Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x210
xor rdx, rdx
movabs rcx, 0x14001791c
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140017924], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x14001791c], rax
call fcn.140011800
call fcn.140011530
call fcn.14000f260
call fcn.14000ea64
call fcn.14000e020
call fcn.14000dba4
call fcn.14000d9a0
call fcn.14000d7cc
call fcn.14000d738
call fcn.14000c0a0
call fcn.14000ace8
call fcn.1400098f4
call fcn.1400094a0
call fcn.140008c1c
call fcn.140008748
mov rcx, qword [0x140017b04]
call fcn.1400094cc
mov r9, 7
movabs r8, 0x140016288
lea rdx, [0x140017b04]
mov rcx, 0xc
call fcn.1400093c0
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140017af4
push rax
sub rsp, 0x20
movabs r9, 0x1400162a8
mov r8, 7
mov rcx, 0xc
call fcn.1400113ac
add rsp, 0x30
mov qword [0x140017af4], rax
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x140017b24]
xor r8, r8
mov rdx, 0x15
mov rcx, 8
sub rsp, 0x20
call fcn.14000f28c
add rsp, 0x28
add rsp, 8
mov rcx, qword [0x140017b14]
call fcn.1400094cc
mov r9, 7
movabs r8, 0x140016298
lea rdx, [0x140017b14]
mov rcx, 0xc
call fcn.1400093c0
movabs rdx, str.Continue_
lea rcx, [0x140017954]
call fcn.140011890
movabs rdx, str.Error_
lea rcx, [0x140017acc]
call fcn.140011890
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x1400179a4]
call fcn.140011890
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x140017a2c]
call fcn.140011890
movabs rdx, str.Wrong_password.
lea rcx, [0x140017a74]
call fcn.140011890
movabs rdx, 0x140016025
lea rcx, [0x140017a34]
call fcn.140011890
movabs rdx, str.The_file
lea rcx, [0x14001795c]
call fcn.140011890
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x140017984]
call fcn.140011890
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x140017a24]
call fcn.140011890
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140017a9c]
call fcn.140011890
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140017a6c]
call fcn.140011890
movabs rdx, str.Password
lea rcx, [0x140017aa4]
call fcn.140011890
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x1400179d4]
call fcn.140011890
call fcn.14000aa0c
mov r15, rax
cmp r15, 0x32
jge 0x1400012b5
movabs r8, 0x10
mov rdx, qword [0x140017a9c]
mov rcx, qword [0x140017acc]
call fcn.140008784
jmp 0x140002800
lea rax, [0x14000337c]
mov rcx, rax
call fcn.140008fa0
call fcn.140008e24
mov qword [0x140017a84], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400179ec], rax
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017a7c]
pop rdx
call fcn.140011980
mov rcx, qword [0x140017a7c]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140017a84]
and r15, r15
jle 0x1400014d6
mov qword [0x1400179ac], 0
mov r15, qword [0x140017a84]
dec r15
cmp r15, qword [0x1400179ac]
jl 0x140001403
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x1400179ac]
pop rdx
sub rsp, 0x20
call fcn.140008db8
add rsp, 0x28
lea rcx, [0x140017a54]
pop rdx
call fcn.140011980
push qword [0x140017a54]
movabs rcx, str._b2epass
pop rdx
call fcn.140011a40
or rax, rax
je 0x1400013b7
mov qword [0x14001799c], 1
jmp 0x1400013f6
mov r15, qword [0x14001799c]
cmp r15, 1
jne 0x1400013f6
mov rcx, qword [0x140017a54]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x140017ab4]
pop rdx
call fcn.140011980
mov qword [0x14001799c], 0
inc qword [0x1400179ac]
jno 0x140001349
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140018080]
push rdx
push rdx
sub rsp, 8
push qword [0x140018080]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140018080]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x1400179dc]
pop rdx
call fcn.140011980
mov rcx, qword [0x140017a7c]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
movabs rcx, 0x14001601f
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
mov rcx, qword [0x1400179dc]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x1400179dc]
pop rdx
call fcn.140011980
jmp 0x1400014fd
mov rcx, qword [0x140017a7c]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x1400179dc]
pop rdx
call fcn.140011980
movabs rax, 0x140016087
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x140001537
mov rax, qword [0x14001793c]
mov qword [0x140017a44], rax
mov rcx, qword [0x140017a44]
call fcn.140003572
jmp 0x140001567
movabs r8, 0x10
mov rdx, qword [0x140017a24]
mov rcx, qword [0x140017acc]
call fcn.140008784
mov rax, 1
mov qword [0x14001792c], rax
jmp 0x140002800
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x1400015be
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017964]
mov rcx, qword [0x14001793c]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x140017a1c]
pop rdx
call fcn.140011980
jmp 0x1400015ee
movabs r8, 0x10
mov rdx, qword [0x140017a24]
mov rcx, qword [0x140017acc]
call fcn.140008784
mov rax, 1
mov qword [0x14001792c], rax
jmp 0x140002800
movabs rax, 0x14001606e
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x140001638
mov rax, qword [0x14001793c]
mov qword [0x1400179b4], rax
mov rax, qword [0x140017964]
mov qword [0x140017944], rax
mov rax, qword [0x1400179b4]
mov qword [0x140017a94], rax
jmp 0x140001668
movabs r8, 0x10
mov rdx, qword [0x140017a24]
mov rcx, qword [0x140017acc]
call fcn.140008784
mov rax, 1
mov qword [0x14001792c], rax
jmp 0x140002800
movabs rax, 0x140016074
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x1400016b0
mov rax, qword [0x14001793c]
mov qword [0x1400179c4], rax
mov rax, qword [0x140017964]
mov qword [0x1400179cc], rax
mov rax, qword [0x1400179c4]
mov qword [0x140017a3c], rax
movabs rax, 0x140016072
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x1400016f8
mov rax, qword [0x14001793c]
mov qword [0x1400179bc], rax
mov rax, qword [0x140017964]
mov qword [0x14001794c], rax
mov rax, qword [0x1400179bc]
mov qword [0x140017ad4], rax
movabs rax, 0x140016089
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x140001b42
mov rcx, qword [0x140017ab4]
xor rdx, rdx
call fcn.140011a40
or rax, rax
jne 0x14000175a
mov rcx, qword [0x140017ab4]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x140017a64]
pop rdx
call fcn.140011980
jmp 0x140001a01
sub rsp, 8
push 0xc80001
push qword [0x140017aa4]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b0d0
add rsp, 0x40
push qword [0x1400179d4]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.140009d14
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001601e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.140009f7c
add rsp, 0x40
movabs rax, 0x140016203
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.14000a430
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.14000b134
movabs rcx, 2
call fcn.14000a458
call fcn.14000b3a0
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x1400018eb
sub rsp, 8
mov rcx, qword [0x140017ac4]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x14001792c], rax
add rsp, 0xfffffffffffffff8
jmp 0x140002800
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001977
sub rsp, 8
sub rsp, 0x20
call fcn.14000eba0
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x140001971
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000a4a4
add rsp, 0x28
lea rcx, [0x140017a64]
pop rdx
sub rsp, 0x20
call fcn.140011980
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
jmp 0x1400019fb
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x1400019fb
sub rsp, 8
sub rsp, 0x20
call fcn.14000ebbc
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x1400019fa
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000a4a4
add rsp, 0x28
lea rcx, [0x140017a64]
pop rdx
sub rsp, 0x20
call fcn.140011980
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
pop rax
jmp 0x1400018a8
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140017a64]
sub rsp, 0x20
call fcn.140005060
add rsp, 0x28
push rax
mov rax, qword [0x140017a64]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000fa60
add rsp, 0x28
inc qword [0x140018080]
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rdx, qword [0x140017964]
mov rcx, qword [0x14001793c]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140018080], rdx
add rdx, qword [0x140018090]
add rcx, qword [0x140018090]
call fcn.140011a40
or rax, rax
jne 0x140001acb
movabs r8, 0x10
mov rdx, qword [0x140017a74]
mov rcx, qword [0x140017acc]
call fcn.140008784
mov rcx, qword [0x140017ac4]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x14001792c], rax
jmp 0x140002800
movabs rax, 0x14001608b
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x140001af7
mov rax, qword [0x14001793c]
mov qword [0x140017a8c], rax
sub rsp, 8
push qword [0x14001794c]
push qword [0x1400179cc]
push qword [0x140017944]
push qword [0x140017a8c]
push qword [0x1400179bc]
mov r9, qword [0x1400179c4]
mov r8, qword [0x1400179b4]
mov rdx, qword [0x140017a64]
mov rcx, qword [0x1400179ec]
sub rsp, 0x20
call fcn.1400043d8
add rsp, 0x50
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017944]
mov rcx, qword [0x140017a94]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x140017a14]
pop rdx
call fcn.140011980
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400179cc]
mov rcx, qword [0x140017a3c]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x14001798c]
pop rdx
call fcn.140011980
movabs rax, 0x140016070
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x140001f66
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140008db8
add rsp, 0x28
inc qword [0x140018080]
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rdx, qword [0x140017964]
mov rcx, qword [0x14001793c]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140018080], rdx
add rdx, qword [0x140018090]
add rcx, qword [0x140018090]
call fcn.140011a40
or rax, rax
je 0x140001c5b
mov r15, qword [0x140017a84]
cmp r15, 1
jne 0x140001c5b
mov rax, 1
jmp 0x140001c5e
xor rax, rax
and rax, rax
je 0x140001f66
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140018080]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000dbbc
add rsp, 0x20
inc qword [0x140018080]
push qword [0x140017a6c]
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008838
add rsp, 0x28
lea rcx, [0x14001797c]
pop rdx
call fcn.140011980
mov rcx, qword [0x14001797c]
xor rdx, rdx
call fcn.140011a40
or rax, rax
jne 0x140001ee4
mov rcx, qword [0x14001797c]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x140017a04]
pop rdx
call fcn.140011980
mov rcx, qword [0x140017a04]
call fcn.14000dc1c
mov rcx, qword [0x14001798c]
xor rdx, rdx
call fcn.140011a40
or rax, rax
jne 0x140001d2d
mov rcx, qword [0x14001798c]
call fcn.140003724
mov rdx, qword [0x140017a1c]
movabs rcx, 1
call fcn.14000e590
and rax, rax
je 0x140001ea4
movabs rcx, 1
call fcn.14000df80
push qword [0x140018080]
sub rsp, 8
push 0x24
mov rcx, qword [0x14001795c]
push qword [0x140018080]
sub rsp, 0x20
call fcn.140011aa0
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.140011aa0
add rsp, 0x20
mov rcx, qword [0x140017a1c]
sub rsp, 0x20
call fcn.140011aa0
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.140011aa0
add rsp, 0x20
mov rcx, qword [0x140017984]
sub rsp, 0x20
call fcn.140011aa0
add rsp, 0x20
inc qword [0x140018080]
push qword [0x140017a34]
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008784
add rsp, 0x28
pop qword [0x140018080]
mov qword [0x140017a0c], rax
mov r15, qword [0x140017a0c]
cmp r15, 7
jne 0x140001ea4
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rcx, qword [0x140018080]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc38
add rsp, 0x28
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000dc1c
add rsp, 0x28
pop qword [0x140018080]
mov rcx, qword [0x140017ac4]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x14001792c], rax
jmp 0x140002800
mov rdx, qword [0x140017a1c]
movabs rcx, 1
call fcn.14000e380
and rax, rax
je 0x140001ee4
mov rdx, qword [0x140017a14]
movabs rcx, 1
call fcn.14000e680
movabs rcx, 1
call fcn.14000df80
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rcx, qword [0x140018080]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc38
add rsp, 0x28
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000dc1c
add rsp, 0x28
pop qword [0x140018080]
mov rcx, qword [0x140017ac4]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x14001792c], rax
jmp 0x140002800
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x140002137
movabs rcx, 0x400
call fcn.14000db00
mov qword [0x1400179e4], rax
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000dcd4
add rsp, 0x28
lea rcx, [0x140017ae4]
pop rdx
call fcn.140011980
push qword [0x1400179e4]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017ae4]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x1400179e4]
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017abc]
pop rdx
call fcn.140011980
mov rcx, qword [0x1400179e4]
call fcn.14000db20
mov rcx, qword [0x140017abc]
call fcn.14000dda0
mov rcx, qword [0x140017abc]
call fcn.14000dda8
mov rcx, qword [0x140017abc]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140017abc]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x1400179fc]
pop rdx
call fcn.140011980
mov rdx, qword [0x1400179fc]
movabs rcx, 0
call fcn.14000e380
mov r8, qword [0x140017964]
mov rdx, qword [0x14001793c]
movabs rcx, 0
call fcn.14000e730
movabs rcx, 0
call fcn.14000df80
mov rcx, qword [0x1400179fc]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x1400179f4]
pop rdx
call fcn.140011980
mov rcx, qword [0x1400179f4]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x1400179f4]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140008f18
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140008f18
mov rcx, qword [0x140017ac4]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
mov rcx, qword [0x140017a1c]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x140017a1c]
pop rdx
call fcn.140011980
mov rdx, qword [0x140017a1c]
movabs rcx, 1
call fcn.14000e380
and rax, rax
je 0x14000233b
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000e7c0
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140018080]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
inc qword [0x140018080]
movabs rax, str.b2eargs
push rax
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x140018080]
mov rdx, qword [0x140017a14]
movabs rcx, 1
call fcn.14000e7c0
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x1400179ec]
call fcn.140004251
and rax, rax
je 0x14000232a
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x140018080]
movabs rbp, 0x140016365
mov r15, rbp
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
inc qword [0x140018080]
push 1
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e7c0
add rsp, 0x28
pop qword [0x140018080]
movabs rcx, 1
call fcn.14000df80
jmp 0x140002388
mov rcx, qword [0x140017a1c]
call fcn.14000dda0
call fcn.1400047ea
movabs r8, 0x10
mov rdx, qword [0x140017a24]
mov rcx, qword [0x140017acc]
call fcn.140008784
mov rcx, qword [0x140017ac4]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x14001792c], rax
jmp 0x140002800
mov rcx, qword [0x14001798c]
xor rdx, rdx
call fcn.140011a40
or rax, rax
jne 0x1400023a8
mov rcx, qword [0x14001798c]
call fcn.140003724
movabs rcx, 0x400
call fcn.14000db00
mov qword [0x140017aac], rax
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000dcd4
add rsp, 0x28
lea rcx, [0x140017974]
pop rdx
call fcn.140011980
push qword [0x140017aac]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017974]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017aac]
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017adc]
pop rdx
call fcn.140011980
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005090
add rsp, 0x28
lea rcx, [0x140017a4c]
pop rdx
call fcn.140011980
push qword [0x140018080]
sub rsp, 8
push 0x800
push qword [0x140017a4c]
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x28
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x140018080]
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140018080]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x28
inc qword [0x140018080]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x140018080]
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rcx, qword [0x140018080]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000defc
add rsp, 0x28
inc qword [0x140018080]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x140018080]
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rcx, qword [0x140018080]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc38
add rsp, 0x28
inc qword [0x140018080]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x140018080]
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
mov rcx, qword [0x140017a4c]
sub rsp, 0x20
call fcn.1400051d0
add rsp, 0x28
inc qword [0x140018080]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x140018080]
mov rcx, qword [0x140017a04]
push qword [0x140018080]
sub rsp, 0x28
call fcn.140011aa0
add rsp, 0x28
lea rcx, [0x140017aec]
pop rdx
call fcn.140011980
mov rcx, qword [0x140017aec]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140017aec]
movabs rax, 0x140016076
mov rcx, rax
pop rdx
call fcn.140008f18
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
mov rcx, qword [0x14001796c]
sub rsp, 0x20
call fcn.1400052f0
add rsp, 0x28
inc qword [0x140018080]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x140018090]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x140018080]
push qword [0x140017adc]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140008f18
mov r8, qword [0x1400179dc]
mov rdx, qword [0x140017a04]
mov rcx, qword [0x140017a1c]
call fcn.1400033f4
call fcn.1400047ea
mov rcx, qword [0x140017a1c]
call fcn.14000dda0
mov rcx, qword [0x140017adc]
call fcn.14000dda0
mov rcx, qword [0x1400179fc]
call fcn.14000dda0
mov rax, qword [0x140018080]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018080]
push rdx
push rdx
mov rcx, qword [0x140018080]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc38
add rsp, 0x28
mov rdx, qword [0x140018090]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000dc1c
add rsp, 0x28
pop qword [0x140018080]
mov rcx, qword [0x140017abc]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140017ac4]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x14001792c], rax
jmp 0x140002800
call 0x140002822
call fcn.140011860
mov rcx, qword [0x14001791c]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x14001792c]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140009300
call fcn.140009984
call fcn.14000acc8
call fcn.14000c0f8
call fcn.14000d72c
call fcn.14000df08
call fcn.14000e010
call fcn.14000f0d4
call fcn.14000d9c0
add rsp, 0x28
ret