Function at 0x140004f26
Capabilities:
Delete directory
Get common file path

Disassembly:
push r15
xor rax, rax
push rax
push rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.14000a040
mov qword [rsp + 0x28], rax
push 0
pop rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14001cb98], rax
push qword [0x14001d660]
push qword [0x14001d660]
push qword [rsp + 0x38]
pop rcx
sub rsp, 0x20
call fcn.140002c94
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400145c0
call fcn.1400053fc
call fcn.140004bd3
push qword [0x14001d660]
sub rsp, 8
push qword [0x14001d660]
push 0
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140009fd4
add rsp, 0x28
inc qword [0x14001d660]
mov rcx, qword [0x14001cbd0]
pop rdx
mov qword [0x14001d660], rdx
add rdx, qword [0x14001d670]
call fcn.1400146f0
or rax, rax
je 0x140004fe2
mov r15, qword [rsp + 0x28]
cmp r15, 1
jne 0x140004fe2
mov rax, 1
jmp 0x140004fe5
xor rax, rax
and rax, rax
je 0x140004fef
call fcn.14000311d
call fcn.140002f25
mov rcx, qword [0x14001cc88]
push qword [0x14001d660]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
mov rcx, qword [0x14001cc48]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
mov rcx, qword [0x14001cbc8]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
lea rcx, [0x14001cbc8]
pop rdx
call fcn.1400145c0
push qword [0x14001d660]
sub rsp, 8
push qword [0x14001d660]
push 0x800
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006cf0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.1400145c0
push qword [0x14001d660]
sub rsp, 8
push qword [rsp + 0x48]
push 0
movabs rax, 0x14001b01e
push rax
mov rcx, qword [0x14001cc88]
push qword [0x14001d660]
sub rsp, 0x20
call fcn.140014780
add rsp, 0x20
mov rcx, qword [0x14001cc48]
sub rsp, 0x20
call fcn.140014780
add rsp, 0x20
mov rdx, qword [0x14001d670]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_GetTempFileNameA
add rsp, 0x28
pop qword [0x14001d660]
push qword [rsp + 0x38]
pop rcx
call fcn.14001096c
push qword [0x14001cc38]
push qword [rsp + 0x40]
pop rcx
pop rdx
call sub.SHLWAPI.DLL_PathRenameExtensionA
mov rcx, qword [rsp + 0x38]
push qword [0x14001d660]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
lea rcx, [0x14001cbc8]
pop rdx
call fcn.1400145c0
call fcn.14000490b
mov rcx, qword [0x14001cb08]
xor rdx, rdx
call fcn.1400146f0
or rax, rax
jne 0x140005147
push qword [0x14001cb08]
pop rcx
call fcn.14000378d
call fcn.14000404d
push qword [0x14001cbc8]
pop rcx
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov rcx, qword [0x14001cbc8]
push qword [0x14001d660]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
movabs rcx, str.__BFINOPSX
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400145c0
push qword [rsp + 0x30]
pop rcx
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x14001d660]
sub rsp, 8
push qword [0x14001d660]
push 0x800
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006cf0
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.1400145c0
push 0x800
push qword [rsp + 0x48]
pop rcx
pop rdx
call sub.KERNEL32.dll_GetSystemDirectoryA
push qword [rsp + 0x40]
pop rcx
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x14001d660]
sub rsp, 8
push 0x45
push qword [0x14001cbb0]
mov rcx, qword [0x14001cc68]
push qword [0x14001d660]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
movabs rcx, str.__BFINOPSX
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.140014780
add rsp, 0x28
inc qword [0x14001d660]
mov rcx, qword [rsp + 0x68]
push qword [0x14001d660]
sub rsp, 0x20
call fcn.140014780
add rsp, 0x20
mov rcx, qword [0x14001cb80]
sub rsp, 0x20
call fcn.140014780
add rsp, 0x20
mov rdx, qword [0x14001d670]
add qword [rsp], rdx
mov rdx, qword [0x14001d670]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000a6a4
add rsp, 0x28
pop qword [0x14001d660]
mov qword [0x14001cbe8], rax
push qword [0x14001cbe8]
pop rcx
call fcn.14000a6f4
mov qword [rsp + 0x48], rax
push qword [0x14001cbe8]
pop rcx
call fcn.14000a718
push 0
lea rax, [0x1400032c4]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.KERNEL32.dll_SetConsoleCtrlHandler
call fcn.140004811
push qword [0x14001cbc8]
pop rcx
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
push qword [0x14001cbc8]
pop rcx
call fcn.14001096c
push qword [0x14001cca8]
pop rcx
call fcn.14001096c
push qword [0x14001cba0]
pop rcx
call fcn.14001096c
push qword [0x14001d660]
sub rsp, 8
push qword [0x14001d660]
sub rsp, 8
push qword [0x14001d660]
push qword [0x14001d660]
push qword [0x14001d660]
pop rcx
sub rsp, 0x20
call fcn.140009e04
add rsp, 0x20
mov rdx, qword [0x14001d670]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400109f0
add rsp, 0x28
mov rdx, qword [0x14001d670]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400109d4
add rsp, 0x28
pop qword [0x14001d660]
push qword [0x14001cc80]
pop rcx
call sub.KERNEL32.dll_RemoveDirectoryA
push qword [0x14001cc88]
pop rcx
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [rsp + 0x48]
mov qword [0x14001cab0], rax
jmp 0x140001b9b