsp + 0x998], rax
lea rcx, [rsp + 0x968]
call fcn.140062b20
cmp qword [rsp + 0x998], rax
jae 0x14005d136
mov rdx, qword [rsp + 0x998]
lea rcx, [rsp + 0x968]
call fcn.140062d90
mov qword [rsp + 0x960], rax
cmp qword [rsp + 0x960], 0
jne 0x14005d0df
jmp 0x14005d087
mov rcx, qword [rsp + 0x960]
call fcn.1401abfb8
test rax, rax
jne 0x14005d0f3
jmp 0x14005d087
mov rdx, qword [rsp + 0x960]
lea rcx, [rsp + 0x3d0]
call fcn.140010580
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x108]
call fcn.1400109f0
lea rdx, [0x14020b7ac]
lea rcx, [rsp + 0x3d0]
call fcn.140010580
jmp 0x14005d087
lea rcx, [rsp + 0x968]
call fcn.140061bb0
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x6e8]
call fcn.1400104f0
lea rdx, str..lnk
lea rcx, [rsp + 0x3d0]
call fcn.140010580
lea rcx, [rsp + 0x3d0]
call fcn.140003530
mov r8, rax
lea rdx, str.CShortcut::DeleteShortcutW_ShortCut_Folder___1_S__n
mov ecx, 4
call fcn.14001c160
lea rcx, [rsp + 0x3d0]
call fcn.140003530
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [rsp + 0xf8]
mov qword [rsp + 0x3c8], rax
cmp qword [rsp + 0x3c8], 0xffffffffffffffff
jne 0x14005d1d5
lea rdx, str.CShortcut::DeleteShortcutW______Not_found._n
mov ecx, 4
call fcn.14001c160
jmp 0x14005d554
mov qword [rsp + 0xbb0], 0
mov qword [rsp + 0xbb8], 0
lea rcx, [rsp + 0xbc8]
call fcn.140003370
nop
lea rdx, [rsp + 0x6e8]
lea rcx, [rsp + 0xbc8]
call fcn.1400104f0
lea rdx, [rsp + 0x15c]
lea rcx, [rsp + 0xbc8]
call fcn.140010580
lea rcx, [rsp + 0xbc8]
call fcn.140003530
mov r8, rax
lea rdx, str.CShortcut::DeleteShortcutW_FindFilePath___1_S__n
mov ecx, 4
call fcn.14001c160
cmp qword [rsp + 0xc78], 0
je 0x14005d292
mov rcx, qword [rsp + 0xc78]
call fcn.1401abfb8
test rax, rax
je 0x14005d292
mov rdx, qword [rsp + 0xc78]
lea rcx, [rsp + 0x15c]
call fcn.1401ac890
test eax, eax
je 0x14005d292
lea rdx, str.CShortcut::DeleteShortcutW_Specified_name_is_not_matched._n
mov ecx, 5
call fcn.14001c160
jmp 0x14005d519
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0x20], rax
lea r9, [0x140260780]
mov r8d, 1
xor edx, edx
lea rcx, [0x140260ae0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [rsp + 0xbc0], eax
cmp dword [rsp + 0xbc0], 0
jl 0x14005d4b9
mov rax, qword [rsp + 0xbb0]
mov rax, qword [rax]
lea r8, [rsp + 0xbb8]
lea rdx, [0x140260a90]
mov rcx, qword [rsp + 0xbb0]
call qword [rax]
mov dword [rsp + 0xbc0], eax
cmp dword [rsp + 0xbc0], 0
jl 0x14005d4b9
lea rcx, [rsp + 0xbc8]
call fcn.140003530
mov rcx, qword [rsp + 0xbb8]
mov rcx, qword [rcx]
mov qword [rsp + 0xc40], rcx
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0xbb8]
mov rax, qword [rsp + 0xc40]
call qword [rax + 0x28]
mov dword [rsp + 0xbc0], eax
cmp dword [rsp + 0xbc0], 0
jl 0x14005d4b9
lea r8, [rsp + 0x15c]
lea rdx, str.CShortcut::DeleteShortcutW__1_S__Loading._n
mov ecx, 4
call fcn.14001c160
mov rax, qword [rsp + 0xbb0]
mov rax, qword [rax]
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 0x105
lea rdx, [rsp + 0x9a0]
mov rcx, qword [rsp + 0xbb0]
call qword [rax + 0x18]
mov dword [rsp + 0xbc0], eax
lea r8, [rsp + 0x9a0]
lea rdx, str.CShortcut::DeleteShortcutW_The_shell_link_object_is__1_S_._n
mov ecx, 4
call fcn.14001c160
cmp qword [rsp + 0xc80], 0
je 0x14005d41b
mov rcx, qword [rsp + 0xc80]
call fcn.1401abfb8
test rax, rax
je 0x14005d41b
mov rdx, qword [rsp + 0xc80]
lea rcx, [rsp + 0x9a0]
call fcn.1401ac890
test eax, eax
je 0x14005d402
jmp 0x14005d4b9
lea r8, [rsp + 0x9a0]
lea rdx, str.CShortcut::DeleteShortcutW_The_target___1_S___is_matched._n
