Function at 0x1401d7194
Capabilities:
Check if file exists
Create thread
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r14
lea rbp, [rax - 0x78]
sub rsp, 0x160
mov rax, qword [0x140279780]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rdi, rcx
call fcn.140018a98
mov rdx, qword [0x1402ab660]
mov rcx, rdi
call fcn.140011c1c
xor edx, edx
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetSystemMenu]
mov rcx, rax
call fcn.140049408
mov rbx, rax
or r14d, 0xffffffff
test rax, rax
je 0x1401d725f
lea rdx, str.About_Youtube_Music_Downloader...
lea rcx, [rsp + 0x60]
call fcn.140002b8c
mov rcx, qword [rsp + 0x60]
cmp dword [rcx - 0x10], 0
je 0x1401d7243
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_AppendMenuA]
mov r9, qword [rsp + 0x60]
xor edx, edx
lea r8d, [r14 + 0x11]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_AppendMenuA]
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d725f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, qword [rdi + 0x170]
mov r12d, 1
mov r8d, r12d
lea ebx, [r12 + 0x7f]
mov edx, ebx
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, qword [rdi + 0x170]
xor r8d, r8d
mov edx, ebx
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageA]
lea rbx, [rdi + 0xa0b0]
mov dword [rsp + 0x28], 0x2000
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x81
mov rcx, qword [0x1402ab4d8]
call qword [sym.imp.USER32.dll_LoadImageA]
mov qword [rbx + 8], rax
xor edx, edx
mov rcx, rbx
call fcn.1400061d4
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 0x30]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageA]
mov rcx, rax
call fcn.1400169d0
lea r8, [rbp + 0x18]
lea edx, [r12 + 0x3b]
mov rcx, qword [rax + 8]
call qword [sym.imp.GDI32.dll_GetObjectA]
lea rbx, [rdi + 0x178]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, dword [rbp + 0x18]
lea rdx, [rbp + 0x34]
mov rcx, rbx
call fcn.1401d1c14
mov rcx, rbx
call fcn.1401d1bec
lea rdx, str.Record_all_sounds__Online_Music_Radio_Skype__you_can_hear_in_1_Click..
call fcn.140011c1c
lea rdx, str.http:__www.virtualaudiostreaming.net_go.php_idymd
mov rcx, rbx
call fcn.14001b7ac
mov rax, qword [rbx]
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x28]
mov rcx, rbx
call qword [rax + 0x330]
lea rsi, [rdi + 0xde0]
lea edx, [r12 + 2]
lea r8d, [r12 + 0x63]
mov rcx, rsi
call fcn.14002fc64
lea rdx, [rdi + 0x8010]
mov rcx, rsi
call fcn.14002d8f4
lea rdx, [rdi + 0x97b0]
mov rcx, rsi
call fcn.14002d8f4
lea rdx, [rdi + 0x9630]
mov rcx, rsi
call fcn.14002d8f4
mov rax, qword [rsi]
xor r9d, r9d
mov r8d, 0x50000000
mov rdx, rdi
mov rcx, rsi
call qword [rax + 0x2c8]
xor r9d, r9d
mov ebx, 0x10000
mov r8d, ebx
xor edx, edx
mov rcx, rsi
call fcn.140011a28
xor r9d, r9d
mov r8d, ebx
xor edx, edx
mov rcx, rsi
call fcn.1400119f0
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
lea rdx, [rbp + 8]
mov rcx, qword [rdi + 0xd38]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.140016e9c
mov r9d, dword [rbp + 0xc]
add r9d, 0xfffffff9
mov r8d, dword [rbp + 8]
add r8d, 0xfffffff9
mov dword [rsp + 0x30], 0x15
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rsi
call fcn.140011bb8
lea rcx, [rbp - 0x20]
call fcn.1400059a4
nop
mov rcx, rsi
call fcn.14002e0bc
mov r9, qword [rax]
xor edx, edx
mov r8d, 0xcfd4c5
mov rcx, rax
call qword [r9 + 0x3c0]
mov rcx, rsi
call fcn.14002e0bc
mov r9, qword [rax]
mov r8d, 0x78dcff
mov edx, r12d
mov rcx, rax
call qword [r9 + 0x3c0]
mov rcx, rsi
call fcn.14002e0bc
mov r9, qword [rax]
lea edx, [r12 + 1]
mov r8d, 0xa0cebe
mov rcx, rax
call qword [r9 + 0x3c0]
mov rcx, rsi
call fcn.14002e0bc
mov rcx, rax
mov edx, r12d
call fcn.14004c9fc
mov rcx, rsi
call fcn.14002e0bc
mov rcx, rax
xor edx, edx
call fcn.140053804
mov rcx, rsi
call fcn.14002e0bc
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x308]
mov rcx, rsi
call fcn.14002e0bc
mov r9d, 0x105
xor r8d, r8d
xor edx, edx
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_RedrawWindow]
xor ebx, ebx
mov rcx, rsi
call fcn.14001d010
sub eax, r12d
test eax, eax
jle 0x1401d7514
mov edx, ebx
mov rcx, rsi
call fcn.14001e06c
add ebx, r12d
mov rcx, rsi
call fcn.14001d010
sub eax, r12d
cmp ebx, eax
jl 0x1401d74f8
xor edx, edx
mov rcx, rsi
call fcn.14001e06c
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x58]
call fcn.1401cda8c
call fcn.140007bec
mov rcx, rax
test rax, rax
je 0x1401d798e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov r8d, dword [rsp + 0x58]
lea rdx, [0x14023cca4]
lea rcx, [rsp + 0x50]
call fcn.1400033ac
mov rax, qword [rsp + 0x50]
mov r8d, dword [rax - 0x10]
add r8d, 0xfffffffc
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140003ab0
nop
lea r8, [rsp + 0x5c]
lea rdx, [0x14023cca4]
mov rcx, qword [rsp + 0x40]
call fcn.140004670
cmp eax, r12d
jne 0x1401d765e
mov r8d, dword [rsp + 0x5c]
lea rdx, [0x14023de10]
lea rcx, [rsp + 0x40]
call fcn.1400033ac
mov r8d, r12d
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140003b30
mov rbx, rax
lea r8, [0x14024141c]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.140002d2c
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000287c
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140003834
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d761d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d763e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d765e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.1401cb930
mov dword [0x140286bf0], eax
test eax, eax
je 0x1401d76d4
lea rcx, [rdi + 0x8b10]
xor edx, edx
call fcn.140011c90
lea rcx, [rdi + 0x9df8]
xor edx, edx
call fcn.140011c90
lea r8, [rsp + 0x40]
lea rdx, str.YouTube_Music_Downloader_Pro__Registered___v
lea rcx, [rbp - 0x48]
call fcn.1400045ac
nop
mov rdx, qword [rax]
mov rcx, rdi
call fcn.140011c1c
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d76cb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [0x140241450]
jmp 0x1401d771d
lea r8, [rsp + 0x40]
lea rdx, str.YouTube_Music_Downloader__v
lea rcx, [rbp - 0x40]
call fcn.1400045ac
nop
mov rdx, qword [rax]
mov rcx, rdi
call fcn.140011c1c
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d7716
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.Register
lea rcx, [rdi + 0x9fc8]
call fcn.140011c1c
lea rcx, str.CMFCVisualManagerDeviant
call fcn.140063ecc
movzx edx, byte [0x1402ab634]
shl edx, 8
movzx eax, byte [0x1402ab638]
shl eax, 0x10
or edx, eax
movzx eax, byte [0x1402ab630]
or edx, eax
mov r8d, r12d
mov rcx, rdi
call fcn.140008580
call fcn.1401cd0f8
xor r8d, r8d
xor edx, edx
lea rcx, [0x1401d79a0]
call fcn.1401af7b0
lea r8, str.YouTube_Music_Downloader.exe
lea rbx, [0x1402ab448]
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140002d2c
nop
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1401d77ab
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea r8, str.update2.exe
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140002d2c
nop
lea r8, str.update2f.exe
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.140002d2c
nop
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1401d784a
mov r9d, 4
lea r8, str.YouTube_Music_Downloader
lea rdx, str.New_version_detected__Please_upgrade_to_the_lastest_version__Upgrade_is_Free.
mov rcx, rdi
call fcn.14000be60
cmp eax, 6
jne 0x1401d78b0
lea rax, [rsp + 0x78]
mov qword [rbp - 0x38], rax
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140003958
add rax, 0x18
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140003958
add rax, 0x18
mov qword [rbp - 0x80], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x80]
jmp 0x1401d78aa
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1401d78b0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.New_version_detected__We_will_launch_the_Setup_to_upgrade_to_the_latest_version__Upgrade_is_Free.
mov rcx, rdi
call fcn.14000be60
lea rax, [rbp - 0x78]
mov qword [rbp - 0x30], rax
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140003958
add rax, 0x18
mov qword [rbp - 0x78], rax
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140003958
add rax, 0x18
mov qword [rbp - 0x70], rax
lea r8, [rbp - 0x78]
lea rdx, [rbp - 0x70]
call fcn.1401d7068
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d78d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d78f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d7916
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d7938
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1401d795a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x20]
call fcn.1400061b0
xor eax, eax
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.140197130
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.140003930
int3