Function at 0x140001b20
Capabilities:
Create process on windows
Delete file

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov qword [rbp - 0x29], 0xfffffffffffffffe
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rcx, [rbp - 0x21]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::constructor_void____ptr64]
lea r14, vtable.CUtlX.0
mov qword [rbp - 0x21], r14
lea rcx, [rbp - 0x21]
call qword [sym.imp.SetupXML.dll_public:_long_int___cdecl_CXMLFileManagerInterface::Initialize_void____ptr64]
lea rcx, [rbp - 1]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::constructor_void____ptr64]
mov qword [rbp - 1], r14
lea rdx, [0x140216d20]
lea rcx, [rbp + 0x1f]
call fcn.140004960
nop
mov byte [rbp + 0x27], 0
mov edx, 4
lea rcx, [rbp - 1]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::SetFileIndex_enum_XMLFILENAMES____ptr64]
nop
lea rcx, [rbp - 1]
call fcn.140005260
lea rdx, [rbp + 0x67]
lea rcx, [rbp - 1]
call fcn.140004ea0
nop
mov rax, qword [rbp + 0x67]
movzx ecx, word [rax]
cmp cx, word [0x140216d20]
jne 0x140001bc4
xor eax, eax
jmp 0x140001bc9
sbb eax, eax
or eax, 1
test eax, eax
je 0x140001c46
lea rdx, [rbp + 0x77]
lea rcx, [rbp - 1]
call fcn.1400050f0
mov rbx, rax
lea rdx, [rbp + 0x6f]
lea rcx, [rbp - 1]
call fcn.140005050
mov rbx, qword [rbx]
mov rdi, qword [rax]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
mov r9, rdi
mov r8, qword [rbp + 0x67]
xor edx, edx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp + 0x6f]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140001c2e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x77]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140001c46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp - 0x21]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::UnInitialize_void____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, [rbp + 0x7f]
lea rcx, [rbp - 1]
call fcn.140005450
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rbp + 0x7f]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140001c85
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x67]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140001c9e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1f]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140001cb7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 1], r14
lea rcx, [rbp - 1]
call qword [sym.imp.SetupXML.dll_public_virtual:_void___cdecl_CXMLFileManagerInterface::destructor_void____ptr64]
nop
mov qword [rbp - 0x21], r14
lea rcx, [rbp - 0x21]
call qword [sym.imp.SetupXML.dll_public_virtual:_void___cdecl_CXMLFileManagerInterface::destructor_void____ptr64]
add rsp, 0x90
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret