Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x208
xor rdx, rdx
movabs rcx, 0x1400149b8
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400149c0], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x1400149b8], rax
call fcn.14000ecd0
call fcn.14000eb20
call fcn.14000c890
call fcn.14000c094
call fcn.14000b650
call fcn.14000b1d4
call fcn.14000afe0
call fcn.14000ae0c
call fcn.14000ad78
call fcn.1400096e0
call fcn.140008328
call fcn.140006f34
call fcn.140006be8
call fcn.140005d08
call fcn.140005834
mov rcx, qword [0x140014bb0]
call fcn.140006c14
mov r9, 7
movabs r8, 0x140013280
lea rdx, [0x140014bb0]
mov rcx, 0xc
call fcn.140006b08
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140014ba0
push rax
sub rsp, 0x20
movabs r9, 0x140013290
mov r8, 7
mov rcx, 0xc
call fcn.14000e99c
add rsp, 0x30
mov qword [0x140014ba0], rax
movabs rdx, str.Continue_
lea rcx, [0x1400149f0]
call fcn.14000ed60
movabs rdx, str.Error_
lea rcx, [0x140014b78]
call fcn.14000ed60
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x140014a48]
call fcn.14000ed60
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x140014ad0]
call fcn.14000ed60
movabs rdx, str.Wrong_password.
lea rcx, [0x140014b20]
call fcn.14000ed60
movabs rdx, 0x140013025
lea rcx, [0x140014ad8]
call fcn.14000ed60
movabs rdx, str.The_file
lea rcx, [0x1400149f8]
call fcn.14000ed60
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x140014a20]
call fcn.14000ed60
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x140014ac8]
call fcn.14000ed60
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140014b48]
call fcn.14000ed60
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140014b18]
call fcn.14000ed60
movabs rdx, str.Password
lea rcx, [0x140014b50]
call fcn.14000ed60
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x140014a78]
call fcn.14000ed60
call fcn.14000804c
mov r15, rax
cmp r15, 0x32
jge 0x140001250
movabs r8, 0x10
mov rdx, qword [0x140014b48]
mov rcx, qword [0x140014b78]
call fcn.140005870
jmp 0x1400027f6
lea rax, [0x14000337c]
mov rcx, rax
call fcn.140006780
call fcn.140005f10
mov qword [0x140014b30], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140014a90], rax
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
lea rcx, [0x140014b28]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014b28]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140014b30]
and r15, r15
jle 0x140001471
mov qword [0x140014a50], 0
mov r15, qword [0x140014b30]
dec r15
cmp r15, qword [0x140014a50]
jl 0x14000139e
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014a50]
pop rdx
sub rsp, 0x20
call fcn.140005ea4
add rsp, 0x28
lea rcx, [0x140014b00]
pop rdx
call fcn.14000ee50
push qword [0x140014b00]
movabs rcx, str._b2epass
pop rdx
call fcn.14000ef10
or rax, rax
je 0x140001352
mov qword [0x140014a38], 1
jmp 0x140001391
mov r15, qword [0x140014a38]
cmp r15, 1
jne 0x140001391
mov rcx, qword [0x140014b00]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014b60]
pop rdx
call fcn.14000ee50
mov qword [0x140014a38], 0
inc qword [0x140014a50]
jno 0x1400012e4
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140015120]
push rdx
push rdx
sub rsp, 8
push qword [0x140015120]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140015120]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
lea rcx, [0x140014a80]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014b28]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
movabs rcx, 0x14001301f
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
mov rcx, qword [0x140014a80]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014a80]
pop rdx
call fcn.14000ee50
jmp 0x140001498
mov rcx, qword [0x140014b28]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014a80]
pop rdx
call fcn.14000ee50
movabs rax, 0x140013085
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x1400014d2
mov rax, qword [0x1400149d8]
mov qword [0x140014af0], rax
mov rcx, qword [0x140014af0]
call fcn.1400033b5
jmp 0x140001502
movabs r8, 0x10
mov rdx, qword [0x140014ac8]
mov rcx, qword [0x140014b78]
call fcn.140005870
mov rax, 1
mov qword [0x1400149c8], rax
jmp 0x1400027f6
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x140001559
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140014a00]
mov rcx, qword [0x1400149d8]
pop r8
sub rsp, 0x20
call fcn.14000b090
add rsp, 0x28
lea rcx, [0x140014ac0]
pop rdx
call fcn.14000ee50
jmp 0x140001589
movabs r8, 0x10
mov rdx, qword [0x140014ac8]
mov rcx, qword [0x140014b78]
call fcn.140005870
mov rax, 1
mov qword [0x1400149c8], rax
jmp 0x1400027f6
movabs rax, 0x14001306c
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x1400015d3
mov rax, qword [0x1400149d8]
mov qword [0x140014a58], rax
mov rax, qword [0x140014a00]
mov qword [0x1400149e0], rax
mov rax, qword [0x140014a58]
mov qword [0x140014b40], rax
jmp 0x140001603
