Function at 0x140002cba
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rdx, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rdx
jne 0x140002cc9
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000a2c0
add rsp, 0x10
mov qword [rsp + 0x30], 1
push qword [0x14000e564]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082a0
add rsp, 0x20
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push qword [0x14000ea80]
movabs rax, 0x14000d014
push rax
push qword [rsp + 0x50]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400044b0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000a100
mov rcx, qword [rsp + 0x38]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a1c0
add rsp, 0x10
or rax, rax
jne 0x140002de9
mov r15, qword [rsp + 0x30]
and r15, 1
and r15, r15
jne 0x140002db2
push qword [rsp + 0x38]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004580
add rsp, 0x20
mov rax, rax
push rax
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e684]
imul r15, r15, 0xc
add rbp, r15
pop rax
mov dword [rbp + 8], eax
inc qword [rsp + 0x40]
jmp 0x140002de7
mov rcx, qword [rsp + 0x38]
push qword [0x14000ea80]
add rsp, 0xffffffffffffffd8
call fcn.14000a220
add rsp, 0x28
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e684]
imul r15, r15, 0xc
add rbp, r15
lea rcx, [rbp]
pop rdx
call fcn.14000a100
jmp 0x140002deb
jmp 0x140002df5
inc qword [rsp + 0x30]
jmp 0x140002d15
push qword [rsp + 0x40]
pop rax
mov qword [0x14000e574], rax
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x48]
jl 0x14000314f
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e684]
imul r15, r15, 0xc
add rbp, r15
mov rcx, qword [rbp]
push qword [0x14000ea80]
add rsp, 0xffffffffffffffd8
call fcn.14000a220
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.14000a100
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x60]
push qword [0x14000ea80]
movabs rcx, 0x14000d0be
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push qword [0x14000ea80]
mov r15, qword [rsp + 0x80]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004450
add rsp, 0x28
pop rax
movabs rcx, 0x14000d012
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
inc qword [0x14000ea80]
mov rdx, qword [0x14000ea90]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000ea80]
mov r15, qword [0x14000e55c]
cmp r15, 1
je 0x140002f1a
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088c0
add rsp, 0x20
and rax, rax
je 0x140002f1a
mov rax, 1
jmp 0x140002f1d
xor rax, rax
and rax, rax
je 0x140003015
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push 0x23
mov rcx, qword [0x14000e5b4]
push qword [0x14000ea80]
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
mov rcx, qword [rsp + 0x70]
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
mov rcx, qword [0x14000e5bc]
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
inc qword [0x14000ea80]
push qword [0x14000e5ac]
mov rdx, qword [0x14000ea90]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x28
pop qword [0x14000ea80]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x140002ffd
jmp 0x140003145
mov r15, qword [rsp + 0x58]
cmp r15, 2
jne 0x140003015
call fcn.140002ae1
xor rax, rax
jmp 0x1400032f3
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400086e0
add rsp, 0x20
and rax, rax
je 0x1400030f9
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e684]
imul r15, r15, 0xc
add rbp, r15
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [rsp + 0x60], rax
push qword [rsp + 0x60]
mov r15, qword [0x14000e534]
add r15, qword [rsp + 0x70]
mov rax, r15
push rax
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400088e0
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x60]
mov qword [rsp + 0x68], r15
push qword [0x14000e694]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140005930
add rsp, 0x20
mov rcx, qword [rsp + 0x50]
push qword [0x14000ea80]
add rsp, 0xffffffffffffffd8
call fcn.14000a220
add rsp, 0x28
mov rbp, qword [0x14000e69c]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.14000a100
push qword [rsp + 0x50]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140009210
add rsp, 0x20
mov rax, rax
push rax
pop rax
mov dword [rbp + 0x18], eax
jmp 0x140003145
mov rcx, qword [rsp + 0x70]
push qword [0x14000ea80]
add rsp, 0xffffffffffffffd8
call fcn.14000a220
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
add rsp, 0xffffffffffffffd8
call fcn.14000a220
add rsp, 0x28
movabs rcx, 0x14000d145
add rsp, 0xffffffffffffffd8
call fcn.14000a220
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.14000a100
inc qword [rsp + 0x48]
jmp 0x140002e0a
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push qword [0x14000ea80]
push qword [0x14000ea80]
push qword [0x14000ea80]
movabs rax, 0x14000d145
push rax
push qword [rsp + 0xb0]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004830
add rsp, 0x20
inc qword [0x14000ea80]
mov rdx, qword [0x14000ea90]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004270
add rsp, 0x28
inc qword [0x14000ea80]
mov rdx, qword [0x14000ea90]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041f0
add rsp, 0x28
pop qword [0x14000ea80]
mov r15, rax
and r15, r15
jle 0x1400032e7
push qword [0x14000ea80]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e594]
push qword [0x14000ea80]
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
movabs rcx, str._r_n_r_n
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
mov rcx, qword [rsp + 0x90]
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
movabs rcx, 0x14000d145
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
mov rcx, qword [0x14000e584]
add rsp, 0xffffffffffffffe0
call fcn.14000a220
add rsp, 0x20
inc qword [0x14000ea80]
push qword [0x14000e58c]
mov rdx, qword [0x14000ea90]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x28
pop qword [0x14000ea80]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x1400032e7
call fcn.140002ae1
push qword [0x14000e5fc]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082b4
add rsp, 0x20
push qword [0x14000e56c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e514], rax
jmp 0x1400023c6
mov rax, 1
jmp 0x1400032f3
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.14000a290
add rsp, 0x20
mov rcx, qword [rsp + 0x40]
sub rsp, 0x20
call fcn.14000a290
add rsp, 0x20
mov rcx, qword [rsp + 0x58]
sub rsp, 0x20
call fcn.14000a290
add rsp, 0x20
mov rcx, qword [rsp + 0x78]
sub rsp, 0x20
call fcn.14000a290
add rsp, 0x20
pop rax
add rsp, 0x78
pop r15
pop rbp
ret