Function at 0x4fb230
Capabilities:
Create directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
lea r15, [rcx + 0x198]
mov r14, rdx
mov r13, rcx
mov rcx, r15
call fcn.0042a666
mov edx, 0xa00003ee
mov rcx, r14
call fcn.00428d6e
test al, al
je 0x4fb2e3
mov edx, 0xa00003ee
mov rcx, r14
call fcn.00429158
mov rdx, qword [r13 + 0x160]
mov r8, qword [r13 + 0x168]
lea rcx, [r13 + 0x160]
mov r12, qword [rax + 8]
mov rsi, qword [rax]
mov qword [rsp + 0x28], rcx
call fcn.00518770
cmp r12, rsi
je 0x4fb2e3
sub r12, rsi
mov rcx, qword [rsp + 0x28]
mov r9d, 8
xor ebx, ebx
sar r12, 3
mov rdx, qword [r13 + 0x160]
mov r8d, r12d
mov r12d, r12d
call fcn.004cf7b2
shl r12, 3
mov rdi, rax
cmp rbx, r12
je 0x4fb2e3
lea rdx, [rsi + rbx]
lea rcx, [rdi + rbx]
add rbx, 8
call fcn.004cebf6
jmp 0x4fb2cb
mov edx, 0x3e8
mov rcx, r14
lea r12, [rsp + 0x60]
call fcn.00529080
test al, al
je 0x4fb34f
mov rbx, qword [r13 + 0xd0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003e8
call fcn.00428e30
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cea4a
mov edx, 1
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb3b6
mov rbx, qword [r13 + 0xd8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x20000001
call fcn.00428e30
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cea4a
mov edx, 3
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb41d
mov rbx, qword [r13 + 0xe0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x20000003
call fcn.00428e30
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cea4a
mov edx, 0x3f4
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb45e
mov rbx, qword [r13 + 0xf8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov r8d, 0x200003f4
jmp 0x4fb49d
mov edx, 0x3ea
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb4c5
mov rbx, qword [r13 + 0xf8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov r8d, 0x200003ea
mov rdx, r14
mov rcx, r12
call fcn.00428e30
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cea4a
mov edx, 0x3f8
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb52c
mov rbx, qword [r13 + 0xe8]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003f8
call fcn.00428e30
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cea4a
mov edx, 0x3f9
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb593
mov rbx, qword [r13 + 0xf0]
lea r9, [rsp + 0x50]
mov rcx, r9
mov qword [rsp + 0x28], r9
mov rax, qword [rbx]
mov rsi, qword [rax + 0x150]
call fcn.004cebac
mov r9, qword [rsp + 0x28]
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003f9
call fcn.00428e30
mov rdx, r12
mov rcx, rbx
call rsi
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
mov rcx, r9
call fcn.004cea4a
mov edx, 0x280003f6
mov rcx, r15
lea rsi, [rsp + 0x48]
call fcn.00428c20
test eax, eax
je 0x4fb636
lea rbx, [rsp + 0x50]
mov rcx, rbx
call fcn.004cf836
mov r9, rbx
mov rdx, r15
mov rcx, r12
mov r8d, 0x280003f6
call fcn.00428ea4
mov rdx, r12
mov rcx, rsi
call fcn.0042b11a
mov rcx, r12
call fcn.004cf846
mov rcx, rbx
call fcn.004cf846
mov rdi, qword [r13 + 0x100]
mov rcx, rbx
mov rax, qword [rdi]
mov rbp, qword [rax + 0x150]
call fcn.004cebac
mov r9, rbx
mov rdx, rsi
mov rcx, r12
mov r8d, 0x200003e8
call fcn.00428e30
mov rdx, r12
mov rcx, rdi
call rbp
mov rcx, r12
call fcn.004cea4a
mov rcx, rbx
call fcn.004cea4a
mov rcx, rsi
call fcn.00429c78
mov edx, 0x3fd
mov rcx, r15
call fcn.004293ae
test eax, eax
je 0x4fb66d
mov rbx, qword [r13 + 0x128]
mov edx, 0x3fd
mov rcx, r15
mov rax, qword [rbx]
mov rdi, qword [rax + 0x190]
call fcn.00429e16
mov rcx, rbx
movzx edx, byte [rax]
call rdi
mov rcx, r12
