Function at 0x140006320
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4e0]
sub rsp, 0x5e0
mov rax, qword [0x1400b1080]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
mov r13, rcx
xor r12d, r12d
cmp byte [rcx + 8], r12b
jne 0x14000636b
xor al, al
jmp 0x140006e95
call fcn.140012740
mov rdi, rax
mov qword [rbp + 0x190], rax
test rax, rax
jne 0x140006386
xor bl, bl
jmp 0x140006e86
lea rbx, [r13 + 0x90]
mov rcx, qword [rbx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 0x2e
jb 0x140006ecb
mov r9, rbx
cmp qword [rbx + 0x18], 7
jbe 0x1400063b5
mov r9, qword [rbx]
mov qword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_46
lea rax, str.OneStart.aiOneStartApplicationOneStart.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x170]
call fcn.14000b1f0
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x20]
call fcn.14008b3c0
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 7
cmova rdx, qword [rbp + 0x170]
lea rcx, [rbp - 0x20]
call fcn.140009a60
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x24], edx
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx - 0x10], 0
je 0x1400067c1
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov ecx, 0x90
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x150], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.onestart.exe_not_found
lea rcx, [rbp - 0x70]
call fcn.140002820
nop
mov dword [rsp + 0x40], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x68], r12
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov ecx, 0x90
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
mov dword [rsp + 0x40], r12d
lea r9, [rbp - 0x70]
mov rsi, qword [rbp - 0x70]
mov r15, qword [rbp - 0x58]
cmp r15, 0xf
cmova r9, rsi
mov r14, qword [rbp - 0x60]
mov rax, qword [rsp + 0x60]
cmp r14, rax
ja 0x14000653b
lea rbx, [rsp + 0x48]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x48]
mov qword [rsp + 0x58], r14
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.14008ad20
mov byte [r14 + rbx], 0
jmp 0x140006550
mov rdx, r14
lea rcx, [rsp + 0x48]
call fcn.14000aa40
mov r15, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 5
lea rdx, str.error
lea rcx, [rbp - 0x50]
call fcn.140002820
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x150]
call fcn.14000a390
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [rsp + 0x40]
call fcn.140004e80
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400065d7
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ed1
call fcn.140011b30
movdqa xmm0, xmmword [0x1400a6160]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
lea rcx, [rbp - 0x80]
call fcn.140003220
lea rcx, [rsp + 0x68]
call fcn.140009e20
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140006638
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006633
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ed7
call fcn.140011b30
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
cmp r15, 0xf
jbe 0x140006682
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000667a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006edd
mov rcx, rsi
call fcn.140011b30
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x130], xmm0
mov dword [rbp + 0xf0], r12d
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf8], 0
mov qword [rbp + 0x118], r12
movdqa xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r12
mov ecx, 0x90
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x130], rax
mov dword [rbp + 0xf0], 2
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x130]
call fcn.1400091e0
nop
lea r9, [rbp + 0xf0]
lea r8, [0x1400a59e9]
mov rcx, r13
call fcn.140004f50
nop
lea rcx, [rbp + 0x130]
call fcn.140003220
lea rcx, [rbp + 0x118]
call fcn.140009e20
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x140006795
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006790
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ee3
call fcn.140011b30
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf8], 0
lea rcx, [rbp + 0x150]
call fcn.140009280
xor bl, bl
jmp 0x140006dbf
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x198]
call fcn.140003b70
nop
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x2c0]
call fcn.14008b3c0
cmp qword [rbx + 0x18], 7
jbe 0x1400067f3
mov rbx, qword [rbx]
lea rcx, [rbp + 0x2c0]
sub rcx, rbx
nop dword [rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x140006800
lea rcx, [rbp + 0x2c0]
sub rcx, 2
nop dword [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140006820
lea r8, str.OneStart.aiOneStart.data
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + rdx*2]
mov word [rcx + rdx*2], ax
lea rdx, [rdx + 1]
test ax, ax
jne 0x140006840
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x1c0]
call fcn.14008b3c0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x150]
call fcn.1400093f0
nop
cmp qword [r13 + 0x40], 0
lea rbx, [r13 + 0xd0]
je 0x14000689e
lea rbx, [r13 + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, Ordinal_79
lea rdx, str.SOFTWAREOneStart.aiUpdateClients8A69D345_D564_463c_AFF1_A69D9E530F96
lea rcx, [rbp - 0x50]
call fcn.140002820
nop
lea rdx, [0x1400a5ce0]
lea rcx, [rbp - 0x70]
call fcn.1400093f0
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1c0]
call fcn.14000f800
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1e0]
call fcn.140002670
nop
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.140002670
nop
lea rdx, [r13 + 0xd0]
lea rcx, [rbp + 0x220]
call fcn.140002670
nop
lea rdx, [r13 + 0x110]
lea rcx, [rbp + 0x240]
call fcn.140002670
nop
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x260]
call fcn.14000f800
mov dword [rbp + 0x280], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], r12
mov qword [rbp + 0x2a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x288], 0
mov qword [rbp + 0x2a8], r12
movdqa xmmword [rbp + 0x2b0], xmm0
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x1400069bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ee9
call fcn.140011b30
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400069f8
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006eef
call fcn.140011b30
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x140006a3e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ef5
call fcn.140011b30
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov ecx, 0x60
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x140], rax
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x1c0]
call fcn.14000c9b0
cmp qword [rbp + 0x148], 0
je 0x140006d61
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov ecx, 0x90
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x150], rax
mov rbx, qword [rbp + 0x140]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x140006c19
nop word [rax + rax]
mov dword [rsp + 0x40], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x68], r12
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov ecx, 0x90
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
mov dword [rsp + 0x40], r12d
lea rdx, [rbx + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140009530
nop
lea r8, [rbx + 0x20]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x150]
call fcn.14000a200
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [rsp + 0x40]
call fcn.140004e80
nop
lea rcx, [rbp - 0x80]
call fcn.140003220
lea rcx, [rsp + 0x68]
call fcn.140009e20
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140006bbc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006f01
call fcn.140011b30
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140006be8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140006be3
cmp rbx, qword [rax + 0x10]
jne 0x140006be3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140006bd0
mov rbx, rax
jmp 0x140006c0f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140006c0f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140006c00
cmp byte [rbx + 0x19], 0
je 0x140006ae0
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x130], xmm0
mov dword [rbp + 0xf0], r12d
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf8], 0
mov qword [rbp + 0x118], r12
movdqa xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r12
mov ecx, 0x90
call fcn.140011aec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x130], rax
mov dword [rbp + 0xf0], 2
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x130]
call fcn.1400091e0
nop
lea r8, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0xf
cmova r8, qword [rbp + 0x198]
lea r9, [rbp + 0xf0]
mov rcx, r13
call fcn.140004f50
nop
lea rcx, [rbp + 0x130]
call fcn.140003220
lea rcx, [rbp + 0x118]
call fcn.140009e20
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x140006d3c
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006efb
call fcn.140011b30
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf8], 0
lea rcx, [rbp + 0x150]
call fcn.140009280
mov bl, 1
lea rcx, [rbp + 0x140]
call fcn.140008170
nop
lea rcx, [rbp + 0x1c0]
call fcn.14000c700
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140006dbf
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006db9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006f07
call fcn.140011b30
nop
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x24], edx
lea rcx, [rbp - 0x10]
call fcn.140008db0
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x24], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x90]
call fcn.140010fd0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x140006e6e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ec5
call fcn.140011b30
movdqa xmm0, xmmword [0x1400a6150]
movdqu xmmword [rbp + 0x180], xmm0
mov word [rbp + 0x170], r12w
test rdi, rdi
jne 0x140006e92
xor ecx, ecx
call fcn.140012720
movzx eax, bl
mov rcx, qword [rbp + 0x4d0]
xor rcx, rsp
call fcn.140011830
lea r11, [rsp + 0x5e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400691d0
nop
call fcn.140001290
nop
call fcn.1400691d0
nop
call fcn.1400691d0
nop
call fcn.1400691d0
int3
call fcn.1400691d0
nop
call fcn.1400691d0
nop
call fcn.1400691d0
nop
call fcn.1400691d0
nop
call fcn.1400691d0
int3
call fcn.1400691d0
nop
call fcn.1400691d0
int3