Function at 0x140001000
Capabilities:
Delete directory
Identify system language via api

Disassembly:
sub rsp, 0x28
mov r8, 0x198
xor rdx, rdx
movabs rcx, 0x14000e69c
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14000e6a4], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x14000e69c], rax
call fcn.14000a010
call fcn.1400090dc
call fcn.140008510
call fcn.14000693c
call fcn.140005b2c
call fcn.1400056f0
call fcn.140004c18
call fcn.14000488c
mov r9, 7
movabs r8, 0x14000d3c0
lea rdx, [0x14000e82c]
mov rcx, 0xc
call fcn.14000588c
mov qword [0x14000e824], rax
mov rcx, qword [0x14000e814]
sub rsp, 0x20
call section..text
add rsp, 0x20
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x14000e814
push rax
sub rsp, 0x20
movabs r9, 0x14000d3b0
mov r8, 7
mov rcx, 0xc
call fcn.14000405c
add rsp, 0x30
mov qword [0x14000e814], rax
push 0x400
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140005720
add rsp, 0x20
mov qword [0x14000e714], rax
push 8
push qword [0x14000e714]
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_GetUserDefaultLangID
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_VerLanguageNameA
add rsp, 0x20
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
push 8
push qword [0x14000e714]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005740
add rsp, 0x20
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400041f0
add rsp, 0x20
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004290
add rsp, 0x28
lea rcx, [0x14000e71c]
pop rdx
call fcn.14000a070
push qword [0x14000e714]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400057a0
add rsp, 0x20
push qword [0x14000e71c]
movabs rcx, str.deutsch
pop rdx
sub rsp, 0x10
call fcn.14000a130
add rsp, 0x10
or rax, rax
je 0x140001326
movabs rdx, str.Fortfahren_
lea rcx, [0x14000e724]
call fcn.14000a190
movabs rdx, str.Fehler_
lea rcx, [0x14000e72c]
call fcn.14000a190
movabs rdx, str.Einige_Include_Dateien_konnten_nicht_erstellt_werden.
lea rcx, [0x14000e734]
call fcn.14000a190
movabs rdx, str.Nicht_gen
lea rcx, [0x14000e73c]
call fcn.14000a190
movabs rdx, str.Falsches_Passwort.
lea rcx, [0x14000e744]
call fcn.14000a190
movabs rdx, 0x14000d12c
lea rcx, [0x14000e74c]
call fcn.14000a190
movabs rdx, str.Die_Datei
lea rcx, [0x14000e754]
call fcn.14000a190
movabs rdx, str._existiert_bereits_im_aktuellen_Arbeitsverzeichnis.
lea rcx, [0x14000e75c]
call fcn.14000a190
movabs rdx, str.Ein_unbekannter_Fehler_ist_aufgetreten._Das_Programm_wird_beendet.
lea rcx, [0x14000e764]
call fcn.14000a190
movabs rdx, str.Das_Programm_wird_von_diesem_Betriebssytem_nicht_unterst
lea rcx, [0x14000e76c]
call fcn.14000a190
movabs rdx, str.Bitte_w
lea rcx, [0x14000e774]
call fcn.14000a190
movabs rdx, str.Passwort
lea rcx, [0x14000e77c]
call fcn.14000a190
movabs rdx, str.Bitte_geben_Sie_das_Passwort_ein.
lea rcx, [0x14000e784]
call fcn.14000a190
jmp 0x140001444
movabs rdx, str.Continue_
lea rcx, [0x14000e724]
call fcn.14000a190
movabs rdx, 0x14000d0e8
lea rcx, [0x14000e72c]
call fcn.14000a190
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x14000e734]
call fcn.14000a190
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x14000e73c]
call fcn.14000a190
movabs rdx, str.Wrong_password.
