Function at 0x460f94
Capabilities:
Create directory

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x360
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x004bf230]
xor rax, rsp
mov qword [rsp + 0x350], rax
mov r13, r8
mov rbp, rdx
mov r14, rcx
call fcn.004551b8
mov rsi, qword [rax + 0x70]
mov r12d, 7
mov qword [rsp + 0x110], r12
xor r15d, r15d
mov qword [rsp + 0x108], r15
mov word [rsp + 0xf8], r15w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [r14 + 0x30]
lea rcx, [rsp + 0xf0]
call fcn.004020b0
nop
cmp rsi, r15
je 0x46103a
cmp qword [rbp + 0x20], 8
jb 0x461027
mov r8, qword [rbp + 8]
jmp 0x46102b
lea r8, [rbp + 8]
lea rdx, str.Processing_file___s_
mov rcx, rsi
call fcn.0045fe58
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
mov r8d, 6
lea rdx, str._1033.
lea rcx, [rsp + 0xa0]
call fcn.00404e54
nop
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rdx, qword [rsp + 0xa8]
cmp qword [rbp + 0x20], 8
jb 0x461098
lea rbx, [rbp + 8]
mov rcx, qword [rbx]
jmp 0x46109f
lea rbx, [rbp + 8]
mov rcx, rbx
call fcn.00445330
cmp rax, r15
je 0x4610c3
mov r8d, 4
lea rdx, str.1033
lea rcx, [rsp + 0xf0]
call fcn.00404e54
mov qword [rsp + 0x98], r12
mov qword [rsp + 0x90], r15
mov word [rsp + 0x80], r15w
mov r12d, 1
mov r8, r12
lea rdx, [0x0049e5ac]
lea rcx, [rsp + 0x78]
call fcn.00404e54
nop
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
mov r8, r12
lea rdx, [0x00492290]
lea rcx, [rsp + 0x50]
call fcn.00404e54
nop
lea r8, [r14 + 0x30]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x118]
call fcn.0040c644
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.0040c644
nop
lea edi, [r12 + 7]
cmp qword [rsp + 0x138], rdi
jb 0x461169
mov rcx, qword [rsp + 0x120]
call fcn.00443d3c
mov qword [rsp + 0x138], 7
mov qword [rsp + 0x130], r15
mov word [rsp + 0x120], r15w
cmp qword [rsp + 0x70], rdi
jb 0x461197
mov rcx, qword [rsp + 0x58]
call fcn.00443d3c
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
cmp qword [rsp + 0x98], rdi
jb 0x4611c2
mov rcx, qword [rsp + 0x80]
call fcn.00443d3c
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], r15
mov word [rsp + 0x80], r15w
cmp qword [rbp + 0x20], rdi
jb 0x4611ea
mov rcx, qword [rbx]
jmp 0x4611ed
mov rcx, rbx
mov rdx, qword [str.dw20.exe]
call fcn.00445330
cmp rax, r15
jne 0x4612f5
cmp qword [rbp + 0x20], rdi
jb 0x46120d
mov rcx, qword [rbx]
jmp 0x461210
mov rcx, rbx
mov rdx, qword [str.dwintl20.dll]
call fcn.00445330
cmp rax, r15
je 0x461256
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], rdi
cmovae rdx, qword [rsp + 0xd0]
cmp qword [rbp + 0x20], rdi
jb 0x461245
mov rcx, qword [rbx]
jmp 0x461248
mov rcx, rbx
call fcn.00445330
cmp rax, r15
jne 0x4612f5
cmp qword [rsp + 0xe8], rdi
jb 0x46126d
mov rcx, qword [rsp + 0xd0]
call fcn.00443d3c
mov ebx, 7
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0xc0], rdi
jb 0x4612a2
mov rcx, qword [rsp + 0xa8]
call fcn.00443d3c
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
cmp qword [rsp + 0x110], rdi
jb 0x4612d2
mov rcx, qword [rsp + 0xf8]
call fcn.00443d3c
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x108], r15
mov word [rsp + 0xf8], r15w
mov eax, 2
jmp 0x461a58
mov word [rsp + 0x140], r15w
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x142]
call fcn.00449860
lea rdx, [rsp + 0x140]
mov ecx, 0x104
call fcn.0040ddbc
cmp eax, r15d
jne 0x4613df
cmp rsi, r15
je 0x461343
lea rdx, str.ERROR:_Failed_to_get_the_temp_path_in_ProcessFile__
mov rcx, rsi
call fcn.0045fe58
nop
cmp qword [rsp + 0xe8], rdi
jb 0x46135a
mov rcx, qword [rsp + 0xd0]
call fcn.00443d3c
mov ebx, 7
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0xc0], rdi
jb 0x46138f
mov rcx, qword [rsp + 0xa8]
call fcn.00443d3c
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
cmp qword [rsp + 0x110], rdi
jb 0x4613bf
mov rcx, qword [rsp + 0xf8]
call fcn.00443d3c
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x108], r15
mov word [rsp + 0xf8], r15w
xor eax, eax
jmp 0x461a58
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdx, qword [str.VSSetupWatson]
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
sub rcx, r12
mov r8, rcx
lea rcx, [rsp + 0x50]
call fcn.00404e54
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x78]
call fcn.0040621c
nop
mov edi, 8
cmp qword [rsp + 0x70], rdi
jb 0x461448
mov rcx, qword [rsp + 0x58]
call fcn.00443d3c
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], rdi
cmovae rcx, qword [rsp + 0x80]
xor edx, edx
call fcn.00445770
cmp eax, r15d
je 0x461580
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], rdi
cmovae rcx, qword [rsp + 0x80]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp eax, r15d
je 0x4614b7
mov byte [r14 + 0x80], r12b
jmp 0x461580
cmp rsi, r15
je 0x4614cc
lea rdx, str.ERROR:_Failed_to_Create_Temporary_Watson_Folder
mov rcx, rsi
call fcn.0045fe58
nop
cmp qword [rsp + 0x98], rdi
jb 0x4614e3
mov rcx, qword [rsp + 0x80]
call fcn.00443d3c
mov ebx, 7
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x90], r15
mov word [rsp + 0x80], r15w
cmp qword [rsp + 0xe8], rdi
jb 0x461518
mov rcx, qword [rsp + 0xd0]
call fcn.00443d3c
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0xc0], rdi
jb 0x461548
mov rcx, qword [rsp + 0xa8]
call fcn.00443d3c
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
cmp qword [rsp + 0x110], rdi
jb 0x461578
mov rcx, qword [rsp + 0xf8]
call fcn.00443d3c
mov r12d, r15d
jmp 0x461889
cmp qword [rbp + 0x20], rdi
jb 0x461589
mov rbx, qword [rbx]
mov rdx, qword [str.dw20.exe]
mov rcx, rbx
call fcn.00445330
cmp rax, r15
je 0x461715
mov r8, qword [0x004c2650]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.0040c560
nop
mov r8, qword [str.dw20.exe]
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.0040c560
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
mov rcx, r13
call fcn.004020b0
nop
cmp qword [rsp + 0x138], rdi
jb 0x4615fa
mov rcx, qword [rsp + 0x120]
call fcn.00443d3c
mov ebx, 7
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x130], r15
mov word [rsp + 0x120], r15w
cmp qword [rsp + 0x70], rdi
jb 0x461629
mov rcx, qword [rsp + 0x58]
call fcn.00443d3c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
mov byte [r14 + 0x83], r12b
cmp rsi, r15
je 0x461665
cmp qword [r13 + 0x20], rdi
jb 0x461651
mov r8, qword [r13 + 8]
jmp 0x461655
lea r8, [r13 + 8]
lea rdx, str.Extracted_EXE_file___s_
mov rcx, rsi
call fcn.0045fe58
nop
cmp qword [rsp + 0x98], rdi
jb 0x46167c
mov rcx, qword [rsp + 0x80]
call fcn.00443d3c
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x90], r15
mov word [rsp + 0x80], r15w
cmp qword [rsp + 0xe8], rdi
jb 0x4616ac
mov rcx, qword [rsp + 0xd0]
call fcn.00443d3c
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0xc0], rdi
jb 0x4616dc
mov rcx, qword [rsp + 0xa8]
call fcn.00443d3c
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
cmp qword [rsp + 0x110], rdi
jb 0x461889
