Function at 0x140005800
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x3d0]
sub rsp, 0x4d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
mov r15, rcx
xor r12d, r12d
cmp byte [rcx + 8], r12b
jne 0x140005845
xor al, al
jmp 0x140005f1c
call fcn.14000e980
mov rdi, rax
mov qword [rbp + 0x60], rax
test rax, rax
jne 0x14000585e
xor r14b, r14b
jmp 0x140005f0c
lea rbx, [r15 + 0x90]
mov rcx, qword [rbx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 0x2e
jb 0x140005f4d
mov r9, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14000588d
mov r9, qword [rbx]
mov qword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_46
lea rax, str.OneStart.aiOneStartApplicationOneStart.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x88]
call fcn.1400083b0
nop
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x68]
call fcn.140003010
nop
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1b0]
call fcn.140080e20
cmp qword [rbx + 0x18], 7
jbe 0x1400058e3
mov rbx, qword [rbx]
lea rcx, [rbp + 0x1b0]
sub rcx, rbx
nop dword [rax]
movzx eax, word [rbx]
mov word [rbx + rcx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x1400058f0
lea rcx, [rbp + 0x1b0]
sub rcx, 2
nop dword [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140005910
lea r8, str.OneStart.aiOneStart.data
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + rdx*2]
mov word [rcx + rdx*2], ax
lea rdx, [rdx + 1]
test ax, ax
jne 0x140005930
xor r8d, r8d
lea rdx, [rbp + 0x1b0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0xb0]
call fcn.140080e20
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x40]
call fcn.140007320
nop
cmp qword [r15 + 0x40], 0
lea rbx, [r15 + 0xd0]
je 0x14000598b
lea rbx, [r15 + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, Ordinal_79
lea rdx, str.SOFTWAREOneStart.aiUpdateClients8A69D345_D564_463c_AFF1_A69D9E530F96
lea rcx, [rbp - 0x60]
call fcn.1400020f0
nop
lea rdx, [0x14009a590]
lea rcx, [rbp - 0x10]
call fcn.140007320
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb0]
call fcn.14000ca40
nop
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xd0]
call fcn.140001f50
nop
mov rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.140001f50
nop
lea rdx, [r15 + 0xd0]
lea rcx, [rbp + 0x110]
call fcn.140001f50
nop
lea rdx, [r15 + 0x110]
lea rcx, [rbp + 0x130]
call fcn.140001f50
nop
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x150]
call fcn.14000ca40
mov dword [rbp + 0x170], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x178], xmm0
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x178], 0
mov qword [rbp + 0x198], r12
movdqa xmmword [rbp + 0x1a0], xmm0
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140005aa6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005aa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f53
call fcn.14000deb0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140005ae2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005adc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f59
call fcn.14000deb0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140005b22
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f5f
call fcn.14000deb0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
mov ecx, 0x60
call fcn.14000de6c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xb0]
call fcn.140009a40
cmp qword [rbp - 0x18], 0
je 0x140005e13
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov ecx, 0x90
call fcn.14000de6c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x10], rax
mov rbx, qword [rbp - 0x20]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x140005cd9
mov dword [rsp + 0x50], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x58], 0
mov qword [rsp + 0x78], r12
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov ecx, 0x90
call fcn.14000de6c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x70], rax
mov dword [rsp + 0x50], r12d
lea rdx, [rbx + 0x40]
lea rcx, [rsp + 0x58]
call fcn.140007460
nop
lea r8, [rbx + 0x20]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x10]
call fcn.1400075e0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [rsp + 0x50]
call fcn.140004360
nop
lea rcx, [rbp - 0x70]
call fcn.140002660
lea rcx, [rsp + 0x78]
call fcn.140007500
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140005c7b
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f6b
call fcn.14000deb0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140005ca8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140005ca3
nop
cmp rbx, qword [rax + 0x10]
jne 0x140005ca3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140005c90
mov rbx, rax
jmp 0x140005ccf
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140005ccf
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140005cc0
cmp byte [rbx + 0x19], 0
je 0x140005ba3
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x10], r12d
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x18], 0
mov qword [rbp + 0x38], r12
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
mov ecx, 0x90
call fcn.14000de6c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x10], 2
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x50]
call fcn.140007200
nop
lea r8, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova r8, qword [rbp + 0x68]
lea r9, [rbp + 0x10]
mov rcx, r15
call fcn.140004430
nop
lea rcx, [rbp + 0x50]
call fcn.140002660
lea rcx, [rbp + 0x38]
call fcn.140007500
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140005db4
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005daf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f65
call fcn.14000deb0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x18], 0
mov rcx, qword [rbp - 0x10]
mov rsi, qword [rcx + 8]
cmp byte [rsi + 0x19], 0
jne 0x140005e09
mov r8, qword [rsi + 0x10]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x10]
call fcn.140007ee0
mov rbx, rsi
mov rsi, qword [rsi]
lea rcx, [rbx + 0x20]
call fcn.140008b80
mov edx, 0x90
mov rcx, rbx
call fcn.14000deb0
cmp byte [rsi + 0x19], 0
je 0x140005dd2
mov rcx, qword [rbp - 0x10]
mov edx, 0x90
call fcn.14000deb0
mov r14b, 1
mov rcx, qword [rbp - 0x20]
mov rsi, qword [rcx + 8]
cmp byte [rsi + 0x19], 0
jne 0x140005e5b
mov r8, qword [rsi + 0x10]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140008a00
mov rbx, rsi
mov rsi, qword [rsi]
lea rcx, [rbx + 0x20]
call fcn.140008c40
mov edx, 0x60
mov rcx, rbx
call fcn.14000deb0
cmp byte [rsi + 0x19], 0
je 0x140005e24
mov rcx, qword [rbp - 0x20]
mov edx, 0x60
call fcn.14000deb0
nop
lea rcx, [rbp + 0xb0]
call fcn.140009790
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x140005eb2
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005eac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f71
call fcn.14000deb0
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 7
jbe 0x140005ef4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005eef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005f47
call fcn.14000deb0
movdqa xmm0, xmmword [0x14009a8c0]
movdqu xmmword [rbp + 0x98], xmm0
mov word [rbp + 0x88], r12w
test rdi, rdi
jne 0x140005f18
xor ecx, ecx
call fcn.14000e960
movzx eax, r14b
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.14000dbb0
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140065400
nop
call fcn.140001220
nop
call fcn.140065400
nop
call fcn.140065400
nop
call fcn.140065400
nop
call fcn.140065400
int3
call fcn.140065400
nop
call fcn.140065400
int3