Function at 0x1400023bd
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push r15
push r14
mov rdx, 0xd
sub rsp, 8
mov qword [rsp], 0
dec rdx
jne 0x1400023dd
sub rsp, 0x28
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000a270
add rsp, 0x10
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.1400040ec
add rsp, 0x20
mov rdx, 4
sub rsp, 8
lea rcx, [rsp + 0x38]
push rcx
sub rsp, 0x20
xor r9, r9
mov r8, 5
mov rcx, 4
call fcn.14000405c
add rsp, 0x30
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x40]
sub rsp, 0x20
call fcn.1400040ec
add rsp, 0x20
mov rdx, 4
sub rsp, 8
lea rcx, [rsp + 0x48]
push rcx
sub rsp, 0x20
xor r9, r9
mov r8, 5
mov rcx, 4
call fcn.14000405c
add rsp, 0x30
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x50]
sub rsp, 0x20
call fcn.1400040ec
add rsp, 0x20
mov rdx, 4
sub rsp, 8
lea rcx, [rsp + 0x58]
push rcx
sub rsp, 0x20
xor r9, r9
mov r8, 5
mov rcx, 4
call fcn.14000405c
add rsp, 0x30
mov qword [rsp + 0x50], rax
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x30]
mov rax, qword [rsp + 0xf0]
mov rax, rax
push rax
mov rax, qword [rsp + 0xd8]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe8
call fcn.1400030ad
add rsp, 0x20
mov qword [rsp + 0x60], rax
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x30]
mov rax, qword [rsp + 0x100]
mov rax, rax
push rax
mov rax, qword [rsp + 0xe8]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe8
call fcn.1400030ad
add rsp, 0x20
mov qword [rsp + 0x60], rax
push qword [rsp + 0xc0]
mov rbp, qword [rsp + 0x38]
pop rax
mov dword [rbp], eax
push qword [rsp + 0xc8]
pop rax
mov dword [rbp + 4], eax
push qword [rsp + 0xd0]
pop rax
mov dword [rbp + 8], eax
push qword [rsp + 0xe0]
mov rbp, qword [rsp + 0x48]
pop rax
mov dword [rbp], eax
push qword [rsp + 0xe8]
pop rax
mov dword [rbp + 4], eax
push qword [rsp + 0xf0]
pop rax
mov dword [rbp + 8], eax
cmp qword [rsp + 0xd8], 0
je 0x1400027b4
push qword [rsp + 0xd8]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400057a0
add rsp, 0x20
mov qword [rsp + 0x68], rax
mov r15, qword [rsp + 0xd8]
add r15, 4
mov rax, r15
push rax
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400057a0
add rsp, 0x20
mov qword [rsp + 0x70], rax
mov r15, qword [rsp + 0xd8]
add r15, 8
mov rax, r15
push rax
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400057a0
add rsp, 0x20
mov qword [rsp + 0x78], rax
push qword [rsp + 0x68]
mov rbp, qword [rsp + 0x58]
pop rax
mov dword [rbp], eax
push qword [rsp + 0x70]
pop rax
mov dword [rbp + 4], eax
push qword [rsp + 0x78]
pop rax
mov dword [rbp + 8], eax
mov qword [rsp + 0x80], 0
mov rax, 2
cmp rax, qword [rsp + 0x80]
jl 0x1400027b4
mov r15, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x50]
shl r15, 2
movsxd r15, dword [rbp + r15]
mov r14, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x40]
shl r14, 2
cmp r15d, dword [rbp + r14]
jle 0x1400027a7
mov r15, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x50]
shl r15, 2
movsxd r15, dword [rbp + r15]
add r15, 0x200
mov rax, r15
push rax
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400056d0
add rsp, 0x20
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x14000275e
push qword [rsp + 0x88]
mov r15, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x38]
shl r15, 2
movsxd rax, dword [rbp + r15]
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004f58
add rsp, 0x20
mov r15, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x50]
shl r15, 2
movsxd rax, dword [rbp + r15]
push rax
push qword [rsp + 0x90]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400057b0
add rsp, 0x20
mov r15, qword [rsp + 0x80]
shl r15, 2
movsxd rax, dword [rbp + r15]
push rax
mov r15, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x48]
shl r15, 2
pop rax
mov dword [rbp + r15], eax
push qword [rsp + 0x88]
mov r15, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x38]
shl r15, 2
pop rax
mov dword [rbp + r15], eax
jmp 0x1400027a7
push qword [0x14000e4f8]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
push 0x10
push qword [0x14000e528]
push qword [0x14000e518]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400047f8
add rsp, 0x20
mov rax, 1
mov qword [0x14000e4a0], rax
jmp 0x140002182
inc qword [rsp + 0x80]
jmp 0x14000262e
mov rbp, qword [rsp + 0x30]
movsxd rax, dword [rbp]
push rax
pop rax
mov qword [0x14000e4b0], rax
mov rbp, qword [rsp + 0x40]
movsxd rax, dword [rbp]
push rax
pop rax
mov qword [0x14000e4c8], rax
movsxd rax, dword [rbp + 4]
push rax
pop rax
mov qword [0x14000e4d0], rax
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [0x14000e4d8], rax
mov r15, qword [0x14000e4d0]
and r15, r15
jle 0x140002813
mov r15, qword [0x14000e4d8]
and r15, r15
jle 0x140002813
mov rax, 1
jmp 0x140002816
xor rax, rax
and rax, rax
je 0x14000283a
mov rbp, qword [rsp + 0x30]
movsxd rax, dword [rbp + 4]
push rax
pop rax
mov qword [0x14000e4b8], rax
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [0x14000e4c0], rax
mov rax, 1
jmp 0x140002846
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.14000a240
add rsp, 0x20
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.1400040ec
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.1400040ec
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.1400040ec
add rsp, 0x28
pop rax
add rsp, 0x90
pop r14
pop r15
pop rbp
ret