Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x1f8
xor rdx, rdx
movabs rcx, 0x1400148d4
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400148dc], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x1400148d4], rax
call fcn.14000e600
call fcn.14000e450
call fcn.14000c1c0
call fcn.14000b9c4
call fcn.14000af80
call fcn.14000ab04
call fcn.14000a900
call fcn.14000a72c
call fcn.14000a698
call fcn.140009000
call fcn.140007c48
call fcn.140006854
call fcn.140006508
call fcn.140005d18
call fcn.140005844
mov rcx, qword [0x140014abc]
call fcn.140006534
mov r9, 7
movabs r8, 0x140013288
lea rdx, [0x140014abc]
mov rcx, 0xc
call fcn.140006428
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140014aac
push rax
sub rsp, 0x20
movabs r9, 0x140013298
mov r8, 7
mov rcx, 0xc
call fcn.14000e2cc
add rsp, 0x30
mov qword [0x140014aac], rax
movabs rdx, str.Continue_
lea rcx, [0x14001490c]
call fcn.14000e690
movabs rdx, str.Error_
lea rcx, [0x140014a84]
call fcn.14000e690
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x14001495c]
call fcn.14000e690
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x1400149e4]
call fcn.14000e690
movabs rdx, str.Wrong_password.
lea rcx, [0x140014a2c]
call fcn.14000e690
movabs rdx, 0x140013025
lea rcx, [0x1400149ec]
call fcn.14000e690
movabs rdx, str.The_file
lea rcx, [0x140014914]
call fcn.14000e690
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x14001493c]
call fcn.14000e690
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x1400149dc]
call fcn.14000e690
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140014a54]
call fcn.14000e690
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140014a24]
call fcn.14000e690
movabs rdx, str.Password
lea rcx, [0x140014a5c]
call fcn.14000e690
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x14001498c]
call fcn.14000e690
call fcn.14000796c
mov r15, rax
cmp r15, 0x32
jge 0x140001250
movabs r8, 0x10
mov rdx, qword [0x140014a54]
mov rcx, qword [0x140014a84]
call fcn.140005880
jmp 0x14000279b
lea rax, [0x14000337c]
mov rcx, rax
call fcn.1400060a0
call fcn.140005f20
mov qword [0x140014a3c], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400149a4], rax
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014a34]
pop rdx
call fcn.14000e780
mov rcx, qword [0x140014a34]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140014a3c]
and r15, r15
jle 0x140001471
mov qword [0x140014964], 0
mov r15, qword [0x140014a3c]
dec r15
cmp r15, qword [0x140014964]
jl 0x14000139e
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014964]
pop rdx
sub rsp, 0x20
call fcn.140005eb4
add rsp, 0x28
lea rcx, [0x140014a0c]
pop rdx
call fcn.14000e780
push qword [0x140014a0c]
movabs rcx, str._b2epass
pop rdx
call fcn.14000e840
or rax, rax
je 0x140001352
mov qword [0x140014954], 1
jmp 0x140001391
mov r15, qword [0x140014954]
cmp r15, 1
jne 0x140001391
mov rcx, qword [0x140014a0c]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x140014a6c]
pop rdx
call fcn.14000e780
mov qword [0x140014954], 0
inc qword [0x140014964]
jno 0x1400012e4
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140015020]
push rdx
push rdx
sub rsp, 8
push qword [0x140015020]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140015020]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014994]
pop rdx
call fcn.14000e780
mov rcx, qword [0x140014a34]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
movabs rcx, 0x14001301f
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
mov rcx, qword [0x140014994]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x140014994]
pop rdx
call fcn.14000e780
jmp 0x140001498
mov rcx, qword [0x140014a34]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x140014994]
pop rdx
call fcn.14000e780
movabs rax, 0x140013085
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400014d2
mov rax, qword [0x1400148f4]
mov qword [0x1400149fc], rax
mov rcx, qword [0x1400149fc]
call fcn.140003533
jmp 0x140001502
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001559
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001491c]
mov rcx, qword [0x1400148f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x1400149d4]
