Function at 0x1400018a0
Capabilities:
Check if file exists
Copy file
Delete file
Get file attributes

Disassembly:
sub rsp, 0x88
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str.__H:_M:_S_
mov edx, 0x200
mov r9, rax
lea rcx, [0x140006060]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea r8, str.HardwareAcceleration
lea rdx, str._sCPP
lea rcx, [0x140005860]
call fcn.140001010
lea r8, str.HardwareAcceleration
lea rdx, str.C:ProgramDataMicrosoft_s
lea rcx, [0x140005a60]
call fcn.140001010
lea r8, str.HardwareAcceleration
lea rdx, str.sys_s.sys
lea rcx, [0x140005c60]
call fcn.140001010
lea rdx, [0x140005a60]
lea rcx, str.Install_dir_path:__s..._n
call fcn.140001070
lea rcx, [0x140005a60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x140001975
call fcn.140001530
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140001bf0
add rsp, 0x88
ret
mov qword [rsp + 0x90], rbx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0x80], rdi
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
xor esi, esi
mov dword [rsp + 0x64], 0x7b
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], rsi
mov rdi, rax
mov dword [rsp + 0x58], esi
mov qword [rsp + 0x68], rsi
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x60], 0xa
mov dword [rsp + 0x5c], 3
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__difftime64]
mov rdi, qword [rsp + 0x80]
xorps xmm1, xmm1
comisd xmm0, xmm1
mov rbx, qword [rsp + 0x90]
jae 0x140001a15
xor eax, eax
jmp 0x140001bb2
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov qword [rsp + 0x40], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x40]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140001a74
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x48]
mov r9d, 4
mov dword [rsp + 0x48], 4
lea r8, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x10]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140001a84
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
test al, 1
jne 0x140001bb2
call fcn.1400011c0
lea rcx, [0x140006260]
call fcn.140001080
lea rdx, [0x140005e60]
lea rcx, str.driver_path:__s_n
call fcn.140001070
lea rcx, [0x140005e60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140001af2
lea rcx, [0x140005e60]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x140001af2
lea rdx, str.HardwareAcceleration
lea rcx, str._Error__An_error_occured_when_removing_an_old_instance_of__s_driver__n
call fcn.140001070
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor r8d, r8d
lea rdx, [0x140005e60]
lea rcx, [0x140006260]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x140001b40
lea rdx, str.HardwareAcceleration
lea rcx, str._Error__An_error_occured_when_trying_to_copy__s_driver_to_System32__n
call fcn.140001070
lea r8, [0x140005e60]
lea rdx, [0x140006260]
lea rcx, str._s_____s_n
call fcn.140001070
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140005e60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x140001b6b
lea rdx, str.HardwareAcceleration
lea rcx, str._Error__Couldnt_add__s_driver_to_System32__n
call fcn.140001070
call qword [sym.imp.KERNEL32.dll_GetLastError]
call fcn.1400012b0
mov rcx, qword [0x140005040]
lea rax, [0x140006464]
mov qword [rsp + 0x38], rsi
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], esi
mov edx, 0x83360018
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp eax, 1
je 0x140001bb2
call qword [sym.imp.KERNEL32.dll_GetLastError]
call fcn.1400011c0
mov rsi, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140001bf0
add rsp, 0x88
ret