Function at 0x14001212c
Capabilities:
Delete file
Get common file path

Disassembly:
mov rax, rsp
push r12
push r13
push r15
sub rsp, 0xb10
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140061550]
xor rax, rsp
mov qword [rsp + 0xb00], rax
mov rdx, qword [0x140062f50]
xor r12d, r12d
cmp rdx, r12
je 0x140012185
xor ecx, ecx
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [0x140062f50], r12
mov ebx, 0x9c
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x200]
call fcn.14001dda0
mov dword [rsp + 0x200], ebx
lea rcx, [rsp + 0x200]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp eax, r12d
je 0x140012202
cmp dword [rsp + 0x208], r12d
jne 0x1400121e2
lea r9, [0x14000b69c]
xor edx, edx
xor ecx, ecx
mov r8d, 0x3e8
call qword [sym.imp.USER32.dll_SetTimer]
mov ecx, eax
mov qword [0x140062f50], rcx
jmp 0x140012202
lea r9, [0x14000b69c]
xor edx, edx
xor ecx, ecx
mov r8d, 0x7d0
call qword [sym.imp.USER32.dll_SetTimer]
mov ecx, eax
mov qword [0x140062f50], rcx
mov esi, 1
mov edi, esi
mov ebx, 0x228
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x2a0]
call fcn.14001dda0
mov qword [rsp + 0x68], r12
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [0x14004f418]
xor edx, edx
lea r8d, [rsi + 0x14]
lea rcx, [0x14004f478]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [rsp + 0x2b8], 5
lea rdx, str.FirstInstallVista
lea rcx, [rsp + 0x2bc]
call fcn.14001e530
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea r8, [rsp + 0x2a0]
mov edx, ebx
call qword [rax + 0xe0]
cmp eax, r12d
jge 0x1400122cb
mov dword [rsp + 0x4c4], r12d
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea r8, [rsp + 0x2a0]
mov edx, ebx
call qword [rax + 0xe8]
mov edi, dword [rsp + 0x4c4]
mov dword [rsp + 0x4c4], esi
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea r8, [rsp + 0x2a0]
mov edx, ebx
call qword [rax + 0xe8]
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x30], r12
mov r15d, 0x38
mov rcx, r15
call fcn.14001cbd0
mov rbx, rax
mov r8, r15
xor edx, edx
mov rcx, rax
call fcn.14001dda0
mov ebp, 0x104
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.14001dda0
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x4d0]
call fcn.14001dda0
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x5e0]
call fcn.14001dda0
xor edx, edx
lea r8d, [r15 - 0x35]
lea rcx, [rsp + 0x60]
call fcn.14001dda0
lea esi, [rbp - 4]
mov r8, rsi
xor edx, edx
lea rcx, [rsp + 0xa00]
call fcn.14001dda0
mov r8, rsi
xor edx, edx
lea rcx, [rsp + 0x900]
call fcn.14001dda0
mov r8, rsi
xor edx, edx
lea rcx, [rsp + 0x800]
call fcn.14001dda0
lea r11, [rsp + 0x30]
mov qword [rsp + 0x20], r11
lea r9, [0x14004f468]
xor edx, edx
lea r8d, [r15 - 0x23]
lea rcx, [0x14004f4c8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
lea r13, [0x140050348]
cmp eax, r12d
jl 0x1400127b9
mov rcx, qword [rsp + 0x30]
cmp rcx, r12
je 0x1400127b9
cmp edi, r12d
jne 0x1400127ae
mov rax, qword [0x140063208]
mov qword [rsp + 0x20], rax
mov r9d, ebp
lea r8, [rsp + 0x5e0]
mov edx, 0x24f3
xor ecx, ecx
call sub.hccutils.DLL_LoadSTRING
lea rdx, str.Cant_find_requested_string.
lea rcx, [rsp + 0x5e0]
call fcn.140021ca0
cmp eax, r12d
je 0x140012422
lea rdx, [0x14004fd46]
lea rcx, [rsp + 0x5e0]
call fcn.140021ca0
cmp eax, r12d
jne 0x140012436
lea rdx, str.Intel_R__Graphics_and_Media_Control_Panel
lea rcx, [rsp + 0x5e0]
call fcn.14001e3d0
mov edx, ebp
lea rcx, [rsp + 0x6f0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp eax, r12d
jne 0x140012472
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x48], 0x16aa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.LastError___ld._n
lea rcx, [rsp + 0x40]
call fcn.140002184
lea rax, [rsp + 0x800]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x900]
lea r8, [rsp + 0xa00]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x6f0]
call fcn.1400225e0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x4d0]
call fcn.14001e3d0
lea rdx, [0x140050b5c]
lea rcx, [rsp + 0x4d0]
call fcn.14001e330
lea rdx, str.IntelExtremeGraphicsCUIResource
lea rcx, [rsp + 0x4d0]
call fcn.14001e330
lea rdx, [0x140050b5c]
lea rcx, [rsp + 0x4d0]
call fcn.14001e330
lea r8, [rsp + 0x5e0]
mov rdx, rbp
lea rcx, [rsp + 0x4d0]
call fcn.140020ea0
lea rdx, str..lnk
lea rcx, [rsp + 0x4d0]
call fcn.14001e330
lea rdx, [0x140050d18]
lea rcx, [rsp + 0x4d0]
call fcn.140023210
cmp rax, r12
je 0x140012576
mov rcx, rax
call fcn.140022d30
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp eax, r12d
je 0x140012576
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x48], 0x16bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.LastError:Could_not_delete_the_file___ld._n
lea rcx, [rsp + 0x40]
call fcn.140002184
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x54], r12d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x5c], r12d
mov dword [rsp + 0x64], r12d
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rsp + 0x5c]
mov qword [rsp + 0x28], rdx
lea rdx, [rsp + 0x64]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x54]
lea rdx, [rsp + 0x58]
call qword [rax + 0xd8]
cmp eax, r12d
jl 0x1400127a9
cmp dword [rsp + 0x58], r12d
jne 0x1400125f0
cmp dword [rsp + 0x54], 0x32
jne 0x1400125f0
cmp dword [rsp + 0x50], 0x64
jne 0x1400125f0
cmp dword [rsp + 0x5c], r12d
jne 0x1400125f0
cmp dword [rsp + 0x64], r12d
je 0x1400127a9
mov edi, r12d
mov esi, r12d
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x14004f428]
xor edx, edx
lea r8d, [rdx + 0x15]
lea rcx, [0x14004f488]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, r12d
jl 0x140012684
cmp qword [rsp + 0x40], r12
je 0x140012684
mov ebp, 0x178
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.14001dda0
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r8, [rsp + 0x80]
mov edx, ebp
call qword [rax + 0x20]
cmp eax, r12d
jl 0x140012674
cmp byte [rsp + 0x80], r12b
jne 0x140012674
mov edi, dword [rsp + 0xa0]
mov esi, dword [rsp + 0xe4]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x40], r12
mov eax, dword [rsp + 0x50]
mov byte [rbx + 8], al
mov byte [rbx + 4], al
mov byte [rbx], al
sar eax, 8
mov byte [rbx + 9], al
mov byte [rbx + 5], al
mov byte [rbx + 1], al
mov eax, dword [rsp + 0x58]
mov byte [rbx + 0x14], al
mov byte [rbx + 0x10], al
mov byte [rbx + 0xc], al
mov eax, dword [rsp + 0x54]
mov byte [rbx + 0x20], al
mov byte [rbx + 0x1c], al
mov byte [rbx + 0x18], al
mov eax, dword [rsp + 0x5c]
mov byte [rbx + 0x2c], al
mov byte [rbx + 0x28], al
mov byte [rbx + 0x24], al
mov eax, dword [rsp + 0x64]
mov byte [rbx + 0x30], al
cmp eax, 0xff
jle 0x1400126d7
mov byte [rbx + 0x31], 0xff
jmp 0x1400126db
mov byte [rbx + 0x31], r12b
mov dword [rsp + 0x38], r12d
cmp edi, r12d
je 0x140012741
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov r9, rbx
mov r8d, r15d
mov edx, edi
call qword [rax + 0xc8]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
mov edx, edi
call qword [rax + 0xe0]
cmp dword [rsp + 0x38], r12d
je 0x140012741
movzx r8d, byte [rbx + 0x30]
mov al, byte [rbx + 0x31]
cmp al, r12b
je 0x14001272c
movzx eax, al
lea r8d, [r8 + rax + 1]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
movzx r9d, byte [rbx + 0x24]
mov edx, edi
call qword [rax + pe_nt_image_headers64]
cmp esi, r12d
je 0x1400127a9
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov r9, rbx
mov r8d, r15d
mov edx, esi
call qword [rax + 0xc8]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
mov edx, esi
call qword [rax + 0xe0]
cmp dword [rsp + 0x38], r12d
je 0x1400127a9
movzx r8d, byte [rbx + 0x30]
mov al, byte [rbx + 0x31]
cmp al, r12b
je 0x14001278d
movzx eax, al
lea r8d, [r8 + rax + 1]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
movzx r9d, byte [rbx + 0x24]
mov edx, esi
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [rsp + 0x30]
jmp 0x1400127ae
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x30], r12
call fcn.14000f0c8
mov ecx, 0x30
call fcn.14001dce0
mov qword [rsp + 0x40], rax
cmp rax, r12
je 0x1400127dc
mov rcx, rax
call fcn.140003984
jmp 0x1400127df
mov rax, r12
mov qword [0x140062f40], rax
cmp rax, r12
je 0x140012827
mov rcx, rax
call fcn.14000a20c
cmp al, r12b
jne 0x140012827
mov rcx, qword [0x140062f40]
call fcn.140002254
mov rbx, qword [0x140062f40]
cmp rbx, r12
je 0x140012820
mov rcx, rbx
call fcn.14000105c
mov rcx, rbx
call fcn.14001d230
mov qword [0x140062f40], r12
call fcn.14000d254
call fcn.14000d5bc
call fcn.14000f90c
cmp al, r12b
jne 0x140012859
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x48], 0x173d
lea rdx, str.ICC_Not_Supported___Error_while_Create_call__n
lea rcx, [rsp + 0x40]
call fcn.140002184
mov rcx, qword [rsp + 0xb00]
xor rcx, rsp
call fcn.14001e4a0
lea r11, [rsp + 0xb10]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
ret