Function at 0x1400c0420
Capabilities:
Create directory

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x60
lea rbx, [rsp + 0x40]
mov rcx, rbx
call fcn.1400c02d0
movabs rax, 0x3fffffffffffffff
sub rax, qword [rsp + 0x48]
cmp rax, 7
jbe 0x1400c05b2
mov r8d, 8
lea rdx, str._notepad
mov rcx, rbx
call fcn.1403bdb40
lea rbx, [rsp + 0x30]
lea rcx, [rax + 0x10]
mov qword [rsp + 0x20], rbx
mov rdx, qword [rax]
cmp rdx, rcx
je 0x1400c0520
mov qword [rsp + 0x20], rdx
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x30], rdx
mov rdx, qword [rax + 8]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rax + 8], 0
mov byte [rax + 0x10], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
cmp rcx, rax
je 0x1400c04b6
call fcn.1403f2f80
mov rcx, qword [rsp + 0x20]
mov rdi, qword [sym.imp.msvcrt.dll__mkdir]
lea rsi, [rsp + 0x20]
call rdi
movabs rax, 0x3fffffffffffffff
sub rax, qword [rsp + 0x28]
cmp rax, 6
jbe 0x1400c05be
lea rsi, [rsp + 0x20]
mov r8d, 7
lea rdx, str._.cache
mov rcx, rsi
call fcn.1403bdb40
mov rcx, qword [rsp + 0x20]
call rdi
mov rcx, qword [rsp + 0x20]
cmp rcx, rbx
je 0x1400c0513
call fcn.1403f2f80
nop
add rsp, 0x60
pop rbx
pop rsi
pop rdi
ret
mov rdi, qword [rax + 8]
mov r10, rbx
mov r8, rcx
lea rdx, [rdi + 1]
cmp edx, 8
jae 0x1400c0578
xor r9d, r9d
test dl, 4
je 0x1400c0547
mov r9d, dword [r8]
mov dword [r10], r9d
mov r9d, 4
test dl, 2
je 0x1400c055a
movzx r11d, word [r8 + r9]
mov word [r10 + r9], r11w
add r9, 2
and edx, 1
je 0x1400c048a
movzx edx, byte [r8 + r9]
mov byte [r10 + r9], dl
jmp 0x1400c048a
mov r10d, edx
xor r8d, r8d
and r10d, 0xfffffff8
mov r9d, r8d
add r8d, 8
mov r11, qword [rcx + r9]
mov qword [rbx + r9], r11
cmp r8d, r10d
jb 0x1400c0582
lea r10, [rbx + r8]
add r8, rcx
jmp 0x1400c0533
lea rcx, [0x140450420]
call fcn.1403f7ce0
lea rcx, [0x140450420]
call fcn.1403f7ce0
mov rbx, rax
mov rcx, rsi
call fcn.1403bac30
mov rcx, rbx
call fcn.140219c30
nop
nop
nop
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
mov rbx, rcx
mov ecx, dword [rdx]
mov rsi, r8
mov eax, ecx
and eax, 0xff000000
cmp eax, 0x72000000
je 0x1400c0620
xor eax, eax
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
cmp dword [rbx + 0x84], 7
je 0x1400c0850
mov rbp, qword [rbx + 0x68]
call fcn.14012b2a0
mov rdx, rax
mov eax, dword [rbx + 0x84]
mov edx, dword [rdx + 0x1c]
sub eax, 1
lea ecx, [rdx + 0x8000]
cmp eax, 0xa
ja 0x1400c0818
lea rdx, [0x140450480]
movzx r12d, byte [rdx + rax]
lea rdx, [0x140450470]
movzx r8d, byte [rdx + rax]
mov edx, 0x89ffffbf
mov rax, rbp
cmp rdx, rbp
jae 0x1400c0686
movabs rax, 0xffffffff76000040
add rax, rbp
xor edx, edx
div rcx
shr rax, 1
test r8b, r8b
je 0x1400c09a2
mov edi, 0x40
mov edx, dword [rbx + 0x70]
imul edi, edx
cmp edi, eax
cmova edi, eax
shl edx, 2
and edi, 0xffffffc0
cmp edi, edx
jb 0x1400c0940
mov eax, 0x89ffffbf
cmp rax, rbp
setae r15b
test edi, edi
je 0x1400c0606
cmp dword [rbx + 0x7c], 1
mov r14d, 8
jne 0x1400c06db
mov r14d, 0x10
mov rcx, r14
mov r13d, dword [rbx + 0x74]
mov byte [rsp + 0x20], r15b
mov byte [rsp + 0x21], r12b
mov dword [rsp + 0x24], 2
call fcn.1403f2fd0
mov r9, 0xffffffffffffffff
lea rdx, [rax + 8]
lea r8, [rax + r14]
mov qword [rsp + 0x28], rax
mov rbx, rax
and rdx, 0xfffffffffffffff8
mov qword [rsp + 0x38], r8
mov qword [rax], 0xffffffffffffffff
mov qword [rax + r14 - 8], 0xffffffffffffffff
sub rax, rdx
add eax, r14d
and eax, 0xfffffff8
cmp eax, 8
jb 0x1400c074a
and eax, 0xfffffff8
xor ecx, ecx
mov r10d, ecx
add ecx, 8
mov qword [rdx + r10], r9
cmp ecx, eax
jb 0x1400c073c
movabs rax, 0x800000008
mov qword [rsp + 0x30], r8
mov rbp, qword [rsi + 8]
mov dword [rsp + 0x40], 6
mov dword [rsp + 0x44], r13d
mov qword [rsp + 0x4c], 0
mov qword [rsp + 0x54], rax
mov dword [rsp + 0x48], edi
cmp rbp, qword [rsi + 0x10]
je 0x1400c0970
mov eax, dword [rsp + 0x24]
mov byte [rbp], r15b
pxor xmm0, xmm0
mov rcx, r14
mov byte [rbp + 1], r12b
mov dword [rbp + 4], eax
mov qword [rbp + 0x18], 0
movups xmmword [rbp + 8], xmm0
call fcn.1403f2fd0
movq xmm1, rax
lea rdx, [rax + r14]
movddup xmm0, xmm1
mov qword [rbp + 0x18], rdx
movups xmmword [rbp + 8], xmm0
cmp r14, 8
je 0x1400c0997
movdqu xmm2, xmmword [rbx]
movups xmmword [rax], xmm2
movabs rax, 0x800000008
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x20], 6
mov dword [rbp + 0x24], r13d
mov dword [rbp + 0x28], edi
mov qword [rbp + 0x2c], 0
mov qword [rbp + 0x34], rax
add qword [rsi + 8], 0x40
mov rcx, rbx
call fcn.1403f2f80
mov eax, 1
jmp 0x1400c0608
mov eax, 0x89ffffbf
cmp rax, rbp
jae 0x1400c0960
movabs rax, 0xffffffff76000040
add rax, rbp
xor edx, edx
xor r12d, r12d
mov edi, 0x10
div rcx
shr rax, 1
jmp 0x1400c069c
cmp dword [rbx + 0x70], 4
mov ebp, pe_nt_image_headers64
jbe 0x1400c0860
mov ebp, 0x100
movabs rax, 0x200000101
mov ecx, 8
mov r12d, dword [rbx + 0x74]
movabs r15, 0x800000008
mov qword [rsp + 0x20], rax
call fcn.1403f2fd0
mov dword [rsp + 0x44], r12d
mov rbx, qword [rsi + 8]
mov rdi, rax
mov qword [rsp + 0x28], rax
lea rax, [rax + 8]
mov qword [rsp + 0x38], rax
mov qword [rdi], 0xffffffffffffffff
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x40], 6
mov qword [rsp + 0x4c], 0
mov qword [rsp + 0x54], r15
mov dword [rsp + 0x48], ebp
cmp rbx, qword [rsi + 0x10]
je 0x1400c0988
mov eax, 0x101
pxor xmm0, xmm0
mov ecx, 8
mov qword [rbx + 0x18], 0
mov word [rbx], ax
mov eax, dword [rsp + 0x24]
movups xmmword [rbx + 8], xmm0
mov dword [rbx + 4], eax
call fcn.1403f2fd0
mov rcx, qword [rdi]
lea rdx, [rax + 8]
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdx
mov qword [rbx + 0x10], rdx
mov qword [rax], rcx
mov dword [rbx + 0x20], 6
mov dword [rbx + 0x24], r12d
mov dword [rbx + 0x28], ebp
mov qword [rbx + 0x2c], 0
mov qword [rbx + 0x34], r15
add qword [rsi + 8], 0x40
mov rcx, rdi
call fcn.1403f2f80
jmp 0x1400c0808
mov rax, rbp
xor edx, edx
mov r15d, 1
div rcx
shr rax, 1
mov edi, eax
and edi, 0xffffffc0
jmp 0x1400c06c1
mov rax, rbp
jmp 0x1400c0833
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.1403b67b0
jmp 0x1400c0800
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.1403b67b0
jmp 0x1400c092f
mov rcx, qword [rbx]
mov qword [rax], rcx
jmp 0x1400c07d3
mov edi, 0x10
jmp 0x1400c069c