call fcn.004b7609
mov rdx, r12
mov rcx, rsi
call fcn.004b6ac6
mov rcx, r12
call fcn.004cea4a
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0
je 0x4fb69f
mov rdx, rsi
mov rcx, r13
call fcn.004f7e00
jmp 0x4fb701
mov rcx, r12
call fcn.004ae909
lea r9, [r13 + 0x1c8]
mov rdx, r12
mov rcx, r9
mov qword [rsp + 0x28], r9
call fcn.004cef0e
mov rcx, r12
call fcn.004cea4a
mov r9, qword [rsp + 0x28]
lea r8, str._sessions
mov rcx, r12
mov rdx, r9
call fcn.004b65fc
mov rax, qword [rsp + 0x60]
xor edx, edx
lea rcx, [rax + 4]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rcx, r13
mov rdx, r12
call fcn.004f6260
mov rcx, r12
call fcn.004cea4a
xor r8d, r8d
mov edx, 0x3ed
mov rcx, r14
call fcn.004293e6
test al, al
je 0x4fb920
xor r8d, r8d
mov edx, 0x3f5
lea rbx, [rsp + 0x50]
mov rcx, r15
call fcn.0042a00e
mov edx, 0x3ed
mov rcx, r15
lea rdi, [r13 + 0x138]
call fcn.0042a592
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, rbx
mov dword [r13 + 0x174], eax
call fcn.004cebac
mov r9, rbx
mov rdx, r14
mov rcx, r12
mov r8d, 0x200003e8
call fcn.00428e30
mov rdx, r12
mov rcx, rdi
call fcn.004cef0e
mov rcx, r12
call fcn.004cea4a
mov rcx, rbx
call fcn.004cea4a
mov rcx, qword [r13 + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x198]
mov rcx, qword [r13 + 0x88]
xor r8d, r8d
mov edx, 5
mov r14d, eax
mov rax, qword [rcx]
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x88]
xor r8d, r8d
mov edx, 2
mov rax, qword [rcx]
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x88]
mov r8d, r14d
mov edx, 7
xor r8d, 1
mov rax, qword [rcx]
movzx r8d, r8b
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x88]
mov edx, 9
mov r8d, 1
mov rax, qword [rcx]
call qword [rax + 0x1e0]
mov rcx, qword [r13 + 0x88]
cmp r14b, 1
sbb edx, edx
mov rax, qword [rcx]
and edx, 0xfffffffe
add edx, 9
call qword [rax + 0x180]
mov edx, 1
mov rcx, r13
call fcn.004f39b0
mov rcx, qword [r13 + 0x118]
xor edx, edx
call method.IWindow.setVisible_bool_
mov rcx, qword [r13 + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x198]
test al, al
je 0x4fb911
mov r8, rdi
lea rdx, str.Router
mov rcx, rbx
call fcn.004b670b
lea r8, str._has_been_disconnected
mov rdx, rbx
mov rcx, r12
call fcn.004b65fc
mov rdx, r12
lea rcx, [r13 + 0x190]
call fcn.004cef0e
mov rcx, r12
call fcn.004cea4a
mov rcx, rbx
call fcn.004cea4a
mov edx, 0x280003f6
mov rcx, r15
mov dword [r13 + 0x184], 5
call fcn.00428c20
test eax, eax
je 0x4fb902
mov rdx, r15
lea rcx, [r13 + 0x1a8]
call fcn.0042a666
mov rcx, rbx
call fcn.004cf836
mov r9, rbx
mov rdx, r15
mov rcx, r12
mov r8d, 0x280003f6
call fcn.00428ea4
mov rdx, r12
mov rcx, r15
call fcn.0042b7fe
mov rcx, r12
call fcn.004cf846
mov rcx, rbx
call fcn.004cf846
mov word [r13 + 0x1c3], 0x101
xor edx, edx
mov rcx, r13
call fcn.004f7c30
jmp 0x4fb9b2
xor edx, edx
mov rcx, r13
call fcn.004f7ac0
jmp 0x4fb9b2
mov rcx, r13
call fcn.004f9410
xor r8d, r8d
mov edx, 0x3fb
mov rcx, r14
call fcn.004293e6
test al, al
jne 0x4fb9b2
mov edx, 0x3e8
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb9b2
mov edx, 1
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb9b2
mov edx, 3
mov rcx, r14
call fcn.00529080
test al, al
je 0x4fb9b2
mov rcx, qword [r13 + 0x118]
xor edx, edx
call method.IWindow.setVisible_bool_
lea rax, [fcn.004fae40]
lea rdx, [rsp + 0x30]
mov rcx, r13
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0
call fcn.004d5cd0
xor r9d, r9d
xor r8d, r8d
mov ecx, 0x64
mov rdx, rax
call sym.winbox.exe_addTimer_unsigned_int__EventListener__void__bool_
mov rcx, rsi
call fcn.004cea4a
nop
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret