Function at 0x1400c69e2
Capabilities:
Delete file
Get common file path

Disassembly:
jmp 0x14021dee0
push rbp
push rsi
push rdi
sub rsp, 0xc10
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x204
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14044aff8]
xor rax, rbp
mov qword [rbp + 0xbc8], rax
lea rcx, reloc.d2d1.dll_Ordinal_1
call fcn.1400c9dfe
lea rax, [rbp + 0x554]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x578]
lea rcx, [rbp + 0x554]
call fcn.140219450
mov rcx, rax
call fcn.1400c6d20
mov rcx, rax
call fcn.1400c89c2
lea rdx, [rbp + 0x10]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [rbp + 0x134], eax
cmp dword [rbp + 0x134], 0x104
ja 0x14021df7e
cmp dword [rbp + 0x134], 0
jne 0x14021dfce
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x5b4], eax
lea rax, [rbp + 0x5d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x5f8]
lea rcx, [rbp + 0x5d4]
call fcn.140219610
mov rcx, rax
call fcn.1400c7df6
lea rdx, [rbp + 0x5b4]
mov rcx, rax
call fcn.1400c8990
xor al, al
jmp 0x14021e40a
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x648]
call fcn.1400c7c07
mov qword [rbp + 0xbb8], rax
mov rax, qword [rbp + 0xbb8]
mov qword [rbp + 0xbc0], rax
lea r8, str.mhyprot.sys
mov rdx, qword [rbp + 0xbc0]
lea rcx, [rbp + 0x158]
call fcn.1400c98cc
nop
lea rcx, [rbp + 0x648]
call fcn.1400c6b4f
xor r8d, r8d
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x6a8]
call fcn.1400c916a
nop
lea rcx, [rbp + 0x6a8]
call fcn.1400c7bfd
mov byte [rbp + 0x684], al
lea rcx, [rbp + 0x6a8]
call fcn.1400c98a9
movzx eax, byte [rbp + 0x684]
test eax, eax
je 0x14021e06f
lea rcx, [rbp + 0x158]
call fcn.1400c65aa
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_remove]
lea rdx, [rbp + 0x6e8]
lea rcx, [rbp + 0x158]
call fcn.1400c7671
lea rcx, [rbp + 0xb70]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8d, 0x136078
lea rdx, [0x1402ae250]
lea rcx, [rbp + 0xb70]
call fcn.1400c9de5
movzx eax, al
test eax, eax
jne 0x14021e125
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x714], eax
lea rax, [rbp + 0x734]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x758]
lea rcx, [rbp + 0x734]
call fcn.140219760
mov rcx, rax
call fcn.1400c6d93
lea r8, [rbp + 0x714]
lea rdx, str.mhyprot.sys
mov rcx, rax
call fcn.1400c8927
mov byte [rbp + 0x794], 0
lea rcx, [rbp + 0x158]
call fcn.1400c6b4f
movzx eax, byte [rbp + 0x794]
jmp 0x14021e40a
lea rax, [rbp + 0x7b4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x7d8]
lea rcx, [rbp + 0x7b4]
call fcn.140219840
mov rcx, rax
call fcn.1400c6717
mov rcx, rax
call fcn.1400c89c2
lea rdx, [rbp + 0x818]
lea rcx, [rbp + 0x158]
call fcn.1400c7671
lea rcx, [rbp + 0xba0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0xba0]
call fcn.1400c713f
mov qword [0x140454a58], rax
cmp qword [0x140454a58], 0
je 0x14021e1a9
cmp qword [0x140454a58], 0xffffffffffffffff
jne 0x14021e211
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x844], eax
lea rax, [rbp + 0x864]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x888]
lea rcx, [rbp + 0x864]
call fcn.140219920
mov rcx, rax
call fcn.1400c6ef1
lea rdx, [rbp + 0x844]
mov rcx, rax
call fcn.1400c8990
mov byte [rbp + 0x8c4], 0
lea rcx, [rbp + 0x158]
call fcn.1400c6b4f
movzx eax, byte [rbp + 0x8c4]
jmp 0x14021e40a
mov rcx, qword [0x140454a58]
call fcn.1400c7905
movzx eax, al
test eax, eax
jne 0x14021e28c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x8e4], eax
lea rax, [rbp + 0x904]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x928]
lea rcx, [rbp + 0x904]
call fcn.140219990
mov rcx, rax
call fcn.1400c88b9
lea rdx, [rbp + 0x8e4]
mov rcx, rax
call fcn.1400c8990
mov byte [rbp + 0x964], 0
lea rcx, [rbp + 0x158]
call fcn.1400c6b4f
movzx eax, byte [rbp + 0x964]
jmp 0x14021e40a
lea rax, [rbp + 0x984]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x9a8]
lea rcx, [rbp + 0x984]
call fcn.140219a70
mov rcx, rax
call fcn.1400c83cd
lea rdx, str.mhyprot.sys
mov rcx, rax
call fcn.1400c8341
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str._mhyprot2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140453e88], rax
cmp qword [0x140453e88], 0
je 0x14021e315
cmp qword [0x140453e88], 0xffffffffffffffff
jne 0x14021e37d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x9d4], eax
lea rax, [rbp + 0x9f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xa18]
lea rcx, [rbp + 0x9f4]
call fcn.140219bc0
mov rcx, rax
call fcn.1400c7982
lea rdx, [rbp + 0x9d4]
mov rcx, rax
call fcn.1400c8990
mov byte [rbp + 0xa64], 0
lea rcx, [rbp + 0x158]
call fcn.1400c6b4f
movzx eax, byte [rbp + 0xa64]
jmp 0x14021e40a
lea rax, [rbp + 0xa84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xaa8]
lea rcx, [rbp + 0xa84]
call fcn.140219ca0
mov rcx, rax
call fcn.1400c730b
lea rdx, [0x140453e88]
mov rcx, rax
call fcn.1400c78fb
lea rax, [rbp + 0xae4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xb08]
lea rcx, [rbp + 0xae4]
call fcn.1402190c0
mov rcx, rax
call fcn.1400c88b9
mov rcx, rax
call fcn.1400c89c2
mov byte [rbp + 0xb44], 1
lea rcx, [rbp + 0x158]
call fcn.1400c6b4f
movzx eax, byte [rbp + 0xb44]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x140422dd0]
call fcn.1400c9386
mov rax, rdi
mov rcx, qword [rbp + 0xbc8]
xor rcx, rbp
call fcn.1400c7dba
lea rsp, [rbp + 0xbd0]
pop rdi
pop rsi
pop rbp
ret