Function at 0x10001f408
Capabilities:
Create directory

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x10003d110]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov ebp, r9d
mov r13, rdx
mov rdi, rcx
mov rbx, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x38], rax
mov r12d, 0x48
mov rcx, r12
call fcn.10001d304
mov rsi, rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x40], rax
mov r8, r12
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov r11d, dword [rdi + 0x108]
mov dword [rsi + 0x40], r11d
xor edx, edx
mov ecx, 0x60000
call fcn.100027dc4
xor ecx, ecx
cmp eax, ecx
jne 0x10001f4b2
lea rcx, [rdi + 0xb8]
call fcn.10001f880
xor ecx, ecx
mov r12, qword [r14]
mov r15, qword [r12 + 8]
cmp rbx, rcx
je 0x10001f518
mov eax, 7
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rcx
mov word [rsp + 0x58], cx
cmp ebp, ecx
jbe 0x10001f507
mov rdx, qword [rbx]
cmp rdx, rcx
je 0x10001f4f8
lea rcx, [rsp + 0x50]
call fcn.100012d60
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.100021c24
xor ecx, ecx
add rbx, 8
sub rbp, 1
jne 0x10001f4d7
mov rax, qword [rsp + 0x70]
cmp rax, 8
jb 0x10001f518
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.msvcrt.dll_free]
mov qword [rsp + 0x70], 7
xor eax, eax
mov qword [rsp + 0x68], rax
mov word [rsp + 0x58], ax
lea rdx, [0x10000b7f8]
lea rcx, [rsp + 0x50]
call fcn.100012d60
nop
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.100021b04
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x20]
call fcn.100024fd0
cmp eax, r15d
jge 0x10001f581
mov ecx, eax
call fcn.100025514
int3
lea rbp, [rdi + 0xe0]
mov rbx, qword [rsp + 0x20]
mov rdx, rbx
mov rcx, rbp
call fcn.100012d60
nop
cmp rbx, r15
je 0x10001f5a8
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_free]
nop
cmp qword [rsp + 0x70], 8
jb 0x10001f5bb
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.msvcrt.dll_free]
cmp qword [rbp + 0x20], 8
jb 0x10001f5c8
mov rbp, qword [rbp + 8]
jmp 0x10001f5cc
add rbp, 8
xor edx, edx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp eax, r15d
je 0x10001f5e1
mov eax, r15d
jmp 0x10001f5e9
mov rcx, rbp
call fcn.100024400
cmp eax, 0x800700b7
cmove eax, r15d
cmp eax, r15d
jge 0x10001f5ff
mov ecx, eax
call fcn.100025514
int3
mov edx, dword [r12 + 0x10]
mov rcx, rdi
call fcn.10001fb54
lea r8, [0x100021420]
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.1000225ac
nop
mov ecx, dword [r12]
cmp ecx, r15d
je 0x10001f63e
cmp ecx, 1
jne 0x10001f64a
mov dl, byte [r12 + 4]
mov rcx, rdi
call fcn.10001fd64
jmp 0x10001f64a
lea rcx, [rdi + 0x40]
mov rdx, rdi
call fcn.1000140f0
xor edx, edx
mov rcx, rdi
call fcn.10001ff30
mov r8, r12
mov rdx, r13
mov rcx, rdi
call fcn.100020198
mov rbx, qword [r14]
lea r9, [rdi + 0x20]
lea r8, [rsi + 0x18]
lea rdx, [rsi + 0x10]
mov rcx, rdi
call fcn.1000216a8
cmp qword [rdi + 0xb0], 8
jb 0x10001f68c
mov rcx, qword [rdi + 0x98]
jmp 0x10001f693
lea rcx, [rdi + 0x98]
call fcn.10002286c
mov qword [rsi], rax
cmp qword [rdi + 0x88], 8
jb 0x10001f6ab
mov rcx, qword [rdi + 0x70]
jmp 0x10001f6af
lea rcx, [rdi + 0x70]
call fcn.10002286c
mov qword [rsi + 8], rax
lea r9, [rdi + 0x40]
lea r8, [rsi + 0x28]
lea rdx, [rsi + 0x20]
mov rcx, rdi
call fcn.1000216a8
mov r11, qword [rbx + 0x18]
mov ebx, dword [r11 + 0x20]
mov ebp, 0x48
mov rcx, rbp
call fcn.10001d304
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov r8, rbp
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
lea eax, [rbp - 0x3f]
cmp ebx, eax
cmova ebx, eax
mov ebp, ebx
cmp rbp, r15
jbe 0x10001f733
mov rbx, rdi
sub rbx, r13
lea rcx, [0x1000082d4]
cmp qword [r13], r15
cmovne rcx, qword [r13]
call fcn.10002286c
mov qword [rbx + r13], rax
add r13, 8
sub rbp, 1
jne 0x10001f710
mov qword [rsi + 0x30], rdi
mov rax, qword [r14]
mov qword [rsi + 0x38], rax
mov qword [r14], r15
mov rax, qword [rsp + 0x38]
mov qword [rax], rsi
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.10002eee0
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret