Function at 0x140008b28
Capabilities:
Delete file
Get common file path
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2228]
mov eax, 0x2328
call fcn.14001e900
sub rsp, rax
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov rax, qword [0x140042038]
xor rax, rsp
mov qword [rbp + 0x2210], rax
mov rdi, r9
mov r15, r8
mov r13, rdx
mov r14, rcx
xor esi, esi
mov qword [rsp + 0x48], rsi
mov eax, dword [rcx + 0x890]
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x5c], eax
lea rcx, [rsp + 0x70]
call fcn.140014168
lea rcx, [0x14003be01]
call fcn.140016540
mov rbx, rax
lea rcx, [rsp + 0x70]
call fcn.140014168
mov r8d, ebx
lea rdx, [0x14003be01]
lea rcx, [rsp + 0x70]
call fcn.1400141a4
lea rcx, [rsp + 0x70]
call fcn.140014260
mov dword [rsp + 0x58], esi
lea rdx, [0x14003be08]
mov rcx, rdi
call fcn.140016604
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000900d
xor edx, edx
lea r8d, [rsi + 2]
mov rcx, rax
call fcn.1400170cc
mov r9, rbx
lea edi, [rsi + 8]
mov r8d, edi
lea r12d, [rsi + 1]
mov edx, r12d
lea rcx, [0x140043ce0]
call fcn.140016f90
mov r9, rbx
mov r8d, edi
mov edx, r12d
lea rcx, [0x140043ce8]
call fcn.140016f90
mov r9, rbx
mov r8d, r12d
lea edi, [rsi + 4]
mov edx, edi
lea rcx, [0x140043918]
call fcn.140016f90
mov r9, rbx
mov r8d, r12d
mov edx, edi
lea rcx, [0x140043914]
call fcn.140016f90
lea edi, [rsi + 0x10]
mov r9d, 0x99f2
mov r8d, edi
lea rdx, [rsp + 0x70]
call fcn.140002ae0
mov r9, rbx
mov r8d, edi
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140016f90
cmp byte [r14 + 0x1814], sil
jne 0x140008cec
lea rcx, [rsp + 0x28]
call fcn.140001834
nop
lea rdx, [rsp + 0x28]
call fcn.140005814
lea r9, [rbp]
xor r8d, r8d
lea rdx, [0x1400370c8]
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea r8, [rbp]
lea rcx, [rbp]
call fcn.140011820
nop
lea rcx, [rsp + 0x28]
call fcn.1400016b0
lea r8, str.___AUTOIT_NO_CMDEXECUTE___
lea rdx, [rbp]
lea rcx, [rsp + 0x48]
call fcn.140015168
lea rcx, [rbp]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [r14 + 0x1710], sil
je 0x140008d0e
lea r9, str.Compressing_and_adding:_Master_Script
xor r8d, r8d
mov edx, 0x40b
mov rcx, qword [r14 + 0x58]
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, str.___AUTOIT_SCRIPT___
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.140015168
test eax, eax
je 0x140008d66
lea rdx, str.Error_adding_script_file:_n_n
lea rcx, [rbp + 0x210]
call fcn.140017878
mov rdx, r15
lea rcx, [rbp + 0x210]
call fcn.14001784c
lea rdx, [rbp + 0x210]
mov rcx, r14
call fcn.140004bbc
lea rcx, [rsp + 0x48]
call fcn.140014e68
jmp 0x14000901a
mov eax, dword [0x140047a1c]
test r12b, al
jne 0x140008d9a
or eax, r12d
mov dword [0x140047a1c], eax
lea rdx, str.___AUTOIT_SCRIPT_SOURCE___
lea rcx, [0x140047a20]
call fcn.14000454c
lea rcx, [0x14002c2fc]
call fcn.140017ac8
nop
lea rcx, [rsp + 0x28]
call fcn.140001834
nop
mov r15, qword [rsp + 0x28]
cmp r12d, dword [r14 + 0x1760]
jg 0x140008dc8
test r12d, r12d
jle 0x140008dc8
