Function at 0x140004f2c
Capabilities:
Delete directory
Get common file path

Disassembly:
push r15
xor rax, rax
push rax
push rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.14000a040
mov qword [rsp + 0x28], rax
push 0
pop rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14001cb0c], rax
push qword [0x14001d5d0]
push qword [0x14001d5d0]
push qword [rsp + 0x38]
pop rcx
sub rsp, 0x20
call fcn.140002c94
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.140013f60
call fcn.1400053c5
call fcn.140004bd9
push qword [0x14001d5d0]
sub rsp, 8
push qword [0x14001d5d0]
push 0
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140009fd4
add rsp, 0x28
inc qword [0x14001d5d0]
mov rcx, qword [0x14001cb44]
pop rdx
mov qword [0x14001d5d0], rdx
add rdx, qword [0x14001d5e0]
call fcn.140014090
or rax, rax
je 0x140004fe8
mov r15, qword [rsp + 0x28]
cmp r15, 1
jne 0x140004fe8
mov rax, 1
jmp 0x140004feb
xor rax, rax
and rax, rax
je 0x140004ff5
call fcn.14000329c
call fcn.1400030a4
mov rcx, qword [0x14001cbfc]
push qword [0x14001d5d0]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
mov rcx, qword [0x14001cbbc]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
mov rcx, qword [0x14001cb3c]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
lea rcx, [0x14001cb3c]
pop rdx
call fcn.140013f60
push qword [0x14001d5d0]
sub rsp, 8
push qword [0x14001d5d0]
push 0x800
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006cf0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.140013f60
push qword [0x14001d5d0]
sub rsp, 8
push qword [rsp + 0x48]
push 0
movabs rax, 0x14001b01e
push rax
mov rcx, qword [0x14001cbfc]
push qword [0x14001d5d0]
sub rsp, 0x20
call fcn.140014120
add rsp, 0x20
mov rcx, qword [0x14001cbbc]
sub rsp, 0x20
call fcn.140014120
add rsp, 0x20
mov rdx, qword [0x14001d5e0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_GetTempFileNameA
add rsp, 0x28
pop qword [0x14001d5d0]
push qword [rsp + 0x38]
pop rcx
call fcn.14001030c
push qword [0x14001cbac]
push qword [rsp + 0x40]
pop rcx
pop rdx
call sub.SHLWAPI.DLL_PathRenameExtensionA
mov rcx, qword [rsp + 0x38]
push qword [0x14001d5d0]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
lea rcx, [0x14001cb3c]
pop rdx
call fcn.140013f60
call fcn.140004911
mov rcx, qword [0x14001ca7c]
xor rdx, rdx
call fcn.140014090
or rax, rax
jne 0x14000514d
push qword [0x14001ca7c]
pop rcx
call fcn.140003793
call fcn.140004053
push qword [0x14001cb3c]
pop rcx
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov rcx, qword [0x14001cb3c]
push qword [0x14001d5d0]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
movabs rcx, str.__BFINOPSX
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.140013f60
push qword [rsp + 0x30]
pop rcx
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x14001d5d0]
sub rsp, 8
push qword [0x14001d5d0]
push 0x800
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006cf0
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.140013f60
push 0x800
push qword [rsp + 0x48]
pop rcx
pop rdx
call sub.KERNEL32.dll_GetSystemDirectoryA
push qword [rsp + 0x40]
pop rcx
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x14001d5d0]
sub rsp, 8
mov rcx, qword [0x14001cbdc]
push qword [0x14001d5d0]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
movabs rcx, str.__BFINOPSX
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
inc qword [0x14001d5d0]
push qword [0x14001cb24]
mov rcx, qword [rsp + 0x60]
push qword [0x14001d5d0]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
mov rcx, qword [0x14001caf4]
sub rsp, 0x28
call fcn.140014120
add rsp, 0x28
mov rdx, qword [0x14001d5e0]
add qword [rsp], rdx
mov rdx, qword [0x14001d5e0]
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140002f25
add rsp, 0x28
pop qword [0x14001d5d0]
mov qword [rsp + 0x48], rax
call fcn.140004817
push qword [0x14001cb3c]
pop rcx
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
push qword [0x14001cb3c]
pop rcx
call fcn.14001030c
push qword [0x14001cc1c]
pop rcx
call fcn.14001030c
push qword [0x14001cb14]
pop rcx
call fcn.14001030c
push qword [0x14001d5d0]
sub rsp, 8
push qword [0x14001d5d0]
sub rsp, 8
push qword [0x14001d5d0]
push qword [0x14001d5d0]
push qword [0x14001d5d0]
pop rcx
sub rsp, 0x20
call fcn.140009e04
add rsp, 0x20
mov rdx, qword [0x14001d5e0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140010390
add rsp, 0x28
mov rdx, qword [0x14001d5e0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140010374
add rsp, 0x28
pop qword [0x14001d5d0]
push qword [0x14001cbf4]
pop rcx
call sub.KERNEL32.dll_RemoveDirectoryA
push qword [0x14001cbfc]
pop rcx
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [rsp + 0x48]
mov qword [0x14001ca24], rax
jmp 0x140001b86