Function at 0x140001000
Capabilities:
Accept command line arguments
Delete directory
Get common file path

Disassembly:
sub rsp, 0x28
mov r8, 0x220
xor rdx, rdx
movabs rcx, 0x140017a00
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140017a08], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x140017a00], rax
call fcn.140011ee0
call fcn.140011c10
call fcn.14000f940
call fcn.14000f144
call fcn.14000e700
call fcn.14000e284
call fcn.14000e080
call fcn.14000deac
call fcn.14000de18
call fcn.14000c780
call fcn.14000b3c8
call fcn.140009fd4
call fcn.140009b80
call fcn.140008c0c
call fcn.140008738
mov rcx, qword [0x140017bf8]
call fcn.140009bac
mov r9, 7
movabs r8, 0x140016280
lea rdx, [0x140017bf8]
mov rcx, 0xc
call fcn.140009aa0
mov rdx, 0x401
sub rsp, 8
movabs rax, 0x140017be8
push rax
sub rsp, 0x20
movabs r9, 0x1400162a0
mov r8, 7
mov rcx, 0xc
call fcn.140011a8c
add rsp, 0x30
mov qword [0x140017be8], rax
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x140017c18]
xor r8, r8
mov rdx, 0x15
mov rcx, 8
sub rsp, 0x20
call fcn.14000f96c
add rsp, 0x28
add rsp, 8
mov rcx, qword [0x140017c08]
call fcn.140009bac
mov r9, 7
movabs r8, 0x140016290
lea rdx, [0x140017c08]
mov rcx, 0xc
call fcn.140009aa0
movabs rdx, str.Continue_
lea rcx, [0x140017a38]
call fcn.140011f70
movabs rdx, str.Error_
lea rcx, [0x140017bc0]
call fcn.140011f70
movabs rdx, str.Can_not_create_some_of_your_include_files.
lea rcx, [0x140017a90]
call fcn.140011f70
movabs rdx, str.Can_not_allocate_the_memory.
lea rcx, [0x140017b18]
call fcn.140011f70
movabs rdx, str.Wrong_password.
lea rcx, [0x140017b68]
call fcn.140011f70
movabs rdx, 0x140016025
lea rcx, [0x140017b20]
call fcn.140011f70
movabs rdx, str.The_file
lea rcx, [0x140017a40]
call fcn.140011f70
movabs rdx, str._already_exists_in_the_current_directory._Overwrite_
lea rcx, [0x140017a68]
call fcn.140011f70
movabs rdx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea rcx, [0x140017b10]
call fcn.140011f70
movabs rdx, str.This_program_is_not_supported_on_your_operating_system.
lea rcx, [0x140017b90]
call fcn.140011f70
movabs rdx, str.Choose_a_location_to_save_the_files.
lea rcx, [0x140017b60]
call fcn.140011f70
movabs rdx, str.Password
lea rcx, [0x140017b98]
call fcn.140011f70
movabs rdx, str.Please_enter_the_password.
lea rcx, [0x140017ac0]
call fcn.140011f70
call fcn.14000b0ec
mov r15, rax
cmp r15, 0x32
jge 0x1400012b5
movabs r8, 0x10
mov rdx, qword [0x140017b90]
mov rcx, qword [0x140017bc0]
call fcn.140008774
jmp 0x14000285b
lea rax, [0x14000337c]
mov rcx, rax
call fcn.140009680
call fcn.140008e14
mov qword [0x140017b78], rax
movabs rcx, 0
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x140017ad8], rax
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017b70]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017b70]
call sub.SHLWAPI.DLL_PathRemoveArgsA
mov r15, qword [0x140017b78]
and r15, r15
jle 0x1400014d6
mov qword [0x140017a98], 0
mov r15, qword [0x140017b78]
dec r15
cmp r15, qword [0x140017a98]
jl 0x140001403
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017a98]
pop rdx
sub rsp, 0x20
call fcn.140008da8
add rsp, 0x28
lea rcx, [0x140017b48]
pop rdx
call fcn.140012060
push qword [0x140017b48]
movabs rcx, str._b2epass
pop rdx
call fcn.140012120
or rax, rax
je 0x1400013b7
mov qword [0x140017a80], 1
jmp 0x1400013f6
mov r15, qword [0x140017a80]
cmp r15, 1
jne 0x1400013f6
mov rcx, qword [0x140017b48]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017ba8]
pop rdx
call fcn.140012060
mov qword [0x140017a80], 0
inc qword [0x140017a98]
jno 0x140001349
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140018180]
push rdx
push rdx
sub rsp, 8
push qword [0x140018180]
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140018180]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017ac8]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017b70]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
movabs rcx, 0x14001601f
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
mov rcx, qword [0x140017ac8]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017ac8]
pop rdx
call fcn.140012060
jmp 0x1400014fd