movabs r8, 0x10
mov rdx, qword [0x140014ac8]
mov rcx, qword [0x140014b78]
call fcn.140005870
mov rax, 1
mov qword [0x1400149c8], rax
jmp 0x1400027f6
movabs rax, 0x140013072
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x14000164b
mov rax, qword [0x1400149d8]
mov qword [0x140014a68], rax
mov rax, qword [0x140014a00]
mov qword [0x140014a70], rax
mov rax, qword [0x140014a68]
mov qword [0x140014ae8], rax
movabs rax, 0x140013070
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x140001693
mov rax, qword [0x1400149d8]
mov qword [0x140014a60], rax
mov rax, qword [0x140014a00]
mov qword [0x1400149e8], rax
mov rax, qword [0x140014a60]
mov qword [0x140014b80], rax
movabs rax, 0x140013087
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x140001add
mov rcx, qword [0x140014b60]
xor rdx, rdx
call fcn.14000ef10
or rax, rax
jne 0x1400016f5
mov rcx, qword [0x140014b60]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014b10]
pop rdx
call fcn.14000ee50
jmp 0x14000199c
sub rsp, 8
push 0xc80001
push qword [0x140014b50]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.140008710
add rsp, 0x40
push qword [0x140014a78]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.140007354
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001301e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.1400075bc
add rsp, 0x40
movabs rax, 0x1400131fc
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.140007a70
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.140008774
movabs rcx, 2
call fcn.140007a98
call fcn.1400089e0
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x140001886
sub rsp, 8
mov rcx, qword [0x140014b70]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x1400149c8], rax
add rsp, 0xfffffffffffffff8
jmp 0x1400027f6
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001912
sub rsp, 8
sub rsp, 0x20
call fcn.14000c1d0
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x14000190c
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.140007ae4
add rsp, 0x28
lea rcx, [0x140014b10]
pop rdx
sub rsp, 0x20
call fcn.14000ee50
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.1400081c8
add rsp, 0x20
add rsp, 0x10
jmp 0x14000199c
pop rax
jmp 0x140001996
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x140001996
sub rsp, 8
sub rsp, 0x20
call fcn.14000c1ec
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x140001995
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.140007ae4
add rsp, 0x28
lea rcx, [0x140014b10]
pop rdx
sub rsp, 0x20
call fcn.14000ee50
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.1400081c8
add rsp, 0x20
add rsp, 0x10
jmp 0x14000199c
pop rax
pop rax
jmp 0x140001843
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140014b10]
sub rsp, 0x20
call fcn.140005050
add rsp, 0x28
push rax
mov rax, qword [0x140014b10]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000d050
add rsp, 0x28
inc qword [0x140015120]
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rdx, qword [0x140014a00]
mov rcx, qword [0x1400149d8]
pop r8
sub rsp, 0x20
call fcn.14000b090
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140015120], rdx
add rdx, qword [0x140015130]
add rcx, qword [0x140015130]
call fcn.14000ef10
or rax, rax
jne 0x140001a66
movabs r8, 0x10
mov rdx, qword [0x140014b20]
mov rcx, qword [0x140014b78]
call fcn.140005870
mov rcx, qword [0x140014b70]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x1400149c8], rax
jmp 0x1400027f6
movabs rax, 0x140013089
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x140001a92
mov rax, qword [0x1400149d8]
mov qword [0x140014b38], rax
sub rsp, 8
push qword [0x1400149e8]
push qword [0x140014a70]
push qword [0x1400149e0]
push qword [0x140014b38]
push qword [0x140014a60]
mov r9, qword [0x140014a68]
mov r8, qword [0x140014a58]
mov rdx, qword [0x140014b10]
mov rcx, qword [0x140014a90]
sub rsp, 0x20
call fcn.140003c5d
add rsp, 0x50
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400149e0]
mov rcx, qword [0x140014b40]
pop r8
sub rsp, 0x20
call fcn.14000b090
add rsp, 0x28
lea rcx, [0x140014ab8]
pop rdx
call fcn.14000ee50
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140014a70]
mov rcx, qword [0x140014ae8]
pop r8
sub rsp, 0x20
call fcn.14000b090
add rsp, 0x28
lea rcx, [0x140014a28]
pop rdx
call fcn.14000ee50
movabs rax, 0x14001306e
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x140001f01
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140005ea4
add rsp, 0x28
inc qword [0x140015120]
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rdx, qword [0x140014a00]
mov rcx, qword [0x1400149d8]
pop r8
sub rsp, 0x20
call fcn.14000b090
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140015120], rdx
add rdx, qword [0x140015130]
add rcx, qword [0x140015130]
call fcn.14000ef10
or rax, rax
je 0x140001bf6
mov r15, qword [0x140014b30]
cmp r15, 1
jne 0x140001bf6
mov rax, 1
jmp 0x140001bf9
xor rax, rax
and rax, rax
je 0x140001f01
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140015120]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000b1ec
add rsp, 0x20
inc qword [0x140015120]
push qword [0x140014b18]
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005924
add rsp, 0x28
lea rcx, [0x140014a18]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014a18]
xor rdx, rdx
call fcn.14000ef10
or rax, rax
jne 0x140001e7f
mov rcx, qword [0x140014a18]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014aa8]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014aa8]
call fcn.14000b24c
mov rcx, qword [0x140014a28]
xor rdx, rdx
call fcn.14000ef10
or rax, rax
jne 0x140001cc8
mov rcx, qword [0x140014a28]
call fcn.140003567
mov rdx, qword [0x140014ac0]
movabs rcx, 1
call fcn.14000bbc0
and rax, rax
je 0x140001e3f
movabs rcx, 1
call fcn.14000b5b0
push qword [0x140015120]
sub rsp, 8
push 0x24
mov rcx, qword [0x1400149f8]
push qword [0x140015120]
sub rsp, 0x20
call fcn.14000ef70
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000ef70
add rsp, 0x20
mov rcx, qword [0x140014ac0]
sub rsp, 0x20
call fcn.14000ef70
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000ef70
add rsp, 0x20
mov rcx, qword [0x140014a20]
sub rsp, 0x20
call fcn.14000ef70
add rsp, 0x20
inc qword [0x140015120]
push qword [0x140014ad8]
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005870
add rsp, 0x28
pop qword [0x140015120]
mov qword [0x140014ab0], rax
mov r15, qword [0x140014ab0]
cmp r15, 7
jne 0x140001e3f
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rcx, qword [0x140015120]
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x20
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x28
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000b24c
add rsp, 0x28
pop qword [0x140015120]
mov rcx, qword [0x140014b70]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400149c8], rax
jmp 0x1400027f6
mov rdx, qword [0x140014ac0]
movabs rcx, 1
call fcn.14000b9b0
and rax, rax
je 0x140001e7f
mov rdx, qword [0x140014ab8]
movabs rcx, 1
call fcn.14000bcb0
movabs rcx, 1
call fcn.14000b5b0
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rcx, qword [0x140015120]
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x20
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x28
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000b24c
add rsp, 0x28
pop qword [0x140015120]
mov rcx, qword [0x140014b70]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400149c8], rax
jmp 0x1400027f6
movabs rax, 0x14001308b
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x1400020d2
movabs rcx, 0x400
call fcn.14000b140
mov qword [0x140014a88], rax
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000b304
add rsp, 0x28
lea rcx, [0x140014b90]
pop rdx
call fcn.14000ee50
push qword [0x140014a88]
push 0
movabs rax, 0x14001301e
mov rdx, rax
mov rcx, qword [0x140014b90]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014a88]
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
lea rcx, [0x140014b68]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014a88]
call fcn.14000b160
mov rcx, qword [0x140014b68]
call fcn.14000b3d0
mov rcx, qword [0x140014b68]
call fcn.14000b3d8
mov rcx, qword [0x140014b68]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140014b68]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014aa0]
pop rdx
call fcn.14000ee50
mov rdx, qword [0x140014aa0]
movabs rcx, 0
call fcn.14000b9b0
mov r8, qword [0x140014a00]
mov rdx, qword [0x1400149d8]
movabs rcx, 0
call fcn.14000bd60
movabs rcx, 0
call fcn.14000b5b0
mov rcx, qword [0x140014aa0]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014a98]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014a98]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x140014a98]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140006004
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140006004
mov rcx, qword [0x140014b70]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
mov rcx, qword [0x140014ac0]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014ac0]
pop rdx
call fcn.14000ee50
mov rdx, qword [0x140014ac0]
movabs rcx, 1
call fcn.14000b9b0
and rax, rax
je 0x1400022d6
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000bdf0
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140015120]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
inc qword [0x140015120]
movabs rax, 0x14001308d
push rax
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006004
add rsp, 0x28
pop qword [0x140015120]
mov rdx, qword [0x140014ab8]
movabs rcx, 1
call fcn.14000bdf0
movabs rax, 0x14001308b
mov rdx, rax
mov rcx, qword [0x140014a90]
call fcn.140003b89
and rax, rax
je 0x1400022c5
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x140015120]
movabs rbp, 0x14001334d
mov r15, rbp
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000b090
add rsp, 0x28
inc qword [0x140015120]
push 1
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000bdf0
add rsp, 0x28
pop qword [0x140015120]
movabs rcx, 1
call fcn.14000b5b0
jmp 0x140002323
mov rcx, qword [0x140014ac0]
call fcn.14000b3d0
call fcn.14000406f
movabs r8, 0x10
mov rdx, qword [0x140014ac8]
mov rcx, qword [0x140014b78]
call fcn.140005870
mov rcx, qword [0x140014b70]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x1400149c8], rax
jmp 0x1400027f6
mov rcx, qword [0x140014a28]
xor rdx, rdx
call fcn.14000ef10
or rax, rax
jne 0x140002343
mov rcx, qword [0x140014a28]
call fcn.140003567
movabs rcx, 0x400
call fcn.14000b140
mov qword [0x140014b58], rax
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000b304
add rsp, 0x28
lea rcx, [0x140014a10]
pop rdx
call fcn.14000ee50
push qword [0x140014b58]
push 0
movabs rax, 0x14001301e
mov rdx, rax
mov rcx, qword [0x140014a10]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014b58]
pop rdx
sub rsp, 0x20
call fcn.14000b010
add rsp, 0x28
lea rcx, [0x140014b88]
pop rdx
call fcn.14000ee50
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005080
add rsp, 0x28
lea rcx, [0x140014af8]
pop rdx
call fcn.14000ee50
push qword [0x140015120]
sub rsp, 8
push 0x800
push qword [0x140014af8]
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x28
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x140015120]
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140015120]
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x28
inc qword [0x140015120]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006004
add rsp, 0x28
pop qword [0x140015120]
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rcx, qword [0x140015120]
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x20
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b52c
add rsp, 0x28
inc qword [0x140015120]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006004
add rsp, 0x28
pop qword [0x140015120]
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rcx, qword [0x140015120]
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x20
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x28
inc qword [0x140015120]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006004
add rsp, 0x28
pop qword [0x140015120]
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
mov rcx, qword [0x140014af8]
sub rsp, 0x20
call fcn.1400051c0
add rsp, 0x28
inc qword [0x140015120]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006004
add rsp, 0x28
pop qword [0x140015120]
mov rcx, qword [0x140014aa8]
push qword [0x140015120]
sub rsp, 0x28
call fcn.14000ef70
add rsp, 0x28
lea rcx, [0x140014b98]
pop rdx
call fcn.14000ee50
mov rcx, qword [0x140014b98]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140014b98]
movabs rax, 0x140013074
mov rcx, rax
pop rdx
call fcn.140006004
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
mov rcx, qword [0x140014a08]
sub rsp, 0x20
call fcn.1400052e0
add rsp, 0x28
inc qword [0x140015120]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x140015130]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006004
add rsp, 0x28
pop qword [0x140015120]
push qword [0x140014b88]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140006004
movabs r9, 0x44
mov r8, qword [0x140014aa8]
mov rdx, qword [0x140014a80]
mov rcx, qword [0x140014ac0]
call fcn.1400065f0
mov qword [0x140014ae0], rax
mov rcx, qword [0x140014ae0]
call fcn.140006640
mov r15, rax
and r15, r15
jne 0x14000270e
jmp 0x14000271f
movabs rcx, 5
call fcn.140008178
jmp 0x1400026f8
mov rcx, qword [0x140014ae0]
call fcn.1400066a8
mov qword [0x140014a40], rax
mov rcx, qword [0x140014ae0]
call fcn.1400066cc
call fcn.14000406f
mov rcx, qword [0x140014ac0]
call fcn.14000b3d0
mov rcx, qword [0x140014b88]
call fcn.14000b3d0
mov rcx, qword [0x140014aa0]
call fcn.14000b3d0
mov rax, qword [0x140015120]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015120]
push rdx
push rdx
mov rcx, qword [0x140015120]
sub rsp, 0x20
call fcn.140005f2c
add rsp, 0x20
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x28
mov rdx, qword [0x140015130]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000b24c
add rsp, 0x28
pop qword [0x140015120]
mov rcx, qword [0x140014b68]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140014b70]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [0x140014a40]
mov qword [0x1400149c8], rax
jmp 0x1400027f6
call 0x140002818
call fcn.14000ed30
mov rcx, qword [0x1400149b8]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x1400149c8]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140006ae0
call fcn.140006fc4
call fcn.140008308
call fcn.140009738
call fcn.14000ad6c
call fcn.14000b538
call fcn.14000b640
call fcn.14000c704
call fcn.14000b000
add rsp, 0x28
ret