Function at 0x140001000
Capabilities:
Delete directory

Disassembly:
sub rsp, 0x28
mov r8, 0x1b0
xor rdx, rdx
movabs rcx, 0x14000e514
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14000e51c], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x14000e514], rax
call fcn.14000a170
call fcn.14000923c
call fcn.140008560
call fcn.1400068ec
call fcn.140005adc
call fcn.1400056a0
call fcn.140004bc8
call fcn.14000483c
mov r9, 7
movabs r8, 0x14000d260
lea rdx, [0x14000e6bc]
mov rcx, 0xc
call fcn.14000583c
mov qword [0x14000e6b4], rax
mov rcx, qword [0x14000e6a4]
sub rsp, 0x20
call section..text
add rsp, 0x20
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x14000e6a4
push rax
sub rsp, 0x20
movabs r9, 0x14000d250
mov r8, 7
mov rcx, 0xc
call fcn.14000405c
add rsp, 0x30
mov qword [0x14000e6a4], rax
movabs rdx, 0x14000d0c3
lea rcx, [0x14000e594]
call fcn.14000a1d0
movabs rdx, 0x14000d0b7
lea rcx, [0x14000e59c]
call fcn.14000a1d0
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x14000e5a4]
call fcn.14000a1d0
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x14000e5ac]
call fcn.14000a1d0
movabs rdx, str.Wrong_password.
lea rcx, [0x14000e5b4]
call fcn.14000a1d0
movabs rdx, 0x14000d016
lea rcx, [0x14000e5bc]
call fcn.14000a1d0
movabs rdx, 0x14000d0e6
lea rcx, [0x14000e5c4]
call fcn.14000a1d0
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x14000e5cc]
call fcn.14000a1d0
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x14000e5d4]
call fcn.14000a1d0
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x14000e5dc]
call fcn.14000a1d0
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x14000e5e4]
call fcn.14000a1d0
movabs rdx, str.Password
lea rcx, [0x14000e5ec]
call fcn.14000a1d0
movabs rdx, 0x14000d035
lea rcx, [0x14000e5f4]
call fcn.14000a1d0
add rsp, 0xffffffffffffffe0
call fcn.1400055a8
add rsp, 0x20
mov r15, rax
cmp r15, 0x32
jge 0x140001249
push 0x10
push qword [0x14000e5dc]
push qword [0x14000e59c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x20
jmp 0x140002558
lea rax, [0x140002d0f]
mov rax, rax
push rax
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140005220
add rsp, 0x20
add rsp, 0xffffffffffffffe0
call fcn.140004db4
add rsp, 0x20
mov qword [0x14000e614], rax
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_GetModuleHandleA
add rsp, 0x20
mov qword [0x14000e61c], rax
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x28
lea rcx, [0x14000e624]
pop rdx
call fcn.14000a2c0
push qword [0x14000e624]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.SHLWAPI.dll_PathQuoteSpacesA
add rsp, 0x20
mov r15, qword [0x14000e614]
and r15, r15
jle 0x14000146d
mov qword [0x14000e62c], 0
mov r15, qword [0x14000e614]
dec r15
cmp r15, qword [0x14000e62c]
jl 0x140001419
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000e62c]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004d48
add rsp, 0x28
lea rcx, [0x14000e634]
pop rdx
call fcn.14000a2c0
push qword [0x14000e634]
movabs rcx, str._b2epass
pop rdx
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
je 0x140001366
mov qword [0x14000e63c], 1
jmp 0x14000140d
mov r15, qword [0x14000e63c]
cmp r15, 1
jne 0x1400013a7
mov rcx, qword [0x14000e634]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e58c]
pop rdx
call fcn.14000a2c0
mov qword [0x14000e63c], 0
jmp 0x14000140d
push qword [0x14000e634]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.SHLWAPI.dll_PathQuoteSpacesA
add rsp, 0x20
mov rcx, qword [0x14000e644]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
mov rcx, qword [0x14000e634]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
movabs rcx, str.___
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e644]
pop rdx
call fcn.14000a2c0
inc qword [0x14000e62c]
jmp 0x1400012ea
mov rcx, qword [0x14000e624]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
movabs rcx, str.___
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
mov rcx, qword [0x14000e644]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e644]
pop rdx
call fcn.14000a2c0
jmp 0x140001494
mov rcx, qword [0x14000e624]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e644]
pop rdx
call fcn.14000a2c0
movabs rax, 0x14000d0b1
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x1400014df
push qword [0x14000e604]
pop qword [0x14000e64c]
add rsp, 0xfffffffffffffff8
push qword [0x14000e64c]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.1400025a1
add rsp, 0x10
jmp 0x140001514
push 0x10
push qword [0x14000e5d4]
push qword [0x14000e59c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x20
mov rax, 1
mov qword [0x14000e524], rax
jmp 0x140002558
movabs rax, 0x14000d0af
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x140001575
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000e5fc]
push qword [0x14000e604]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400056d0
add rsp, 0x28
lea rcx, [0x14000e60c]
pop rdx
call fcn.14000a2c0
jmp 0x1400015aa
push 0x10
push qword [0x14000e5d4]
push qword [0x14000e59c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x20
mov rax, 1
mov qword [0x14000e524], rax
jmp 0x140002558
movabs rax, 0x14000d08c
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x1400015f5
push qword [0x14000e604]
pop qword [0x14000e654]
push qword [0x14000e5fc]
pop qword [0x14000e54c]
push qword [0x14000e654]
pop qword [0x14000e534]
jmp 0x14000162a
push 0x10
push qword [0x14000e5d4]
push qword [0x14000e59c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x20
mov rax, 1
mov qword [0x14000e524], rax
jmp 0x140002558