mov rcx, qword [0x140017b70]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017ac8]
pop rdx
call fcn.140012060
movabs rax, 0x140016087
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x140001537
mov rax, qword [0x140017a20]
mov qword [0x140017b38], rax
mov rcx, qword [0x140017b38]
call fcn.1400033f4
jmp 0x140001567
movabs r8, 0x10
mov rdx, qword [0x140017b10]
mov rcx, qword [0x140017bc0]
call fcn.140008774
mov rax, 1
mov qword [0x140017a10], rax
jmp 0x14000285b
movabs rax, str.NOPSX
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x1400015be
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017a48]
mov rcx, qword [0x140017a20]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017b08]
pop rdx
call fcn.140012060
jmp 0x1400015ee
movabs r8, 0x10
mov rdx, qword [0x140017b10]
mov rcx, qword [0x140017bc0]
call fcn.140008774
mov rax, 1
mov qword [0x140017a10], rax
jmp 0x14000285b
movabs rax, 0x14001606e
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x140001638
mov rax, qword [0x140017a20]
mov qword [0x140017aa0], rax
mov rax, qword [0x140017a48]
mov qword [0x140017a28], rax
mov rax, qword [0x140017aa0]
mov qword [0x140017b88], rax
jmp 0x140001668
movabs r8, 0x10
mov rdx, qword [0x140017b10]
mov rcx, qword [0x140017bc0]
call fcn.140008774
mov rax, 1
mov qword [0x140017a10], rax
jmp 0x14000285b
movabs rax, 0x140016074
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x1400016b0
mov rax, qword [0x140017a20]
mov qword [0x140017ab0], rax
mov rax, qword [0x140017a48]
mov qword [0x140017ab8], rax
mov rax, qword [0x140017ab0]
mov qword [0x140017b30], rax
movabs rax, 0x140016072
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x1400016f8
mov rax, qword [0x140017a20]
mov qword [0x140017aa8], rax
mov rax, qword [0x140017a48]
mov qword [0x140017a30], rax
mov rax, qword [0x140017aa8]
mov qword [0x140017bc8], rax
movabs rax, 0x140016089
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x140001b42
mov rcx, qword [0x140017ba8]
xor rdx, rdx
call fcn.140012120
or rax, rax
jne 0x14000175a
mov rcx, qword [0x140017ba8]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017b58]
pop rdx
call fcn.140012060
jmp 0x140001a01
sub rsp, 8
push 0xc80001
push qword [0x140017b98]
push 0x6e
movabs r9, 0xc8
movabs r8, 0
movabs rdx, 0
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b7b0
add rsp, 0x40
push qword [0x140017ac0]
push 0x14
movabs r9, 0x9e
movabs r8, 0xf
movabs rdx, 0x15
movabs rcx, 1
sub rsp, 0x20
call fcn.14000a3f4
add rsp, 0x30
sub rsp, 8
push 0x20
movabs rax, 0x14001601e
push rax
push 0x14
movabs r9, 0x9e
movabs r8, 0x28
movabs rdx, 0x15
movabs rcx, 2
sub rsp, 0x20
call fcn.14000a65c
add rsp, 0x40
movabs rax, 0x1400161fe
push rax
push 0x14
movabs r9, 0x4e
movabs r8, 0x4b
movabs rdx, 0x3d
movabs rcx, 3
sub rsp, 0x20
call fcn.14000ab10
add rsp, 0x30
movabs r8, 4
movabs rdx, 0xd
movabs rcx, 0
call fcn.14000b814
movabs rcx, 2
call fcn.14000ab38
call fcn.14000ba80
push rax
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x1400018eb
sub rsp, 8
mov rcx, qword [0x140017bb8]
sub rsp, 0x20
call sub.KERNEL32.dll_RemoveDirectoryA
add rsp, 0x28
xor rax, rax
mov qword [0x140017a10], rax
add rsp, 0xfffffffffffffff8
jmp 0x14000285b
mov r15, 0x332d
cmp r15, qword [rsp]
jne 0x140001977
sub rsp, 8
sub rsp, 0x20
call fcn.14000f280
add rsp, 0x28
push rax
mov r15, 4
cmp r15, qword [rsp]
jne 0x140001971
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000ab84
add rsp, 0x28
lea rcx, [0x140017b58]
pop rdx
sub rsp, 0x20
call fcn.140012060
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
jmp 0x1400019fb
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x1400019fb
sub rsp, 8
sub rsp, 0x20
call fcn.14000f29c
add rsp, 0x28
push rax
mov r15, 3
cmp r15, qword [rsp]
jne 0x1400019fa
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
movabs rcx, 2
pop rdx
sub rsp, 0x20
call fcn.14000ab84
add rsp, 0x28
lea rcx, [0x140017b58]
pop rdx
sub rsp, 0x20
call fcn.140012060
add rsp, 0x20
movabs rcx, 0
sub rsp, 0x20
call fcn.14000b268
add rsp, 0x20
add rsp, 0x10
jmp 0x140001a01
pop rax
pop rax
jmp 0x1400018a8
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140017b58]
sub rsp, 0x20
call fcn.140005050
add rsp, 0x28
push rax
mov rax, qword [0x140017b58]
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.140010140
add rsp, 0x28
inc qword [0x140018180]
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rdx, qword [0x140017a48]
mov rcx, qword [0x140017a20]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140018180], rdx
add rdx, qword [0x140018190]
add rcx, qword [0x140018190]
call fcn.140012120
or rax, rax
jne 0x140001acb
movabs r8, 0x10
mov rdx, qword [0x140017b68]
mov rcx, qword [0x140017bc0]
call fcn.140008774
mov rcx, qword [0x140017bb8]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x140017a10], rax
jmp 0x14000285b
movabs rax, 0x14001608b
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x140001af7
mov rax, qword [0x140017a20]
mov qword [0x140017b80], rax
sub rsp, 8
push qword [0x140017a30]
push qword [0x140017ab8]
push qword [0x140017a28]
push qword [0x140017b80]
push qword [0x140017aa8]
mov r9, qword [0x140017ab0]
mov r8, qword [0x140017aa0]
mov rdx, qword [0x140017b58]
mov rcx, qword [0x140017ad8]
sub rsp, 0x20
call fcn.14000425a
add rsp, 0x50
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017a28]
mov rcx, qword [0x140017b88]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017b00]
pop rdx
call fcn.140012060
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140017ab8]
mov rcx, qword [0x140017b30]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
lea rcx, [0x140017a70]
pop rdx
call fcn.140012060
movabs rax, 0x140016070
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x140001f66
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
movabs rcx, 0
pop rdx
sub rsp, 0x20
call fcn.140008da8
add rsp, 0x28
inc qword [0x140018180]
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rdx, qword [0x140017a48]
mov rcx, qword [0x140017a20]
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x20
pop rcx
pop rdx
mov qword [0x140018180], rdx
add rdx, qword [0x140018190]
add rcx, qword [0x140018190]
call fcn.140012120
or rax, rax
je 0x140001c5b
mov r15, qword [0x140017b78]
cmp r15, 1
jne 0x140001c5b
mov rax, 1
jmp 0x140001c5e
xor rax, rax
and rax, rax
je 0x140001f66
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x140018180]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.14000e29c
add rsp, 0x20
inc qword [0x140018180]
push qword [0x140017b60]
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008828
add rsp, 0x28
lea rcx, [0x140017a60]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017a60]
xor rdx, rdx
call fcn.140012120
or rax, rax
jne 0x140001ee4
mov rcx, qword [0x140017a60]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017af0]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017af0]
call fcn.14000e2fc
mov rcx, qword [0x140017a70]
xor rdx, rdx
call fcn.140012120
or rax, rax
jne 0x140001d2d
mov rcx, qword [0x140017a70]
call fcn.1400035a6
mov rdx, qword [0x140017b08]
movabs rcx, 1
call fcn.14000ec70
and rax, rax
je 0x140001ea4
movabs rcx, 1
call fcn.14000e660
push qword [0x140018180]
sub rsp, 8
push 0x24
mov rcx, qword [0x140017a40]
push qword [0x140018180]
sub rsp, 0x20
call fcn.140012180
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.140012180
add rsp, 0x20
mov rcx, qword [0x140017b08]
sub rsp, 0x20
call fcn.140012180
add rsp, 0x20
movabs rcx, 0x140016021
sub rsp, 0x20
call fcn.140012180
add rsp, 0x20
mov rcx, qword [0x140017a68]
sub rsp, 0x20
call fcn.140012180
add rsp, 0x20
inc qword [0x140018180]
push qword [0x140017b20]
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140008774
add rsp, 0x28
pop qword [0x140018180]
mov qword [0x140017af8], rax
mov r15, qword [0x140017af8]
cmp r15, 7
jne 0x140001ea4
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rcx, qword [0x140018180]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e318
add rsp, 0x28
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000e2fc
add rsp, 0x28
pop qword [0x140018180]
mov rcx, qword [0x140017bb8]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017a10], rax
jmp 0x14000285b
mov rdx, qword [0x140017b08]
movabs rcx, 1
call fcn.14000ea60
and rax, rax
je 0x140001ee4
mov rdx, qword [0x140017b00]
movabs rcx, 1
call fcn.14000ed60
movabs rcx, 1
call fcn.14000e660
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rcx, qword [0x140018180]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e318
add rsp, 0x28
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000e2fc
add rsp, 0x28
pop qword [0x140018180]
mov rcx, qword [0x140017bb8]
call sub.KERNEL32.dll_RemoveDirectoryA
xor rax, rax
mov qword [0x140017a10], rax
jmp 0x14000285b
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x140002137
movabs rcx, 0x400
call fcn.14000e1e0
mov qword [0x140017ad0], rax
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000e3b4
add rsp, 0x28
lea rcx, [0x140017bd8]
pop rdx
call fcn.140012060
push qword [0x140017ad0]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017bd8]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017ad0]
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017bb0]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017ad0]
call fcn.14000e200
mov rcx, qword [0x140017bb0]
call fcn.14000e480
mov rcx, qword [0x140017bb0]
call fcn.14000e488
mov rcx, qword [0x140017bb0]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov rcx, qword [0x140017bb0]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
movabs rcx, str.extd.exe
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017ae8]
pop rdx
call fcn.140012060
mov rdx, qword [0x140017ae8]
movabs rcx, 0
call fcn.14000ea60
mov r8, qword [0x140017a48]
mov rdx, qword [0x140017a20]
movabs rcx, 0
call fcn.14000ee10
movabs rcx, 0
call fcn.14000e660
mov rcx, qword [0x140017ae8]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017ae0]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017ae0]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push qword [0x140017ae0]
movabs rax, str.b2eextd
mov rcx, rax
pop rdx
call fcn.140008f08
movabs rax, str._call:extd
push rax
movabs rax, str.extd
mov rcx, rax
pop rdx
call fcn.140008f08
mov rcx, qword [0x140017bb8]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
movabs rcx, str.BDFI
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
mov rcx, qword [0x140017b08]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017b08]
pop rdx
call fcn.140012060
mov rdx, qword [0x140017b08]
movabs rcx, 1
call fcn.14000ea60
and rax, rax
je 0x14000233b
movabs rax, str._shift__0
mov rdx, rax
movabs rcx, 1
call fcn.14000eea0
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCommandLineA
add rsp, 0x28
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.SHLWAPI.DLL_PathGetArgsA
add rsp, 0x20
pop qword [0x140018180]
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
inc qword [0x140018180]
movabs rax, 0x14001608f
push rax
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x140018180]
mov rdx, qword [0x140017b00]
movabs rcx, 1
call fcn.14000eea0
movabs rax, 0x14001608d
mov rdx, rax
mov rcx, qword [0x140017ad8]
call fcn.1400040d3
and rax, rax
je 0x14000232a
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x140018180]
movabs rbp, 0x14001635d
mov r15, rbp
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.:extd_r_n_set_result_r_n__b2eextd____1____2____3____4____5____6____7____8____9______b2etempfile___r_n_set__p_result_____b2etempfile___r_n_del___b2etempfile___r_n_goto:eof_r_n
mov rax, rbp
mov rcx, rax
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000e130
add rsp, 0x28
inc qword [0x140018180]
push 1
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000eea0
add rsp, 0x28
pop qword [0x140018180]
movabs rcx, 1
call fcn.14000e660
jmp 0x140002388
mov rcx, qword [0x140017b08]
call fcn.14000e480
call fcn.14000466c
movabs r8, 0x10
mov rdx, qword [0x140017b10]
mov rcx, qword [0x140017bc0]
call fcn.140008774
mov rcx, qword [0x140017bb8]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, 1
mov qword [0x140017a10], rax
jmp 0x14000285b
mov rcx, qword [0x140017a70]
xor rdx, rdx
call fcn.140012120
or rax, rax
jne 0x1400023a8
mov rcx, qword [0x140017a70]
call fcn.1400035a6
movabs rcx, 0x400
call fcn.14000e1e0
mov qword [0x140017ba0], rax
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14000e3b4
add rsp, 0x28
lea rcx, [0x140017a58]
pop rdx
call fcn.140012060
push qword [0x140017ba0]
push 0
movabs rax, 0x14001601e
mov rdx, rax
mov rcx, qword [0x140017a58]
pop r8
pop r9
call sub.KERNEL32.dll_GetTempFileNameA
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
mov rcx, qword [0x140017ba0]
pop rdx
sub rsp, 0x20
call fcn.14000e0b0
add rsp, 0x28
lea rcx, [0x140017bd0]
pop rdx
call fcn.140012060
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
movabs rcx, 0x800
pop rdx
sub rsp, 0x20
call fcn.140005080
add rsp, 0x28
lea rcx, [0x140017b40]
pop rdx
call fcn.140012060
push qword [0x140018180]
sub rsp, 8
push 0x800
push qword [0x140017b40]
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x28
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_GetShortPathNameA
add rsp, 0x28
pop qword [0x140018180]
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rcx, qword [0x140018180]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x28
inc qword [0x140018180]
movabs rax, str.b2eprogramname
push rax
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x140018180]
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rcx, qword [0x140018180]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e5dc
add rsp, 0x28
inc qword [0x140018180]
movabs rax, str.b2eprogramfilename
push rax
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x140018180]
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rcx, qword [0x140018180]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e318
add rsp, 0x28
inc qword [0x140018180]
movabs rax, str.b2eprogrampathname
push rax
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x140018180]
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
mov rcx, qword [0x140017b40]
sub rsp, 0x20
call fcn.1400051c0
add rsp, 0x28
inc qword [0x140018180]
movabs rax, str.b2eprogramshortname
push rax
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x140018180]
mov rcx, qword [0x140017af0]
push qword [0x140018180]
sub rsp, 0x28
call fcn.140012180
add rsp, 0x28
lea rcx, [0x140017be0]
pop rdx
call fcn.140012060
mov rcx, qword [0x140017be0]
call sub.SHLWAPI.DLL_PathAddBackslashA
push qword [0x140017be0]
movabs rax, 0x140016076
mov rcx, rax
pop rdx
call fcn.140008f08
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
mov rcx, qword [0x140017a50]
sub rsp, 0x20
call fcn.1400052e0
add rsp, 0x28
inc qword [0x140018180]
movabs rax, str.b2eincfilecount
push rax
mov rdx, qword [0x140018190]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140008f08
add rsp, 0x28
pop qword [0x140018180]
push qword [0x140017bd0]
movabs rax, str.b2etempfile
mov rcx, rax
pop rdx
call fcn.140008f08
movabs r9, 0x44
mov r8, qword [0x140017af0]
mov rdx, qword [0x140017ac8]
mov rcx, qword [0x140017b08]
call fcn.1400094f4
mov qword [0x140017b28], rax
mov rcx, qword [0x140017b28]
call fcn.140009544
mov r15, rax
and r15, r15
jne 0x140002773
jmp 0x140002784
movabs rcx, 5
call fcn.14000b218
jmp 0x14000275d
mov rcx, qword [0x140017b28]
call fcn.1400095ac
mov qword [0x140017a88], rax
mov rcx, qword [0x140017b28]
call fcn.1400095d0
call fcn.14000466c
mov rcx, qword [0x140017b08]
call fcn.14000e480
mov rcx, qword [0x140017bd0]
call fcn.14000e480
mov rcx, qword [0x140017ae8]
call fcn.14000e480
mov rax, qword [0x140018180]
push rax
sub rsp, 8
push rax
sub rsp, 8
mov rdx, qword [0x140018180]
push rdx
push rdx
mov rcx, qword [0x140018180]
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000e318
add rsp, 0x28
mov rdx, qword [0x140018190]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000e2fc
add rsp, 0x28
pop qword [0x140018180]
mov rcx, qword [0x140017bb0]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rcx, qword [0x140017bb8]
call sub.KERNEL32.dll_RemoveDirectoryA
mov rax, qword [0x140017a88]
mov qword [0x140017a10], rax
jmp 0x14000285b
call 0x14000287d
call fcn.140011f40
mov rcx, qword [0x140017a00]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x140017a10]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.1400099e0
call fcn.14000a064
call fcn.14000b3a8
call fcn.14000c7d8
call fcn.14000de0c
call fcn.14000e5e8
call fcn.14000e6f0
call fcn.14000f7b4
call fcn.14000e0a0
add rsp, 0x28
ret