Function at 0x1000029bc
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x140
mov rax, qword [0x10000f100]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rbx, rcx
mov rax, rcx
mov cl, byte [rcx]
mov r12, r8
mov r13b, 0x5c
mov bpl, 0x2f
xor r15d, r15d
jmp 0x100002a26
cmp cl, r13b
je 0x100002a2b
cmp cl, bpl
je 0x100002a2b
cmp cl, 0x3a
jne 0x100002a16
cmp byte [rax + 1], r13b
je 0x100002a16
cmp byte [rax + 1], bpl
jne 0x100002a2b
xor ecx, ecx
xor r8d, r8d
mov rdx, rax
call qword [sym.imp.USER32.dll_CharNextExA]
mov cl, byte [rax]
cmp cl, r15b
jne 0x1000029fb
mov byte [rsp + 0x30], r15b
cmp byte [rax], r15b
mov esi, 1
cmovne rax, rbx
mov r14d, 0x100
cmp byte [rax], r15b
je 0x100002b61
mov cl, byte [rax]
cmp cl, r15b
je 0x100002b61
mov rdi, rax
cmp cl, r13b
je 0x100002a8d
cmp cl, bpl
je 0x100002a8d
cmp cl, 0x3a
jne 0x100002a75
mov al, byte [rdi + 1]
cmp al, r13b
je 0x100002a75
cmp al, bpl
jne 0x100002a8d
xor ecx, ecx
xor r8d, r8d
mov rdx, rdi
call qword [sym.imp.USER32.dll_CharNextExA]
mov rdi, rax
mov cl, byte [rax]
cmp cl, r15b
jne 0x100002a59
cmp byte [rdi], r15b
je 0x100002b0a
mov eax, edi
sub eax, ebx
cmp eax, r15d
jle 0x100002aa8
cmp byte [rdi], 0x3a
je 0x100002aa6
cmp byte [rdi - 1], 0x3a
jne 0x100002aa8
add eax, esi
movsxd rcx, eax
cmp rcx, 0x7ffffffe
ja 0x100002b16
lea r8, [rsp + 0x30]
mov r9, rbx
mov rdx, r14
lea rax, [rsp + 0x30]
mov r10d, r15d
sub r9, r8
cmp rcx, r15
je 0x100002ae9
mov r8b, byte [r9 + rax]
cmp r8b, r15b
je 0x100002ae9
sub rdx, rsi
mov byte [rax], r8b
sub rcx, rsi
add rax, rsi
cmp rdx, r15
jne 0x100002aca
cmp rdx, r15
jne 0x100002af7
sub rax, rsi
mov r10d, 0x8007007a
cmp r10d, r15d
mov byte [rax], r15b
jl 0x100002b1b
lea rcx, [rsp + 0x30]
call qword [sym.imp.msvcrt.dll__mkdir]
cmp byte [rdi], r15b
lea rax, [rdi + 1]
jmp 0x100002a45
mov byte [rsp + 0x30], r15b
mov r9, rbx
lea rdx, [0x100001428]
lea r8, [0x1000013d0]
mov rcx, r12
call fcn.100002688
xor eax, eax
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.10000d2f0
mov rbx, qword [rsp + 0x188]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
or rdx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x30]
mov rcx, rdx
repne scasb al, byte [rdi]
not rcx
cmp rcx, rsi
jne 0x100002b9e
mov rcx, rdx
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
cmp rcx, rsi
je 0x100002b9e
mov al, byte [rbx]
cmp al, r13b
je 0x100002b95
cmp al, bpl
jne 0x100002b9e
mov byte [rsp + 0x30], al
mov byte [rsp + 0x31], r15b
xor eax, eax
lea rdi, [rsp + 0x30]
mov rcx, rdx
repne scasb al, byte [rdi]
not rcx
sub rcx, rsi
cmp ecx, r15d
movsxd rbp, ecx
jle 0x100002bf5
cmp ecx, 0xfe
ja 0x100002b1b
lea eax, [rcx - 1]
movsxd rdx, eax
lea rax, [rsp + rdx + 0x30]
cmp byte [rax], r15b
je 0x100002bf0
cmp byte [rax], r13b
je 0x100002bf0
cmp byte [rax], 0x2f
je 0x100002bf0
cmp byte [rax], 0x3a
je 0x100002bf0
mov byte [rax + rsi], r13b
mov byte [rax + rsi + 1], r15b
mov eax, esi
jmp 0x100002bf3
mov eax, r15d
add ecx, eax
movsxd rax, ecx
mov esi, r15d
mov edi, r15d
lea r13, [rsp + rax + 0x30]
sub r14, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8, [0x100001440]
mov rdx, r14
lea r9d, [rdi + rax]
mov rcx, r13
call fcn.100002860
cmp eax, r15d
jl 0x100002b1b
lea rcx, [rsp + 0x30]
mov edx, 0x502
mov r8d, 0x180
call qword [sym.imp.msvcrt.dll__open]
cmp eax, 0xffffffff
jne 0x100002d6a
call qword [sym.imp.msvcrt.dll__errno]
mov ecx, dword [rax]
cmp ecx, 0xd
je 0x100002cf3
cmp ecx, 0x11
je 0x100002cfa
cmp ecx, 0x16
jne 0x100002d35
call qword [sym.imp.msvcrt.dll___doserrno]
cmp dword [rax], 0x12f
je 0x100002cfa
call qword [sym.imp.msvcrt.dll___doserrno]
mov rbx, rax
call qword [sym.imp.msvcrt.dll__errno]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, dword [rbx]
mov r8d, dword [rdi]
lea rdx, [rsp + 0x30]
lea rcx, [0x1000014a0]
mov dword [rsp + 0x20], eax
call qword [sym.imp.msvcrt.dll_printf]
mov byte [rsp + rbp + 0x30], r15b
call qword [sym.imp.msvcrt.dll___doserrno]
mov rdi, rax
call qword [sym.imp.msvcrt.dll__errno]
lea r9, [rsp + 0x30]
mov r11, rax
mov eax, dword [rdi]
lea r8, [0x1000014e8]
mov dword [rsp + 0x28], eax
mov eax, dword [r11]
lea rdx, [0x1000014f0]
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.100002688
jmp 0x100002b34
inc esi
cmp esi, 5
jge 0x100002d54
inc edi
cmp edi, 0x3e7
jl 0x100002c06
lea rax, [rsp + 0x30]
lea r8, [0x100001504]
lea rdx, [0x100001510]
mov r9d, edi
mov rcx, r12
mov byte [rsp + rbp + 0x30], r15b
mov qword [rsp + 0x20], rax
call fcn.100002688
jmp 0x100002b34
cmp ecx, 0x18
jne 0x100002c7b
mov byte [rsp + rbp + 0x30], r15b
lea r9, [rsp + 0x30]
lea rdx, [0x100001478]
jmp 0x100002b25
mov byte [rsp + rbp + 0x30], r15b
lea r9, [rsp + 0x30]
lea rdx, [0x100001450]
jmp 0x100002b25
mov ecx, eax
call qword [sym.imp.msvcrt.dll__close]
lea rcx, [rsp + 0x30]
call qword [sym.imp.msvcrt.dll__unlink]
mov eax, 1
jmp 0x100002b36