Function at 0x1400036e5
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rax, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x1400036f4
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000e900
add rsp, 0x10
mov qword [rsp + 0x30], 1
push qword [0x1400149bc]
pop rcx
call fcn.14000ab6c
push qword [0x140015020]
sub rsp, 8
push qword [0x140015020]
movabs rax, 0x140013023
push rax
push qword [rsp + 0x50]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140005350
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000e770
mov rcx, qword [rsp + 0x38]
xor rdx, rdx
call fcn.14000e830
or rax, rax
jne 0x140003816
mov r15, qword [rsp + 0x30]
mov rax, r15
mov rcx, 2
cqo
idiv rcx
mov r15, rdx
and r15, r15
jne 0x1400037df
push qword [rsp + 0x38]
pop rcx
call fcn.1400054b0
mov rax, rax
push rax
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x140014aac]
imul r15, r15, 0xc
add rbp, r15
pop rax
mov dword [rbp + 8], eax
mov r15, qword [rsp + 0x40]
inc r15
mov qword [rsp + 0x40], r15
jmp 0x140003814
mov rcx, qword [rsp + 0x38]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x140014aac]
imul r15, r15, 0xc
add rbp, r15
lea rcx, [rbp]
pop rdx
call fcn.14000e770
jmp 0x140003818
jmp 0x14000382a
mov r15, qword [rsp + 0x30]
inc r15
mov qword [rsp + 0x30], r15
jmp 0x140003738
push qword [rsp + 0x40]
pop rax
mov qword [0x140014924], rax
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x48]
jl 0x140003b2f
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x140014aac]
imul r15, r15, 0xc
add rbp, r15
mov rcx, qword [rbp]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.14000e770
push qword [0x140015020]
sub rsp, 8
push qword [rsp + 0x60]
push qword [0x140015020]
movabs rcx, str.b2eincfile
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
push qword [0x140015020]
sub rsp, 8
push qword [0x140015020]
mov r15, qword [rsp + 0x80]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400052f0
add rsp, 0x28
pop rax
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140006014
add rsp, 0x28
pop qword [0x140015020]
mov r15, qword [0x1400148ec]
cmp r15, 1
je 0x140003929
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
call fcn.14000b4e0
and rax, rax
je 0x140003929
mov rax, 1
jmp 0x14000392c
xor rax, rax
and rax, rax
je 0x140003a1c
push 1
pop rcx
call fcn.14000aed0
push qword [0x140015020]
sub rsp, 8
push 0x23
mov rcx, qword [0x140014914]
push qword [0x140015020]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
mov rcx, qword [rsp + 0x70]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
movabs rcx, 0x140013021
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
mov rcx, qword [0x14001493c]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
inc qword [0x140015020]
push qword [0x1400149ec]
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005880
add rsp, 0x28
pop qword [0x140015020]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x140003a04
jmp 0x140003b24
mov r15, qword [rsp + 0x58]
cmp r15, 2
jne 0x140003a1c
call fcn.1400041ed
xor rax, rax
jmp 0x140003cb5
push qword [rsp + 0x50]
push 1
pop rcx
pop rdx
call fcn.14000b2d0
and rax, rax
je 0x140003ad8
mov r15, qword [rsp + 0x48]
mov rbp, qword [0x140014aac]
imul r15, r15, 0xc
add rbp, r15
movsxd rax, dword [rbp + 8]
push rax
pop rax
mov qword [rsp + 0x60], rax
push qword [rsp + 0x60]
mov r15, qword [0x140014a8c]
add r15, qword [rsp + 0x70]
mov rax, r15
push rax
push 1
pop rcx
pop rdx
pop r8
call fcn.14000b680
push 1
pop rcx
call fcn.14000aed0
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x60]
mov qword [rsp + 0x68], r15
push qword [0x140014abc]
pop rcx
call fcn.1400065c4
mov rcx, qword [rsp + 0x50]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
mov rbp, qword [0x140014ac4]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.14000e770
push qword [rsp + 0x50]
pop rcx
call fcn.14000cd10
mov rax, rax
push rax
pop rax
mov dword [rbp + 0x18], eax
jmp 0x140003b24
mov rcx, qword [rsp + 0x70]
push qword [0x140015020]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
movabs rcx, 0x140013151
sub rsp, 0x28
call fcn.14000e890
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.14000e770
inc qword [rsp + 0x48]
jno 0x14000383f
push qword [0x140015020]
sub rsp, 8
push qword [0x140015020]
sub rsp, 8
push qword [0x140015020]
push qword [0x140015020]
push qword [0x140015020]
movabs rax, 0x140013151
push rax
push qword [rsp + 0xb0]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005820
add rsp, 0x20
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400051d0
add rsp, 0x28
mov rdx, qword [0x140015030]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140005060
add rsp, 0x28
pop qword [0x140015020]
mov r15, rax
and r15, r15
jle 0x140003ca9
push qword [0x140015020]
sub rsp, 8
push 0x24
mov rcx, qword [0x14001495c]
push qword [0x140015020]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
movabs rcx, str._r_n_r_n
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
mov rcx, qword [rsp + 0x90]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
movabs rcx, 0x140013151
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
mov rcx, qword [0x14001490c]
sub rsp, 0x20
call fcn.14000e890
add rsp, 0x20
inc qword [0x140015020]
push qword [0x140014a84]
mov rdx, qword [0x140015030]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140005880
add rsp, 0x28
pop qword [0x140015020]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, 7
jne 0x140003ca9
call fcn.1400041ed
push qword [0x1400149d4]
pop rcx
call fcn.14000acf0
push qword [0x140014a7c]
pop rcx
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x1400148e4], rax
jmp 0x14000279b
mov rax, 1
jmp 0x140003cb5
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14000e970
add rsp, 0x28
mov rcx, qword [rsp + 0x78]
sub rsp, 0x28
call fcn.14000e970
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14000e970
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.14000e970
add rsp, 0x28
pop rax
add rsp, 0x78
pop r15
pop rbp
ret