Function at 0x4fa310
Capabilities:
Create directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
lea r15, [rcx + 0x190]
mov r14, rdx
mov r13, rcx
mov rcx, r15
call fcn.0042a5c6
mov edx, 0xa00003ee
mov rcx, r14
call fcn.00428cce
test al, al
je 0x4fa3c3
mov edx, 0xa00003ee
mov rcx, r14
call fcn.004290b8
mov rdx, qword [r13 + 0x158]
mov r8, qword [r13 + 0x160]
lea rcx, [r13 + 0x158]
mov r12, qword [rax + 8]
mov rsi, qword [rax]
mov qword [rsp + 0x28], rcx
call fcn.00517770
cmp r12, rsi
je 0x4fa3c3
sub r12, rsi
mov rcx, qword [rsp + 0x28]
mov r9d, 8
xor ebx, ebx
sar r12, 3
mov rdx, qword [r13 + 0x158]
mov r8d, r12d
mov r12d, r12d
call fcn.004ceb52
shl r12, 3
mov rdi, rax
cmp rbx, r12
je 0x4fa3c3
lea rdx, [rsi + rbx]
lea rcx, [rdi + rbx]
add rbx, 8
call fcn.004cdf96
jmp 0x4fa3ab
mov edx, 0x3e8
mov rcx, r14
lea r12, [rsp + 0x60]
call fcn.00527fd0
test al, al
je 0x4fa42f
mov rbx, qword [r13 + 0xc8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003e8
call fcn.00428d90
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cddea
mov edx, 1
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4fa496
mov rbx, qword [r13 + 0xd0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x20000001
call fcn.00428d90
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cddea
mov edx, 3
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4fa4fd
mov rbx, qword [r13 + 0xd8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x20000003
call fcn.00428d90
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cddea
mov edx, 0x3f4
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4fa53e
mov rbx, qword [r13 + 0xf0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov r8d, 0x200003f4
jmp 0x4fa57d
mov edx, 0x3ea
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4fa5a5
mov rbx, qword [r13 + 0xf0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov r8d, 0x200003ea
mov rdx, r14
mov rcx, r12
call fcn.00428d90
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cddea
mov edx, 0x3f8
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4fa60c
mov rbx, qword [r13 + 0xe0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003f8
call fcn.00428d90
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cddea
mov edx, 0x3f9
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4fa673
mov rbx, qword [r13 + 0xe8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003f9
call fcn.00428d90
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cddea
mov edx, 0x280003f6
mov rcx, r15
lea rsi, [rsp + 0x48]
call fcn.00428b80
test eax, eax
je 0x4fa716
lea rbx, [rsp + 0x50]
mov rcx, rbx
call fcn.004cebd6
mov r9, rbx
mov rdx, r15
mov rcx, r12
mov r8d, 0x280003f6
call fcn.00428e04
mov rdx, r12
mov rcx, rsi
call fcn.0042b07a
mov rcx, r12
call fcn.004cebe6
mov rcx, rbx
call fcn.004cebe6
mov rdi, qword [r13 + 0xf8]
mov rcx, rbx
mov rax, qword [rdi]
mov rbp, qword [rax + 0x150]
call fcn.004cdf4c
mov r9, rbx
mov rdx, rsi
mov rcx, r12
mov r8d, 0x200003e8
call fcn.00428d90
mov rdx, r12
mov rcx, rdi
call rbp
mov rcx, r12
call fcn.004cddea
mov rcx, rbx
call fcn.004cddea
mov rcx, rsi
call fcn.00429bd8
mov edx, 0x3fd
mov rcx, r15
call fcn.0042930e
test eax, eax
je 0x4fa74d
mov rbx, qword [r13 + 0x120]
mov edx, 0x3fd
mov rcx, r15
mov rax, qword [rbx]
mov rdi, qword [rax + 0x190]
call fcn.00429d76
mov rcx, rbx
movzx edx, byte [rax]
call rdi
mov rcx, r12
call fcn.004b6a09
mov rdx, r12
mov rcx, rsi
call fcn.004b5ec6
mov rcx, r12
call fcn.004cddea
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0
je 0x4fa77f
mov rdx, rsi
mov rcx, r13
call fcn.004f6ef0
jmp 0x4fa7e1
mov rcx, r12
call fcn.004adcf9
lea r9, [r13 + 0x1c0]
mov rdx, r12
mov rcx, r9
mov qword [rsp + 0x28], r9
call fcn.004ce2ae
mov rcx, r12
call fcn.004cddea
mov r9, qword [rsp + 0x28]
lea r8, str._sessions
mov rcx, r12
mov rdx, r9
call fcn.004b59fc
mov rax, qword [rsp + 0x60]
xor edx, edx
lea rcx, [rax + 4]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rcx, r13
mov rdx, r12
call fcn.004f5360
mov rcx, r12
call fcn.004cddea
xor r8d, r8d
mov edx, 0x3ed
mov rcx, r14
call fcn.00429346
test al, al
je 0x4faa00
xor r8d, r8d
mov edx, 0x3f5
lea rbx, [rsp + 0x50]
mov rcx, r15
call fcn.00429f6e
mov edx, 0x3ed
mov rcx, r15
lea rdi, [r13 + 0x130]
call fcn.0042a4f2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, rbx
mov dword [r13 + 0x16c], eax
call fcn.004cdf4c
mov r9, rbx
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003e8
call fcn.00428d90
mov rdx, r12
mov rcx, rdi
call fcn.004ce2ae
mov rcx, r12
call fcn.004cddea
mov rcx, rbx
call fcn.004cddea
mov rcx, qword [r13 + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x198]
mov rcx, qword [r13 + 0x80]
xor r8d, r8d
mov edx, 5
mov r14d, eax
mov rax, qword [rcx]
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x80]
xor r8d, r8d
mov edx, 2
mov rax, qword [rcx]
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x80]
mov r8d, r14d
mov edx, 7
xor r8d, 1
mov rax, qword [rcx]
movzx r8d, r8b
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x80]
mov edx, 9
mov r8d, 1
mov rax, qword [rcx]
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x80]
cmp r14b, 1
sbb edx, edx
mov rax, qword [rcx]
and edx, 0xfffffffe
add edx, 9
call qword [rax + 0x180]
mov edx, 1
mov rcx, r13
call fcn.004f2ab0
mov rcx, qword [r13 + 0x110]
xor edx, edx
call method.IWindow.setVisible_bool_
mov rcx, qword [r13 + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x198]
test al, al
je 0x4fa9f1
mov r8, rdi
lea rdx, str.Router
mov rcx, rbx
call fcn.004b5b0b
lea r8, str._has_been_disconnected
mov rdx, rbx
mov rcx, r12
call fcn.004b59fc
mov rdx, r12
lea rcx, [r13 + 0x188]
call fcn.004ce2ae
mov rcx, r12
call fcn.004cddea
mov rcx, rbx
call fcn.004cddea
mov edx, 0x280003f6
mov rcx, r15
mov dword [r13 + 0x17c], 5
call fcn.00428b80
test eax, eax
je 0x4fa9e2
mov rdx, r15
lea rcx, [r13 + 0x1a0]
call fcn.0042a5c6
mov rcx, rbx
call fcn.004cebd6
mov r9, rbx
mov rdx, r15
mov rcx, r12
mov r8d, 0x280003f6
call fcn.00428e04
mov rdx, r12
mov rcx, r15
call fcn.0042b75e
mov rcx, r12
call fcn.004cebe6
mov rcx, rbx
call fcn.004cebe6
mov word [r13 + 0x1bb], 0x101
xor edx, edx
mov rcx, r13
call fcn.004f6d20
jmp 0x4faa92
xor edx, edx
mov rcx, r13
call fcn.004f6bb0
jmp 0x4faa92
mov rcx, r13
call fcn.004f8500
xor r8d, r8d
mov edx, 0x3fb
mov rcx, r14
call fcn.00429346
test al, al
jne 0x4faa92
mov edx, 0x3e8
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4faa92
mov edx, 1
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4faa92
mov edx, 3
mov rcx, r14
call fcn.00527fd0
test al, al
je 0x4faa92
mov rcx, qword [r13 + 0x110]
xor edx, edx
call method.IWindow.setVisible_bool_
lea rax, [fcn.004f9f20]
lea rdx, [rsp + 0x30]
mov rcx, r13
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0
call fcn.004d5060
xor r9d, r9d
xor r8d, r8d
mov ecx, 0x64
mov rdx, rax
call sym.winbox.exe_addTimer_unsigned_int__EventListener__void__bool_
mov rcx, rsi
call fcn.004cddea
nop
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret