Function at 0x140002ebc
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rdx, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rdx
jne 0x140002ecb
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000ac30
add rsp, 0x10
mov qword [rsp + 0x30], 1
push qword [0x14000f670]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a50
add rsp, 0x20
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push qword [0x14000fbc0]
movabs rax, 0x14000e014
push rax
push qword [rsp + 0x50]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400044a0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000aa70
mov rcx, qword [rsp + 0x38]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000ab30
add rsp, 0x10
or rax, rax
jne 0x140002feb
mov r15, qword [rsp + 0x30]
and r15, 1
and r15, r15
jne 0x140002fb4
push qword [rsp + 0x38]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004570
add rsp, 0x20
mov rax, rax
push rax
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000f7b0]
imul r15, r15, 0xc
add rbp, r15
pop rax
mov dword [rbp + 8], eax
inc qword [rsp + 0x40]
jmp 0x140002fe9
mov rcx, qword [rsp + 0x38]
push qword [0x14000fbc0]
add rsp, 0xffffffffffffffd8
call fcn.14000ab90
add rsp, 0x28
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000f7b0]
imul r15, r15, 0xc
add rbp, r15
lea rcx, [rbp]
pop rdx
call fcn.14000aa70
jmp 0x140002fed
jmp 0x140002ff7
inc qword [rsp + 0x30]
jmp 0x140002f17
push qword [rsp + 0x40]
pop rax
mov qword [0x14000f680], rax
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x48]
jl 0x140003351
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000f7b0]
imul r15, r15, 0xc
add rbp, r15
mov rcx, qword [rbp]
push qword [0x14000fbc0]
add rsp, 0xffffffffffffffd8
call fcn.14000ab90
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.14000aa70
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x60]
push qword [0x14000fbc0]
movabs rcx, str.b2eincfile_
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push qword [0x14000fbc0]
mov r15, qword [rsp + 0x80]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004440
add rsp, 0x28
pop rax
movabs rcx, 0x14000e012
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
inc qword [0x14000fbc0]
mov rdx, qword [0x14000fbd0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000fbc0]
mov r15, qword [0x14000f668]
cmp r15, 1
je 0x14000311c
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140009070
add rsp, 0x20
and rax, rax
je 0x14000311c
mov rax, 1
jmp 0x14000311f
xor rax, rax
and rax, rax
je 0x140003217
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c90
add rsp, 0x20
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push 0x23
mov rcx, qword [0x14000f6c0]
push qword [0x14000fbc0]
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
movabs rcx, 0x14000e010
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
mov rcx, qword [rsp + 0x70]
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
movabs rcx, 0x14000e010
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
mov rcx, qword [0x14000f6c8]
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
inc qword [0x14000fbc0]
push qword [0x14000f6b8]
mov rdx, qword [0x14000fbd0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000fbc0]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x1400031ff
jmp 0x140003347
mov r15, qword [rsp + 0x58]
cmp r15, 2
jne 0x140003217
call fcn.140002ce3
xor rax, rax
jmp 0x1400034f5
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008e90
add rsp, 0x20
and rax, rax
je 0x1400032fb
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000f7b0]
imul r15, r15, 0xc
add rbp, r15
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [rsp + 0x60], rax
push qword [rsp + 0x60]
mov r15, qword [0x14000f640]
add r15, qword [rsp + 0x70]
mov rax, r15
push rax
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009250
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c90
add rsp, 0x20
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x60]
mov qword [rsp + 0x68], r15
push qword [0x14000f7c0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400060e0
add rsp, 0x20
mov rcx, qword [rsp + 0x50]
push qword [0x14000fbc0]
add rsp, 0xffffffffffffffd8
call fcn.14000ab90
add rsp, 0x28
mov rbp, qword [0x14000f7c8]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.14000aa70
push qword [rsp + 0x50]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140009b80
add rsp, 0x20
mov rax, rax
push rax
pop rax
mov dword [rbp + 0x18], eax
jmp 0x140003347
mov rcx, qword [rsp + 0x70]
push qword [0x14000fbc0]
add rsp, 0xffffffffffffffd8
call fcn.14000ab90
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
add rsp, 0xffffffffffffffd8
call fcn.14000ab90
add rsp, 0x28
movabs rcx, 0x14000e0f4
add rsp, 0xffffffffffffffd8
call fcn.14000ab90
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.14000aa70
inc qword [rsp + 0x48]
jmp 0x14000300c
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push qword [0x14000fbc0]
push qword [0x14000fbc0]
push qword [0x14000fbc0]
movabs rax, 0x14000e0f4
push rax
push qword [rsp + 0xb0]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004820
add rsp, 0x20
inc qword [0x14000fbc0]
mov rdx, qword [0x14000fbd0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004260
add rsp, 0x28
inc qword [0x14000fbc0]
mov rdx, qword [0x14000fbd0]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041e0
add rsp, 0x28
pop qword [0x14000fbc0]
mov r15, rax
and r15, r15
jle 0x1400034e9
push qword [0x14000fbc0]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000f6a0]
push qword [0x14000fbc0]
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
movabs rcx, str._r_n_r_n
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
mov rcx, qword [rsp + 0x90]
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
movabs rcx, 0x14000e0f4
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
mov rcx, qword [0x14000f690]
add rsp, 0xffffffffffffffe0
call fcn.14000ab90
add rsp, 0x20
inc qword [0x14000fbc0]
push qword [0x14000f698]
mov rdx, qword [0x14000fbd0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000fbc0]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x1400034e9
call fcn.140002ce3
push qword [0x14000f708]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a64
add rsp, 0x20
push qword [0x14000f678]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000f620], rax
jmp 0x1400025c8
mov rax, 1
jmp 0x1400034f5
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.14000ac00
add rsp, 0x20
mov rcx, qword [rsp + 0x40]
sub rsp, 0x20
call fcn.14000ac00
add rsp, 0x20
mov rcx, qword [rsp + 0x58]
sub rsp, 0x20
call fcn.14000ac00
add rsp, 0x20
mov rcx, qword [rsp + 0x78]
sub rsp, 0x20
call fcn.14000ac00
add rsp, 0x20
pop rax
add rsp, 0x78
pop r15
pop rbp
ret