Function at 0x140001000
Capabilities:
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x280
xor rdx, rdx
movabs rcx, 0x14001b964
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14001b96c], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x14001b964], rax
movabs rax, 0x14001a270
mov qword [0x14001b9f4], rax
call fcn.140013150
call fcn.140012e80
call fcn.140010bb0
call fcn.1400103b4
call fcn.14000fb10
call fcn.14000f694
call fcn.14000f3e0
call fcn.14000f208
call fcn.14000f174
call fcn.14000dadc
call fcn.14000c724
call fcn.14000b364
call fcn.14000af10
call fcn.14000a888
call fcn.140008c9c
call fcn.1400087c8
mov rcx, qword [0x14001bbbc]
call fcn.14000af3c
mov r9, 7
movabs r8, 0x14001a058
lea rdx, [0x14001bbbc]
mov rcx, 0xc
call fcn.14000ae30
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x14001bbac
push rax
sub rsp, 0x20
movabs r9, 0x14001a078
mov r8, 7
mov rcx, 0xc
call fcn.140012cfc
add rsp, 0x30
mov qword [0x14001bbac], rax
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x14001bbdc]
xor r8, r8
mov rdx, 0x15
mov rcx, 8
sub rsp, 0x20
call fcn.140010bdc
add rsp, 0x28
add rsp, 8
mov rcx, qword [0x14001bbcc]
call fcn.14000af3c
mov r9, 7
movabs r8, 0x14001a068
lea rdx, [0x14001bbcc]
mov rcx, 0xc
call fcn.14000ae30
movabs rbp, 0x14001a270
mov r15, rbp
movabs rbp, 0x14001a265
sub r15, rbp
mov qword [0x14001bb6c], r15
movabs rbp, 0x14001a265
mov qword [0x14001bb74], rbp
mov rcx, qword [0x14001bb6c]
call fcn.14000f440
mov qword [0x14001b984], rax
mov qword [0x14001ba14], 0
mov r15, qword [0x14001bb6c]
dec r15
cmp r15, qword [0x14001ba14]
jl 0x140001227
mov r15, qword [0x14001bb74]
add r15, qword [0x14001ba14]
mov rax, r15
mov rcx, rax
call fcn.14000f460
mov r15, rax
imul r15, r15, 0xffffffffffffffff
mov rax, r15
push rax
mov r15, qword [0x14001b984]
add r15, qword [0x14001ba14]
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000f470
inc qword [0x14001ba14]
jno 0x1400011cd
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001bb6c]
mov rcx, qword [0x14001b984]
pop r8
sub rsp, 0x20
call fcn.14000f480
add rsp, 0x28
lea rcx, [0x14001bba4]
pop rdx
call fcn.1400131e0
movabs rdx, 0x14001a021
lea rcx, [0x14001bb14]
call fcn.1400132a0
movabs rbp, 0x14001a265
mov r15, rbp
movabs rbp, 0x14001a088
sub r15, rbp
mov qword [0x14001badc], r15
movabs rbp, 0x14001a088
mov qword [0x14001bae4], rbp
mov rcx, qword [0x14001badc]
call fcn.14000f440
mov qword [0x14001ba84], rax
mov qword [0x14001ba14], 0
mov rax, qword [0x14001badc]
cmp rax, qword [0x14001ba14]
jl 0x14000131b
mov r15, qword [0x14001bae4]
add r15, qword [0x14001ba14]
mov rax, r15
mov rcx, rax
call fcn.14000f460
mov r15, rax
imul r15, r15, 0xffffffffffffffff
mov rax, r15
push rax
mov r15, qword [0x14001ba84]
add r15, qword [0x14001ba14]
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000f470
inc qword [0x14001ba14]
jno 0x1400012c4
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r15, qword [0x14001badc]
add r15, 0xfffffffffffffff8
mov rax, r15
push rax
mov r15, qword [0x14001ba84]
add r15, 4
mov rax, r15
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f480
add rsp, 0x28
lea rcx, [0x14001b9c4]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001bb14]
mov rcx, qword [0x14001b9c4]
pop r8
sub rsp, 0x20
call fcn.140005050
add rsp, 0x28
lea rcx, [0x14001b9c4]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 4
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001b9e4]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 5
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001ba7c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 7
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb9c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 8
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb04]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 9
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001b9cc]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0xa
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb84]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0xb
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001baf4]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0xc
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb64]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0xf
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001b9ac]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x10
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb7c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x11
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001ba0c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x12
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bab4]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x13
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb24]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x14
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001baac]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x15
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb44]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x16
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb1c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x17
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001bb4c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x18
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001ba64]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x19
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001ba5c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x1a
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001b994]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov r8, qword [0x14001bb14]
movabs rdx, 0x1b
mov rcx, qword [0x14001b9c4]
pop r9
sub rsp, 0x20
call fcn.140005150
add rsp, 0x28
lea rcx, [0x14001baa4]
pop rdx
call fcn.1400131e0
mov rcx, qword [0x14001bba4]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
mov rcx, qword [0x14001b994]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001b994]
pop rdx
call fcn.1400131e0
call fcn.14000c47c
mov r15, rax
cmp r15, 0x32
jge 0x14000195c
movabs r8, 0x10
mov rdx, qword [0x14001bb44]
mov rcx, qword [0x14001bb7c]
call fcn.140008804
jmp 0x140002b24
movabs rax, 0x14001a270
mov qword [0x14001b9f4], rax
mov rax, qword [0x14001b9f4]
movsxd rax, dword [rax]
mov qword [0x14001ba14], rax
add qword [0x14001b9f4], 4
mov rax, qword [0x14001b9f4]
movsxd rax, dword [rax]
mov qword [0x14001ba1c], rax
add qword [0x14001b9f4], 4
mov rax, qword [0x14001b9f4]
movsxd rax, dword [rax]
mov qword [0x14001ba24], rax
add qword [0x14001b9f4], 4
mov rax, qword [0x14001b9f4]
movsxd rax, dword [rax]
mov qword [0x14001ba2c], rax
add qword [0x14001b9f4], 4
mov rax, qword [0x14001b9f4]
movsxd rax, dword [rax]
mov qword [0x14001ba34], rax
add qword [0x14001b9f4], 4
movabs rcx, 0x14
call fcn.14000f440
mov qword [0x14001ba4c], rax
mov rdx, qword [0x14001ba14]
mov rcx, qword [0x14001ba4c]
call fcn.14000f500
push qword [0x14001ba1c]
mov r15, qword [0x14001ba4c]
add r15, 4
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000f500
push qword [0x14001ba24]
mov r15, qword [0x14001ba4c]
add r15, 8
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000f500
push qword [0x14001ba2c]
mov r15, qword [0x14001ba4c]
add r15, 0xc
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000f500
push qword [0x14001ba34]
mov r15, qword [0x14001ba4c]
add r15, 0x10
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000f500
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
movabs rdx, 0x14
mov rcx, qword [0x14001ba4c]
pop r8
sub rsp, 0x20
call fcn.1400113b0
add rsp, 0x28
lea rcx, [0x14001bb94]
pop rdx
call fcn.1400131e0
call fcn.140009d04
push 1
lea rax, [0x1400033f4]
mov rcx, rax
pop rdx
call sub.KERNEL32.dll_SetConsoleCtrlHandler
lea rax, [0x14000337c]
mov rcx, rax
call fcn.14000aa10
call fcn.140008ea4
mov qword [0x14001bb2c], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14001ba74], rax
mov r15, qword [0x14001bb2c]
and r15, r15
jle 0x140001c51
mov r15, qword [0x14001bb2c]
and r15, r15
jle 0x140001c51
mov qword [0x14001ba14], 0
mov r15, qword [0x14001bb2c]
dec r15
cmp r15, qword [0x14001ba14]
jl 0x140001c51
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x14001ba14]
pop rdx
sub rsp, 0x20
call fcn.140008e38
add rsp, 0x28
lea rcx, [0x14001baec]
pop rdx
call fcn.1400131e0
push qword [0x14001baec]
mov rcx, qword [0x14001ba7c]
pop rdx
call fcn.140013400
or rax, rax
je 0x140001ba5
mov qword [0x14001b9fc], 1
jmp 0x140001c44
mov r15, qword [0x14001b9fc]
cmp r15, 1
jne 0x140001be6
mov rcx, qword [0x14001baec]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001bb54]
pop rdx
call fcn.1400131e0
mov qword [0x14001b9fc], 0
jmp 0x140001c44
mov rcx, qword [0x14001baec]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov rcx, qword [0x14001ba6c]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
mov rcx, qword [0x14001baec]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
movabs rcx, str.__BFINOPS
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001ba6c]
pop rdx
call fcn.1400131e0
inc qword [0x14001ba14]
jno 0x140001b37
movabs rax, 0x14001a02f
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x140001c8b
mov rax, qword [0x14001b98c]
mov qword [0x14001bacc], rax
mov rcx, qword [0x14001bacc]
call fcn.140003525
jmp 0x140001cbb
movabs r8, 0x10
mov rdx, qword [0x14001baac]
mov rcx, qword [0x14001bb7c]
call fcn.140008804
mov rax, 1
mov qword [0x14001b974], rax
jmp 0x140002b24
movabs rax, 0x14001a02d
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x140001d12
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001b9b4]
mov rcx, qword [0x14001b98c]
pop r8
sub rsp, 0x20
call fcn.14000f480
add rsp, 0x28
lea rcx, [0x14001ba9c]
pop rdx
call fcn.1400131e0
jmp 0x140001d42
movabs r8, 0x10
mov rdx, qword [0x14001baac]
mov rcx, qword [0x14001bb7c]
call fcn.140008804
mov rax, 1
mov qword [0x14001b974], rax
jmp 0x140002b24
movabs rax, 0x14001a027
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x140001d8c
mov rax, qword [0x14001b98c]
mov qword [0x14001ba1c], rax
mov rax, qword [0x14001b9b4]
mov qword [0x14001b99c], rax
mov rax, qword [0x14001ba1c]
mov qword [0x14001bb3c], rax
jmp 0x140001dbc
movabs r8, 0x10
mov rdx, qword [0x14001baac]
mov rcx, qword [0x14001bb7c]
call fcn.140008804
mov rax, 1
mov qword [0x14001b974], rax
jmp 0x140002b24
movabs rax, 0x14001a02b
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x140001e04
mov rax, qword [0x14001b98c]
mov qword [0x14001ba44], rax
mov rax, qword [0x14001b9b4]
mov qword [0x14001ba54], rax
mov rax, qword [0x14001ba44]
mov qword [0x14001bac4], rax
movabs rax, 0x14001a029
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x140001e4c
mov rax, qword [0x14001b98c]
mov qword [0x14001ba3c], rax
mov rax, qword [0x14001b9b4]
mov qword [0x14001b9a4], rax
mov rax, qword [0x14001ba3c]
mov qword [0x14001bb8c], rax
movabs rax, 0x14001a031
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x140002296
mov rcx, qword [0x14001bb54]
xor rdx, rdx
call fcn.140013400
or rax, rax
jne 0x140001eae
mov rcx, qword [0x14001bb54]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001bb0c]
pop rdx
call fcn.1400131e0
jmp 0x140002155
sub rsp, 8
push 0xc80001
push qword [0x14001bb4c]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.14000cb0c
add rsp, 0x40
push qword [0x14001ba64]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.14000b784
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001a01e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.14000b9ec
add rsp, 0x40
movabs rax, 0x14001a03d
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.14000bea0
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.14000cb70
movabs rcx, 2
call fcn.14000bec8
call fcn.14000cddc
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x14000203f
sub rsp, 8
mov rcx, qword [0x14001bb5c]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x14001b974], rax
add rsp, 0xfffffffffffffff8
jmp 0x140002b24
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x1400020cb
sub rsp, 8
sub rsp, 0x20
call fcn.1400104f0
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x1400020c5
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000bf14
add rsp, 0x28
lea rcx, [0x14001bb0c]
pop rdx
sub rsp, 0x20
call fcn.1400131e0
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000c5c4
add rsp, 0x20
add rsp, 0x10
jmp 0x140002155
pop rax
jmp 0x14000214f
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x14000214f
sub rsp, 8
sub rsp, 0x20
call fcn.14001050c
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x14000214e
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000bf14
add rsp, 0x28
lea rcx, [0x14001bb0c]
pop rdx
sub rsp, 0x20
call fcn.1400131e0
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000c5c4
add rsp, 0x20
add rsp, 0x10
jmp 0x140002155
pop rax
pop rax
jmp 0x140001ffc
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x14001bb0c]
sub rsp, 0x20
call fcn.1400052b0
add rsp, 0x28
push rax
mov rax, qword [0x14001bb0c]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400113b0
add rsp, 0x28
inc qword [0x14001c540]
mov rdx, qword [0x14001c540]
push rdx
push rdx
mov rdx, qword [0x14001b9b4]
mov rcx, qword [0x14001b98c]
pop r8
sub rsp, 0x20
call fcn.14000f480
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14001c540], rdx
add rdx, qword [0x14001c550]
add rcx, qword [0x14001c550]
call fcn.140013400
or rax, rax
jne 0x14000221f
movabs r8, 0x10
mov rdx, qword [0x14001bb24]
mov rcx, qword [0x14001bb7c]
call fcn.140008804
mov rcx, qword [0x14001bb5c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x14001b974], rax
jmp 0x140002b24
movabs rax, 0x14001a033
mov rdx, rax
mov rcx, qword [0x14001ba74]
call fcn.1400041bd
and rax, rax
je 0x14000224b
mov rax, qword [0x14001b98c]
mov qword [0x14001bb34], rax
sub rsp, 8
push qword [0x14001b9a4]
push qword [0x14001ba54]
push qword [0x14001b99c]
push qword [0x14001bb34]
push qword [0x14001ba3c]
mov r9, qword [0x14001ba44]
mov r8, qword [0x14001ba1c]
mov rdx, qword [0x14001bb0c]
mov rcx, qword [0x14001ba74]
sub rsp, 0x20
call fcn.140004481
add rsp, 0x50
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001b99c]
mov rcx, qword [0x14001bb3c]
pop r8
sub rsp, 0x20
call fcn.14000f480
add rsp, 0x28
lea rcx, [0x14001ba94]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001ba54]
mov rcx, qword [0x14001bac4]
pop r8
sub rsp, 0x20
call fcn.14000f480
add rsp, 0x28
lea rcx, [0x14001b9dc]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140008e38
add rsp, 0x28
inc qword [0x14001c540]
mov rcx, qword [0x14001baa4]
pop rdx
mov qword [0x14001c540], rdx
add rdx, qword [0x14001c550]
call fcn.140013400
or rax, rax
je 0x140002366
mov r15, qword [0x14001bb2c]
cmp r15, 1
jne 0x140002366
mov rax, 1
jmp 0x140002369
xor rax, rax
and rax, rax
je 0x140002501
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001c540]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000f6ac
add rsp, 0x20
inc qword [0x14001c540]
push qword [0x14001bb1c]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400088b8
add rsp, 0x28
lea rcx, [0x14001b9d4]
pop rdx
call fcn.1400131e0
mov rcx, qword [0x14001b9d4]
xor rdx, rdx
call fcn.140013400
or rax, rax
jne 0x14000247f
mov rcx, qword [0x14001b9d4]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001ba8c]
pop rdx
call fcn.1400131e0
mov rcx, qword [0x14001ba8c]
call fcn.14000f70c
mov rcx, qword [0x14001b9dc]
xor rdx, rdx
call fcn.140013400
or rax, rax
jne 0x140002438
mov rcx, qword [0x14001b9dc]
call fcn.1400036d7
mov rdx, qword [0x14001ba9c]
movabs rcx, 1
call fcn.14000fe70
and rax, rax
je 0x14000247f
mov r8, qword [0x14001b99c]
mov rdx, qword [0x14001bb3c]
movabs rcx, 1
call fcn.140010170
movabs rcx, 1
call fcn.14000fa70
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x14001c540]
push rdx
push rdx
mov rcx, qword [0x14001c540]
sub rsp, 0x20
call fcn.140008ec0
add rsp, 0x20
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f728
add rsp, 0x28
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f70c
add rsp, 0x28
pop qword [0x14001c540]
mov rcx, qword [0x14001bb5c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x14001b974], rax
jmp 0x140002b24
mov rcx, qword [0x14001bb5c]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
movabs rcx, 0x14001a025
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
mov rcx, qword [0x14001ba9c]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001ba9c]
pop rdx
call fcn.1400131e0
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.1400052e0
add rsp, 0x28
lea rcx, [0x14001b9ec]
pop rdx
call fcn.1400131e0
push qword [0x14001c540]
sub rsp, 8
push qword [0x14001b9ec]
push 0
movabs rax, 0x14001a01e
push rax
mov rcx, qword [0x14001bb5c]
push qword [0x14001c540]
sub rsp, 0x20
call fcn.140013390
add rsp, 0x20
movabs rcx, 0x14001a025
sub rsp, 0x20
call fcn.140013390
add rsp, 0x20
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_GetTempFileNameA
add rsp, 0x28
pop qword [0x14001c540]
mov rcx, qword [0x14001b9ec]
call fcn.14000f7f8
movabs rax, str..ps1
mov rdx, rax
mov rcx, qword [0x14001b9ec]
call sub.SHLWAPI.DLL_PathRenameExtensionA
mov rcx, qword [0x14001b9ec]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
lea rcx, [0x14001ba9c]
pop rdx
call fcn.1400131e0
mov rdx, qword [0x14001ba9c]
movabs rcx, 1
call fcn.14000fe70
and rax, rax
je 0x14000268f
mov r8, qword [0x14001b99c]
mov rdx, qword [0x14001bb3c]
movabs rcx, 1
call fcn.140010170
movabs rcx, 1
call fcn.14000fa70
jmp 0x1400026dc
mov rcx, qword [0x14001ba9c]
call fcn.14000f7f8
call fcn.140004893
movabs r8, 0x10
mov rdx, qword [0x14001baac]
mov rcx, qword [0x14001bb7c]
call fcn.140008804
mov rcx, qword [0x14001bb5c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x14001b974], rax
jmp 0x140002b24
mov rcx, qword [0x14001b9dc]
xor rdx, rdx
call fcn.140013400
or rax, rax
jne 0x1400026fc
mov rcx, qword [0x14001b9dc]
call fcn.1400036d7
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.1400052e0
add rsp, 0x28
lea rcx, [0x14001bad4]
pop rdx
call fcn.1400131e0
push qword [0x14001c540]
sub rsp, 8
push 0x800
push qword [0x14001bad4]
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140008ec0
add rsp, 0x28
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x14001c540]
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x14001c540]
sub rsp, 0x20
call fcn.140008ec0
add rsp, 0x28
inc qword [0x14001c540]
push qword [0x14001bb9c]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f98
add rsp, 0x28
pop qword [0x14001c540]
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x14001c540]
push rdx
push rdx
mov rcx, qword [0x14001c540]
sub rsp, 0x20
call fcn.140008ec0
add rsp, 0x20
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f8d4
add rsp, 0x28
inc qword [0x14001c540]
push qword [0x14001bb04]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f98
add rsp, 0x28
pop qword [0x14001c540]
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x14001c540]
push rdx
push rdx
mov rcx, qword [0x14001c540]
sub rsp, 0x20
call fcn.140008ec0
add rsp, 0x20
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f728
add rsp, 0x28
inc qword [0x14001c540]
push qword [0x14001b9cc]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f98
add rsp, 0x28
pop qword [0x14001c540]
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x14001c540]
mov rcx, qword [0x14001bad4]
sub rsp, 0x20
call fcn.140005140
add rsp, 0x28
inc qword [0x14001c540]
push qword [0x14001bb84]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f98
add rsp, 0x28
pop qword [0x14001c540]
mov rdx, qword [0x14001ba8c]
mov rcx, qword [0x14001baf4]
call fcn.140008f98
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x14001c540]
mov rcx, qword [0x14001b9bc]
sub rsp, 0x20
call fcn.140005440
add rsp, 0x28
inc qword [0x14001c540]
push qword [0x14001bb64]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f98
add rsp, 0x28
pop qword [0x14001c540]
mov rcx, qword [0x14001ba9c]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x14001c540]
sub rsp, 8
push 0x45
push qword [0x14001ba8c]
mov rcx, qword [0x14001b994]
push qword [0x14001c540]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
movabs rcx, str.__BFINOPS
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
mov rcx, qword [0x14001ba9c]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
movabs rcx, str.__BFINOPS
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
mov rcx, qword [0x14001ba6c]
sub rsp, 0x28
call fcn.140013390
add rsp, 0x28
inc qword [0x14001c540]
push qword [0x14001ba5c]
mov rdx, qword [0x14001c550]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140009584
add rsp, 0x28
pop qword [0x14001c540]
mov qword [0x14001babc], rax
mov rcx, qword [0x14001babc]
call fcn.1400095d4
mov qword [0x14001ba04], rax
mov rcx, qword [0x14001babc]
call fcn.1400095f8
push 0
lea rax, [0x1400033f4]
mov rcx, rax
pop rdx
call sub.KERNEL32.dll_SetConsoleCtrlHandler
call fcn.140004893
mov rcx, qword [0x14001ba9c]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
mov rcx, qword [0x14001ba9c]
call fcn.14000f7f8
mov rax, qword [0x14001c540]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x14001c540]
push rdx
push rdx
mov rcx, qword [0x14001c540]
sub rsp, 0x20
call fcn.140008ec0
add rsp, 0x20
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f728
add rsp, 0x28
mov rdx, qword [0x14001c550]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f70c
add rsp, 0x28
pop qword [0x14001c540]
mov rcx, qword [0x14001bb5c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [0x14001ba04]
mov qword [0x14001b974], rax
jmp 0x140002b24
call 0x140002b46
call fcn.1400131b0
mov rcx, qword [0x14001b964]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x14001b974]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.14000a8ac
call fcn.14000ad70
call fcn.14000b3f4
call fcn.14000c704
call fcn.14000db34
call fcn.14000f168
call fcn.14000f8e0
call fcn.14000fb00
call fcn.140010a24
call fcn.14000f400
add rsp, 0x28
ret