Function at 0x180002b30
Capabilities:
Create directory

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov qword [rbp + 0x1f], 0xfffffffffffffffe
mov qword [rsp + 0xd8], rbx
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov ecx, 0x158
call qword [sym.imp.MSVCR100.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
mov rbx, rax
xor edx, edx
mov r8d, 0x158
mov rcx, rax
call sub.MSVCR100.dll_memset
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea rcx, [rbp - 0x29]
call fcn.18001b0e0
nop
lea r8, [0x180041ac0]
mov rdx, rax
lea rcx, [rbp - 0x19]
call fcn.1800071d0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.1800071d0
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc100.dll_Ordinal_889]
test rsi, rsi
je 0x180002bef
mov rdx, rdi
mov rcx, rsi
call fcn.180035750
jmp 0x180002c66
lea rcx, [rbp - 0x19]
call fcn.18001b0e0
nop
lea r8, [0x180041ac0]
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.1800071d0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.1800071d0
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc100.dll_Ordinal_889]
xor edx, edx
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, str.Log.txt
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc100.dll_Ordinal_1461]
mov rdx, rdi
mov rcx, qword [rbp - 0x21]
call fcn.180035750
nop
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc100.dll_Ordinal_889]
mov r8, rdi
mov edx, 0x100
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_strcpy_s]
mov rdx, rbx
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc100.dll_Ordinal_310]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.180009c40
mov dword [rbx + 0x100], eax
xor r13d, r13d
test eax, eax
jne 0x180002caf
lea rdx, str.Unregistered_user_
lea ecx, [rax + 2]
call fcn.180035240
jmp 0x180002ccf
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [0x18000a390]
call qword [sym.imp.mfc100.dll_Ordinal_1831]
mov qword [r12], rbx
mov dword [rbp + 7], 1
mov qword [rbp + 0xf], r13
mov qword [rbp + 0x17], r13
xor r8d, r8d
lea rdx, [rbp + 7]
lea rcx, [rbp + 0x27]
call qword [sym.imp.gdiplus.dll_GdiplusStartup]
xor edx, edx
mov qword [0x18005ebb8], rdx
mov qword [0x18005ebc0], rdx
lea rcx, [0x18002fde0]
call qword [sym.imp.ca_core.dll_Ordinal_47]
mov edx, 1
mov ecx, edx
mov r8d, edx
call qword [sym.imp.ca_core.dll_Ordinal_44]
mov ecx, Ordinal_42
call qword [sym.imp.MSVCR100.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
mov qword [rbp - 0x29], rax
test rax, rax
je 0x180002d3f
mov rcx, rax
call qword [sym.imp.mfc100.dll_Ordinal_857]
jmp 0x180002d42
mov rax, r13
mov qword [rbx + 0x140], rax
mov rcx, rax
call fcn.1800361a0
lea rcx, [rbp - 0x21]
call fcn.18001b0e0
nop
lea r8, [0x180041ac0]
mov rdx, rax
lea rcx, [rbp - 0x19]
call fcn.1800071d0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.1800071d0
nop
mov rcx, qword [rax]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc100.dll_Ordinal_889]
lea rdx, [rbp - 0x29]
mov qword [rbp - 0x19], rdx
lea rdx, str.yv12
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc100.dll_Ordinal_310]
mov rdi, rax
lea rdx, str.SoftwareLAVVideoOutput
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc100.dll_Ordinal_310]
nop
mov rdx, rdi
mov rcx, rax
call fcn.180011430
call fcn.180011500
mov ecx, 0x6c0
call qword [sym.imp.MSVCR100.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rbp - 0x29], rax
test rax, rax
je 0x180002e36
lea rcx, [rax + 8]
call qword [sym.imp.mfc100.dll_Ordinal_814]
lea rcx, [rsi + 0x30]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rcx, [rsi + 0x58]
call fcn.18001ac10
nop
mov dword [rsi], r13d
mov qword [rsi + 0x6b8], r13
mov qword [0x18005ed08], rsi
call fcn.18002f7f0
nop
jmp 0x180002e39
mov rsi, r13
mov qword [rbx + 0x148], rsi
lea rdi, str.ClonerAlliance_Helper
mov rsi, rbx
mov ecx, reloc.ca_core.dll_Ordinal_22
repe cmpsb byte [rsi], byte [rdi]
jne 0x180002e5c
mov dword [0x18005ec28], r13d
jmp 0x180002e7b
lea rdi, str.ezcap_Link
mov rsi, rbx
mov ecx, reloc.WS2_32.dll_inet_addr
repe cmpsb byte [rsi], byte [rdi]
mov eax, r13d
setne al
inc eax
mov dword [0x18005ec28], eax
lea rcx, [rbp - 9]
call qword [sym.imp.mfc100.dll_Ordinal_316]
nop
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc100.dll_Ordinal_316]
nop
lea rcx, [rbp - 1]
call qword [sym.imp.mfc100.dll_Ordinal_316]
nop
mov edi, r13d
nop
mov r9d, 2
xor r8d, r8d
xor edx, edx
lea rcx, [0x180041660]
call qword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsA]
cmp rax, 0xffffffffffffffff
je 0x180002ed8
mov qword [rsp + 0x20], rax
lea r9, [rbp - 1]
lea r8, [rbp - 0x11]
lea rdx, [rbp - 9]
mov ecx, edi
call fcn.180034240
jmp 0x180002edb
mov eax, r13d
inc edi
test eax, eax
je 0x180002f05
mov rax, qword [rbp - 1]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x11]
mov r8, qword [rbp - 9]
lea rdx, str.Video_card:__s__Driver_ver:__s___s
mov ecx, 2
call fcn.180035240
jmp 0x180002ea0
lea rcx, [rbp - 1]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rbp - 9]
call qword [sym.imp.mfc100.dll_Ordinal_889]
mov eax, 1
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret