Function at 0x1400ce7c0
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1402fa010]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r12d, edx
mov r15, rcx
mov qword [rbp - 0x28], rcx
xor ebx, ebx
mov dword [rbp - 0x40], ebx
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.1400ce6f0
nop
mov qword [rbp - 0x18], rbx
call fcn.1400195b0
mov rcx, rax
test rax, rax
je 0x1400ceac9
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038716.0]
add rax, 0x18
mov qword [rbp - 0x18], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
lea r8d, [rbx + 1]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x20]
call fcn.14001da50
nop
mov edi, 2
mov dword [rbp - 0x40], edi
mov rcx, qword [rax]
cmp word [rcx], 0x5c
jne 0x1400ce860
cmp word [rcx + 2], bx
je 0x1400ce88c
mov r8d, 1
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x20]
call fcn.14001da50
nop
mov edi, 6
mov dword [rbp - 0x40], edi
mov rcx, qword [rax]
cmp word [rcx], 0x2f
jne 0x1400ce890
cmp word [rcx + 2], 0
jne 0x1400ce890
xor bl, bl
jmp 0x1400ce892
mov bl, 1
mov rsi, 0xffffffffffffffff
test dil, 4
je 0x1400ce8cc
and edi, 0xfffffffb
mov dword [rbp - 0x40], edi
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ce8c9
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
mov edi, dword [rbp - 0x40]
test dil, 2
je 0x1400ce8ff
and edi, 0xfffffffd
mov dword [rbp - 0x40], edi
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ce8fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
mov edi, dword [rbp - 0x40]
test bl, bl
je 0x1400ce924
lea rdx, [0x1402624f4]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400ce910
lea rcx, [rbp - 0x20]
call fcn.14001dda0
xor ecx, ecx
call fcn.140209900
mov dword [rsp + 0x20], r14d
mov r9d, eax
mov r8, qword [rbp - 0x20]
lea rdx, str._sBNZ._x_x_
lea rcx, [rbp - 0x18]
call fcn.14001c3d0
mov rbx, qword [rbp - 0x18]
mov rcx, rbx
call fcn.1400246b0
test eax, eax
je 0x1400ce996
nop word [rax + rax]
inc r14d
xor ecx, ecx
call fcn.140209900
mov dword [rsp + 0x20], r14d
mov r9d, eax
mov r8, qword [rbp - 0x20]
lea rdx, str._sBNZ._x_x_
lea rcx, [rbp - 0x18]
call fcn.14001c3d0
mov rbx, qword [rbp - 0x18]
mov rcx, rbx
call fcn.1400246b0
test eax, eax
jne 0x1400ce960
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400cea44
test r12d, r12d
je 0x1400ce9ee
call fcn.1401285c0
mov r14, rax
xor r9d, r9d
mov r8, qword [rax + 0xf0]
mov rdx, rbx
lea rcx, [rax + 0xe8]
call fcn.140029d10
mov rcx, qword [r14 + 0xf0]
test rcx, rcx
je 0x1400ce9e0
mov qword [rcx], rax
jmp 0x1400ce9e7
mov qword [r14 + 0xe8], rax
mov qword [r14 + 0xf0], rax
lea rcx, [rbx - 0x18]
call fcn.1400191a0
add rax, 0x18
mov qword [r15], rax
or edi, 1
mov dword [rbp - 0x40], edi
mov eax, esi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400cea26
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400ceaa1
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
jmp 0x1400cea9b
mov rcx, qword [rbp - 0x20]
add rcx, 0xffffffffffffffe8
call fcn.1400191a0
add rax, 0x18
mov qword [r15], rax
or edi, 1
mov dword [rbp - 0x40], edi
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cea7f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400ceaa1
mov rcx, qword [rdx]
mov r8, qword [rcx]
mov rax, qword [r8 + 8]
call qword [case.0x140038716.0]
mov rax, r15
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1401f3bf0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140019320
int3