Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x248
xor rdx, rdx
movabs rcx, 0x140017a24
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140017a2c], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x140017a24], rax
call fcn.140011f10
call fcn.140011c40
call fcn.14000f970
call fcn.14000f174
call fcn.14000e730
call fcn.14000e2b4
call fcn.14000e080
call fcn.14000deac
call fcn.14000de18
call fcn.14000c780
call fcn.14000b3c8
call fcn.140009fd4
call fcn.140009b80
call fcn.140008c0c
call fcn.140008738
mov rcx, qword [0x140017c44]
call fcn.140009bac
mov r9, 7
movabs r8, 0x140016288
lea rdx, [0x140017c44]
mov rcx, 0xc
call fcn.140009aa0
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140017c34
push rax
sub rsp, 0x20
movabs r9, 0x1400162a8
mov r8, 7
mov rcx, 0xc
call fcn.140011abc
add rsp, 0x30
mov qword [0x140017c34], rax
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x140017c64]
xor r8, r8
mov rdx, 0x15
mov rcx, 8
sub rsp, 0x20
call fcn.14000f99c
add rsp, 0x28
add rsp, 8
mov rcx, qword [0x140017c54]
call fcn.140009bac
mov r9, 7
movabs r8, 0x140016298
lea rdx, [0x140017c54]
mov rcx, 0xc
call fcn.140009aa0
movabs rdx, str.Continue_
lea rcx, [0x140017a5c]
call fcn.140011fa0
movabs rdx, str.Error_
lea rcx, [0x140017c04]
call fcn.140011fa0
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x140017ab4]
call fcn.140011fa0
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x140017b5c]
call fcn.140011fa0
movabs rdx, str.Wrong_password.
lea rcx, [0x140017bac]
call fcn.140011fa0
movabs rdx, 0x140016025
lea rcx, [0x140017b64]
call fcn.140011fa0
movabs rdx, str.The_file
lea rcx, [0x140017a64]
call fcn.140011fa0
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x140017a8c]
call fcn.140011fa0
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x140017b54]
call fcn.140011fa0
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140017bd4]
call fcn.140011fa0
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140017ba4]
call fcn.140011fa0
movabs rdx, str.Password
lea rcx, [0x140017bdc]
call fcn.140011fa0
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x140017af4]
call fcn.140011fa0
call fcn.14000b0ec
mov r15, rax
cmp r15, 0x32
jge 0x1400012b5
movabs r8, 0x10
mov rdx, qword [0x140017bd4]
mov rcx, qword [0x140017c04]
call fcn.140008774
jmp 0x140002a38
lea rax, [0x14000337c]
mov rcx, rax
call fcn.140009680
call fcn.140008e14
mov qword [0x140017bbc], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140017b14], rax
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017bb4]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017bb4]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140017bbc]
and r15, r15
jle 0x1400014d6
mov qword [0x140017abc], 0
mov r15, qword [0x140017bbc]
dec r15
cmp r15, qword [0x140017abc]
jl 0x140001403
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017abc]
pop rdx
sub rsp, 0x20
call fcn.140008da8
add rsp, 0x28
lea rcx, [0x140017b8c]
pop rdx
call fcn.140012090
push qword [0x140017b8c]
movabs rcx, str._b2epass
pop rdx
call fcn.140012150
or rax, rax
je 0x1400013b7
mov qword [0x140017aa4], 1
jmp 0x1400013f6
mov r15, qword [0x140017aa4]
cmp r15, 1
jne 0x1400013f6
mov rcx, qword [0x140017b8c]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017bec]
pop rdx
call fcn.140012090
mov qword [0x140017aa4], 0
inc qword [0x140017abc]
jno 0x140001349
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400181d0]
push rdx
push rdx
sub rsp, 8
push qword [0x1400181d0]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x1400181d0]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017afc]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017bb4]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
movabs rcx, 0x14001601f
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
mov rcx, qword [0x140017afc]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017afc]
pop rdx
call fcn.140012090
jmp 0x1400014fd
mov rcx, qword [0x140017bb4]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017afc]
pop rdx
call fcn.140012090
movabs rax, 0x140016087
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140001537
mov rax, qword [0x140017a44]
mov qword [0x140017b7c], rax
mov rcx, qword [0x140017b7c]
call fcn.1400033f4
jmp 0x140001567
movabs r8, 0x10
mov rdx, qword [0x140017b54]
mov rcx, qword [0x140017c04]
call fcn.140008774
mov rax, 1
mov qword [0x140017a34], rax
jmp 0x140002a38
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x1400015be
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017a6c]
mov rcx, qword [0x140017a44]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017b4c]
pop rdx
call fcn.140012090
jmp 0x1400015ee
movabs r8, 0x10
mov rdx, qword [0x140017b54]
mov rcx, qword [0x140017c04]
call fcn.140008774
mov rax, 1
mov qword [0x140017a34], rax
jmp 0x140002a38
movabs rax, 0x14001606e
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140001638
mov rax, qword [0x140017a44]
mov qword [0x140017ac4], rax
mov rax, qword [0x140017a6c]
mov qword [0x140017a4c], rax
mov rax, qword [0x140017ac4]
mov qword [0x140017bcc], rax
jmp 0x140001668
movabs r8, 0x10
mov rdx, qword [0x140017b54]
mov rcx, qword [0x140017c04]
call fcn.140008774
