Function at 0x140002dbc
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rdx, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rdx
jne 0x140002dcb
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000aa50
add rsp, 0x10
mov qword [rsp + 0x30], 1
push qword [0x14000e618]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a30
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
movabs rax, 0x14000d014
push rax
push qword [rsp + 0x50]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400044a0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000a890
mov rcx, qword [rsp + 0x38]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a950
add rsp, 0x10
or rax, rax
jne 0x140002eeb
mov r15, qword [rsp + 0x30]
and r15, 1
and r15, r15
jne 0x140002eb4
push qword [rsp + 0x38]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004570
add rsp, 0x20
mov rax, rax
push rax
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
pop rax
mov dword [rbp + 8], eax
inc qword [rsp + 0x40]
jmp 0x140002ee9
mov rcx, qword [rsp + 0x38]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
lea rcx, [rbp]
pop rdx
call fcn.14000a890
jmp 0x140002eed
jmp 0x140002ef7
inc qword [rsp + 0x30]
jmp 0x140002e17
push qword [rsp + 0x40]
pop rax
mov qword [0x14000e628], rax
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x48]
jl 0x140003251
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
mov rcx, qword [rbp]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.14000a890
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x60]
push qword [0x14000eb60]
movabs rcx, 0x14000d0be
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
mov r15, qword [rsp + 0x80]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004440
add rsp, 0x28
pop rax
movabs rcx, 0x14000d012
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
mov r15, qword [0x14000e610]
cmp r15, 1
je 0x14000301c
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140009050
add rsp, 0x20
and rax, rax
je 0x14000301c
mov rax, 1
jmp 0x14000301f
xor rax, rax
and rax, rax
je 0x140003117
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x23
mov rcx, qword [0x14000e668]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
mov rcx, qword [rsp + 0x70]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
mov rcx, qword [0x14000e670]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
inc qword [0x14000eb60]
push qword [0x14000e660]
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000eb60]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x1400030ff
jmp 0x140003247
mov r15, qword [rsp + 0x58]
cmp r15, 2
jne 0x140003117
call fcn.140002be3
xor rax, rax
jmp 0x1400033f5
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008e70
add rsp, 0x20
and rax, rax
je 0x1400031fb
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [rsp + 0x60], rax
push qword [rsp + 0x60]
mov r15, qword [0x14000e5e8]
add r15, qword [rsp + 0x70]
mov rax, r15
push rax
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009070
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x60]
mov qword [rsp + 0x68], r15
push qword [0x14000e760]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400060c0
add rsp, 0x20
mov rcx, qword [rsp + 0x50]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
mov rbp, qword [0x14000e768]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.14000a890
push qword [rsp + 0x50]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400099a0
add rsp, 0x20
mov rax, rax
push rax
pop rax
mov dword [rbp + 0x18], eax
jmp 0x140003247
mov rcx, qword [rsp + 0x70]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
movabs rcx, 0x14000d140
add rsp, 0xffffffffffffffd8
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.14000a890
inc qword [rsp + 0x48]
jmp 0x140002f0c
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
movabs rax, 0x14000d140
push rax
push qword [rsp + 0xb0]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004820
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004260
add rsp, 0x28
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041e0
add rsp, 0x28
pop qword [0x14000eb60]
mov r15, rax
and r15, r15
jle 0x1400033e9
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e648]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
movabs rcx, str._r_n_r_n
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
mov rcx, qword [rsp + 0x90]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
movabs rcx, 0x14000d140
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
mov rcx, qword [0x14000e638]
add rsp, 0xffffffffffffffe0
call fcn.14000a9b0
add rsp, 0x20
inc qword [0x14000eb60]
push qword [0x14000e640]
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000eb60]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x1400033e9
call fcn.140002be3
push qword [0x14000e6b0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a44
add rsp, 0x20
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e5c8], rax
jmp 0x1400024c8
mov rax, 1
jmp 0x1400033f5
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.14000aa20
add rsp, 0x20
mov rcx, qword [rsp + 0x40]
sub rsp, 0x20
call fcn.14000aa20
add rsp, 0x20
mov rcx, qword [rsp + 0x58]
sub rsp, 0x20
call fcn.14000aa20
add rsp, 0x20
mov rcx, qword [rsp + 0x78]
sub rsp, 0x20
call fcn.14000aa20
add rsp, 0x20
pop rax
add rsp, 0x78
pop r15
pop rbp
ret