Function at 0x140002e4c
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rdx, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rdx
jne 0x140002e5b
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000a480
add rsp, 0x10
mov qword [rsp + 0x30], 1
push qword [0x14000e574]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082a0
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
movabs rax, 0x14000d014
push rax
push qword [rsp + 0x50]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400044b0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000a2c0
mov rcx, qword [rsp + 0x38]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000a380
add rsp, 0x10
or rax, rax
jne 0x140002f7b
mov r15, qword [rsp + 0x30]
and r15, 1
and r15, r15
jne 0x140002f44
push qword [rsp + 0x38]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004580
add rsp, 0x20
mov rax, rax
push rax
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e6a4]
imul r15, r15, 0xc
add rbp, r15
pop rax
mov dword [rbp + 8], eax
inc qword [rsp + 0x40]
jmp 0x140002f79
mov rcx, qword [rsp + 0x38]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e6a4]
imul r15, r15, 0xc
add rbp, r15
lea rcx, [rbp]
pop rdx
call fcn.14000a2c0
jmp 0x140002f7d
jmp 0x140002f87
inc qword [rsp + 0x30]
jmp 0x140002ea7
push qword [rsp + 0x40]
pop rax
mov qword [0x14000e584], rax
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x48]
jl 0x1400032e1
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e6a4]
imul r15, r15, 0xc
add rbp, r15
mov rcx, qword [rbp]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.14000a2c0
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x60]
push qword [0x14000eaa0]
movabs rcx, str.b2eincfile_
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
mov r15, qword [rsp + 0x80]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004450
add rsp, 0x28
pop rax
movabs rcx, 0x14000d012
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004ea8
add rsp, 0x28
pop qword [0x14000eaa0]
mov r15, qword [0x14000e56c]
cmp r15, 1
je 0x1400030ac
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400088c0
add rsp, 0x20
and rax, rax
je 0x1400030ac
mov rax, 1
jmp 0x1400030af
xor rax, rax
and rax, rax
je 0x1400031a7
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push 0x23
mov rcx, qword [0x14000e5c4]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
mov rcx, qword [rsp + 0x70]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
mov rcx, qword [0x14000e5cc]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
inc qword [0x14000eaa0]
push qword [0x14000e5bc]
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x28
pop qword [0x14000eaa0]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x14000318f
jmp 0x1400032d7
mov r15, qword [rsp + 0x58]
cmp r15, 2
jne 0x1400031a7
call fcn.140002c73
xor rax, rax
jmp 0x140003485
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.1400086e0
add rsp, 0x20
and rax, rax
je 0x14000328b
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e6a4]
imul r15, r15, 0xc
add rbp, r15
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [rsp + 0x60], rax
push qword [rsp + 0x60]
mov r15, qword [0x14000e544]
add r15, qword [rsp + 0x70]
mov rax, r15
push rax
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140008aa0
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400084e0
add rsp, 0x20
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x60]
mov qword [rsp + 0x68], r15
push qword [0x14000e6b4]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140005930
add rsp, 0x20
mov rcx, qword [rsp + 0x50]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
mov rbp, qword [0x14000e6bc]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.14000a2c0
push qword [rsp + 0x50]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400093d0
add rsp, 0x20
mov rax, rax
push rax
pop rax
mov dword [rbp + 0x18], eax
jmp 0x1400032d7
mov rcx, qword [rsp + 0x70]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
movabs rcx, 0x14000d0f9
add rsp, 0xffffffffffffffd8
call fcn.14000a3e0
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.14000a2c0
inc qword [rsp + 0x48]
jmp 0x140002f9c
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push qword [0x14000eaa0]
push qword [0x14000eaa0]
push qword [0x14000eaa0]
movabs rax, 0x14000d0f9
push rax
push qword [rsp + 0xb0]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004830
add rsp, 0x20
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004270
add rsp, 0x28
inc qword [0x14000eaa0]
mov rdx, qword [0x14000eab0]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041f0
add rsp, 0x28
pop qword [0x14000eaa0]
mov r15, rax
and r15, r15
jle 0x140003479
push qword [0x14000eaa0]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e5a4]
push qword [0x14000eaa0]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
movabs rcx, str._r_n_r_n
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
mov rcx, qword [rsp + 0x90]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
movabs rcx, 0x14000d0f9
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
mov rcx, qword [0x14000e594]
add rsp, 0xffffffffffffffe0
call fcn.14000a3e0
add rsp, 0x20
inc qword [0x14000eaa0]
push qword [0x14000e59c]
mov rdx, qword [0x14000eab0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004854
add rsp, 0x28
pop qword [0x14000eaa0]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x140003479
call fcn.140002c73
push qword [0x14000e60c]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400082b4
add rsp, 0x20
push qword [0x14000e57c]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e524], rax
jmp 0x140002558
mov rax, 1
jmp 0x140003485
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.14000a450
add rsp, 0x20
mov rcx, qword [rsp + 0x40]
sub rsp, 0x20
call fcn.14000a450
add rsp, 0x20
mov rcx, qword [rsp + 0x58]
sub rsp, 0x20
call fcn.14000a450
add rsp, 0x20
mov rcx, qword [rsp + 0x78]
sub rsp, 0x20
call fcn.14000a450
add rsp, 0x20
pop rax
add rsp, 0x78
pop r15
pop rbp
ret