mov rax, 1
mov qword [0x140017a34], rax
jmp 0x140002a38
movabs rax, 0x140016074
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x1400016b0
mov rax, qword [0x140017a44]
mov qword [0x140017ad4], rax
mov rax, qword [0x140017a6c]
mov qword [0x140017ae4], rax
mov rax, qword [0x140017ad4]
mov qword [0x140017b74], rax
movabs rax, 0x140016072
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x1400016f8
mov rax, qword [0x140017a44]
mov qword [0x140017acc], rax
mov rax, qword [0x140017a6c]
mov qword [0x140017a54], rax
mov rax, qword [0x140017acc]
mov qword [0x140017c0c], rax
movabs rax, 0x140016089
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140001b42
mov rcx, qword [0x140017bec]
xor rdx, rdx
call fcn.140012150
or rax, rax
jne 0x14000175a
mov rcx, qword [0x140017bec]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017b9c]
pop rdx
call fcn.140012090
jmp 0x140001a01
sub rsp, 8
push 0xc80001
push qword [0x140017bdc]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b7b0
add rsp, 0x40
push qword [0x140017af4]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.14000a3f4
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001601e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.14000a65c
add rsp, 0x40
movabs rax, 0x140016206
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.14000ab10
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.14000b814
movabs rcx, 2
call fcn.14000ab38
call fcn.14000ba80
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x1400018eb
sub rsp, 8
mov rcx, qword [0x140017bfc]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x140017a34], rax
add rsp, 0xfffffffffffffff8
jmp 0x140002a38
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001977
sub rsp, 8
sub rsp, 0x20
call fcn.14000f2b0
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x140001971
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000ab84
add rsp, 0x28
lea rcx, [0x140017b9c]
pop rdx
sub rsp, 0x20
call fcn.140012090
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
jmp 0x1400019fb
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x1400019fb
sub rsp, 8
sub rsp, 0x20
call fcn.14000f2cc
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x1400019fa
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000ab84
add rsp, 0x28
lea rcx, [0x140017b9c]
pop rdx
sub rsp, 0x20
call fcn.140012090
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
pop rax
jmp 0x1400018a8
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140017b9c]
sub rsp, 0x20
call fcn.140005050
add rsp, 0x28
push rax
mov rax, qword [0x140017b9c]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.140010170
add rsp, 0x28
inc qword [0x1400181d0]
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rdx, qword [0x140017a6c]
mov rcx, qword [0x140017a44]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x1400181d0], rdx
add rdx, qword [0x1400181e0]
add rcx, qword [0x1400181e0]
call fcn.140012150
or rax, rax
jne 0x140001acb
movabs r8, 0x10
mov rdx, qword [0x140017bac]
mov rcx, qword [0x140017c04]
call fcn.140008774
mov rcx, qword [0x140017bfc]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x140017a34], rax
jmp 0x140002a38
movabs rax, 0x14001608b
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140001af7
mov rax, qword [0x140017a44]
mov qword [0x140017bc4], rax
sub rsp, 8
push qword [0x140017a54]
push qword [0x140017ae4]
push qword [0x140017a4c]
push qword [0x140017bc4]
push qword [0x140017acc]
mov r9, qword [0x140017ad4]
mov r8, qword [0x140017ac4]
mov rdx, qword [0x140017b9c]
mov rcx, qword [0x140017b14]
sub rsp, 0x20
call fcn.14000429f
add rsp, 0x50
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017a4c]
mov rcx, qword [0x140017bcc]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017b44]
pop rdx
call fcn.140012090
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017ae4]
mov rcx, qword [0x140017b74]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017a94]
pop rdx
call fcn.140012090
movabs rax, 0x140016070
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140001f66
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140008da8
add rsp, 0x28
inc qword [0x1400181d0]
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rdx, qword [0x140017a6c]
mov rcx, qword [0x140017a44]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x1400181d0], rdx
add rdx, qword [0x1400181e0]
add rcx, qword [0x1400181e0]
call fcn.140012150
or rax, rax
je 0x140001c5b
mov r15, qword [0x140017bbc]
cmp r15, 1
jne 0x140001c5b
mov rax, 1
jmp 0x140001c5e
xor rax, rax
and rax, rax
je 0x140001f66
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400181d0]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000e2cc
add rsp, 0x20
inc qword [0x1400181d0]
push qword [0x140017ba4]
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008828
add rsp, 0x28
lea rcx, [0x140017a84]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017a84]
xor rdx, rdx
call fcn.140012150
or rax, rax
jne 0x140001ee4
mov rcx, qword [0x140017a84]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017b34]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017b34]
call fcn.14000e32c
mov rcx, qword [0x140017a94]
xor rdx, rdx
call fcn.140012150
or rax, rax
jne 0x140001d2d
mov rcx, qword [0x140017a94]
call fcn.1400035a6
mov rdx, qword [0x140017b4c]
movabs rcx, 1
call fcn.14000eca0
and rax, rax
je 0x140001ea4
movabs rcx, 1
call fcn.14000e690
push qword [0x1400181d0]
sub rsp, 8
push 0x24
mov rcx, qword [0x140017a64]
push qword [0x1400181d0]
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
mov rcx, qword [0x140017b4c]
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
mov rcx, qword [0x140017a8c]
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
inc qword [0x1400181d0]
push qword [0x140017b64]
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008774
add rsp, 0x28
pop qword [0x1400181d0]
mov qword [0x140017b3c], rax
mov r15, qword [0x140017b3c]
cmp r15, 7
jne 0x140001ea4
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rcx, qword [0x1400181d0]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e348
add rsp, 0x28
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000e32c
add rsp, 0x28
pop qword [0x1400181d0]
mov rcx, qword [0x140017bfc]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017a34], rax
jmp 0x140002a38
mov rdx, qword [0x140017b4c]
movabs rcx, 1
call fcn.14000ea90
and rax, rax
je 0x140001ee4
mov rdx, qword [0x140017b44]
movabs rcx, 1
call fcn.14000ed90
movabs rcx, 1
call fcn.14000e690
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rcx, qword [0x1400181d0]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e348
add rsp, 0x28
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000e32c
add rsp, 0x28
pop qword [0x1400181d0]
mov rcx, qword [0x140017bfc]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017a34], rax
jmp 0x140002a38
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140002137
movabs rcx, 0x400
call fcn.14000e1e0
mov qword [0x140017b04], rax
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000e3e4
add rsp, 0x28
lea rcx, [0x140017c1c]
pop rdx
call fcn.140012090
push qword [0x140017b04]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017c1c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017b04]
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017bf4]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017b04]
call fcn.14000e200
mov rcx, qword [0x140017bf4]
call fcn.14000e4b0
mov rcx, qword [0x140017bf4]
call fcn.14000e4b8
mov rcx, qword [0x140017bf4]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140017bf4]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017b2c]
pop rdx
call fcn.140012090
mov rdx, qword [0x140017b2c]
movabs rcx, 0
call fcn.14000ea90
mov r8, qword [0x140017a6c]
mov rdx, qword [0x140017a44]
movabs rcx, 0
call fcn.14000ee40
movabs rcx, 0
call fcn.14000e690
mov rcx, qword [0x140017b2c]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017b1c]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017b1c]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x140017b1c]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140008f08
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140008f08
mov rcx, qword [0x140017bfc]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
mov rcx, qword [0x140017b4c]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017b4c]
pop rdx
call fcn.140012090
mov rdx, qword [0x140017b4c]
movabs rcx, 1
call fcn.14000ea90
and rax, rax
je 0x140002418
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000eed0
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x1400181d0]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
inc qword [0x1400181d0]
movabs rax, 0x14001608f
push rax
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x1400181d0]
mov rdx, qword [0x140017b44]
movabs rcx, 1
call fcn.14000eed0
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x140017b14]
call fcn.1400040d3
and rax, rax
je 0x140002407
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
movabs rbp, 0x140016365
mov r15, rbp
movabs rbp, 0x1400162b8
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400162b8
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017adc]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017adc]
call fcn.140005050
mov qword [0x140017b0c], rax
mov rcx, qword [0x140017b0c]
call fcn.14000e1e0
mov qword [0x140017b24], rax
mov rcx, qword [0x140017b0c]
call fcn.14000e1e0
mov qword [0x140017aec], rax
mov rdx, qword [0x140017adc]
mov rcx, qword [0x140017b24]
call fcn.14000e220
mov qword [0x140017abc], 0
mov rax, qword [0x140017b0c]
cmp rax, qword [0x140017abc]
jl 0x1400023ae
mov r15, qword [0x140017b24]
add r15, qword [0x140017abc]
mov rax, r15
mov rcx, rax
call fcn.14000e250
mov r15, rax
imul r15, r15, 0xffffffffffffffff
mov rax, r15
push rax
mov r15, qword [0x140017aec]
add r15, qword [0x140017abc]
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000e260
inc qword [0x140017abc]
jno 0x140002357
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
mov rcx, qword [0x140017aec]
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
inc qword [0x1400181d0]
push 1
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000eed0
add rsp, 0x28
pop qword [0x1400181d0]
movabs rcx, 1
call fcn.14000e690
jmp 0x140002465
mov rcx, qword [0x140017b4c]
call fcn.14000e4b0
call fcn.1400046b1
movabs r8, 0x10
mov rdx, qword [0x140017b54]
mov rcx, qword [0x140017c04]
call fcn.140008774
mov rcx, qword [0x140017bfc]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x140017a34], rax
jmp 0x140002a38
mov rcx, qword [0x140017a94]
xor rdx, rdx
call fcn.140012150
or rax, rax
jne 0x140002485
mov rcx, qword [0x140017a94]
call fcn.1400035a6
movabs rcx, 0x400
call fcn.14000e1e0
mov qword [0x140017be4], rax
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000e3e4
add rsp, 0x28
lea rcx, [0x140017a7c]
pop rdx
call fcn.140012090
push qword [0x140017be4]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017a7c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017be4]
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017c14]
pop rdx
call fcn.140012090
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005080
add rsp, 0x28
lea rcx, [0x140017b84]
pop rdx
call fcn.140012090
push qword [0x1400181d0]
sub rsp, 8
push 0x800
push qword [0x140017b84]
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x28
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x1400181d0]
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x1400181d0]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x28
inc qword [0x1400181d0]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x1400181d0]
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rcx, qword [0x1400181d0]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e60c
add rsp, 0x28
inc qword [0x1400181d0]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x1400181d0]
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rcx, qword [0x1400181d0]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e348
add rsp, 0x28
inc qword [0x1400181d0]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x1400181d0]
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
mov rcx, qword [0x140017b84]
sub rsp, 0x20
call fcn.1400051c0
add rsp, 0x28
inc qword [0x1400181d0]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x1400181d0]
mov rcx, qword [0x140017b34]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017c2c]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017c2c]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140017c2c]
movabs rax, 0x140016076
mov rcx, rax
pop rdx
call fcn.140008f08
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
mov rcx, qword [0x140017a74]
sub rsp, 0x20
call fcn.1400052e0
add rsp, 0x28
inc qword [0x1400181d0]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x1400181d0]
push qword [0x140017c14]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140008f08
mov rcx, qword [0x140017b4c]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov rcx, qword [0x140017b4c]
push qword [0x1400181d0]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
movabs rcx, 0x14001601f
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
mov rcx, qword [0x140017afc]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
lea rcx, [0x140017afc]
pop rdx
call fcn.140012090
mov rcx, qword [0x140017afc]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x1400181d0]
sub rsp, 8
push 0x44
push qword [0x140017b34]
push qword [0x1400181d0]
movabs rcx, 0x1400160c7
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
mov rcx, qword [0x140017afc]
sub rsp, 0x28
call fcn.1400121b0
add rsp, 0x28
inc qword [0x1400181d0]
mov rcx, qword [0x140017c24]
push qword [0x1400181d0]
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
movabs rcx, 0x140016102
sub rsp, 0x20
call fcn.1400121b0
add rsp, 0x20
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
mov rdx, qword [0x1400181e0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400094f4
add rsp, 0x28
pop qword [0x1400181d0]
mov qword [0x140017b6c], rax
mov rcx, qword [0x140017b6c]
call fcn.140009544
mov r15, rax
and r15, r15
jne 0x140002944
jmp 0x140002955
movabs rcx, 5
call fcn.14000b218
jmp 0x14000292e
mov rcx, qword [0x140017b6c]
call fcn.1400095ac
mov qword [0x140017aac], rax
mov rcx, qword [0x140017b6c]
call fcn.1400095d0
call fcn.1400046b1
mov rcx, qword [0x140017b4c]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
mov rcx, qword [0x140017b4c]
call fcn.14000e4b0
mov rcx, qword [0x140017c14]
call fcn.14000e4b0
mov rcx, qword [0x140017b2c]
call fcn.14000e4b0
mov rax, qword [0x1400181d0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400181d0]
push rdx
push rdx
mov rcx, qword [0x1400181d0]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e348
add rsp, 0x28
mov rdx, qword [0x1400181e0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000e32c
add rsp, 0x28
pop qword [0x1400181d0]
mov rcx, qword [0x140017bf4]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140017bfc]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [0x140017aac]
mov qword [0x140017a34], rax
jmp 0x140002a38
call 0x140002a5a
call fcn.140011f70
mov rcx, qword [0x140017a24]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x140017a34]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.1400099e0
call fcn.14000a064
call fcn.14000b3a8
call fcn.14000c7d8
call fcn.14000de0c
call fcn.14000e618
call fcn.14000e720
call fcn.14000f7e4
call fcn.14000e0a0
add rsp, 0x28
ret