Function at 0x140016c64
Capabilities:
Create directory
Set file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov dword [rax + 0x18], r8d
push rbp
mov rbp, rsp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r12d, r12d
mov r15, r9
mov rsi, rdx
mov rdi, rcx
mov qword [rax + 8], r12
mov r13d, r12d
test rcx, rcx
je 0x140016cd3
cmp word [rcx], r12w
je 0x140016cd3
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, rsi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rdx, rdi
lea ecx, [rax + 3]
add ecx, ebx
movsxd r8, ecx
lea rcx, [rbp + 0x10]
call fcn.140015b5c
mov ebx, eax
test eax, eax
js 0x140016e9a
mov rdi, rsi
jmp 0x140016d0d
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rbp + 0x10]
add eax, 3
movsxd rdx, eax
call fcn.140015a94
mov ebx, eax
test eax, eax
js 0x140016e9a
mov rcx, qword [rbp + 0x10]
or r9, 0xffffffffffffffff
mov r8, rsi
lea edx, [r9 + 5]
call fcn.140010790
lea rdi, [rsi + 6]
mov rax, qword [rbp + 0x10]
mov edx, 0x5c
cmp dx, word [rax]
jne 0x140016d21
cmp dx, word [rax + 2]
je 0x140016d6a
mov ecx, 0x61
cmp cx, word [rax]
ja 0x140016d35
mov ecx, 0x7a
cmp cx, word [rax]
jae 0x140016d51
mov ecx, 0x41
cmp cx, word [rax]
ja 0x140016e93
mov ecx, 0x5a
cmp cx, word [rax]
jb 0x140016e93
mov ecx, 0x3a
cmp cx, word [rax + 2]
jne 0x140016e93
cmp dx, word [rax + 4]
jne 0x140016e93
test r15, r15
je 0x140016d86
mov dword [rsp + 0x20], 0x18
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x30], r12d
lea r13, [rsp + 0x20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov rax, qword [rbp + 0x10]
lea r14, [rax + rcx*2]
movzx ecx, word [rdi]
test cx, cx
je 0x140016e9e
mov r12d, dword [rbp + 0x30]
xor edx, edx
lea r8d, [rdx + 0x5c]
cmp r8w, cx
jne 0x140016dbf
cmp rdi, rsi
je 0x140016e81
mov word [r14], cx
cmp r8w, cx
jne 0x140016e79
mov word [r14 + 2], dx
mov rcx, qword [rbp + 0x10]
mov rdx, r13
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor ecx, ecx
test eax, eax
jne 0x140016e3f
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
cmp eax, 0xb7
jne 0x140016e2d
test r15, r15
je 0x140016e29
mov edx, dword [rbp + 0x20]
mov rcx, qword [rbp + 0x10]
mov r8, r15
call qword [sym.imp.ADVAPI32.dll_SetFileSecurityW]
xor ecx, ecx
test eax, eax
jne 0x140016e29
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x140016e9a
mov ebx, ecx
jmp 0x140016e3f
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x140016e9a
test r12d, r12d
je 0x140016e71
mov rcx, qword [rbp + 0x10]
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xor edx, edx
test eax, eax
jne 0x140016e73
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x140016e9a
xor edx, edx
mov r8d, 0x5c
mov rax, qword [rbp + 0x10]
add r14, 2
add rdi, 2
movzx ecx, word [rdi]
test cx, cx
jne 0x140016db0
jmp 0x140016e9e
mov ebx, 0x80070057
jmp 0x140016e9e
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x140016eab
mov rcx, rax
call fcn.140016048
mov eax, ebx
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret