Function at 0x406820
Capabilities:
Create directory

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xd8
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov rbx, rcx
call fcn.004075bc
cmp eax, 0xffffffff
je 0x406851
test al, 0x10
je 0x406851
mov al, 1
jmp 0x406ba7
mov rcx, rbx
call fcn.0040a100
test al, al
je 0x406864
xor al, al
jmp 0x406ba7
mov rcx, rbx
call fcn.0040a25c
mov r12d, eax
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.00402988
nop
lea rcx, [rsp + 0x20]
call fcn.00402eac
mov esi, 1
test eax, eax
js 0x4068b3
mov edx, dword [rsp + 0x28]
lea ecx, [rdx - 1]
cmp eax, ecx
jne 0x4068b3
cmp edx, esi
jne 0x4068a4
jmp 0x406b4f
mov dword [rsp + 0x28], ecx
mov rax, qword [rsp + 0x20]
mov word [rax + rcx*2], 0
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.00402a78
nop
mov edi, dword [rsp + 0x28]
mov r13d, 0xb7
mov rbx, qword [rsp + 0x20]
mov rcx, rbx
call fcn.0040a4c0
mov ebp, eax
cmp eax, esi
je 0x406902
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x406abe
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, r13d
je 0x4069d8
test ebp, ebp
je 0x4069d8
lea rcx, [rsp + 0x40]
call fcn.004028ec
nop
cmp ebp, esi
setne r8b
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.0040ab8c
test al, al
je 0x4069ce
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x406ab4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, r13d
je 0x40695f
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_free
jmp 0x406a42
lea rcx, [rsp + 0x58]
call fcn.004071ac
lea rcx, [rsp + 0x80]
call fcn.004028ec
nop
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.004078e4
test al, al
jne 0x4069aa
mov rcx, qword [rsp + 0x80]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_free
jmp 0x406a42
mov ebx, dword [rsp + 0x78]
shr ebx, 4
and bl, sil
mov rcx, qword [rsp + 0x80]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_free
jmp 0x406a3e
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_free
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, r13d
jne 0x406a42
lea rcx, [rsp + 0x90]
call fcn.004071ac
lea rcx, [rsp + 0xb8]
call fcn.004028ec
nop
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x90]
call fcn.004078e4
test al, al
jne 0x406a24
mov rcx, qword [rsp + 0xb8]
call sub.msvcrt.dll_free
jmp 0x406a42
mov ebx, dword [rsp + 0xb0]
shr ebx, 4
and bl, sil
mov rcx, qword [rsp + 0xb8]
call sub.msvcrt.dll_free
test bl, bl
jne 0x406abe
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, r13d
je 0x406b41
lea rcx, [rsp + 0x20]
call fcn.00402eac
mov edi, eax
test eax, eax
js 0x406b90
test eax, eax
je 0x406b90
mov rbx, qword [rsp + 0x20]
cmp edi, esi
jne 0x406a8a
cmp word [rbx], 0x5c
je 0x406b5e
cmp word [rbx], 0x2f
je 0x406b5e
lea eax, [rdi + 1]
cmp r12d, eax
jae 0x406b77
cmp edi, dword [rsp + 0x28]
jae 0x4068d2
mov dword [rsp + 0x28], edi
mov word [rbx + rdi*2], 0
mov rbx, qword [rsp + 0x20]
jmp 0x4068d2
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_free
cmp edi, dword [rsp + 0x38]
jge 0x406b27
lea ecx, [rdi + 1]
mov rax, qword [rsp + 0x30]
lea rcx, [rax + rcx*2]
call fcn.00409cf0
test eax, eax
jns 0x406adf
mov edi, dword [rsp + 0x38]
jmp 0x406ae3
lea edi, [rdi + rax + 1]
mov r8d, edi
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x20]
call fcn.00402bc0
mov rcx, qword [rsp + 0x20]
call fcn.004061f4
test al, al
je 0x406b0b
cmp edi, dword [rsp + 0x38]
jl 0x406ac4
jmp 0x406b27
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x20]
call sub.msvcrt.dll_free
xor al, al
jmp 0x406ba7
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x20]
call sub.msvcrt.dll_free
mov al, sil
jmp 0x406ba7
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
nop
xor sil, sil
mov rcx, qword [rsp + 0x20]
call sub.msvcrt.dll_free
mov al, sil
jmp 0x406ba7
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x20]
call sub.msvcrt.dll_free
xor al, al
jmp 0x406ba7
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x20]
call sub.msvcrt.dll_free
xor al, al
jmp 0x406ba7
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x20]
call sub.msvcrt.dll_free
xor al, al
add rsp, 0xd8
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret