Function at 0x140001000
Capabilities:
Delete directory

Disassembly:
sub rsp, 0x28
mov r8, 0x1b8
xor rdx, rdx
movabs rcx, 0x14000e5b8
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14000e5c0], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x14000e5b8], rax
call fcn.14000a740
call fcn.14000980c
call fcn.140008cf0
call fcn.14000707c
call fcn.14000626c
call fcn.140005e30
call fcn.140004bb8
call fcn.14000482c
mov r9, 7
movabs r8, 0x14000d248
lea rdx, [0x14000e768]
mov rcx, 0xc
call fcn.140005fcc
mov qword [0x14000e760], rax
mov rcx, qword [0x14000e750]
sub rsp, 0x20
call section..text
add rsp, 0x20
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x14000e750
push rax
sub rsp, 0x20
movabs r9, 0x14000d238
mov r8, 7
mov rcx, 0xc
call fcn.14000405c
add rsp, 0x30
mov qword [0x14000e750], rax
movabs rdx, str.Continue_
lea rcx, [0x14000e638]
call fcn.14000a7a0
movabs rdx, str.Error_
lea rcx, [0x14000e640]
call fcn.14000a7a0
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x14000e648]
call fcn.14000a7a0
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x14000e650]
call fcn.14000a7a0
movabs rdx, str.Wrong_password.
lea rcx, [0x14000e658]
call fcn.14000a7a0
movabs rdx, 0x14000d016
lea rcx, [0x14000e660]
call fcn.14000a7a0
movabs rdx, str.The_file
lea rcx, [0x14000e668]
call fcn.14000a7a0
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x14000e670]
call fcn.14000a7a0
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x14000e678]
call fcn.14000a7a0
movabs rdx, str.This_program_is_not_supported_on_this_operating_system.
lea rcx, [0x14000e680]
call fcn.14000a7a0
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x14000e688]
call fcn.14000a7a0
movabs rdx, str.Password
lea rcx, [0x14000e690]
call fcn.14000a7a0
movabs rdx, 0x14000d043
lea rcx, [0x14000e698]
call fcn.14000a7a0
add rsp, 0xffffffffffffffe0
call fcn.140005d38
add rsp, 0x20
mov r15, rax
cmp r15, 0x32
jge 0x140001249
push 0x10
push qword [0x14000e680]
push qword [0x14000e640]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x20
jmp 0x1400024c8
lea rax, [0x140002c7f]
mov rax, rax
push rax
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400059b0
add rsp, 0x20
add rsp, 0xffffffffffffffe0
call fcn.140004da4
add rsp, 0x20
mov qword [0x14000e6b8], rax
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_GetModuleHandleA
add rsp, 0x20
mov qword [0x14000e6c0], rax
mov r15, qword [0x14000e6b8]
and r15, r15
jle 0x1400013ea
mov r15, qword [0x14000e6b8]
and r15, r15
jle 0x1400013ea
mov qword [0x14000e6c8], 0
mov r15, qword [0x14000e6b8]
dec r15
cmp r15, qword [0x14000e6c8]
jl 0x1400013ea
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000e6c8]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004d38
add rsp, 0x28
lea rcx, [0x14000e6d0]
pop rdx
call fcn.14000a890
push qword [0x14000e6d0]
movabs rcx, str._v2epass
pop rdx
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
je 0x140001337
mov qword [0x14000e6d8], 1
jmp 0x1400013de
mov r15, qword [0x14000e6d8]
cmp r15, 1
jne 0x140001378
mov rcx, qword [0x14000e6d0]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x14000e630]
pop rdx
call fcn.14000a890
mov qword [0x14000e6d8], 0
jmp 0x1400013de
push qword [0x14000e6d0]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.SHLWAPI.dll_PathQuoteSpacesA
add rsp, 0x20
mov rcx, qword [0x14000e6e0]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
mov rcx, qword [0x14000e6d0]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
movabs rcx, 0x14000d00e
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x14000e6e0]
pop rdx
call fcn.14000a890
inc qword [0x14000e6c8]
jmp 0x1400012bb
movabs rax, 0x14000d0b8
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x140001435
push qword [0x14000e6a8]
pop qword [0x14000e6e8]
add rsp, 0xfffffffffffffff8
push qword [0x14000e6e8]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002511
add rsp, 0x10
jmp 0x14000146a
push 0x10
push qword [0x14000e678]
push qword [0x14000e640]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x20
mov rax, 1
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
movabs rax, 0x14000d0b6
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x1400014cb
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000e6a0]
push qword [0x14000e6a8]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005e60
add rsp, 0x28
lea rcx, [0x14000e6b0]
pop rdx
call fcn.14000a890
jmp 0x140001500
push 0x10
push qword [0x14000e678]
push qword [0x14000e640]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x20
mov rax, 1
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
movabs rax, 0x14000d0ae
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x14000154b
push qword [0x14000e6a8]
pop qword [0x14000e6f0]
push qword [0x14000e6a0]
pop qword [0x14000e5f0]
push qword [0x14000e6f0]
pop qword [0x14000e5d8]
jmp 0x140001580
push 0x10
push qword [0x14000e678]
push qword [0x14000e640]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x20
mov rax, 1
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
movabs rax, 0x14000d0b4
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x1400015c9
push qword [0x14000e6a8]
pop qword [0x14000e6f8]
push qword [0x14000e6a0]
pop qword [0x14000e5f8]
push qword [0x14000e6f8]
pop qword [0x14000e5e0]
movabs rax, 0x14000d0b2
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x140001612
push qword [0x14000e6a8]
pop qword [0x14000e700]
push qword [0x14000e6a0]
pop qword [0x14000e600]
push qword [0x14000e700]
pop qword [0x14000e5e8]
movabs rax, 0x14000d0ba
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x140001a62
mov rcx, qword [0x14000e630]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
jne 0x140001683
mov rcx, qword [0x14000e630]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x14000e708]
pop rdx
call fcn.14000a890
jmp 0x1400018fa
add rsp, 0xfffffffffffffff8
push 0xc80001
push qword [0x14000e690]
push 0x6e
push 0xc8
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400074e8
add rsp, 0x40
push qword [0x14000e698]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140006520
add rsp, 0x30
add rsp, 0xfffffffffffffff8
push 0x20
movabs rax, 0x14000d00d
push rax
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.14000669c
add rsp, 0x40
movabs rax, 0x14000d1ab
push rax
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400069dc
add rsp, 0x30
push 4
push 0xd
push 0
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.14000754c
add rsp, 0x20
push 2
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006a04
add rsp, 0x20
add rsp, 0xffffffffffffffe0
call fcn.140007810
add rsp, 0x20
mov rax, rax
push rax
mov r15, 0x10
cmp r15, qword [rsp]
jne 0x1400017e8
add rsp, 0xfffffffffffffff8
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x14000e5c8], rax
add rsp, 0xfffffffffffffff8
jmp 0x1400024c8
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001872
add rsp, 0xfffffffffffffff8
add rsp, 0xffffffffffffffe0
call fcn.140007818
add rsp, 0x28
mov rax, rax
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x14000186c
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push 2
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140006a34
add rsp, 0x28
lea rcx, [0x14000e708]
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.14000a890
add rsp, 0x20
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006e94
add rsp, 0x20
add rsp, 0x10
jmp 0x1400018fa
pop rax
jmp 0x1400018f4
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x1400018f4
add rsp, 0xfffffffffffffff8
add rsp, 0xffffffffffffffe0
call fcn.140007830
add rsp, 0x28
mov rax, rax
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x1400018f3
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push 2
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140006a34
add rsp, 0x28
lea rcx, [0x14000e708]
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.14000a890
add rsp, 0x20
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006e94
add rsp, 0x20
add rsp, 0x10
jmp 0x1400018fa
pop rax
pop rax
jmp 0x14000179a
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000e708]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041e0
add rsp, 0x28
mov rax, rax
push rax
mov rax, qword [0x14000e708]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009880
add rsp, 0x28
inc qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000e6a0]
push qword [0x14000e6a8]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005e60
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14000eb60], rdx
add rdx, qword [0x14000eb70]
add rcx, qword [0x14000eb70]
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
jne 0x1400019e4
push 0x10
push qword [0x14000e658]
push qword [0x14000e640]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x20
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, 1
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
movabs rax, 0x14000d0bc
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x140001a15
push qword [0x14000e6a8]
pop qword [0x14000e710]
add rsp, 0xfffffffffffffff8
push qword [0x14000e600]
push qword [0x14000e5f8]
push qword [0x14000e5f0]
push qword [0x14000e710]
push qword [0x14000e700]
push qword [0x14000e6f8]
push qword [0x14000e6f0]
push qword [0x14000e708]
push qword [0x14000e6c0]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140002703
add rsp, 0x50
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000e5f0]
push qword [0x14000e5d8]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005e60
add rsp, 0x28
lea rcx, [0x14000e718]
pop rdx
call fcn.14000a890
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000e5f8]
push qword [0x14000e5e0]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005e60
add rsp, 0x28
lea rcx, [0x14000e720]
pop rdx
call fcn.14000a890
movabs rax, 0x14000d0b0
push rax
push qword [0x14000e6c0]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002cc0
add rsp, 0x10
and rax, rax
je 0x140001f07
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push 0
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004d38
add rsp, 0x28
inc qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000e6a0]
push qword [0x14000e6a8]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005e60
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14000eb60], rdx
add rdx, qword [0x14000eb70]
add rcx, qword [0x14000eb70]
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
je 0x140001b92
mov r15, qword [0x14000e6b8]
cmp r15, 1
jne 0x140001b92
mov rax, 1
jmp 0x140001b95
xor rax, rax
and rax, rax
je 0x140001f07
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008930
add rsp, 0x20
inc qword [0x14000eb60]
push qword [0x14000e688]
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048c4
add rsp, 0x28
lea rcx, [0x14000e728]
pop rdx
call fcn.14000a890
mov rcx, qword [0x14000e728]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
jne 0x140001e69
mov rcx, qword [0x14000e728]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x14000e618]
pop rdx
call fcn.14000a890
mov rcx, qword [0x14000e720]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
jne 0x140001c7a
add rsp, 0xfffffffffffffff8
push qword [0x14000e720]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002dbc
add rsp, 0x10
push qword [0x14000e6b0]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140009050
add rsp, 0x20
and rax, rax
je 0x140001e15
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e668]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
mov rcx, qword [0x14000e6b0]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
mov rcx, qword [0x14000e670]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
inc qword [0x14000eb60]
push qword [0x14000e660]
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000eb60]
mov qword [0x14000e730], rax
mov r15, qword [0x14000e730]
cmp r15, 7
jne 0x140001e15
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008990
add rsp, 0x28
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a30
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
push qword [0x14000e6b0]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008e70
add rsp, 0x20
and rax, rax
je 0x140001e69
push qword [0x14000e5f0]
push qword [0x14000e5d8]
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009070
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008990
add rsp, 0x28
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a30
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
mov rcx, qword [0x14000e620]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
movabs rcx, str.BDFINOPS
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
mov rcx, qword [0x14000e6b0]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x14000e6b0]
pop rdx
call fcn.14000a890
push qword [0x14000e6b0]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008e70
add rsp, 0x20
and rax, rax
je 0x140001faf
push qword [0x14000e5f0]
push qword [0x14000e5d8]
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009070
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
jmp 0x140002011
push qword [0x14000e6b0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a44
add rsp, 0x20
call fcn.140002be3
push 0x10
push qword [0x14000e678]
push qword [0x14000e640]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x20
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, 1
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
mov rcx, qword [0x14000e720]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
jne 0x140002045
add rsp, 0xfffffffffffffff8
push qword [0x14000e720]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002dbc
add rsp, 0x10
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push 0x800
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004210
add rsp, 0x28
lea rcx, [0x14000e738]
pop rdx
call fcn.14000a890
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x800
push qword [0x14000e738]
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x28
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x28
inc qword [0x14000eb60]
movabs rax, 0x14000d034
push rax
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008a60
add rsp, 0x28
inc qword [0x14000eb60]
movabs rax, 0x14000d021
push rax
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008990
add rsp, 0x28
inc qword [0x14000eb60]
movabs rax, str.v2eprogrampathname
push rax
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000e738]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004260
add rsp, 0x28
inc qword [0x14000eb60]
movabs rax, str.v2eprogramshortname
push rax
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000e618]
movabs rax, str.v2eincfilepath
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000e628]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004440
add rsp, 0x28
inc qword [0x14000eb60]
movabs rax, str.v2eincfilecount
push rax
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000e6b0]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.SHLWAPI.dll_PathQuoteSpacesA
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x44
push qword [0x14000e618]
mov rcx, qword [0x14000e6b0]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
movabs rcx, 0x14000d00e
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
mov rcx, qword [0x14000e6e0]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
inc qword [0x14000eb60]
movabs rax, str.cscript
push rax
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140005510
add rsp, 0x28
pop qword [0x14000eb60]
mov qword [0x14000e740], rax
push qword [0x14000e740]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140005588
add rsp, 0x20
push qword [0x14000e740]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400055b0
add rsp, 0x20
mov qword [0x14000e748], rax
push qword [0x14000e740]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400055d4
add rsp, 0x20
call fcn.140002be3
push qword [0x14000e6b0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a44
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dc0
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008990
add rsp, 0x28
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a30
add rsp, 0x28
pop qword [0x14000eb60]
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, qword [0x14000e748]
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
call 0x1400024e5
mov rcx, qword [0x14000e5b8]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x14000e5c8]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.1400056bc
call fcn.140005d10
call fcn.140005e50
call fcn.1400062fc
call fcn.140006fac
call fcn.140008ce0
call fcn.14000982c
add rsp, 0x28
ret