Function at 0x1400061f0
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x530]
sub rsp, 0x630
mov rax, qword [0x1400b2080]
xor rax, rsp
mov qword [rbp + 0x520], rax
mov r13, rcx
xor r12d, r12d
cmp byte [rcx + 8], r12b
jne 0x14000623b
xor al, al
jmp 0x140006e15
call fcn.140012a00
mov rdi, rax
mov qword [rbp + 0x1c0], rax
test rax, rax
jne 0x140006256
xor bl, bl
jmp 0x140006e06
lea rbx, [r13 + 0x90]
mov rcx, qword [rbx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 0x2e
jb 0x140006e4b
mov r9, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140006285
mov r9, qword [rbx]
mov qword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_46
lea rax, str.OneStart.aiOneStartApplicationOneStart.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x1a0]
call fcn.14000b3f0
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x10]
call fcn.14008b680
lea rdx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 7
cmova rdx, qword [rbp + 0x1a0]
lea rcx, [rbp - 0x10]
call fcn.1400099f0
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x10], rax
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x14], edx
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx], 0
je 0x1400066a9
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov ecx, 0x90
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x150], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.onestart.exe_not_found
lea rcx, [rbp - 0x70]
call fcn.140002820
nop
mov dword [rsp + 0x40], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x68], r12
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov ecx, 0x90
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
mov dword [rsp + 0x40], r12d
lea r9, [rbp - 0x70]
mov rsi, qword [rbp - 0x70]
mov r15, qword [rbp - 0x58]
cmp r15, 0xf
cmova r9, rsi
mov r14, qword [rbp - 0x60]
mov rax, qword [rsp + 0x60]
cmp r14, rax
ja 0x14000640b
lea rbx, [rsp + 0x48]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x48]
mov qword [rsp + 0x58], r14
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.14008afe0
mov byte [r14 + rbx], 0
jmp 0x140006420
mov rdx, r14
lea rcx, [rsp + 0x48]
call fcn.14000aa60
mov r15, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x190], xmm1
mov r8d, 5
lea rdx, str.error
lea rcx, [rbp + 0x180]
call fcn.140002820
nop
lea r8, [rbp + 0x180]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x150]
call fcn.14000a3b0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [rsp + 0x40]
call fcn.140004d50
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x1400064b9
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e51
call fcn.140011df0
movdqa xmm0, xmmword [0x1400a7160]
movdqu xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], 0
lea rcx, [rbp - 0x80]
call fcn.140003960
lea rcx, [rsp + 0x68]
call fcn.140009db0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140006520
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000651b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e57
call fcn.140011df0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
cmp r15, 0xf
jbe 0x14000656a
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140006562
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e5d
mov rcx, rsi
call fcn.140011df0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x100], r12d
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
mov qword [rbp + 0x128], r12
movdqa xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov ecx, 0x90
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x140], rax
mov dword [rbp + 0x100], 2
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x140]
call fcn.140009170
nop
lea r9, [rbp + 0x100]
lea r8, [0x1400a69e9]
mov rcx, r13
call fcn.140004e20
nop
lea rcx, [rbp + 0x140]
call fcn.140003960
lea rcx, [rbp + 0x128]
call fcn.140009db0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x14000667d
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006678
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e63
call fcn.140011df0
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
lea rcx, [rbp + 0x150]
call fcn.140009210
xor bl, bl
jmp 0x140006d3f
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x180]
call fcn.140003b70
nop
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x310]
call fcn.14008b680
cmp qword [rbx + 0x18], 7
jbe 0x1400066db
mov rbx, qword [rbx]
lea rcx, [rbp + 0x310]
sub rcx, rbx
nop word [rax + rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x1400066f0
lea rcx, [rbp + 0x310]
sub rcx, 2
nop dword [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140006710
lea r8, str.OneStart.aiOneStart.data
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + rdx*2]
mov word [rcx + rdx*2], ax
lea rdx, [rdx + 1]
test ax, ax
jne 0x140006730
xor r8d, r8d
lea rdx, [rbp + 0x310]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
xor edx, edx
mov r8d, 0x140
lea rcx, [rbp + 0x1d0]
call fcn.14008b680
lea rdx, [rbp + 0x310]
lea rcx, [rbp - 0x30]
call fcn.140009380
nop
cmp qword [r13 + 0x40], 0
lea rbx, [r13 + 0xd0]
je 0x14000678b
lea rbx, [r13 + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x160], xmm1
mov r8d, Ordinal_79
lea rdx, str.SOFTWAREOneStart.aiUpdateClients8A69D345_D564_463c_AFF1_A69D9E530F96
lea rcx, [rbp + 0x150]
call fcn.140002820
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov r8d, 9
lea rdx, str.4.5.242.0
lea rcx, [rbp - 0x70]
call fcn.140002820
nop
lea rdx, [0x1400a6ce0]
lea rcx, [rbp - 0x50]
call fcn.140009380
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1d0]
call fcn.14000fd30
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1f0]
call fcn.140002670
nop
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x210]
call fcn.140002670
nop
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x230]
call fcn.140002670
nop
mov rdx, rbx
lea rcx, [rbp + 0x250]
call fcn.140002670
nop
lea rdx, [r13 + 0xd0]
lea rcx, [rbp + 0x270]
call fcn.140002670
nop
lea rdx, [r13 + 0x110]
lea rcx, [rbp + 0x290]
call fcn.140002670
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x2b0]
call fcn.14000fd30
mov dword [rbp + 0x2d0], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d8], xmm0
mov qword [rbp + 0x2e8], r12
mov qword [rbp + 0x2f0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2d8], 0
mov qword [rbp + 0x2f8], r12
movdqa xmmword [rbp + 0x300], xmm0
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x1400068fd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e69
call fcn.140011df0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006939
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006933
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e6f
call fcn.140011df0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x14000697b
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006975
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e75
call fcn.140011df0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 7
jbe 0x1400069bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e7b
call fcn.140011df0
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], r12
mov ecx, 0x60
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x170], rax
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x1d0]
call fcn.14000cc70
cmp qword [rbp + 0x178], 0
je 0x140006ce1
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov ecx, 0x90
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x150], rax
mov rbx, qword [rbp + 0x170]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x140006b99
nop word [rax + rax]
mov dword [rsp + 0x40], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x68], r12
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov ecx, 0x90
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
mov dword [rsp + 0x40], r12d
lea rdx, [rbx + 0x40]
lea rcx, [rsp + 0x48]
call fcn.1400094c0
nop
lea r8, [rbx + 0x20]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x150]
call fcn.14000a220
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [rsp + 0x40]
call fcn.140004d50
nop
lea rcx, [rbp - 0x80]
call fcn.140003960
lea rcx, [rsp + 0x68]
call fcn.140009db0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140006b3c
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e87
call fcn.140011df0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140006b68
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140006b63
cmp rbx, qword [rax + 0x10]
jne 0x140006b63
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140006b50
mov rbx, rax
jmp 0x140006b8f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140006b8f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140006b80
cmp byte [rbx + 0x19], 0
je 0x140006a60
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x100], r12d
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
mov qword [rbp + 0x128], r12
movdqa xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov ecx, 0x90
call fcn.140011dac
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x140], rax
mov dword [rbp + 0x100], 2
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x140]
call fcn.140009170
nop
lea r8, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova r8, qword [rbp + 0x180]
lea r9, [rbp + 0x100]
mov rcx, r13
call fcn.140004e20
nop
lea rcx, [rbp + 0x140]
call fcn.140003960
lea rcx, [rbp + 0x128]
call fcn.140009db0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x140006cbc
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006cb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e81
call fcn.140011df0
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
lea rcx, [rbp + 0x150]
call fcn.140009210
mov bl, 1
lea rcx, [rbp + 0x170]
call fcn.140008100
nop
lea rcx, [rbp + 0x1d0]
call fcn.14000c900
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140006d3f
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e8d
call fcn.140011df0
nop
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x10], rax
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x14], edx
lea rcx, [rbp]
call fcn.140008d40
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x10], rax
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x14], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xa0]
call fcn.140011298
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 7
jbe 0x140006dee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006de9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e45
call fcn.140011df0
movdqa xmm0, xmmword [0x1400a7150]
movdqu xmmword [rbp + 0x1b0], xmm0
mov word [rbp + 0x1a0], r12w
test rdi, rdi
jne 0x140006e12
xor ecx, ecx
call fcn.1400129e0
movzx eax, bl
mov rcx, qword [rbp + 0x520]
xor rcx, rsp
call fcn.140011af0
lea r11, [rsp + 0x630]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140069490
nop
call fcn.140001290
nop
call fcn.140069490
nop
call fcn.140069490
nop
call fcn.140069490
int3
call fcn.140069490
nop
call fcn.140069490
nop
call fcn.140069490
nop
call fcn.140069490
nop
call fcn.140069490
nop
call fcn.140069490
int3
call fcn.140069490
nop
call fcn.140069490
int3