Function at 0x1400130bc
Capabilities:
Delete file
Get common file path

Disassembly:
mov rax, rsp
push r12
push r13
push r14
sub rsp, 0xb20
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140066550]
xor rax, rsp
mov qword [rsp + 0xb10], rax
mov rdx, qword [0x140067fb0]
xor ebp, ebp
cmp rdx, rbp
je 0x140013117
xor ecx, ecx
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [0x140067fb0], rbp
mov ebx, 0x9c
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x210]
call fcn.1400205b0
mov dword [rsp + 0x210], ebx
lea rcx, [rsp + 0x210]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp eax, ebp
je 0x14001318c
cmp dword [rsp + 0x218], ebp
jne 0x14001316f
lea r9, [0x14000fc10]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetTimer]
mov ecx, eax
mov qword [0x140067fb0], rcx
jmp 0x14001318c
lea r9, [0x14000fc10]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetTimer]
mov ecx, eax
mov qword [0x140067fb0], rcx
mov r12d, 1
mov edi, r12d
mov ebx, 0x228
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x2b0]
call fcn.1400205b0
mov qword [rsp + 0x60], rbp
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [0x140053ab0]
xor edx, edx
lea r8d, [r12 + 0x14]
lea rcx, [0x140053b10]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [rsp + 0x2c8], 5
lea rdx, str.FirstInstallVista
lea rcx, [rsp + 0x2cc]
call fcn.140020b90
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x2b0]
mov edx, ebx
call qword [rax + 0xe0]
cmp eax, ebp
jge 0x140013257
mov dword [rsp + 0x4d4], ebp
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x2b0]
mov edx, ebx
call qword [rax + 0xe8]
mov edi, dword [rsp + 0x4d4]
mov dword [rsp + 0x4d4], r12d
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x2b0]
mov edx, ebx
call qword [rax + 0xe8]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x30], rbp
mov esi, 0x38
mov rcx, rsi
call fcn.14001e940
mov rbx, rax
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.1400205b0
mov r13d, 0x104
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x700]
call fcn.1400205b0
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x4e0]
call fcn.1400205b0
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x5f0]
call fcn.1400205b0
xor edx, edx
lea r8d, [rsi - 0x35]
lea rcx, [rsp + 0x50]
call fcn.1400205b0
lea esi, [r13 - 4]
mov r8, rsi
xor edx, edx
lea rcx, [rsp + 0xa10]
call fcn.1400205b0
mov r8, rsi
xor edx, edx
lea rcx, [rsp + 0x910]
call fcn.1400205b0
mov r8, rsi
xor edx, edx
lea rcx, [rsp + 0x810]
call fcn.1400205b0
lea r11, [rsp + 0x30]
mov qword [rsp + 0x20], r11
lea r9, [0x140053b00]
xor edx, edx
lea r8d, [rdx + 0x15]
lea rcx, [0x140053b60]
call qword [sym.imp.ole32.dll_CoCreateInstance]
lea r14, [0x140054ae8]
cmp eax, ebp
jl 0x1400136f7
mov rcx, qword [rsp + 0x30]
cmp rcx, rbp
je 0x1400136f7
cmp edi, ebp
jne 0x1400136ec
mov rax, qword [0x1400680f8]
mov qword [rsp + 0x20], rax
mov r9d, r13d
lea r8, [rsp + 0x5f0]
mov edx, 0x24f3
xor ecx, ecx
call sub.hccutils.DLL_LoadSTRING
lea rdx, str.Cant_find_requested_string.
