Function at 0x1400eaeb0
Capabilities:
Check if file exists
Delete file
Get common file path
Get program files directory
Get startup folder

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8f8]
sub rsp, 0x9d0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1402f2080]
xor rax, rsp
mov qword [rbp + 0x8c0], rax
mov r13, rcx
mov qword [rsp + 0x48], rcx
xor r14b, r14b
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x6b0]
call fcn.1401659c0
xor r9d, r9d
lea r8d, [r9 + 0x26]
lea rdx, [rbp + 0x6b0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.140015450
mov rcx, rax
test rax, rax
je 0x1400eb71b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 8], rax
lea r15, str.MaxxAudio_Data.cab
mov qword [rsp + 0x20], r15
lea r9, str.WavesMaxxAudio_
lea r8, [rbp + 0x6b0]
lea rdx, str._s_s_s
lea rcx, [rbp - 8]
call fcn.140021720
mov rdi, qword [rbp - 8]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ebx, eax
mov dl, 1
mov rcx, r13
call fcn.1400ea260
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x4a0]
call fcn.1401659c0
xor r9d, r9d
lea r8d, [r9 + 0x25]
lea rdx, [rbp + 0x4a0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea r8, [0x14022e880]
mov edx, 0x104
lea rcx, [rbp + 0x4a0]
call fcn.14017d4b8
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x290]
call fcn.1401659c0
xor r12d, r12d
mov ecx, r12d
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rcx + 0x4a0]
mov word [rbp + rcx + 0x290], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400eaff0
lea r8, str.drivers_
mov edx, 0x104
lea rcx, [rbp + 0x290]
call fcn.14017d4b8
call fcn.140015450
mov rcx, rax
test rax, rax
je 0x1400eb726
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x18], rax
lea rsi, [r13 + 0xb0]
test ebx, ebx
jne 0x1400eb131
lea r9, str.Cab_file_does_not_exist_in_Program_File_r_n
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Cab_file_does_not_exist_in_program_file
mov qword [rsp + 0x30], rax
lea rbx, [0x14022aa38]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x140303c50]
mov edx, 0x76d
lea rcx, str.d:jenkinsworkspacemainrel4_dell_12818consumermainrel4_dell_12818consumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.1400189f0
mov r9, r15
lea r8, [rbp + 0x290]
lea rdx, str._s_s
lea rcx, [rbp - 8]
call fcn.140021720
mov rdi, qword [rbp - 8]
mov r8, rdi
lea rdx, str.Search_Cab_file_in_System32drivers__s:_r_n
lea rcx, [rbp + 0x18]
call fcn.140021720
mov r9, qword [rbp + 0x18]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
lea r9, [0x140237614]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
lea rax, [rbp + 0x290]
mov qword [rsp + 0x30], rax
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Search_Cab_file_in__s
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x140303c50]
mov edx, 0x775
lea rcx, str.d:jenkinsworkspacemainrel4_dell_12818consumermainrel4_dell_12818consumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.1400189f0
jmp 0x1400eb138
lea rbx, [0x14022aa38]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov r15, 0xffffffffffffffff
test eax, eax
je 0x1400eb4b9
mov qword [rsp + 0x30], rdi
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Cab_file_was_found_in__s:
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r9d, [r15 + 8]
lea r8, [0x140303c50]
mov edx, 0x77a
lea rcx, str.d:jenkinsworkspacemainrel4_dell_12818consumermainrel4_dell_12818consumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.1400189f0
call fcn.140015450
mov rcx, rax
test rax, rax
je 0x1400eb731
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 8], rax
cmp dword [rdi - 8], 1
jle 0x1400eb1b7
mov edx, dword [rdi - 0x10]
lea rcx, [rbp - 8]
call fcn.1400171b0
mov rdi, qword [rbp - 8]
mov r8, rdi
lea rdx, str.Cab_file_was_found_in__s:_r_n
lea rcx, [rbp + 8]
call fcn.140021720
mov r9, qword [rbp + 8]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
mov qword [rbp], r12
mov rax, qword [r13]
lea rdx, [rbp]
mov rcx, r13
call qword [rax + 0x18]
nop
mov rax, qword [r13]
mov r8, qword [rbp]
mov rdx, rdi
mov rcx, r13
call qword [rax + 8]
test al, al
je 0x1400eb354
cmp byte [r13 + 0x139], 0
je 0x1400eb343
xor r12b, r12b
xor edx, edx
mov r8d, 0x260
lea rcx, [rbp + 0x30]
call fcn.1401659c0
lea rcx, [rbp + 0x30]
call fcn.14001bec0
nop
xor r14b, r14b
mov rsi, qword [0x1403019b0]
mov rbx, qword [rsi]
cmp rbx, rsi
je 0x1400eb32e
mov r13d, 1
nop
mov r8d, dword [rbx + 0x1c]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x30]
call fcn.14002a3a0
mov rcx, qword [rax]
mov edi, dword [rcx - 0x10]
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, r13d
jg 0x1400eb287
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movzx r14d, r14b
test edi, edi
cmovne r14d, r13d
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400eb2bd
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400eb2b8
cmp rbx, qword [rax + 0x10]
jne 0x1400eb2b8
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400eb2a5
mov rbx, rax
jmp 0x1400eb2df
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400eb2df
nop dword [rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400eb2d0
cmp rbx, rsi
jne 0x1400eb250
test r14b, r14b
mov r13, qword [rsp + 0x48]
je 0x1400eb32a
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount64]
mov rbx, rax
lea rdi, [rax + 0xbb8]
cmp rbx, rdi
jae 0x1400eb32a
call fcn.1400fe840
movzx r12d, al
test al, al
jne 0x1400eb32a
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount64]
mov rbx, rax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400eb302
mov rdi, qword [rbp - 8]
lea rcx, [rbp + 0x30]
call fcn.14001ccc0
lea rsi, [r13 + 0xb0]
test r12b, r12b
je 0x1400eb351
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r14b, 1
jmp 0x1400eb354
xor r14b, r14b
lea r9, [0x14022a4b0]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400eb388
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400eb3a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor r12d, r12d
call fcn.140015450
mov rcx, rax
test rax, rax
je 0x1400eb73c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp - 0x10]
call fcn.1400244d0
lea rdx, str.config_systemprofileAppDataRoaming_
lea rcx, [rbp - 0x10]
call fcn.1400244d0
lea rdx, str.Waves_AudioLogs_
lea rcx, [rbp - 0x10]
call fcn.1400244d0
mov rbx, qword [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400eb564
call fcn.140015450
mov rcx, rax
test rax, rax
je 0x1400eb710
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x20], rax
cmp dword [rbx - 8], 1
jle 0x1400eb442
mov edx, dword [rbx - 0x10]
lea rcx, [rbp - 0x10]
call fcn.1400171b0
mov rbx, qword [rbp - 0x10]
mov r8, rbx
lea rdx, str.mkdir___s__
lea rcx, [rbp + 0x20]
call fcn.140021720
lea rax, [rsp + 0x68]
mov qword [rsp + 0x60], rax
mov r8d, 3
mov rbx, qword [rbp + 0x20]
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140016ab0
mov rcx, qword [rsp + 0x60]
call fcn.140181688
test eax, eax
sete dil
lea rax, [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
cmp rcx, rax
je 0x1400eb49a
call fcn.14016e4d0
test dil, dil
je 0x1400eb510
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Log_directory_was_created
mov qword [rsp + 0x30], rax
lea rax, [0x14022aa38]
mov edx, 0x7aa
jmp 0x1400eb526
lea r9, str.Could_not_found_Cab_file._r_n
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Could_not_found_Cab_file
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x140303c50]
mov edx, 0x796
lea rcx, str.d:jenkinsworkspacemainrel4_dell_12818consumermainrel4_dell_12818consumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.1400189f0
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x60]
jmp 0x1400eb3a9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x30], eax
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Log_directory_creation_failed_with_error___d
mov edx, 0x7ae
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x140303c50]
lea rcx, str.d:jenkinsworkspacemainrel4_dell_12818consumermainrel4_dell_12818consumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.1400189f0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400eb564
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rdx, str.PostInstall.log
lea rcx, [rbp - 0x10]
call fcn.1400244d0
xor edx, edx
mov rcx, r13
call fcn.1400ea260
mov qword [rbp + 0x10], r12
lea rdx, [rbp + 0x10]
mov rcx, rsi
call fcn.1400e4640
nop
mov rdx, qword [rbp + 0x10]
mov eax, dword [rdx - 0x10]
lea r8d, [rax + rax]
mov r9b, 1
mov rbx, qword [rbp - 0x10]
mov rcx, rbx
call fcn.1400fa350
test al, al
je 0x1400eb5c0
mov qword [rsp + 0x30], rbx
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___:_Writing_log_file_to:__s
mov edx, 0x7bb
jmp 0x1400eb5ea
lea r9, str.Could_not_write_log_r_n
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400e4380
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x30], eax
lea rax, str.CCoInstallerCapabilities::PostINFInstallationProcess___Failed_to_write_log___error_code___d__try_next.
mov edx, 0x7c0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x140303c50]
lea rcx, str.d:jenkinsworkspacemainrel4_dell_12818consumermainrel4_dell_12818consumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.1400189f0
lea rbx, [rsi + 8]
mov qword [rsp + 0x58], rbx
mov rcx, rbx
call fcn.140126b90
test eax, eax
je 0x1400eb62a
mov ecx, eax
call fcn.1401267a8
nop
mov rax, r15
lea rcx, [0x14022a4b0]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400eb634
mov r8d, eax
mov rdx, rcx
mov rcx, rsi
call fcn.140016ed0
nop
mov rcx, rbx
call fcn.140126bb4
test eax, eax
je 0x1400eb661
mov ecx, eax
call fcn.1401267a8
nop
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400eb680
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400eb69f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400eb6be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x1400eb6dc
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
movzx eax, r14b
mov rcx, qword [rbp + 0x8c0]
xor rcx, rsp
call fcn.140146480
lea r11, [rsp + 0x9d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400151f0
nop
mov ecx, 0x80004005
call fcn.1400151f0
nop
mov ecx, 0x80004005
call fcn.1400151f0
nop
mov ecx, 0x80004005
call fcn.1400151f0
int3
mov ecx, 0x80004005
call fcn.1400151f0
int3