Function at 0x1400d0d60
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140300040]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r12d, edx
mov r15, rcx
mov qword [rbp - 0x28], rcx
xor ebx, ebx
mov dword [rbp - 0x40], ebx
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.1400d0c90
nop
mov qword [rbp - 0x18], rbx
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x1400d1069
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rbp - 0x18], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
lea r8d, [rbx + 1]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x20]
call fcn.14001dba0
nop
mov edi, 2
mov dword [rbp - 0x40], edi
mov rcx, qword [rax]
cmp word [rcx], 0x5c
jne 0x1400d0e00
cmp word [rcx + 2], bx
je 0x1400d0e2c
mov r8d, 1
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x20]
call fcn.14001dba0
nop
mov edi, 6
mov dword [rbp - 0x40], edi
mov rcx, qword [rax]
cmp word [rcx], 0x2f
jne 0x1400d0e30
cmp word [rcx + 2], 0
jne 0x1400d0e30
xor bl, bl
jmp 0x1400d0e32
mov bl, 1
mov rsi, 0xffffffffffffffff
test dil, 4
je 0x1400d0e6c
and edi, 0xfffffffb
mov dword [rbp - 0x40], edi
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400d0e69
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
mov edi, dword [rbp - 0x40]
test dil, 2
je 0x1400d0e9f
and edi, 0xfffffffd
mov dword [rbp - 0x40], edi
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400d0e9c
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
mov edi, dword [rbp - 0x40]
test bl, bl
je 0x1400d0ec4
lea rdx, [0x140267514]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400d0eb0
lea rcx, [rbp - 0x20]
call fcn.14001def0
xor ecx, ecx
call fcn.14020d7f0
mov dword [rsp + 0x20], r14d
mov r9d, eax
mov r8, qword [rbp - 0x20]
lea rdx, str._sBNZ._x_x_
lea rcx, [rbp - 0x18]
call fcn.14001c4c0
mov rbx, qword [rbp - 0x18]
mov rcx, rbx
call fcn.1400247b0
test eax, eax
je 0x1400d0f36
nop word [rax + rax]
inc r14d
xor ecx, ecx
call fcn.14020d7f0
mov dword [rsp + 0x20], r14d
mov r9d, eax
mov r8, qword [rbp - 0x20]
lea rdx, str._sBNZ._x_x_
lea rcx, [rbp - 0x18]
call fcn.14001c4c0
mov rbx, qword [rbp - 0x18]
mov rcx, rbx
call fcn.1400247b0
test eax, eax
jne 0x1400d0f00
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400d0fe4
test r12d, r12d
je 0x1400d0f8e
call fcn.14012bfe0
mov r14, rax
xor r9d, r9d
mov r8, qword [rax + 0xe8]
mov rdx, rbx
lea rcx, [rax + 0xe0]
call fcn.140029e40
mov rcx, qword [r14 + 0xe8]
test rcx, rcx
je 0x1400d0f80
mov qword [rcx], rax
jmp 0x1400d0f87
mov qword [r14 + 0xe0], rax
mov qword [r14 + 0xe8], rax
lea rcx, [rbx - 0x18]
call fcn.140019180
add rax, 0x18
mov qword [r15], rax
or edi, 1
mov dword [rbp - 0x40], edi
mov eax, esi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400d0fc6
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400d1041
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
jmp 0x1400d103b
mov rcx, qword [rbp - 0x20]
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [r15], rax
or edi, 1
mov dword [rbp - 0x40], edi
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400d101f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400d1041
mov rcx, qword [rdx]
mov r8, qword [rcx]
mov rax, qword [r8 + 8]
call qword [case.0x140038ca6.0]
mov rax, r15
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1401f74b0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140019300
int3