mov rcx, qword [rsp + 0xf8]
call fcn.00443d3c
jmp 0x461889
mov r8, qword [0x004c2650]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x20]
call fcn.0040c560
nop
lea r8, [rsp + 0xf0]
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.0040c644
nop
cmp qword [rsp + 0x40], rdi
jb 0x461753
mov rcx, qword [rsp + 0x28]
call fcn.00443d3c
mov ebx, 7
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], rdi
cmovae rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.00445770
cmp eax, r15d
je 0x4618b1
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], rdi
cmovae rcx, qword [rsp + 0x58]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp eax, r15d
jne 0x4618aa
cmp rsi, r15
je 0x4617be
lea rdx, str.ERROR:_Failed_to_Create_Temporary_Watson_Intl_Folder
mov rcx, rsi
call fcn.0045fe58
nop
cmp qword [rsp + 0x70], rdi
jb 0x4617cf
mov rcx, qword [rsp + 0x58]
call fcn.00443d3c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
cmp qword [rsp + 0x98], rdi
jb 0x4617f6
mov rcx, qword [rsp + 0x80]
call fcn.00443d3c
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x90], r15
mov word [rsp + 0x80], r15w
cmp qword [rsp + 0xe8], rdi
jb 0x461826
mov rcx, qword [rsp + 0xd0]
call fcn.00443d3c
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0xc0], rdi
jb 0x461856
mov rcx, qword [rsp + 0xa8]
call fcn.00443d3c
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
cmp qword [rsp + 0x110], rdi
jb 0x461886
mov rcx, qword [rsp + 0xf8]
call fcn.00443d3c
mov r12d, r15d
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x108], r15
mov word [rsp + 0xf8], r15w
mov eax, r12d
jmp 0x461a58
mov byte [r14 + 0x81], r12b
mov r8, qword [0x004c2650]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x20]
call fcn.0040c560
nop
mov r8, qword [str.dwintl20.dll]
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.0040c560
nop
cmp qword [rsp + 0x40], rdi
jb 0x4618f1
mov rcx, qword [rsp + 0x28]
call fcn.00443d3c
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x118]
mov rcx, r13
call fcn.004020b0
mov byte [r14 + 0x82], r12b
cmp rsi, r15
je 0x461944
cmp qword [r13 + 0x20], rdi
jb 0x461930
mov r8, qword [r13 + 8]
jmp 0x461934
lea r8, [r13 + 8]
lea rdx, str.Extracted_DLL_file___s_
mov rcx, rsi
call fcn.0045fe58
nop
cmp qword [rsp + 0x138], rdi
jb 0x46195b
mov rcx, qword [rsp + 0x120]
call fcn.00443d3c
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x130], r15
mov word [rsp + 0x120], r15w
cmp qword [rsp + 0x70], rdi
jb 0x461985
mov rcx, qword [rsp + 0x58]
call fcn.00443d3c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], r15
mov word [rsp + 0x58], r15w
cmp qword [rsp + 0x98], rdi
jb 0x4619ac
mov rcx, qword [rsp + 0x80]
call fcn.00443d3c
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x90], r15
mov word [rsp + 0x80], r15w
cmp qword [rsp + 0xe8], rdi
jb 0x4619dc
mov rcx, qword [rsp + 0xd0]
call fcn.00443d3c
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0xc0], rdi
jb 0x461a0c
mov rcx, qword [rsp + 0xa8]
call fcn.00443d3c
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], r15
mov word [rsp + 0xa8], r15w
cmp qword [rsp + 0x110], rdi
jb 0x461a3c
mov rcx, qword [rsp + 0xf8]
call fcn.00443d3c
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x108], r15
mov word [rsp + 0xf8], r15w
mov eax, r12d
mov rcx, qword [rsp + 0x350]
xor rcx, rsp
call fcn.00443d60
mov rbx, qword [rsp + 0x3b8]
add rsp, 0x360
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret