Function at 0x140002d31
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rdx, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rdx
jne 0x140002d40
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000ab00
add rsp, 0x10
mov qword [rsp + 0x30], 1
push qword [0x14000e618]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a30
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
movabs rax, 0x14000d014
push rax
push qword [rsp + 0x50]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
add rsp, 0xffffffffffffffe0
call fcn.1400044a0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000a940
mov rcx, qword [rsp + 0x38]
xor rdx, rdx
sub rsp, 0x10
call fcn.14000aa00
add rsp, 0x10
or rax, rax
jne 0x140002e60
mov r15, qword [rsp + 0x30]
and r15, 1
and r15, r15
jne 0x140002e29
push qword [rsp + 0x38]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140004570
add rsp, 0x20
mov rax, rax
push rax
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
pop rax
mov dword [rbp + 8], eax
inc qword [rsp + 0x40]
jmp 0x140002e5e
mov rcx, qword [rsp + 0x38]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000aa60
add rsp, 0x28
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
lea rcx, [rbp]
pop rdx
call fcn.14000a940
jmp 0x140002e62
jmp 0x140002e6c
inc qword [rsp + 0x30]
jmp 0x140002d8c
push qword [rsp + 0x40]
pop rax
mov qword [0x14000e628], rax
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x48]
jl 0x1400031c6
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
mov rcx, qword [rbp]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000aa60
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.14000a940
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [rsp + 0x60]
push qword [0x14000eb60]
movabs rcx, 0x14000d08e
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
mov r15, qword [rsp + 0x80]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004440
add rsp, 0x28
pop rax
movabs rcx, 0x14000d012
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004e98
add rsp, 0x28
pop qword [0x14000eb60]
mov r15, qword [0x14000e610]
cmp r15, 1
je 0x140002f91
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140009050
add rsp, 0x20
and rax, rax
je 0x140002f91
mov rax, 1
jmp 0x140002f94
xor rax, rax
and rax, rax
je 0x14000308c
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x23
mov rcx, qword [0x14000e668]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
mov rcx, qword [rsp + 0x70]
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
movabs rcx, 0x14000d010
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
mov rcx, qword [0x14000e670]
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
inc qword [0x14000eb60]
push qword [0x14000e660]
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000eb60]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x140003074
jmp 0x1400031bc
mov r15, qword [rsp + 0x58]
cmp r15, 2
jne 0x14000308c
call fcn.140002b58
xor rax, rax
jmp 0x14000336a
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140008e70
add rsp, 0x20
and rax, rax
je 0x140003170
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x14000e750]
imul r15, r15, 0xc
add rbp, r15
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [rsp + 0x60], rax
push qword [rsp + 0x60]
mov r15, qword [0x14000e5e8]
add r15, qword [rsp + 0x70]
mov rax, r15
push rax
push 1
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140009120
add rsp, 0x20
push 1
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008c70
add rsp, 0x20
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x60]
mov qword [rsp + 0x68], r15
push qword [0x14000e760]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400060c0
add rsp, 0x20
mov rcx, qword [rsp + 0x50]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000aa60
add rsp, 0x28
mov rbp, qword [0x14000e768]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.14000a940
push qword [rsp + 0x50]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140009a50
add rsp, 0x20
mov rax, rax
push rax
pop rax
mov dword [rbp + 0x18], eax
jmp 0x1400031bc
mov rcx, qword [rsp + 0x70]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffd8
call fcn.14000aa60
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
add rsp, 0xffffffffffffffd8
call fcn.14000aa60
add rsp, 0x28
movabs rcx, 0x14000d11a
add rsp, 0xffffffffffffffd8
call fcn.14000aa60
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.14000a940
inc qword [rsp + 0x48]
jmp 0x140002e81
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push qword [0x14000eb60]
push qword [0x14000eb60]
push qword [0x14000eb60]
movabs rax, 0x14000d11a
push rax
push qword [rsp + 0xb0]
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004820
add rsp, 0x20
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
pop rdx
add rsp, 0xffffffffffffffe0
call fcn.140004260
add rsp, 0x28
inc qword [0x14000eb60]
mov rdx, qword [0x14000eb70]
add qword [rsp], rdx
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.1400041e0
add rsp, 0x28
pop qword [0x14000eb60]
mov r15, rax
and r15, r15
jle 0x14000335e
push qword [0x14000eb60]
add rsp, 0xfffffffffffffff8
push 0x24
mov rcx, qword [0x14000e648]
push qword [0x14000eb60]
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
movabs rcx, 0x14000d1e4
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
mov rcx, qword [rsp + 0x90]
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
movabs rcx, 0x14000d11a
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
mov rcx, qword [0x14000e638]
add rsp, 0xffffffffffffffe0
call fcn.14000aa60
add rsp, 0x20
inc qword [0x14000eb60]
push qword [0x14000e640]
mov rdx, qword [0x14000eb70]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
add rsp, 0xffffffffffffffe0
call fcn.140004844
add rsp, 0x28
pop qword [0x14000eb60]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x14000335e
call fcn.140002b58
push qword [0x14000e6b0]
pop rcx
add rsp, 0xffffffffffffffe0
call fcn.140008a44
add rsp, 0x20
push qword [0x14000e620]
pop rcx
add rsp, 0xffffffffffffffe0
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x20
xor rax, rax
mov qword [0x14000e5c8], rax
jmp 0x14000243d
mov rax, 1
jmp 0x14000336a
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x20
call fcn.14000aad0
add rsp, 0x20
mov rcx, qword [rsp + 0x40]
sub rsp, 0x20
call fcn.14000aad0
add rsp, 0x20
mov rcx, qword [rsp + 0x58]
sub rsp, 0x20
call fcn.14000aad0
add rsp, 0x20
mov rcx, qword [rsp + 0x78]
sub rsp, 0x20
call fcn.14000aad0
add rsp, 0x20
pop rax
add rsp, 0x78
pop r15
pop rbp
ret