Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x238
xor rdx, rdx
movabs rcx, 0x140017954
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x14001795c], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x140017954], rax
call fcn.140011830
call fcn.140011560
call fcn.14000f290
call fcn.14000ea94
call fcn.14000e050
call fcn.14000dbd4
call fcn.14000d9a0
call fcn.14000d7cc
call fcn.14000d738
call fcn.14000c0a0
call fcn.14000ace8
call fcn.1400098f4
call fcn.1400094a0
call fcn.140008c1c
call fcn.140008748
mov rcx, qword [0x140017b64]
call fcn.1400094cc
mov r9, 7
movabs r8, 0x140016290
lea rdx, [0x140017b64]
mov rcx, 0xc
call fcn.1400093c0
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140017b54
push rax
sub rsp, 0x20
movabs r9, 0x1400162b0
mov r8, 7
mov rcx, 0xc
call fcn.1400113dc
add rsp, 0x30
mov qword [0x140017b54], rax
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x140017b84]
xor r8, r8
mov rdx, 0x15
mov rcx, 8
sub rsp, 0x20
call fcn.14000f2bc
add rsp, 0x28
add rsp, 8
mov rcx, qword [0x140017b74]
call fcn.1400094cc
mov r9, 7
movabs r8, 0x1400162a0
lea rdx, [0x140017b74]
mov rcx, 0xc
call fcn.1400093c0
movabs rdx, str.Continue_
lea rcx, [0x14001798c]
call fcn.1400118c0
movabs rdx, str.Error_
lea rcx, [0x140017b24]
call fcn.1400118c0
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x1400179dc]
call fcn.1400118c0
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x140017a84]
call fcn.1400118c0
movabs rdx, str.Wrong_password.
lea rcx, [0x140017acc]
call fcn.1400118c0
movabs rdx, 0x140016025
lea rcx, [0x140017a8c]
call fcn.1400118c0
movabs rdx, str.The_file
lea rcx, [0x140017994]
call fcn.1400118c0
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x1400179bc]
call fcn.1400118c0
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x140017a7c]
call fcn.1400118c0
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140017af4]
call fcn.1400118c0
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140017ac4]
call fcn.1400118c0
movabs rdx, str.Password
lea rcx, [0x140017afc]
call fcn.1400118c0
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x140017a1c]
call fcn.1400118c0
call fcn.14000aa0c
mov r15, rax
cmp r15, 0x32
jge 0x1400012b5
movabs r8, 0x10
mov rdx, qword [0x140017af4]
mov rcx, qword [0x140017b24]
call fcn.140008784
jmp 0x1400029dd
lea rax, [0x14000337c]
mov rcx, rax
call fcn.140008fa0
call fcn.140008e24
mov qword [0x140017adc], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140017a3c], rax
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017ad4]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017ad4]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140017adc]
and r15, r15
jle 0x1400014d6
mov qword [0x1400179e4], 0
mov r15, qword [0x140017adc]
dec r15
cmp r15, qword [0x1400179e4]
jl 0x140001403
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x1400179e4]
pop rdx
sub rsp, 0x20
call fcn.140008db8
add rsp, 0x28
lea rcx, [0x140017aac]
pop rdx
call fcn.1400119b0
push qword [0x140017aac]
movabs rcx, str._b2epass
pop rdx
call fcn.140011a70
or rax, rax
je 0x1400013b7
mov qword [0x1400179d4], 1
jmp 0x1400013f6
mov r15, qword [0x1400179d4]
cmp r15, 1
jne 0x1400013f6
mov rcx, qword [0x140017aac]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017b0c]
pop rdx
call fcn.1400119b0
mov qword [0x1400179d4], 0
inc qword [0x1400179e4]
jno 0x140001349
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400180e0]
push rdx
push rdx
sub rsp, 8
push qword [0x1400180e0]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x1400180e0]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017a24]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017ad4]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
movabs rcx, 0x14001601f
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
mov rcx, qword [0x140017a24]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a24]
pop rdx
call fcn.1400119b0
jmp 0x1400014fd
mov rcx, qword [0x140017ad4]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a24]
pop rdx
call fcn.1400119b0
movabs rax, 0x140016087
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140001537
mov rax, qword [0x140017974]
mov qword [0x140017a9c], rax
mov rcx, qword [0x140017a9c]
call fcn.140003572
jmp 0x140001567
movabs r8, 0x10
mov rdx, qword [0x140017a7c]
mov rcx, qword [0x140017b24]
call fcn.140008784
mov rax, 1
mov qword [0x140017964], rax
jmp 0x1400029dd
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x1400015be
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001799c]
mov rcx, qword [0x140017974]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x140017a74]
pop rdx
call fcn.1400119b0
jmp 0x1400015ee
movabs r8, 0x10
mov rdx, qword [0x140017a7c]
mov rcx, qword [0x140017b24]
call fcn.140008784
mov rax, 1
mov qword [0x140017964], rax
jmp 0x1400029dd
movabs rax, 0x14001606e
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140001638
mov rax, qword [0x140017974]
mov qword [0x1400179ec], rax
mov rax, qword [0x14001799c]
mov qword [0x14001797c], rax
mov rax, qword [0x1400179ec]
mov qword [0x140017aec], rax
jmp 0x140001668
movabs r8, 0x10
mov rdx, qword [0x140017a7c]
