Function at 0x140001000
Capabilities:
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x178
xor rdx, rdx
movabs rcx, 0x140011f38
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140011f40], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x140011f38], rax
movabs rax, 0x1400110cd
mov qword [0x140011f80], rax
call fcn.140006fa0
call fcn.140006dec
call fcn.140005020
call fcn.140004750
call fcn.140003d84
call fcn.140003474
movabs rax, str.0b5299a2e07c1e15c88ea52f23a144b1
mov qword [0x140011f80], rax
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011f98], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fa0], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fa8], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fb0], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fb8], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fc0], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fc8], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fd0], rax
add qword [0x140011f80], 4
movabs rcx, 0x20
call fcn.140004780
mov qword [0x140011fe0], rax
mov rdx, qword [0x140011f98]
mov rcx, qword [0x140011fe0]
call fcn.1400047a0
push qword [0x140011fa0]
mov r15, qword [0x140011fe0]
add r15, 4
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fa8]
mov r15, qword [0x140011fe0]
add r15, 8
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fb0]
mov r15, qword [0x140011fe0]
add r15, 0xc
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fb8]
mov r15, qword [0x140011fe0]
add r15, 0x10
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fc0]
mov r15, qword [0x140011fe0]
add r15, 0x14
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fc8]
mov r15, qword [0x140011fe0]
add r15, 0x18
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fd0]
mov r15, qword [0x140011fe0]
add r15, 0x1c
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
movabs rdx, 0x20
mov rcx, qword [0x140011fe0]
pop r8
sub rsp, 0x20
call fcn.1400047b0
add rsp, 0x28
lea rcx, [0x140012080]
pop rdx
call fcn.140007030
mov rcx, qword [0x140011fe0]
call fcn.140004830
movabs rax, 0x140011101
mov qword [0x140011f80], rax
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011f98], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fa0], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fa8], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fb0], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011fb8], rax
add qword [0x140011f80], 4
movabs rcx, 0x14
call fcn.140004780
mov qword [0x140011fe0], rax
mov rdx, qword [0x140011f98]
mov rcx, qword [0x140011fe0]
call fcn.1400047a0
push qword [0x140011fa0]
mov r15, qword [0x140011fe0]
add r15, 4
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fa8]
mov r15, qword [0x140011fe0]
add r15, 8
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fb0]
mov r15, qword [0x140011fe0]
add r15, 0xc
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
push qword [0x140011fb8]
mov r15, qword [0x140011fe0]
add r15, 0x10
mov rax, r15
mov rcx, rax
pop rdx
call fcn.1400047a0
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
movabs rdx, 0x14
mov rcx, qword [0x140011fe0]
pop r8
sub rsp, 0x20
call fcn.140005b10
add rsp, 0x28
lea rcx, [0x140012090]
pop rdx
call fcn.140007030
movabs rax, 0x1400110d5
mov qword [0x140011f80], rax
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011f98], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011f78], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140012068], rax
add qword [0x140011f80], 4
movabs rax, 0x1400110cd
mov qword [0x140011f80], rax
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140011f98], rax
add qword [0x140011f80], 4
mov rax, qword [0x140011f80]
movsxd rax, dword [rax]
mov qword [0x140012050], rax
add qword [0x140011f80], 4
movabs rdx, 0x140011021
lea rcx, [0x140012060]
call fcn.1400070f0
movabs rbp, 0x1400110cd
mov r15, rbp
movabs rbp, 0x140011040
sub r15, rbp
mov qword [0x140012040], r15
movabs rbp, 0x140011040
mov qword [0x140012048], rbp
mov qword [0x140012018], 0xd8
mov rcx, qword [0x140012018]
call fcn.140004780
mov qword [0x140012020], rax
push qword [0x140012040]
push qword [0x140012048]
lea rax, [0x140012018]
mov rdx, rax
mov rcx, qword [0x140012020]
pop r8
pop r9
call fcn.140007570
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
push qword [0x140012060]
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140012018]
mov rcx, qword [0x140012020]
pop r8
sub rsp, 0x20
call fcn.1400047b0
add rsp, 0x28
mov rdx, qword [0x140012270]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140003030
add rsp, 0x28
lea rcx, [0x140012088]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 1
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140011ff0]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 2
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x1400120a8]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 3
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140012008]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 5
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140011f90]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 6
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140011f88]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 7
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140011f68]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 8
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140011ff8]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 9
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140012098]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 0xa
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140012058]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov r8, qword [0x140012060]
movabs rdx, 0xb
mov rcx, qword [0x140012088]
pop r9
sub rsp, 0x20
call fcn.140003130
add rsp, 0x28
lea rcx, [0x140011f60]
pop rdx
call fcn.140007030
mov rdx, qword [0x140012260]
push rdx
push rdx
mov rdx, qword [0x140012080]
mov rcx, qword [0x140012050]
sub rsp, 0x20
call fcn.140002417
add rsp, 0x28
pop qword [0x140012260]
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140003dcc
add rsp, 0x28
lea rcx, [0x140011f50]
pop rdx
call fcn.140007030
mov rdx, qword [0x140011f50]
movabs rcx, 0
call fcn.140005590
movabs rcx, 0
call fcn.140005680
mov qword [0x140011fd8], rax
mov r15, qword [0x140011fd8]
sub r15, qword [0x140011f78]
mov rax, r15
mov rdx, rax
movabs rcx, 0
call fcn.140005770
mov rcx, qword [0x140011f78]
call fcn.140004780
mov qword [0x140011fe0], rax
mov rcx, qword [0x140012068]
call fcn.140004780
mov qword [0x140011fb0], rax
mov r8, qword [0x140011f78]
mov rdx, qword [0x140011fe0]
movabs rcx, 0
call fcn.1400057d0
mov r15, qword [0x140012050]
cmp r15, 1
jne 0x140001918
push qword [0x140012080]
mov rax, qword [0x140011f78]
push rax
mov rax, qword [0x140011fe0]
mov rcx, rax
pop rdx
pop r8
call fcn.140002000
push qword [0x140012090]
mov rax, qword [0x140011f78]
push rax
mov rax, qword [0x140011fe0]
mov rcx, rax
pop rdx
pop r8
call fcn.140002000
mov rax, qword [0x140012068]
mov qword [0x140012070], rax
push qword [0x140011f78]
push qword [0x140011fe0]
lea rax, [0x140012070]
mov rdx, rax
mov rcx, qword [0x140011fb0]
pop r8
pop r9
call fcn.140007570
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140012260]
push rdx
push rdx
mov rdx, qword [0x140012068]
mov rcx, qword [0x140011fb0]
pop r8
sub rsp, 0x20
call fcn.1400047b0
add rsp, 0x20
mov rdx, qword [0x140012270]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140003120
add rsp, 0x28
lea rcx, [0x140011f58]
pop rdx
call fcn.140007030
movabs rcx, 0
call fcn.140004f80
mov r15, qword [0x140012068]
add r15, 0xffffffffffffff80
mov rax, r15
mov rcx, rax
call fcn.140004780
mov qword [0x1400120a0], rax
mov r15, qword [0x140012068]
add r15, 0xffffffffffffff80
mov rax, r15
push rax
push qword [0x1400120a0]
mov r15, qword [0x140012068]
add r15, 0xffffffffffffff80
mov rax, r15
push rax
mov rax, qword [0x140011f58]
mov rcx, rax
pop rdx
pop r8
pop r9
call fcn.140005c30
mov qword [0x140011fe8], rax
mov rax, qword [0x140011fe8]
mov qword [0x140012068], rax
push 1
lea rax, [0x140002588]
mov rcx, rax
pop rdx
call sub.KERNEL32.dll_SetConsoleCtrlHandler
mov rdx, qword [0x140012260]
push rdx
push rdx
sub rsp, 0x20
call fcn.140002670
add rsp, 0x28
lea rcx, [0x140012000]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140003dcc
add rsp, 0x28
lea rcx, [0x140011f50]
pop rdx
call fcn.140007030
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.1400048c8
add rsp, 0x28
lea rcx, [0x140012010]
pop rdx
call fcn.140007030
mov rdx, qword [0x140012260]
push rdx
push rdx
sub rsp, 0x20
call fcn.1400027b0
add rsp, 0x28
lea rcx, [0x140012078]
pop rdx
call fcn.140007030
mov rcx, qword [0x140012078]
call fcn.140004928
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140003290
add rsp, 0x28
lea rcx, [0x140011f70]
pop rdx
call fcn.140007030
push qword [0x140012260]
sub rsp, 8
push qword [0x140011f70]
push 0
movabs rax, 0x14001101e
push rax
mov rcx, qword [0x140012078]
push qword [0x140012260]
sub rsp, 0x20
call fcn.1400071e0
add rsp, 0x20
movabs rcx, 0x140011025
sub rsp, 0x20
call fcn.1400071e0
add rsp, 0x20
mov rdx, qword [0x140012270]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_GetTempFileNameA
add rsp, 0x28
pop qword [0x140012260]
mov rcx, qword [0x140011f70]
call fcn.140004978
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
movabs rcx, 0x140011023
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
mov rcx, qword [0x1400120a8]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
inc qword [0x140012260]
push qword [0x140011f70]
mov rdx, qword [0x140012270]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathRenameExtensionA
add rsp, 0x28
pop qword [0x140012260]
mov rcx, qword [0x140011f70]
push qword [0x140012260]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
lea rcx, [0x140012028]
pop rdx
call fcn.140007030
mov rdx, qword [0x140012028]
movabs rcx, 0
call fcn.140005380
mov r8, qword [0x140012068]
mov rdx, qword [0x1400120a0]
movabs rcx, 0
call fcn.140005850
movabs rcx, 0
call fcn.140004f80
mov rcx, qword [0x140012010]
call fcn.140004928
mov rcx, qword [0x140012078]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140012260]
sub rsp, 0x20
call fcn.140003dcc
add rsp, 0x28
inc qword [0x140012260]
push qword [0x140012098]
mov rdx, qword [0x140012270]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140003ea4
add rsp, 0x28
pop qword [0x140012260]
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140012260]
push rdx
push rdx
mov rcx, qword [0x140012260]
sub rsp, 0x20
call fcn.140003dcc
add rsp, 0x20
mov rdx, qword [0x140012270]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140004a54
add rsp, 0x28
inc qword [0x140012260]
push qword [0x140012058]
mov rdx, qword [0x140012270]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140003ea4
add rsp, 0x28
pop qword [0x140012260]
mov rax, qword [0x140012260]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140012260]
push rdx
push rdx
mov rcx, qword [0x140012260]
sub rsp, 0x20
call fcn.140003dcc
add rsp, 0x20
mov rdx, qword [0x140012270]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140004a60
add rsp, 0x28
inc qword [0x140012260]
push qword [0x140011f60]
mov rdx, qword [0x140012270]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140003ea4
add rsp, 0x28
pop qword [0x140012260]
mov rcx, qword [0x140012078]
push qword [0x140012260]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
mov rdx, qword [0x140012260]
push rdx
push rdx
mov rcx, qword [0x140012028]
pop rdx
sub rsp, 0x20
call fcn.140004a54
add rsp, 0x20
pop rax
lea rcx, [0x140012038]
pop rdx
call fcn.140007030
mov rcx, qword [0x140012038]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x140012260]
sub rsp, 8
push 0x45
push qword [0x140012010]
mov rcx, qword [0x140012008]
push qword [0x140012260]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
movabs rcx, str._._
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
mov rcx, qword [0x140012038]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
movabs rcx, str._._
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
mov rcx, qword [0x140012000]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
inc qword [0x140012260]
push qword [0x140011ff0]
mov rdx, qword [0x140012270]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140004490
add rsp, 0x28
pop qword [0x140012260]
mov qword [0x140012030], rax
mov rcx, qword [0x140012030]
call fcn.1400044e0
mov qword [0x140011fb8], rax
mov rcx, qword [0x140012030]
call fcn.140004504
push qword [0x140012260]
sub rsp, 8
mov rcx, qword [0x140012078]
push qword [0x140012260]
sub rsp, 0x28
call fcn.1400071e0
add rsp, 0x28
mov rdx, qword [0x140012260]
push rdx
push rdx
mov rcx, qword [0x140012028]
pop rdx
sub rsp, 0x20
call fcn.140004a54
add rsp, 0x20
pop rax
mov rdx, qword [0x140012270]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140004978
add rsp, 0x28
pop qword [0x140012260]
mov rcx, qword [0x140012078]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [0x140011fb8]
mov qword [0x140011f48], rax
jmp 0x140001f7c
call 0x140001f9e
call fcn.140007000
mov rcx, qword [0x140011f38]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x140011f48]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140004afc
call fcn.140005010
call fcn.140004770
add rsp, 0x28
ret