movabs rax, 0x14000d09e
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x140001673
push qword [0x14000e604]
pop qword [0x14000e65c]
push qword [0x14000e5fc]
pop qword [0x14000e554]
push qword [0x14000e65c]
pop qword [0x14000e53c]
movabs rax, 0x14000d09c
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x1400016bc
push qword [0x14000e604]
pop qword [0x14000e664]
push qword [0x14000e5fc]
pop qword [0x14000e55c]
push qword [0x14000e664]
pop qword [0x14000e544]
movabs rax, 0x14000d0b3
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x140001b0c
mov rcx, qword [0x14000e58c]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
jne 0x14000172d
mov rcx, qword [0x14000e58c]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e66c]
pop rdx
call fcn.14000a2c0
jmp 0x1400019a4
add rsp, 0xfffffffffffffff8
push 0xc80001
push qword [0x14000e5ec]
push 0x6e
push 0xc8
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140006d58
add rsp, 0x40
push qword [0x14000e5f4]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140005d90
add rsp, 0x30
add rsp, 0xfffffffffffffff8
push 0x20
movabs rax, 0x14000d00d
push rax
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140005f0c
add rsp, 0x40
movabs rax, 0x14000d1a7
push rax
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.14000624c
add rsp, 0x30
push 4
push 0xd
push 0
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140006dbc
add rsp, 0x20
push 2
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006274
add rsp, 0x20
add rsp, 0xffffffffffffffe0
call fcn.140007080
add rsp, 0x20
mov rax, rax
push rax
mov r15, 0x10
cmp r15, qword [rsp]
jne 0x140001892
add rsp, 0xfffffffffffffff8
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x14000e524], rax
add rsp, 0xfffffffffffffff8
jmp 0x140002558
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x14000191c
add rsp, 0xfffffffffffffff8
add rsp, 0xffffffffffffffe0
call fcn.140007088
add rsp, 0x28
mov rax, rax
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x140001916
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push 2
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400062a4
add rsp, 0x28
lea rcx, [0x14000e66c]
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.14000a2c0
add rsp, 0x20
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006704
add rsp, 0x20
add rsp, 0x10
jmp 0x1400019a4
pop rax
jmp 0x14000199e
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x14000199e
add rsp, 0xfffffffffffffff8
add rsp, 0xffffffffffffffe0
call fcn.1400070a0
add rsp, 0x28
mov rax, rax
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x14000199d
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push 2
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400062a4
add rsp, 0x28
lea rcx, [0x14000e66c]
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.14000a2c0
add rsp, 0x20
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006704
add rsp, 0x20
add rsp, 0x10
jmp 0x1400019a4
pop rax
pop rax
jmp 0x140001844
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000e66c]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041f0
add rsp, 0x28
mov rax, rax
push rax
mov rax, qword [0x14000e66c]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400092b0
add rsp, 0x28
inc qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000e5fc]
push qword [0x14000e604]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400056d0
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14000eaa0], rdx
add rdx, qword [0x14000eab0]
add rcx, qword [0x14000eab0]
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
jne 0x140001a8e
push 0x10
push qword [0x14000e5b4]
push qword [0x14000e59c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x20
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, 1
mov qword [0x14000e524], rax
jmp 0x140002558
movabs rax, 0x14000d0b5
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x140001abf
push qword [0x14000e604]
pop qword [0x14000e674]
add rsp, 0xfffffffffffffff8
push qword [0x14000e55c]
push qword [0x14000e554]
push qword [0x14000e54c]
push qword [0x14000e674]
push qword [0x14000e664]
push qword [0x14000e65c]
push qword [0x14000e654]
push qword [0x14000e66c]
push qword [0x14000e61c]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140002793
add rsp, 0x50
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000e54c]
push qword [0x14000e534]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400056d0
add rsp, 0x28
lea rcx, [0x14000e67c]
pop rdx
call fcn.14000a2c0
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000e554]
push qword [0x14000e53c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400056d0
add rsp, 0x28
lea rcx, [0x14000e684]
pop rdx
call fcn.14000a2c0
movabs rax, 0x14000d09a
push rax
push qword [0x14000e61c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002d50
add rsp, 0x10
and rax, rax
je 0x14000200a
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push 0
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004d48
add rsp, 0x28
inc qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000e5fc]
push qword [0x14000e604]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400056d0
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14000eaa0], rdx
add rdx, qword [0x14000eab0]
add rcx, qword [0x14000eab0]
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
je 0x140001c3c
mov r15, qword [0x14000e614]
cmp r15, 1
jne 0x140001c3c
mov rax, 1
jmp 0x140001c3f
xor rax, rax
and rax, rax
je 0x14000200a
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400081a0
add rsp, 0x20
