Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x1f8
xor rdx, rdx
movabs rcx, 0x1400148d4
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400148dc], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x1400148d4], rax
call fcn.14000e5f0
call fcn.14000e440
call fcn.14000c1b0
call fcn.14000b9b4
call fcn.14000af70
call fcn.14000aaf4
call fcn.14000a900
call fcn.14000a72c
call fcn.14000a698
call fcn.140009000
call fcn.140007c48
call fcn.140006854
call fcn.140006508
call fcn.140005d18
call fcn.140005844
mov rcx, qword [0x140014abc]
call fcn.140006534
mov r9, 7
movabs r8, 0x140013288
lea rdx, [0x140014abc]
mov rcx, 0xc
call fcn.140006428
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140014aac
push rax
sub rsp, 0x20
movabs r9, 0x140013298
mov r8, 7
mov rcx, 0xc
call fcn.14000e2bc
add rsp, 0x30
mov qword [0x140014aac], rax
movabs rdx, str.Continue_
lea rcx, [0x14001490c]
call fcn.14000e680
movabs rdx, str.Error_
lea rcx, [0x140014a84]
call fcn.14000e680
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x14001495c]
call fcn.14000e680
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x1400149e4]
call fcn.14000e680
movabs rdx, str.Wrong_password.
lea rcx, [0x140014a2c]
call fcn.14000e680
movabs rdx, 0x140013025
lea rcx, [0x1400149ec]
call fcn.14000e680
movabs rdx, str.The_file
lea rcx, [0x140014914]
call fcn.14000e680
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x14001493c]
call fcn.14000e680
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x1400149dc]
call fcn.14000e680
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140014a54]
call fcn.14000e680
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140014a24]
call fcn.14000e680
movabs rdx, str.Password
lea rcx, [0x140014a5c]
call fcn.14000e680
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x14001498c]
call fcn.14000e680
call fcn.14000796c
mov r15, rax
cmp r15, 0x32
jge 0x140001250
movabs r8, 0x10
mov rdx, qword [0x140014a54]
mov rcx, qword [0x140014a84]
call fcn.140005880
jmp 0x14000279b
lea rax, [0x14000337c]
mov rcx, rax
call fcn.1400060a0
call fcn.140005f20
mov qword [0x140014a3c], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400149a4], rax
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014a34]
pop rdx
call fcn.14000e770
mov rcx, qword [0x140014a34]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140014a3c]
and r15, r15
jle 0x140001471
mov qword [0x140014964], 0
mov r15, qword [0x140014a3c]
dec r15
cmp r15, qword [0x140014964]
jl 0x14000139e
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014964]
pop rdx
sub rsp, 0x20
call fcn.140005eb4
add rsp, 0x28
lea rcx, [0x140014a0c]
pop rdx
call fcn.14000e770
push qword [0x140014a0c]
movabs rcx, str._b2epass
pop rdx
call fcn.14000e830
or rax, rax
je 0x140001352
mov qword [0x140014954], 1
jmp 0x140001391
mov r15, qword [0x140014954]
cmp r15, 1
jne 0x140001391
mov rcx, qword [0x140014a0c]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x140014a6c]
pop rdx
call fcn.14000e770
mov qword [0x140014954], 0
inc qword [0x140014964]
jno 0x1400012e4
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140015020]
push rdx
push rdx
sub rsp, 8
push qword [0x140015020]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140015020]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014994]
pop rdx
call fcn.14000e770
mov rcx, qword [0x140014a34]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
movabs rcx, 0x14001301f
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
mov rcx, qword [0x140014994]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x140014994]
pop rdx
call fcn.14000e770
jmp 0x140001498
mov rcx, qword [0x140014a34]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x140014994]
pop rdx
call fcn.14000e770
movabs rax, 0x140013085
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400014d2
mov rax, qword [0x1400148f4]
mov qword [0x1400149fc], rax
mov rcx, qword [0x1400149fc]
call fcn.140003533
jmp 0x140001502
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001559
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001491c]
mov rcx, qword [0x1400148f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x1400149d4]
pop rdx
call fcn.14000e770
jmp 0x140001589
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x14001306c
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400015d3
mov rax, qword [0x1400148f4]
mov qword [0x14001496c], rax
mov rax, qword [0x14001491c]
mov qword [0x1400148fc], rax
mov rax, qword [0x14001496c]
mov qword [0x140014a4c], rax
jmp 0x140001603
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x140013072
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x14000164b
mov rax, qword [0x1400148f4]
mov qword [0x14001497c], rax
mov rax, qword [0x14001491c]
mov qword [0x140014984], rax
mov rax, qword [0x14001497c]
mov qword [0x1400149f4], rax
movabs rax, 0x140013070
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001693
mov rax, qword [0x1400148f4]
mov qword [0x140014974], rax
mov rax, qword [0x14001491c]
mov qword [0x140014904], rax
mov rax, qword [0x140014974]
mov qword [0x140014a8c], rax
movabs rax, 0x140013087
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001add
mov rcx, qword [0x140014a6c]
xor rdx, rdx
call fcn.14000e830
or rax, rax
jne 0x1400016f5
mov rcx, qword [0x140014a6c]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x140014a1c]
pop rdx
call fcn.14000e770
jmp 0x14000199c
sub rsp, 8
push 0xc80001
push qword [0x140014a5c]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.140008030
add rsp, 0x40
push qword [0x14001498c]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.140006c74
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001301e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.140006edc
add rsp, 0x40
movabs rax, 0x140013201
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.140007390
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.140008094
movabs rcx, 2
call fcn.1400073b8
call fcn.140008300
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x140001886
sub rsp, 8
mov rcx, qword [0x140014a7c]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x1400148e4], rax
add rsp, 0xfffffffffffffff8
jmp 0x14000279b
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001912
sub rsp, 8
sub rsp, 0x20
call fcn.14000baf0
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x14000190c
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.140007404
add rsp, 0x28
lea rcx, [0x140014a1c]
pop rdx
sub rsp, 0x20
call fcn.14000e770
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.140007ae8
add rsp, 0x20
add rsp, 0x10
jmp 0x14000199c
pop rax
jmp 0x140001996
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x140001996
sub rsp, 8
sub rsp, 0x20
call fcn.14000bb0c
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x140001995
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.140007404
add rsp, 0x28
lea rcx, [0x140014a1c]
pop rdx
sub rsp, 0x20
call fcn.14000e770
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.140007ae8
add rsp, 0x20
add rsp, 0x10
jmp 0x14000199c
pop rax
pop rax
jmp 0x140001843
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140014a1c]
sub rsp, 0x20
call fcn.140005060
add rsp, 0x28
push rax
mov rax, qword [0x140014a1c]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000c970
add rsp, 0x28
inc qword [0x140015020]
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rdx, qword [0x14001491c]
mov rcx, qword [0x1400148f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140015020], rdx
add rdx, qword [0x140015030]
add rcx, qword [0x140015030]
call fcn.14000e830
or rax, rax
jne 0x140001a66
movabs r8, 0x10
mov rdx, qword [0x140014a2c]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x140013089
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001a92
mov rax, qword [0x1400148f4]
mov qword [0x140014a44], rax
sub rsp, 8
push qword [0x140014904]
push qword [0x140014984]
push qword [0x1400148fc]
push qword [0x140014a44]
push qword [0x140014974]
mov r9, qword [0x14001497c]
mov r8, qword [0x14001496c]
mov rdx, qword [0x140014a1c]
mov rcx, qword [0x1400149a4]
sub rsp, 0x20
call fcn.140003ddb
add rsp, 0x50
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400148fc]
mov rcx, qword [0x140014a4c]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x1400149cc]
pop rdx
call fcn.14000e770
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140014984]
mov rcx, qword [0x1400149f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x140014944]
pop rdx
call fcn.14000e770
movabs rax, 0x14001306e
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001f01
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140005eb4
add rsp, 0x28
inc qword [0x140015020]
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rdx, qword [0x14001491c]
mov rcx, qword [0x1400148f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140015020], rdx
add rdx, qword [0x140015030]
add rcx, qword [0x140015030]
call fcn.14000e830
or rax, rax
je 0x140001bf6
mov r15, qword [0x140014a3c]
cmp r15, 1
jne 0x140001bf6
mov rax, 1
jmp 0x140001bf9
xor rax, rax
and rax, rax
je 0x140001f01
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140015020]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab0c
add rsp, 0x20
inc qword [0x140015020]
push qword [0x140014a24]
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005934
add rsp, 0x28
lea rcx, [0x140014934]
pop rdx
call fcn.14000e770
mov rcx, qword [0x140014934]
xor rdx, rdx
call fcn.14000e830
or rax, rax
jne 0x140001e7f
mov rcx, qword [0x140014934]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x1400149bc]
pop rdx
call fcn.14000e770
mov rcx, qword [0x1400149bc]
call fcn.14000ab6c
mov rcx, qword [0x140014944]
xor rdx, rdx
call fcn.14000e830
or rax, rax
jne 0x140001cc8
mov rcx, qword [0x140014944]
call fcn.1400036e5
mov rdx, qword [0x1400149d4]
movabs rcx, 1
call fcn.14000b4e0
and rax, rax
je 0x140001e3f
movabs rcx, 1
call fcn.14000aed0
push qword [0x140015020]
sub rsp, 8
push 0x24
mov rcx, qword [0x140014914]
push qword [0x140015020]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
mov rcx, qword [0x1400149d4]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
mov rcx, qword [0x14001493c]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
inc qword [0x140015020]
push qword [0x1400149ec]
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005880
add rsp, 0x28
pop qword [0x140015020]
mov qword [0x1400149c4], rax
mov r15, qword [0x1400149c4]
cmp r15, 7
jne 0x140001e3f
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab6c
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
mov rdx, qword [0x1400149d4]
movabs rcx, 1
call fcn.14000b2d0
and rax, rax
je 0x140001e7f
mov rdx, qword [0x1400149cc]
movabs rcx, 1
call fcn.14000b5d0
movabs rcx, 1
call fcn.14000aed0
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab6c
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x14001308b
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400020d2
movabs rcx, 0x400
call fcn.14000aa60
mov qword [0x14001499c], rax
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000ac24
add rsp, 0x28
lea rcx, [0x140014a9c]
pop rdx
call fcn.14000e770
push qword [0x14001499c]
push 0
movabs rax, 0x14001301e
mov rdx, rax
mov rcx, qword [0x140014a9c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x14001499c]
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014a74]
pop rdx
call fcn.14000e770
mov rcx, qword [0x14001499c]
call fcn.14000aa80
mov rcx, qword [0x140014a74]
call fcn.14000acf0
mov rcx, qword [0x140014a74]
call fcn.14000acf8
mov rcx, qword [0x140014a74]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140014a74]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x1400149b4]
pop rdx
call fcn.14000e770
mov rdx, qword [0x1400149b4]
movabs rcx, 0
call fcn.14000b2d0
mov r8, qword [0x14001491c]
mov rdx, qword [0x1400148f4]
movabs rcx, 0
call fcn.14000b680
movabs rcx, 0
call fcn.14000aed0
mov rcx, qword [0x1400149b4]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x1400149ac]
pop rdx
call fcn.14000e770
mov rcx, qword [0x1400149ac]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x1400149ac]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140006014
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140006014
mov rcx, qword [0x140014a7c]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
mov rcx, qword [0x1400149d4]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x1400149d4]
pop rdx
call fcn.14000e770
mov rdx, qword [0x1400149d4]
movabs rcx, 1
call fcn.14000b2d0
and rax, rax
je 0x1400022d6
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000b710
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140015020]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eargs
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rdx, qword [0x1400149cc]
movabs rcx, 1
call fcn.14000b710
movabs rax, 0x14001308b
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400022c5
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x140015020]
movabs rbp, 0x140013355
mov r15, rbp
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
inc qword [0x140015020]
push 1
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b710
add rsp, 0x28
pop qword [0x140015020]
movabs rcx, 1
call fcn.14000aed0
jmp 0x140002323
mov rcx, qword [0x1400149d4]
call fcn.14000acf0
call fcn.1400041ed
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
mov rcx, qword [0x140014944]
xor rdx, rdx
call fcn.14000e830
or rax, rax
jne 0x140002343
mov rcx, qword [0x140014944]
call fcn.1400036e5
movabs rcx, 0x400
call fcn.14000aa60
mov qword [0x140014a64], rax
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000ac24
add rsp, 0x28
lea rcx, [0x14001492c]
pop rdx
call fcn.14000e770
push qword [0x140014a64]
push 0
movabs rax, 0x14001301e
mov rdx, rax
mov rcx, qword [0x14001492c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014a64]
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014a94]
pop rdx
call fcn.14000e770
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005090
add rsp, 0x28
lea rcx, [0x140014a04]
pop rdx
call fcn.14000e770
push qword [0x140015020]
sub rsp, 8
push 0x800
push qword [0x140014a04]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ae4c
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
mov rcx, qword [0x140014a04]
sub rsp, 0x20
call fcn.1400051d0
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x1400149bc]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [0x140014aa4]
pop rdx
call fcn.14000e770
mov rcx, qword [0x140014aa4]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140014aa4]
movabs rax, 0x140013074
mov rcx, rax
pop rdx
call fcn.140006014
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
mov rcx, qword [0x140014924]
sub rsp, 0x20
call fcn.1400052f0
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
push qword [0x140014a94]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140006014
mov r8, qword [0x140014994]
mov rdx, qword [0x1400149bc]
mov rcx, qword [0x1400149d4]
call fcn.1400033b5
call fcn.1400041ed
mov rcx, qword [0x1400149d4]
call fcn.14000acf0
mov rcx, qword [0x140014a94]
call fcn.14000acf0
mov rcx, qword [0x1400149b4]
call fcn.14000acf0
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab6c
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x140014a74]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
call 0x1400027bd
call fcn.14000e650
mov rcx, qword [0x1400148d4]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x1400148e4]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140006400
call fcn.1400068e4
call fcn.140007c28
call fcn.140009058
call fcn.14000a68c
call fcn.14000ae58
call fcn.14000af60
call fcn.14000c024
call fcn.14000a920
add rsp, 0x28
ret