mov rcx, qword [0x140017b24]
call fcn.140008784
mov rax, 1
mov qword [0x140017964], rax
jmp 0x1400029dd
movabs rax, 0x140016074
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x1400016b0
mov rax, qword [0x140017974]
mov qword [0x1400179fc], rax
mov rax, qword [0x14001799c]
mov qword [0x140017a0c], rax
mov rax, qword [0x1400179fc]
mov qword [0x140017a94], rax
movabs rax, 0x140016072
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x1400016f8
mov rax, qword [0x140017974]
mov qword [0x1400179f4], rax
mov rax, qword [0x14001799c]
mov qword [0x140017984], rax
mov rax, qword [0x1400179f4]
mov qword [0x140017b2c], rax
movabs rax, 0x140016089
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140001b42
mov rcx, qword [0x140017b0c]
xor rdx, rdx
call fcn.140011a70
or rax, rax
jne 0x14000175a
mov rcx, qword [0x140017b0c]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017abc]
pop rdx
call fcn.1400119b0
jmp 0x140001a01
sub rsp, 8
push 0xc80001
push qword [0x140017afc]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b0d0
add rsp, 0x40
push qword [0x140017a1c]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.140009d14
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001601e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.140009f7c
add rsp, 0x40
movabs rax, 0x14001620b
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.14000a430
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.14000b134
movabs rcx, 2
call fcn.14000a458
call fcn.14000b3a0
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x1400018eb
sub rsp, 8
mov rcx, qword [0x140017b1c]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x140017964], rax
add rsp, 0xfffffffffffffff8
jmp 0x1400029dd
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001977
sub rsp, 8
sub rsp, 0x20
call fcn.14000ebd0
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x140001971
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000a4a4
add rsp, 0x28
lea rcx, [0x140017abc]
pop rdx
sub rsp, 0x20
call fcn.1400119b0
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
jmp 0x1400019fb
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x1400019fb
sub rsp, 8
sub rsp, 0x20
call fcn.14000ebec
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x1400019fa
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000a4a4
add rsp, 0x28
lea rcx, [0x140017abc]
pop rdx
sub rsp, 0x20
call fcn.1400119b0
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000ab88
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
pop rax
jmp 0x1400018a8
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140017abc]
sub rsp, 0x20
call fcn.140005060
add rsp, 0x28
push rax
mov rax, qword [0x140017abc]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000fa90
add rsp, 0x28
inc qword [0x1400180e0]
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rdx, qword [0x14001799c]
mov rcx, qword [0x140017974]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x1400180e0], rdx
add rdx, qword [0x1400180f0]
add rcx, qword [0x1400180f0]
call fcn.140011a70
or rax, rax
jne 0x140001acb
movabs r8, 0x10
mov rdx, qword [0x140017acc]
mov rcx, qword [0x140017b24]
call fcn.140008784
mov rcx, qword [0x140017b1c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x140017964], rax
jmp 0x1400029dd
movabs rax, 0x14001608b
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140001af7
mov rax, qword [0x140017974]
mov qword [0x140017ae4], rax
sub rsp, 8
push qword [0x140017984]
push qword [0x140017a0c]
push qword [0x14001797c]
push qword [0x140017ae4]
push qword [0x1400179f4]
mov r9, qword [0x1400179fc]
mov r8, qword [0x1400179ec]
mov rdx, qword [0x140017abc]
mov rcx, qword [0x140017a3c]
sub rsp, 0x20
call fcn.14000441d
add rsp, 0x50
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x14001797c]
mov rcx, qword [0x140017aec]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x140017a6c]
pop rdx
call fcn.1400119b0
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017a0c]
mov rcx, qword [0x140017a94]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x1400179c4]
pop rdx
call fcn.1400119b0
movabs rax, 0x140016070
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140001f66
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140008db8
add rsp, 0x28
inc qword [0x1400180e0]
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rdx, qword [0x14001799c]
mov rcx, qword [0x140017974]
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x1400180e0], rdx
add rdx, qword [0x1400180f0]
add rcx, qword [0x1400180f0]
call fcn.140011a70
or rax, rax
je 0x140001c5b
mov r15, qword [0x140017adc]
cmp r15, 1
jne 0x140001c5b
mov rax, 1
jmp 0x140001c5e
xor rax, rax
and rax, rax
je 0x140001f66
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400180e0]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000dbec
add rsp, 0x20
inc qword [0x1400180e0]
push qword [0x140017ac4]
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008838
add rsp, 0x28
lea rcx, [0x1400179b4]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x1400179b4]
xor rdx, rdx
call fcn.140011a70
or rax, rax
jne 0x140001ee4