mov ecx, 4
call fcn.14001c160
lea r8, [rsp + 0x9a0]
lea rdx, str.CShortcut::DeleteShortcutW_szTargetPath____1_S___n
mov ecx, 4
call fcn.14001c160
cmp dword [rsp + 0xc88], 0
je 0x14005d478
lea rcx, [rsp + 0x9a0]
call qword [rsp + 0x6e0]
cmp eax, 0xffffffff
je 0x14005d478
lea r8, [rsp + 0x15c]
lea rdx, str.CShortcut::DeleteShortcutW__1_S__find_the_target_of_a_Shell_link._n
mov ecx, 4
call fcn.14001c160
mov dword [rsp + 0x388], 0
jmp 0x14005d4b9
lea rcx, [rsp + 0xbc8]
call fcn.140003530
mov rcx, rax
call qword [rsp + 0x3c0]
test eax, eax
je 0x14005d4ae
lea r8, [rsp + 0x15c]
lea rdx, str.CShortcut::DeleteShortcutW__1_S__is_deleted._n
mov ecx, 4
call fcn.14001c160
jmp 0x14005d4b9
mov dword [rsp + 0x388], 0
cmp qword [rsp + 0xbb0], 0
je 0x14005d4e6
mov rax, qword [rsp + 0xbb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb0]
call qword [rax + 0x10]
mov qword [rsp + 0xbb0], 0
cmp qword [rsp + 0xbb8], 0
je 0x14005d513
mov rax, qword [rsp + 0xbb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb8]
call qword [rax + 0x10]
mov qword [rsp + 0xbb8], 0
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0x3c8]
call qword [rsp + 0x390]
test eax, eax
jne 0x14005d1fb
mov rcx, qword [rsp + 0x3c8]
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rsp + 0xbc8]
call fcn.140003430
jmp 0x14005cf98
lea rdx, [rsp + 0xc08]
lea rcx, [rsp + 0x108]
call fcn.14005e3c0
mov rax, qword [rax]
mov qword [rsp + 0x100], rax
jmp 0x14005d593
xor r8d, r8d
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x100]
call fcn.14005e460
lea rdx, [rsp + 0xc18]
lea rcx, [rsp + 0x108]
call fcn.14005e400
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14005e750
movzx eax, al
test eax, eax
je 0x14005d693
lea rcx, [rsp + 0x100]
call fcn.14005e4b0
mov rcx, rax
call fcn.140003530
mov rcx, rax
call qword [rsp + 0x6e0]
cmp eax, 0xffffffff
je 0x14005d68e
cmp dword [rsp + 0x478], 0
je 0x14005d600
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x100]
call fcn.14005e4b0
mov rcx, rax
call fcn.140003530
mov rcx, rax
call qword [rsp + 0x380]
test eax, eax
je 0x14005d64e
lea rcx, [rsp + 0x100]
call fcn.14005e4b0
mov rcx, rax
call fcn.140003530
mov r8, rax
lea rdx, str.CShortcut::DeleteShortcutW__1_S__empty._removed._n
mov ecx, 4
call fcn.14001c160
jmp 0x14005d68e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xc48], eax
lea rcx, [rsp + 0x100]
call fcn.14005e4b0
mov rcx, rax
call fcn.140003530
mov ecx, dword [rsp + 0xc48]
mov r9d, ecx
mov r8, rax
lea rdx, str.CShortcut::DeleteShortcutW__1_S__cannot_be_deleted.__0x_2_lx___n
mov ecx, 2
call fcn.14001c160
jmp 0x14005d57b
lea rdx, str.CShortcut::DeleteShortcutW__________________________OUT._n
mov ecx, 5
call fcn.14001c160
mov eax, dword [rsp + 0x388]
mov dword [rsp + 0xc20], eax
lea rcx, [rsp + 0x400]
call fcn.140066f20
nop
lea rcx, [rsp + 0x108]
call fcn.140010770
nop
lea rcx, [rsp + 0x3a0]
call fcn.140010770
nop
lea rcx, [rsp + 0x6e8]
call fcn.140003430
nop
lea rcx, [rsp + 0x3d0]
call fcn.140003430
mov eax, dword [rsp + 0xc20]
jmp 0x14005d768
lea rdx, str.CShortcut::DeleteShortcutW__________________________ERROR_OUT._n
mov ecx, 5
call fcn.14001c160
mov dword [rsp + 0xc24], 0
lea rcx, [rsp + 0x400]
call fcn.140066f20
nop
lea rcx, [rsp + 0x108]
call fcn.140010770
nop
lea rcx, [rsp + 0x3a0]
call fcn.140010770
nop
lea rcx, [rsp + 0x6e8]
call fcn.140003430
nop
lea rcx, [rsp + 0x3d0]
call fcn.140003430
mov eax, dword [rsp + 0xc24]
mov rcx, qword [rsp + 0xc50]
xor rcx, rsp
call fcn.1401ab2d0
add rsp, 0xc68
ret