Function at 0x14002ca10
Capabilities:
Create directory
Write file on windows

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r13
sub rsp, 0x4c0
mov rax, qword [0x140317e98]
xor rax, rsp
mov qword [rsp + 0x4b0], rax
mov rsi, qword [rsp + 0x510]
xorps xmm0, xmm0
mov ebp, edx
mov r13, rcx
xor eax, eax
lea rcx, [rsp + 0xb0]
mov edi, 0x400
mov qword [rsp + 0xa0], rax
mov r8d, edi
xor edx, edx
mov rbx, r9
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
call fcn.1400d9fc0
lea rcx, [rsp + 0xb0]
sub rcx, rbx
nop
movzx eax, byte [rbx]
mov byte [rcx + rbx], al
lea rbx, [rbx + 1]
test al, al
jne 0x14002ca90
lea rcx, [rsp + 0xb0]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14002cab0
movsxd rdx, eax
movzx ecx, byte [rsp + rdx + 0xaf]
cmp cl, 0x5c
je 0x14002caef
cmp cl, 0x2f
je 0x14002caef
movsxd rcx, eax
inc rcx
mov byte [rsp + rdx + 0xb0], 0x5c
cmp rcx, rdi
jae 0x14002cda2
mov byte [rsp + rcx + 0xb0], 0
inc eax
sub edi, eax
lea r8, [rsp + 0xb0]
cdqe
lea rdx, [rsp + 0x50]
add r8, rax
mov r9d, edi
xor eax, eax
mov rcx, r13
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
call fcn.14008d230
test eax, eax
jne 0x14002cb9e
movzx eax, byte [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0x500], r14
lea r14, [rsp + 0xb0]
test al, al
je 0x14002cd8a
nop
cmp al, 0x2f
je 0x14002cb58
cmp al, 0x5c
jne 0x14002cb5c
lea r14, [rcx + 1]
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x14002cb50
cmp byte [r14], al
je 0x14002cd8a
mov ecx, 0x2000
mov qword [rsp + 0x508], r15
call fcn.1400ed01c
mov r15, rax
test rax, rax
jne 0x14002cbbc
lea eax, [r15 - 0x68]
mov r15, qword [rsp + 0x508]
mov r14, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x4b0]
xor rcx, rsp
call fcn.1400d7670
add rsp, 0x4c0
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rdx, rsi
mov qword [rsp + 0x4f8], r12
mov rcx, r13
call fcn.14008d660
test ebp, ebp
lea r12, [rsp + 0xb0]
mov esi, eax
cmovne r12, r14
test eax, eax
jne 0x14002cd6b
lea rdx, [0x140247e14]
mov rcx, r12
call fcn.1400eb8d0
mov rbx, rax
test rax, rax
jne 0x14002cd20
test ebp, ebp
jne 0x14002cd6b
lea rax, [rsp + 0xb0]
cmp r14, rax
je 0x14002cd6b
movzx edi, byte [r14 - 1]
mov rax, 0xffffffffffffffff
mov byte [rsp + 0x40], dil
mov byte [r14 - 1], bpl
inc rax
cmp byte [r12 + rax], 0
jne 0x14002cc30
test eax, eax
jle 0x14002ccfb
movsxd rbx, eax
lea rcx, [rbx + 1]
call fcn.1400ed01c
mov rbp, rax
test rax, rax
je 0x14002ccfb
mov r8, rax
mov rdx, r12
sub r8, r12
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdx]
mov byte [r8 + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x14002cc70
cmp byte [rbx + rax - 1], 0x2f
jne 0x14002cc8a
mov byte [rbx + rax - 1], cl
mov rcx, rbp
call fcn.1400ed728
test eax, eax
je 0x14002ccf3
lea rdi, [rbp + 1]
nop word [rax + rax]
movzx ebx, byte [rdi]
test bl, bl
je 0x14002ccc9
movzx eax, bl
nop word [rax + rax]
movzx ebx, al
cmp al, 0x5c
je 0x14002ccc9
cmp al, 0x2f
je 0x14002ccc9
movzx ebx, byte [rdi + 1]
inc rdi
movzx eax, bl
test bl, bl
jne 0x14002ccb0
mov rcx, rbp
mov byte [rdi], 0
call fcn.1400ed728
cmp eax, 0xffffffff
jne 0x14002cce3
call fcn.1400e8b0c
cmp dword [rax], 2
je 0x14002ccee
test bl, bl
je 0x14002ccee
mov byte [rdi], bl
inc rdi
jmp 0x14002cca0
movzx edi, byte [rsp + 0x40]
mov rcx, rbp
call fcn.1400e9e10
lea rdx, [0x140247e14]
mov byte [r14 - 1], dil
mov rcx, r12
call fcn.1400eb8d0
mov rbx, rax
test rax, rax
je 0x14002cd6b
nop word [rax + rax]
mov r8d, 0x2000
mov rdx, r15
mov rcx, r13
call fcn.14008daa0
movsxd rsi, eax
cmp esi, 1
jl 0x14002cd5e
mov rdx, rsi
mov r9, rbx
mov r8d, 1
mov rcx, r15
call fcn.1400ecc58
cmp rax, 1
jne 0x14002cd59
test esi, esi
jg 0x14002cd20
jmp 0x14002cd5e
mov esi, 0xffffffff
test rbx, rbx
je 0x14002cd6b
mov rcx, rbx
call fcn.1400eb9e0
mov rcx, r13
call fcn.14008d170
mov rcx, r15
call fcn.1400e9e10
mov r12, qword [rsp + 0x4f8]
mov eax, esi
jmp 0x14002cb8e
test ebp, ebp
jne 0x14002cd9b
lea rcx, [rsp + 0xb0]
call fcn.1400ed728
xor eax, eax
jmp 0x14002cb96
call fcn.1400d7970
int3