mov rcx, qword [0x1400179b4]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a5c]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017a5c]
call fcn.14000dc4c
mov rcx, qword [0x1400179c4]
xor rdx, rdx
call fcn.140011a70
or rax, rax
jne 0x140001d2d
mov rcx, qword [0x1400179c4]
call fcn.140003724
mov rdx, qword [0x140017a74]
movabs rcx, 1
call fcn.14000e5c0
and rax, rax
je 0x140001ea4
movabs rcx, 1
call fcn.14000dfb0
push qword [0x1400180e0]
sub rsp, 8
push 0x24
mov rcx, qword [0x140017994]
push qword [0x1400180e0]
sub rsp, 0x20
call fcn.140011ad0
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.140011ad0
add rsp, 0x20
mov rcx, qword [0x140017a74]
sub rsp, 0x20
call fcn.140011ad0
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.140011ad0
add rsp, 0x20
mov rcx, qword [0x1400179bc]
sub rsp, 0x20
call fcn.140011ad0
add rsp, 0x20
inc qword [0x1400180e0]
push qword [0x140017a8c]
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008784
add rsp, 0x28
pop qword [0x1400180e0]
mov qword [0x140017a64], rax
mov r15, qword [0x140017a64]
cmp r15, 7
jne 0x140001ea4
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rcx, qword [0x1400180e0]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc68
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000dc4c
add rsp, 0x28
pop qword [0x1400180e0]
mov rcx, qword [0x140017b1c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017964], rax
jmp 0x1400029dd
mov rdx, qword [0x140017a74]
movabs rcx, 1
call fcn.14000e3b0
and rax, rax
je 0x140001ee4
mov rdx, qword [0x140017a6c]
movabs rcx, 1
call fcn.14000e6b0
movabs rcx, 1
call fcn.14000dfb0
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rcx, qword [0x1400180e0]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc68
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000dc4c
add rsp, 0x28
pop qword [0x1400180e0]
mov rcx, qword [0x140017b1c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017964], rax
jmp 0x1400029dd
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140002137
movabs rcx, 0x400
call fcn.14000db00
mov qword [0x140017a2c], rax
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000dd04
add rsp, 0x28
lea rcx, [0x140017b3c]
pop rdx
call fcn.1400119b0
push qword [0x140017a2c]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017b3c]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017a2c]
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017b14]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017a2c]
call fcn.14000db20
mov rcx, qword [0x140017b14]
call fcn.14000ddd0
mov rcx, qword [0x140017b14]
call fcn.14000ddd8
mov rcx, qword [0x140017b14]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140017b14]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a54]
pop rdx
call fcn.1400119b0
mov rdx, qword [0x140017a54]
movabs rcx, 0
call fcn.14000e3b0
mov r8, qword [0x14001799c]
mov rdx, qword [0x140017974]
movabs rcx, 0
call fcn.14000e760
movabs rcx, 0
call fcn.14000dfb0
mov rcx, qword [0x140017a54]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a44]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017a44]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x140017a44]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140008f18
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140008f18
mov rcx, qword [0x140017b1c]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
mov rcx, qword [0x140017a74]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a74]
pop rdx
call fcn.1400119b0
mov rdx, qword [0x140017a74]
movabs rcx, 1
call fcn.14000e3b0
and rax, rax
je 0x140002418
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000e7f0
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x1400180e0]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
inc qword [0x1400180e0]
movabs rax, str.b2eargs
push rax
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x1400180e0]
mov rdx, qword [0x140017a6c]
movabs rcx, 1
call fcn.14000e7f0
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x140017a3c]
call fcn.140004251
and rax, rax
je 0x140002407
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
movabs rbp, 0x14001636d
mov r15, rbp
movabs rbp, 0x1400162c0
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400162c0
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000da50
add rsp, 0x28
lea rcx, [0x140017a04]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017a04]
call fcn.140005060
mov qword [0x140017a34], rax
mov rcx, qword [0x140017a34]
call fcn.14000db00
mov qword [0x140017a4c], rax
mov rcx, qword [0x140017a34]
call fcn.14000db00
mov qword [0x140017a14], rax
mov rdx, qword [0x140017a04]
mov rcx, qword [0x140017a4c]
call fcn.14000db40
mov qword [0x1400179e4], 0
mov rax, qword [0x140017a34]
cmp rax, qword [0x1400179e4]
jl 0x1400023ae
mov r15, qword [0x140017a4c]
add r15, qword [0x1400179e4]
mov rax, r15
mov rcx, rax
call fcn.14000db70
mov r15, rax
imul r15, r15, 0xffffffffffffffff
mov rax, r15
push rax
mov r15, qword [0x140017a14]
add r15, qword [0x1400179e4]
mov rax, r15
mov rcx, rax
pop rdx
call fcn.14000db80
inc qword [0x1400179e4]
jno 0x140002357
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
mov rcx, qword [0x140017a14]
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
inc qword [0x1400180e0]
push 1
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e7f0
add rsp, 0x28
pop qword [0x1400180e0]
movabs rcx, 1
call fcn.14000dfb0
jmp 0x140002465
mov rcx, qword [0x140017a74]
call fcn.14000ddd0
call fcn.14000482f
movabs r8, 0x10
mov rdx, qword [0x140017a7c]
mov rcx, qword [0x140017b24]
call fcn.140008784
mov rcx, qword [0x140017b1c]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x140017964], rax
jmp 0x1400029dd
mov rcx, qword [0x1400179c4]
xor rdx, rdx
call fcn.140011a70
or rax, rax
jne 0x140002485
mov rcx, qword [0x1400179c4]
call fcn.140003724
movabs rcx, 0x400
call fcn.14000db00
mov qword [0x140017b04], rax
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000dd04
add rsp, 0x28
lea rcx, [0x1400179ac]
pop rdx
call fcn.1400119b0
push qword [0x140017b04]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x1400179ac]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017b04]
pop rdx
sub rsp, 0x20
call fcn.14000d9d0
add rsp, 0x28
lea rcx, [0x140017b34]
pop rdx
call fcn.1400119b0
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005090
add rsp, 0x28
lea rcx, [0x140017aa4]
pop rdx
call fcn.1400119b0
push qword [0x1400180e0]
sub rsp, 8
push 0x800
push qword [0x140017aa4]
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x1400180e0]
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x1400180e0]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x28
inc qword [0x1400180e0]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x1400180e0]
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rcx, qword [0x1400180e0]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000df2c
add rsp, 0x28
inc qword [0x1400180e0]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x1400180e0]
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rcx, qword [0x1400180e0]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc68
add rsp, 0x28
inc qword [0x1400180e0]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x1400180e0]
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
mov rcx, qword [0x140017aa4]
sub rsp, 0x20
call fcn.1400051d0
add rsp, 0x28
inc qword [0x1400180e0]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x1400180e0]
mov rcx, qword [0x140017a5c]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017b4c]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017b4c]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140017b4c]
movabs rax, 0x140016076
mov rcx, rax
pop rdx
call fcn.140008f18
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
mov rcx, qword [0x1400179a4]
sub rsp, 0x20
call fcn.1400052f0
add rsp, 0x28
inc qword [0x1400180e0]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x1400180f0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f18
add rsp, 0x28
pop qword [0x1400180e0]
push qword [0x140017b34]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140008f18
mov rcx, qword [0x140017a74]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov rcx, qword [0x140017a74]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
movabs rcx, 0x14001601f
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
mov rcx, qword [0x140017a24]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
lea rcx, [0x140017a24]
pop rdx
call fcn.1400119b0
mov rcx, qword [0x140017a24]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
movabs rcx, 0x1400160cc
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
mov rcx, qword [0x140017a24]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
inc qword [0x1400180e0]
push qword [0x140017a5c]
mov rcx, qword [0x140017b44]
push qword [0x1400180e0]
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
movabs rcx, 0x140016107
sub rsp, 0x28
call fcn.140011ad0
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
mov rdx, qword [0x1400180f0]
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400033f4
add rsp, 0x28
pop qword [0x1400180e0]
call fcn.14000482f
mov rcx, qword [0x140017a74]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
mov rcx, qword [0x140017a74]
call fcn.14000ddd0
mov rcx, qword [0x140017b34]
call fcn.14000ddd0
mov rcx, qword [0x140017a54]
call fcn.14000ddd0
mov rax, qword [0x1400180e0]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x1400180e0]
push rdx
push rdx
mov rcx, qword [0x1400180e0]
sub rsp, 0x20
call fcn.140008e40
add rsp, 0x20
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000dc68
add rsp, 0x28
mov rdx, qword [0x1400180f0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000dc4c
add rsp, 0x28
pop qword [0x1400180e0]
mov rcx, qword [0x140017b14]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140017b1c]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017964], rax
jmp 0x1400029dd
call 0x1400029ff
call fcn.140011890
mov rcx, qword [0x140017954]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x140017964]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140009300
call fcn.140009984
call fcn.14000acc8
call fcn.14000c0f8
call fcn.14000d72c
call fcn.14000df38
call fcn.14000e040
call fcn.14000f104
call fcn.14000d9c0
add rsp, 0x28
ret