lea rcx, [rsp + 0x5f0]
call fcn.140024300
cmp eax, ebp
je 0x1400133ab
lea rdx, [0x1400543f6]
lea rcx, [rsp + 0x5f0]
call fcn.140024300
cmp eax, ebp
jne 0x1400133bf
lea rdx, str.Intel_R__Graphics_and_Media_Control_Panel
lea rcx, [rsp + 0x5f0]
call fcn.140020ad0
mov edx, r13d
lea rcx, [rsp + 0x700]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp eax, ebp
jne 0x1400133fb
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x178a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.LastError___ld._n
lea rcx, [rsp + 0x40]
call fcn.140002484
lea rax, [rsp + 0x810]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x910]
lea r8, [rsp + 0xa10]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x700]
call fcn.140024850
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x4e0]
call fcn.140020ad0
lea rdx, [0x140054808]
lea rcx, [rsp + 0x4e0]
call fcn.140020a30
lea rdx, str.IntelExtremeGraphicsCUIResource
lea rcx, [rsp + 0x4e0]
call fcn.140020a30
lea rdx, [0x140054808]
lea rcx, [rsp + 0x4e0]
call fcn.140020a30
lea r8, [rsp + 0x5f0]
mov rdx, r13
lea rcx, [rsp + 0x4e0]
call fcn.140023500
lea rdx, str..lnk
lea rcx, [rsp + 0x4e0]
call fcn.140020a30
lea rdx, [0x140055578]
lea rcx, [rsp + 0x4e0]
call fcn.1400201f0
cmp rax, rbp
je 0x1400134fe
mov rcx, rax
call fcn.140020220
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp eax, ebp
je 0x1400134fe
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x179b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.LastError:Could_not_delete_the_file___ld._n
lea rcx, [rsp + 0x40]
call fcn.140002484
mov dword [rsp + 0x70], ebp
mov dword [rsp + 0x68], ebp
mov dword [rsp + 0x78], ebp
mov dword [rsp + 0x3c], ebp
mov dword [rsp + 0x38], ebp
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rsp + 0x3c]
mov qword [rsp + 0x28], rdx
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x70]
call qword [rax + 0xc0]
cmp eax, ebp
jl 0x1400136e7
cmp dword [rsp + 0x70], ebp
jne 0x14001356f
cmp dword [rsp + 0x68], 0x32
jne 0x14001356f
cmp dword [rsp + 0x78], 0x64
jne 0x14001356f
cmp dword [rsp + 0x3c], ebp
jne 0x14001356f
cmp dword [rsp + 0x38], ebp
je 0x1400136e7
mov dword [rsp + 0x40], ebp
mov dword [rsp + 0x44], ebp
mov dword [rsp + 0x48], ebp
mov qword [rsp + 0x58], rbp
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x140053ac0]
xor edx, edx
lea r8d, [rdx + 0x15]
lea rcx, [0x140053b20]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebp
jl 0x14001361a
cmp qword [rsp + 0x58], rbp
je 0x14001361a
mov edi, 0x178
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0x90]
call fcn.1400205b0
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x90]
mov edx, edi
call qword [rax + 0x20]
cmp eax, ebp
jl 0x14001360a
cmp byte [rsp + 0x90], bpl
jne 0x14001360a
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x48], eax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x58], rbp
mov eax, dword [rsp + 0x3c]
mov byte [rbx + 0x2c], al
mov byte [rbx + 0x28], al
mov byte [rbx + 0x24], al
mov eax, dword [rsp + 0x38]
mov byte [rbx + 0x30], al
cmp eax, 0xff
jle 0x14001363b
mov byte [rbx + 0x31], 0xff
jmp 0x14001363f
mov byte [rbx + 0x31], bpl
mov dword [rsp + 0x74], ebp
mov dword [rsp + 0x6c], ebp
mov rsi, rbp
mov edi, dword [rsp + rsi*4 + 0x40]
cmp edi, ebp
je 0x1400136e7
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x74]
mov edx, edi
call qword [rax + reloc.OLEAUT32.dll_SetErrorInfo]
cmp dword [rsp + 0x74], ebp
je 0x14001369b
movzx r8d, byte [rbx + 0x30]
mov al, byte [rbx + 0x31]
cmp al, bpl
je 0x140013686
movzx eax, al
lea r8d, [r8 + rax + 1]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
movzx r9d, byte [rbx + 0x24]
mov edx, edi
call qword [rax + 0xd8]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x6c]
mov edx, edi
call qword [rax + 0xf0]
cmp dword [rsp + 0x6c], ebp
je 0x1400136da
test byte [rbx + 0x34], 0x80
mov r8d, ebp
cmovne r8d, r12d
movzx r9d, byte [rbx + 0x34]
and r9d, 0x7f
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov edx, edi
call qword [rax + pe_nt_image_headers64]
add rsi, r12
cmp rsi, 3
jl 0x14001364a
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x30], rbp
call fcn.14000fe98
mov ecx, 0x30
call fcn.14001fb50
mov qword [rsp + 0x58], rax
cmp rax, rbp
je 0x14001371a
mov rcx, rax
call fcn.140003d00
jmp 0x14001371d
mov rax, rbp
mov qword [0x140067f80], rax
cmp rax, rbp
je 0x140013765
mov rcx, rax
call fcn.14000ac94
cmp al, bpl
jne 0x140013765
mov rcx, qword [0x140067f80]
call fcn.140002554
mov rbx, qword [0x140067f80]
cmp rbx, rbp
je 0x14001375e
mov rcx, rbx
call fcn.14000105c
mov rcx, rbx
call fcn.14001f0a0
mov qword [0x140067f80], rbp
call fcn.14000dc48
call fcn.14000e0a8
call fcn.140010aa0
cmp al, bpl
jne 0x140013797
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x1815
lea rdx, str.ICC_Not_Supported___Error_while_Create_call__n
lea rcx, [rsp + 0x40]
call fcn.140002484
mov rcx, qword [rsp + 0xb10]
xor rcx, rsp
call fcn.1400206b0
lea r11, [rsp + 0xb20]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop r12
ret