pop rdx
call fcn.14000e780
jmp 0x140001589
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x14001306c
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400015d3
mov rax, qword [0x1400148f4]
mov qword [0x14001496c], rax
mov rax, qword [0x14001491c]
mov qword [0x1400148fc], rax
mov rax, qword [0x14001496c]
mov qword [0x140014a4c], rax
jmp 0x140001603
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x140013072
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x14000164b
mov rax, qword [0x1400148f4]
mov qword [0x14001497c], rax
mov rax, qword [0x14001491c]
mov qword [0x140014984], rax
mov rax, qword [0x14001497c]
mov qword [0x1400149f4], rax
movabs rax, 0x140013070
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001693
mov rax, qword [0x1400148f4]
mov qword [0x140014974], rax
mov rax, qword [0x14001491c]
mov qword [0x140014904], rax
mov rax, qword [0x140014974]
mov qword [0x140014a8c], rax
movabs rax, 0x140013087
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001add
mov rcx, qword [0x140014a6c]
xor rdx, rdx
call fcn.14000e840
or rax, rax
jne 0x1400016f5
mov rcx, qword [0x140014a6c]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x140014a1c]
pop rdx
call fcn.14000e780
jmp 0x14000199c
sub rsp, 8
push 0xc80001
push qword [0x140014a5c]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.140008030
add rsp, 0x40
push qword [0x14001498c]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.140006c74
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001301e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.140006edc
add rsp, 0x40
movabs rax, 0x140013201
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.140007390
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.140008094
movabs rcx, 2
call fcn.1400073b8
call fcn.140008300
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x140001886
sub rsp, 8
mov rcx, qword [0x140014a7c]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x1400148e4], rax
add rsp, 0xfffffffffffffff8
jmp 0x14000279b
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001912
sub rsp, 8
sub rsp, 0x20
call fcn.14000bb00
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x14000190c
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.140007404
add rsp, 0x28
lea rcx, [0x140014a1c]
pop rdx
sub rsp, 0x20
call fcn.14000e780
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.140007ae8
add rsp, 0x20
add rsp, 0x10
jmp 0x14000199c
pop rax
jmp 0x140001996
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x140001996
sub rsp, 8
sub rsp, 0x20
call fcn.14000bb1c
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x140001995
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.140007404
add rsp, 0x28
lea rcx, [0x140014a1c]
pop rdx
sub rsp, 0x20
call fcn.14000e780
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.140007ae8
add rsp, 0x20
add rsp, 0x10
jmp 0x14000199c
pop rax
pop rax
jmp 0x140001843
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140014a1c]
sub rsp, 0x20
call fcn.140005060
add rsp, 0x28
push rax
mov rax, qword [0x140014a1c]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000c980
add rsp, 0x28
inc qword [0x140015020]
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rdx, qword [0x14001491c]
mov rcx, qword [0x1400148f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140015020], rdx
add rdx, qword [0x140015030]
add rcx, qword [0x140015030]
call fcn.14000e840
or rax, rax
jne 0x140001a66
movabs r8, 0x10
mov rdx, qword [0x140014a2c]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x140013089
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001a92
mov rax, qword [0x1400148f4]
mov qword [0x140014a44], rax
sub rsp, 8
push qword [0x140014904]
push qword [0x140014984]
push qword [0x1400148fc]
push qword [0x140014a44]
push qword [0x140014974]
mov r9, qword [0x14001497c]
mov r8, qword [0x14001496c]
mov rdx, qword [0x140014a1c]
mov rcx, qword [0x1400149a4]
sub rsp, 0x20
call fcn.140003e8e
add rsp, 0x50
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400148fc]
mov rcx, qword [0x140014a4c]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x1400149cc]
pop rdx
call fcn.14000e780
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140014984]
mov rcx, qword [0x1400149f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
lea rcx, [0x140014944]
pop rdx
call fcn.14000e780
movabs rax, 0x14001306e
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x140001f01
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140005eb4
add rsp, 0x28
inc qword [0x140015020]
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rdx, qword [0x14001491c]
mov rcx, qword [0x1400148f4]
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140015020], rdx
add rdx, qword [0x140015030]
add rcx, qword [0x140015030]
call fcn.14000e840
or rax, rax
je 0x140001bf6
mov r15, qword [0x140014a3c]
cmp r15, 1
jne 0x140001bf6
mov rax, 1
jmp 0x140001bf9
xor rax, rax
and rax, rax
je 0x140001f01
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140015020]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab1c
add rsp, 0x20
inc qword [0x140015020]
push qword [0x140014a24]
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005934
add rsp, 0x28
lea rcx, [0x140014934]
pop rdx
call fcn.14000e780
mov rcx, qword [0x140014934]
xor rdx, rdx
call fcn.14000e840
or rax, rax
jne 0x140001e7f
mov rcx, qword [0x140014934]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x1400149bc]
pop rdx
call fcn.14000e780
mov rcx, qword [0x1400149bc]
call fcn.14000ab7c
mov rcx, qword [0x140014944]
xor rdx, rdx
call fcn.14000e840
or rax, rax
jne 0x140001cc8
mov rcx, qword [0x140014944]
call fcn.1400036e5
mov rdx, qword [0x1400149d4]
movabs rcx, 1
call fcn.14000b4f0
and rax, rax
je 0x140001e3f
movabs rcx, 1
call fcn.14000aee0
push qword [0x140015020]
sub rsp, 8
push 0x24
mov rcx, qword [0x140014914]
push qword [0x140015020]
sub rsp, 0x20
call fcn.14000e8a0
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000e8a0
add rsp, 0x20
mov rcx, qword [0x1400149d4]
sub rsp, 0x20
call fcn.14000e8a0
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000e8a0
add rsp, 0x20
mov rcx, qword [0x14001493c]
sub rsp, 0x20
call fcn.14000e8a0
add rsp, 0x20
inc qword [0x140015020]
push qword [0x1400149ec]
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005880
add rsp, 0x28
pop qword [0x140015020]
mov qword [0x1400149c4], rax
mov r15, qword [0x1400149c4]
cmp r15, 7
jne 0x140001e3f
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab98
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab7c
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
mov rdx, qword [0x1400149d4]
movabs rcx, 1
call fcn.14000b2e0
and rax, rax
je 0x140001e7f
mov rdx, qword [0x1400149cc]
movabs rcx, 1
call fcn.14000b5e0
movabs rcx, 1
call fcn.14000aee0
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab98
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab7c
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
movabs rax, 0x14001308b
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400020d2
movabs rcx, 0x400
call fcn.14000aa60
mov qword [0x14001499c], rax
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000ac34
add rsp, 0x28
lea rcx, [0x140014a9c]
pop rdx
call fcn.14000e780
push qword [0x14001499c]
push 0
movabs rax, 0x14001301e
mov rdx, rax
mov rcx, qword [0x140014a9c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x14001499c]
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014a74]
pop rdx
call fcn.14000e780
mov rcx, qword [0x14001499c]
call fcn.14000aa80
mov rcx, qword [0x140014a74]
call fcn.14000ad00
mov rcx, qword [0x140014a74]
call fcn.14000ad08
mov rcx, qword [0x140014a74]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140014a74]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x1400149b4]
pop rdx
call fcn.14000e780
mov rdx, qword [0x1400149b4]
movabs rcx, 0
call fcn.14000b2e0
mov r8, qword [0x14001491c]
mov rdx, qword [0x1400148f4]
movabs rcx, 0
call fcn.14000b690
movabs rcx, 0
call fcn.14000aee0
mov rcx, qword [0x1400149b4]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x1400149ac]
pop rdx
call fcn.14000e780
mov rcx, qword [0x1400149ac]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x1400149ac]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140006014
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140006014
mov rcx, qword [0x140014a7c]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
mov rcx, qword [0x1400149d4]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x1400149d4]
pop rdx
call fcn.14000e780
mov rdx, qword [0x1400149d4]
movabs rcx, 1
call fcn.14000b2e0
and rax, rax
je 0x1400022d6
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000b720
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140015020]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eargs
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rdx, qword [0x1400149cc]
movabs rcx, 1
call fcn.14000b720
movabs rax, 0x14001308b
mov rdx, rax
mov rcx, qword [0x1400149a4]
call fcn.140003d07
and rax, rax
je 0x1400022c5
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x140015020]
movabs rbp, 0x140013355
mov r15, rbp
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000a9b0
add rsp, 0x28
inc qword [0x140015020]
push 1
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000b720
add rsp, 0x28
pop qword [0x140015020]
movabs rcx, 1
call fcn.14000aee0
jmp 0x140002323
mov rcx, qword [0x1400149d4]
call fcn.14000ad00
call fcn.1400042a0
movabs r8, 0x10
mov rdx, qword [0x1400149dc]
mov rcx, qword [0x140014a84]
call fcn.140005880
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x1400148e4], rax
jmp 0x14000279b
mov rcx, qword [0x140014944]
xor rdx, rdx
call fcn.14000e840
or rax, rax
jne 0x140002343
mov rcx, qword [0x140014944]
call fcn.1400036e5
movabs rcx, 0x400
call fcn.14000aa60
mov qword [0x140014a64], rax
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000ac34
add rsp, 0x28
lea rcx, [0x14001492c]
pop rdx
call fcn.14000e780
push qword [0x140014a64]
push 0
movabs rax, 0x14001301e
mov rdx, rax
mov rcx, qword [0x14001492c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140014a64]
pop rdx
sub rsp, 0x20
call fcn.14000a930
add rsp, 0x28
lea rcx, [0x140014a94]
pop rdx
call fcn.14000e780
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005090
add rsp, 0x28
lea rcx, [0x140014a04]
pop rdx
call fcn.14000e780
push qword [0x140015020]
sub rsp, 8
push 0x800
push qword [0x140014a04]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ae5c
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab98
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
mov rcx, qword [0x140014a04]
sub rsp, 0x20
call fcn.1400051d0
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x1400149bc]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e8a0
add rsp, 0x28
lea rcx, [0x140014aa4]
pop rdx
call fcn.14000e780
mov rcx, qword [0x140014aa4]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140014aa4]
movabs rax, 0x140013074
mov rcx, rax
pop rdx
call fcn.140006014
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
mov rcx, qword [0x140014924]
sub rsp, 0x20
call fcn.1400052f0
add rsp, 0x28
inc qword [0x140015020]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
push qword [0x140014a94]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140006014
mov r8, qword [0x140014994]
mov rdx, qword [0x1400149bc]
mov rcx, qword [0x1400149d4]
call fcn.1400033b5
call fcn.1400042a0
mov rcx, qword [0x1400149d4]
call fcn.14000ad00
mov rcx, qword [0x140014a94]
call fcn.14000ad00
mov rcx, qword [0x1400149b4]
call fcn.14000ad00
mov rax, qword [0x140015020]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140015020]
push rdx
push rdx
mov rcx, qword [0x140015020]
sub rsp, 0x20
call fcn.140005f3c
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000ab98
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000ab7c
add rsp, 0x28
pop qword [0x140015020]
mov rcx, qword [0x140014a74]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140014a7c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
call 0x1400027bd
call fcn.14000e660
mov rcx, qword [0x1400148d4]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x1400148e4]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140006400
call fcn.1400068e4
call fcn.140007c28
call fcn.140009058
call fcn.14000a68c
call fcn.14000ae68
call fcn.14000af70
call fcn.14000c034
call fcn.14000a920
add rsp, 0x28
ret