inc qword [0x14000eaa0]
push qword [0x14000e5e4]
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048d4
add rsp, 0x28
lea rcx, [0x14000e68c]
pop rdx
call fcn.14000a2c0
mov rcx, qword [0x14000e68c]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
jne 0x140001f6c
mov rcx, qword [0x14000e68c]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e574]
pop rdx
call fcn.14000a2c0
mov rcx, qword [0x14000e684]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
jne 0x140001d24
add rsp, 0xfffffffffffffff8
push qword [0x14000e684]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002e4c
add rsp, 0x10
push qword [0x14000e60c]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088c0
add rsp, 0x20
and rax, rax
je 0x140001ebf
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e5c4]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
mov rcx, qword [0x14000e60c]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
mov rcx, qword [0x14000e5cc]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
inc qword [0x14000eaa0]
push qword [0x14000e5bc]
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x28
pop qword [0x14000eaa0]
mov qword [0x14000e694], rax
mov r15, qword [0x14000e694]
cmp r15, 7
jne 0x140001ebf
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008200
add rsp, 0x28
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082a0
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e524], rax
jmp 0x140002558
push qword [0x14000e60c]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400086e0
add rsp, 0x20
and rax, rax
je 0x140001f6c
movabs rax, str._echo_off
push rax
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
movabs rax, 0x14000d0cd
push rax
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
movabs rax, str._echo_on
push rax
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
push qword [0x14000e67c]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400089f0
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008200
add rsp, 0x28
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082a0
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e524], rax
jmp 0x140002558
mov rcx, qword [0x14000e57c]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
movabs rcx, 0x14000d08a
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
mov rcx, qword [0x14000e60c]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [0x14000e60c]
pop rdx
call fcn.14000a2c0
push qword [0x14000e60c]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400086e0
add rsp, 0x20
and rax, rax
je 0x14000210b
movabs rax, str._echo_off
push rax
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
movabs rax, 0x14000d0cd
push rax
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
movabs rax, str._echo_on
push rax
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
push qword [0x14000e67c]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400089f0
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
jmp 0x14000216d
push qword [0x14000e60c]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082b4
add rsp, 0x20
call fcn.140002c73
push 0x10
push qword [0x14000e5d4]
push qword [0x14000e59c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x20
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, 1
mov qword [0x14000e524], rax
jmp 0x140002558
mov rcx, qword [0x14000e684]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
jne 0x1400021a1
add rsp, 0xfffffffffffffff8
push qword [0x14000e684]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002e4c
add rsp, 0x10
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push 0x800
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004220
add rsp, 0x28
lea rcx, [0x14000e69c]
pop rdx
call fcn.14000a2c0
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push 0x800
push qword [0x14000e69c]
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x28
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x28
inc qword [0x14000eaa0]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400082d0
add rsp, 0x28
inc qword [0x14000eaa0]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008200
add rsp, 0x28
inc qword [0x14000eaa0]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000e69c]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004270
add rsp, 0x28
inc qword [0x14000eaa0]
movabs rax, 0x14000d021
push rax
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000e574]
movabs rax, 0x14000d0a0
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000e584]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004450
add rsp, 0x28
inc qword [0x14000eaa0]
movabs rax, 0x14000d0d6
push rax
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000e644]
push qword [0x14000e574]
push qword [0x14000e60c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe8
call fcn.1400038f1
add rsp, 0x20
call fcn.140002c73
push qword [0x14000e60c]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082b4
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004dd0
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008200
add rsp, 0x28
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082a0
add rsp, 0x28
pop qword [0x14000eaa0]
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e524], rax
jmp 0x140002558
call 0x140002575
mov rcx, qword [0x14000e514]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x14000e524]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140004f30
call fcn.140005580
call fcn.1400056c0
call fcn.140005b6c
call fcn.14000681c
call fcn.140008550
call fcn.14000925c
add rsp, 0x28
ret