lea rcx, [0x14000e744]
call fcn.14000a190
movabs rdx, 0x14000d016
lea rcx, [0x14000e74c]
call fcn.14000a190
movabs rdx, str.The_file
lea rcx, [0x14000e754]
call fcn.14000a190
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x14000e75c]
call fcn.14000a190
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x14000e764]
call fcn.14000a190
movabs rdx, 0x14000d0ef
lea rcx, [0x14000e76c]
call fcn.14000a190
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x14000e774]
call fcn.14000a190
movabs rdx, str.Password
lea rcx, [0x14000e77c]
call fcn.14000a190
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x14000e784]
call fcn.14000a190
add rsp, 0xffffffffffffffe0
call fcn.1400055f8
add rsp, 0x20
mov r15, rax
cmp r15, 0x32
jge 0x140001481
push 0x10
push qword [0x14000e76c]
push qword [0x14000e72c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x20
jmp 0x1400022fe
lea rax, [0x140002aeb]
mov rax, rax
push rax
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140005270
add rsp, 0x20
add rsp, 0xffffffffffffffe0
call fcn.140004e04
add rsp, 0x20
mov qword [0x14000e794], rax
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_GetModuleHandleA
add rsp, 0x20
mov qword [0x14000e79c], rax
mov r15, qword [0x14000e794]
and r15, r15
jle 0x14000159e
mov qword [0x14000e7a4], 0
mov r15, qword [0x14000e794]
dec r15
cmp r15, qword [0x14000e7a4]
jl 0x14000159e
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000e7a4]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004d98
add rsp, 0x28
lea rcx, [0x14000e7ac]
pop rdx
call fcn.14000a070
push qword [0x14000e7ac]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.SHLWAPI.dll_PathQuoteSpacesA
add rsp, 0x20
mov rcx, qword [0x14000e7b4]
push qword [0x14000ec10]
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
mov rcx, qword [0x14000e7ac]
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
movabs rcx, str.___
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
lea rcx, [0x14000e7b4]
pop rdx
call fcn.14000a070
inc qword [0x14000e7a4]
jmp 0x1400014e3
movabs rax, 0x14000d0e2
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x1400015e9
push qword [0x14000e714]
pop qword [0x14000e7bc]
add rsp, 0xfffffffffffffff8
push qword [0x14000e7bc]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002347
add rsp, 0x10
jmp 0x14000161e
push 0x10
push qword [0x14000e764]
push qword [0x14000e72c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x20
mov rax, 1
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
movabs rax, 0x14000d0e0
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x14000167f
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000e78c]
push qword [0x14000e714]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005740
add rsp, 0x28
lea rcx, [0x14000e7c4]
pop rdx
call fcn.14000a070
jmp 0x1400016b4
push 0x10
push qword [0x14000e764]
push qword [0x14000e72c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x20
mov rax, 1
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
movabs rax, 0x14000d0bd
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x1400016ff
push qword [0x14000e714]
pop qword [0x14000e7cc]
push qword [0x14000e78c]
pop qword [0x14000e6d4]
push qword [0x14000e7cc]
pop qword [0x14000e6bc]
jmp 0x140001734
push 0x10
push qword [0x14000e764]
push qword [0x14000e72c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x20
mov rax, 1
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
movabs rax, 0x14000d0cf
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x14000177d
push qword [0x14000e714]
pop qword [0x14000e7d4]
push qword [0x14000e78c]
pop qword [0x14000e6dc]
push qword [0x14000e7d4]
pop qword [0x14000e6c4]
movabs rax, 0x14000d0cd
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x1400017c6
push qword [0x14000e714]
pop qword [0x14000e7dc]
push qword [0x14000e78c]
pop qword [0x14000e6e4]
push qword [0x14000e7dc]
pop qword [0x14000e6cc]
movabs rax, 0x14000d0e4
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x140001bce
add rsp, 0xfffffffffffffff8
push 0xc80001
push qword [0x14000e77c]
push 0x6e
push 0xc8
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140006da8
add rsp, 0x40
push qword [0x14000e784]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140005de0
add rsp, 0x30
add rsp, 0xfffffffffffffff8
push 0x20
movabs rax, 0x14000d00d
push rax
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140005f5c
add rsp, 0x40
movabs rax, 0x14000d2ba
push rax
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.14000629c
add rsp, 0x30
push 4
push 0xd
push 0
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140006e0c
add rsp, 0x20
push 2
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400062c4
add rsp, 0x20
add rsp, 0xffffffffffffffe0
call fcn.1400070d0
add rsp, 0x20
mov rax, rax
push rax
mov r15, 0x10
cmp r15, qword [rsp]
jne 0x140001954
add rsp, 0xfffffffffffffff8
push qword [0x14000e704]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x14000e6ac], rax
add rsp, 0xfffffffffffffff8
jmp 0x1400022fe
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x1400019de
add rsp, 0xfffffffffffffff8
add rsp, 0xffffffffffffffe0
call fcn.1400070d8
add rsp, 0x28
mov rax, rax
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x1400019d8
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push 2
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400062f4
add rsp, 0x28
lea rcx, [0x14000e7e4]
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.14000a070
add rsp, 0x20
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006754
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a66
pop rax
jmp 0x140001a60
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x140001a60
add rsp, 0xfffffffffffffff8
add rsp, 0xffffffffffffffe0
call fcn.1400070f0
add rsp, 0x28
mov rax, rax
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x140001a5f
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push 2
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400062f4
add rsp, 0x28
lea rcx, [0x14000e7e4]
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.14000a070
add rsp, 0x20
push 0
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140006754
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a66
pop rax
pop rax
jmp 0x140001906
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000e7e4]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004360
add rsp, 0x28
mov rax, rax
push rax
mov rax, qword [0x14000e7e4]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009150
add rsp, 0x28
inc qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000e78c]
push qword [0x14000e714]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005740
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14000ec10], rdx
add rdx, qword [0x14000ec20]
add rcx, qword [0x14000ec20]
sub rsp, 0x10
call fcn.14000a130
add rsp, 0x10
or rax, rax
jne 0x140001b50
push 0x10
push qword [0x14000e744]
push qword [0x14000e72c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x20
push qword [0x14000e704]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, 1
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
movabs rax, 0x14000d0e6
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x140001b81
push qword [0x14000e714]
pop qword [0x14000e7ec]
add rsp, 0xfffffffffffffff8
push qword [0x14000e6e4]
push qword [0x14000e6dc]
push qword [0x14000e6d4]
push qword [0x14000e7ec]
push qword [0x14000e7dc]
push qword [0x14000e7d4]
push qword [0x14000e7cc]
push qword [0x14000e7e4]
push qword [0x14000e79c]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.140002539
add rsp, 0x50
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000e6d4]
push qword [0x14000e6bc]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005740
add rsp, 0x28
lea rcx, [0x14000e7f4]
pop rdx
call fcn.14000a070
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000e6dc]
push qword [0x14000e6c4]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005740
add rsp, 0x28
lea rcx, [0x14000e7fc]
pop rdx
call fcn.14000a070
movabs rax, 0x14000d0cb
push rax
push qword [0x14000e79c]
pop rcx
pop rdx
add rsp, 0xfffffffffffffff0
call fcn.140002b2c
add rsp, 0x10
and rax, rax
je 0x14000206b
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push 0
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004d98
add rsp, 0x28
inc qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000e78c]
push qword [0x14000e714]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140005740
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x14000ec10], rdx
add rdx, qword [0x14000ec20]
add rcx, qword [0x14000ec20]
sub rsp, 0x10
call fcn.14000a130
add rsp, 0x10
or rax, rax
je 0x140001cfe
mov r15, qword [0x14000e794]
cmp r15, 1
jne 0x140001cfe
mov rax, 1
jmp 0x140001d01
xor rax, rax
and rax, rax
je 0x14000206b
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400081f0
add rsp, 0x20
inc qword [0x14000ec10]
push qword [0x14000e774]
mov rdx, qword [0x14000ec20]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004924
add rsp, 0x28
lea rcx, [0x14000e804]
pop rdx
call fcn.14000a070
mov rcx, qword [0x14000e804]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a130
add rsp, 0x10
or rax, rax
jne 0x140001fcd
mov rcx, qword [0x14000e804]
push qword [0x14000ec10]
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
lea rcx, [0x14000e6fc]
pop rdx
call fcn.14000a070
mov rcx, qword [0x14000e7fc]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a130
add rsp, 0x10
or rax, rax
jne 0x140001de6
add rsp, 0xfffffffffffffff8
push qword [0x14000e7fc]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002be0
add rsp, 0x10
push qword [0x14000e7c4]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008870
add rsp, 0x20
and rax, rax
je 0x140001f81
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008490
add rsp, 0x20
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e754]
push qword [0x14000ec10]
add rsp, 0xffffffffffffffe0
call fcn.14000a280
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a280
add rsp, 0x20
mov rcx, qword [0x14000e7c4]
add rsp, 0xffffffffffffffe0
call fcn.14000a280
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a280
add rsp, 0x20
mov rcx, qword [0x14000e75c]
add rsp, 0xffffffffffffffe0
call fcn.14000a280
add rsp, 0x20
inc qword [0x14000ec10]
push qword [0x14000e74c]
mov rdx, qword [0x14000ec20]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x28
pop qword [0x14000ec10]
mov qword [0x14000e80c], rax
mov r15, qword [0x14000e80c]
cmp r15, 7
jne 0x140001f81
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004e20
add rsp, 0x20
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008250
add rsp, 0x28
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082f0
add rsp, 0x28
pop qword [0x14000ec10]
push qword [0x14000e704]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
push qword [0x14000e7c4]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008690
add rsp, 0x20
and rax, rax
je 0x140001fcd
push qword [0x14000e7f4]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008890
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008490
add rsp, 0x20
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004e20
add rsp, 0x20
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008250
add rsp, 0x28
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082f0
add rsp, 0x28
pop qword [0x14000ec10]
push qword [0x14000e704]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
mov rcx, qword [0x14000e704]
push qword [0x14000ec10]
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
movabs rcx, 0x14000d0bb
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
mov rcx, qword [0x14000e7c4]
add rsp, 0xffffffffffffffd8
call fcn.14000a280
add rsp, 0x28
lea rcx, [0x14000e7c4]
pop rdx
call fcn.14000a070
push qword [0x14000e7c4]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008690
add rsp, 0x20
and rax, rax
je 0x14000210b
push qword [0x14000e7f4]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008890
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008490
add rsp, 0x20
jmp 0x14000216d
push qword [0x14000e7c4]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008304
add rsp, 0x20
call fcn.140002a4f
push 0x10
push qword [0x14000e764]
push qword [0x14000e72c]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.1400048a4
add rsp, 0x20
push qword [0x14000e704]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
mov rax, 1
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
mov rcx, qword [0x14000e7fc]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a130
add rsp, 0x10
or rax, rax
jne 0x1400021a1
add rsp, 0xfffffffffffffff8
push qword [0x14000e7fc]
pop rcx
add rsp, 0xfffffffffffffff8
call fcn.140002be0
add rsp, 0x10
push qword [0x14000e6fc]
movabs rax, 0x14000d0d1
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ef8
add rsp, 0x20
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000e70c]
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400044a0
add rsp, 0x28
inc qword [0x14000ec10]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x14000ec20]
add qword [rsp + 8], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ef8
add rsp, 0x28
pop qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000e7b4]
push qword [0x14000e6fc]
push qword [0x14000e7c4]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe8
call fcn.140003647
add rsp, 0x20
call fcn.140002a4f
push qword [0x14000e7c4]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008304
add rsp, 0x20
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
add rsp, 0xfffffffffffffff8
push qword [0x14000ec10]
push qword [0x14000ec10]
push qword [0x14000ec10]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004e20
add rsp, 0x20
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008250
add rsp, 0x28
inc qword [0x14000ec10]
mov rdx, qword [0x14000ec20]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082f0
add rsp, 0x28
pop qword [0x14000ec10]
push qword [0x14000e704]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e6ac], rax
jmp 0x1400022fe
call 0x14000231b
mov rcx, qword [0x14000e69c]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x14000e6ac]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140004f80
call fcn.1400055d0
call fcn.140005710
call fcn.140005bbc
call fcn.14000686c
call fcn.140008500
call fcn.1400090fc
add rsp, 0x28
ret