Function at 0x140059480
Capabilities:
Delete directory
Delete file
Get common file path

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x680
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov rax, qword [0x140322b20]
xor rax, rsp
mov qword [rsp + 0x670], rax
lea rdx, [rsp + 0xd0]
lea rcx, [0x14032af98]
call fcn.140031460
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
call fcn.14001bd90
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0xa8]
mov rcx, rax
call fcn.140050980
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x260]
call fcn.14001f430
nop
lea rcx, [rsp + 0xa8]
call fcn.14001f8f0
nop
lea rcx, [rsp + 0xd0]
call fcn.140020590
mov rax, qword [rsp + 0x690]
add rax, 0x790
mov rcx, rax
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov r9, rax
lea r8, str.ProgramDataMicrosoftWindowsStart_MenuPrograms_s
lea rdx, [rsp + 0x150]
lea rcx, [0x14032af98]
call fcn.14002bda0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x260]
call fcn.140022eb0
nop
lea rcx, [rsp + 0x150]
call fcn.140020590
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x78], rax
lea rdx, [0x14025f9a0]
mov rcx, qword [rsp + 0x58]
call fcn.14001c4e0
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x88], rax
lea rcx, [rsp + 0x260]
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov rdx, rax
mov rcx, qword [rsp + 0x78]
call fcn.14001c4e0
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x38]
lea rcx, [0x14032af98]
call fcn.14002a310
lea rcx, [rsp + 0x260]
call fcn.140021b20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
nop
lea rcx, [rsp + 0x260]
call fcn.140020590
mov rax, qword [rsp + 0x690]
add rax, 0x310
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.14001f3a0
nop
lea rdx, [0x14025f45c]
lea rcx, [rsp + 0x1e0]
call fcn.1400247d0
lea rdx, [0x14025f9b0]
lea rcx, [rsp + 0x1e0]
call fcn.140022f20
lea rcx, [rsp + 0x1e0]
call fcn.14001bd90
mov rcx, rax
call fcn.140048030
mov r9, rax
lea r8, str.__s____AssetsReg_
lea rdx, [rsp + 0x3e0]
lea rcx, [0x14032af98]
call fcn.14002bda0
nop
mov rax, qword [rsp + 0x690]
add rax, 0x310
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call fcn.14001f3a0
nop
lea rdx, [0x14025f494]
lea rcx, [rsp + 0x2e0]
call fcn.1400247d0
lea rdx, str.res_skindesktop_reg.ico
lea rcx, [rsp + 0x2e0]
call fcn.140022f20
mov qword [rsp + 0x1d0], 0
lea r8, [rsp + 0x1d0]
mov edx, 0x19
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jl 0x1400597c5
xor eax, eax
mov word [rsp + 0x460], ax
lea rax, [rsp + 0x462]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rdx, [rsp + 0x460]
mov rcx, qword [rsp + 0x1d0]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x1400597c5
lea rdx, [0x14025f848]
lea rcx, [rsp + 0x460]
call fcn.14001c200
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x360]
call fcn.14001f4b0
nop
lea rcx, [rsp + 0x360]
call fcn.140021b20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x360]
call fcn.140020590
nop
lea rcx, [rsp + 0x2e0]
call fcn.140020590
nop
lea rcx, [rsp + 0x3e0]
call fcn.140020590
nop
lea rcx, [rsp + 0x1e0]
call fcn.140020590
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.1401fe250
add rsp, 0x680
pop rdi
ret