movsxd rbx, r12d
shl rbx, 5
add rbx, qword [r14 + 0x17d8]
jmp 0x140008dcb
mov rbx, rsi
inc r12d
test rbx, rbx
je 0x140008ff0
mov edi, esi
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
cmp word [rax + 8], 0x7f
je 0x140008e76
mov rdx, rsi
mov rax, qword [rcx + rdx]
cmp word [rax + 8], 0x31
jne 0x140008e0f
mov rax, qword [rax]
mov rdx, qword [rax]
lea rcx, str.FILEINSTALL
call fcn.1400174f4
test eax, eax
je 0x140008e28
inc edi
mov edx, edi
shl rdx, 3
mov rcx, qword [rbx + 8]
mov rax, qword [rcx + rdx]
cmp word [rax + 8], 0x7f
je 0x140008e76
jmp 0x140008dee
lea rcx, [rsp + 0x28]
call fcn.140001894
mov rdx, qword [rbx + 8]
lea eax, [rdi + 1]
mov rax, qword [rdx + rax*8]
cmp word [rax + 8], 0x47
jne 0x140008e71
lea eax, [rdi + 2]
mov r8, qword [rdx + rax*8]
cmp word [r8 + 8], 0x36
jne 0x140008e71
lea eax, [rdi + 3]
mov rax, qword [rdx + rax*8]
cmp word [rax + 8], 0x40
jne 0x140008e71
mov rax, qword [r8]
mov rdx, qword [rax]
lea rcx, [rsp + 0x28]
call fcn.140001908
mov r15, qword [rsp + 0x28]
mov ecx, edi
mov rax, qword [rbx + 8]
mov rcx, qword [rax + rcx*8]
cmp word [rcx + 8], 0x7f
je 0x140008daa
mov qword [rsp + 0x20], rsi
cmp qword [rsp + 0x30], rsi
je 0x140008fa8
lea rdx, [0x140047a20]
lea rcx, [rsp + 0x28]
call fcn.1400019cc
lea r9, [rsp + 0x20]
lea r8, [rbp]
mov edx, 0x104
test al, al
mov rcx, r13
jne 0x140008ec4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
cmp qword [rsp + 0x20], rsi
je 0x140008fa8
lea rdx, str.Compressing_and_adding:
lea rcx, [rbp + 0x210]
call fcn.140017878
mov rdx, qword [rsp + 0x20]
lea rcx, [rbp + 0x210]
call fcn.14001784c
lea rcx, [r14 + 0xcb0]
lea rdx, [rbp + 0x210]
call fcn.140017878
cmp byte [r14 + 0x1710], sil
je 0x140008f4a
lea r9, [rbp + 0x210]
xor r8d, r8d
mov edx, 0x40b
mov rcx, qword [r14 + 0x58]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x48]
lea rcx, [0x140009040]
cmp byte [r14 + 0x1710], sil
cmovne rax, rcx
mov qword [rsp + 0x48], rax
mov r8, r15
lea rdx, [rbp]
lea rcx, [rsp + 0x48]
call fcn.140015168
test eax, eax
je 0x140008daa
cmp eax, 0xa
je 0x140008f9b
lea rdx, str.Error_adding_file:_n_n
lea rcx, [rbp + 0x210]
call fcn.140017878
mov rdx, r15
lea rcx, [rbp + 0x210]
call fcn.14001784c
lea rdx, [rbp + 0x210]
mov rcx, r14
call fcn.140004bbc
jmp 0x140008ff3
mov ecx, 0x30
call qword [sym.imp.USER32.dll_MessageBeep]
jmp 0x140008ff3
lea rdx, str.Invalid_FileInstall___function:_n_n
lea rcx, [rbp + 0x210]
call fcn.140017878
mov rdx, r15
lea rcx, [rbp + 0x210]
call fcn.14001784c
lea rdx, [rbp + 0x210]
mov rcx, r14
call fcn.140004bbc
lea rcx, [rsp + 0x48]
call fcn.140014e68
nop
lea rcx, [rsp + 0x28]
call fcn.1400016b0
jmp 0x14000901a
mov sil, 1
lea rcx, [rsp + 0x48]
call fcn.140014e68
nop
lea rcx, [rsp + 0x28]
call fcn.1400016b0
mov al, sil
jmp 0x14000901c
mov edx, 0xa038
mov rcx, r14
call fcn.140004c40
xor al, al
mov rcx, qword [rbp + 0x2210]
xor rcx, rsp
call fcn.140015ef0
add rsp, 0x2328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret