Function at 0x180074140
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x60
call fcn.18008c4e0
lea rcx, [rsp + 0x40]
call fcn.18001a4d0
mov rdi, qword [rax]
mov rbx, qword [rax + 8]
lea rcx, [rsp + 0x40]
call fcn.18001ac30
cmp rdi, rbx
je 0x1800741b3
lea rcx, [rsp + 0x40]
call fcn.18001a4d0
nop
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
sub rcx, rdx
sar rcx, 5
test rcx, rcx
je 0x180074424
lea rcx, [rsp + 0x20]
call fcn.18001aaf0
mov rcx, rax
call fcn.180016280
nop
lea rcx, [rsp + 0x40]
call fcn.18001ac30
jmp 0x18007428c
movabs rax, 0x9dde163fc034a790
mov qword [rsp + 0x20], rax
movabs rdi, 0xc4b8eccfb1705340
mov qword [rsp + 0x28], rdi
movabs rbx, 0x9dad664ab0689dd3
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x20], xmm0
xor edx, edx
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movabs rax, 0xc1de163fc034a790
mov qword [rsp + 0x40], rax
movabs rax, 0x89e78ba6d71e3c23
mov qword [rsp + 0x48], rax
movabs rax, 0x99dc77e83253eea2
mov qword [rsp + 0x50], rax
movabs rcx, 0xc54287150fde323a
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
movabs rax, 0x99dc77e83253ddf5
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x50], xmm1
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor ecx, ecx
call fcn.180074430
call fcn.18001d940
test eax, eax
jne 0x1800742fc
mov rax, qword [0x1802045b8]
mov rbx, qword [rax + 0x460]
lea r8, [0x1802045a8]
lea rdx, [0x18001d5c0]
mov rcx, rbx
call fcn.18008c610
test eax, eax
jne 0x1800742cc
mov rcx, rbx
call 0x18008caf0
mov rax, qword [0x1802045b8]
mov rbx, qword [rax + 0x488]
lea r8, [0x180204590]
lea rdx, [0x18001d8f0]
mov rcx, rbx
call fcn.18008c610
test eax, eax
jne 0x1800742fc
mov rcx, rbx
call 0x18008caf0
lea rcx, str.Gdi32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.BitBlt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtGdiStretchBlt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r8, [0x180204678]
lea rdx, [0x18001d1f0]
mov rcx, qword [0x180204258]
call fcn.18008c610
mov rcx, qword [0x180204258]
call 0x18008caf0
lea r8, [0x1802048a8]
lea rdx, [0x180073c30]
mov rcx, qword [0x1802040e8]
call fcn.18008c610
mov rcx, qword [0x1802040e8]
call 0x18008caf0
lea r8, [0x1802048b0]
lea rdx, [0x180073aa0]
mov rcx, qword [0x1802040d8]
call fcn.18008c610
mov rcx, qword [0x1802040d8]
call 0x18008caf0
lea r8, [0x1802048a0]
lea rdx, [0x180073cc0]
mov rcx, qword [0x1802040f8]
call fcn.18008c610
mov rcx, qword [0x1802040f8]
call 0x18008caf0
lea r8, [0x180204898]
lea rdx, [0x180073b20]
mov rcx, qword [0x1802040e0]
call fcn.18008c610
mov rcx, qword [0x1802040e0]
call 0x18008caf0
lea r8, [0x180204890]
lea rdx, [0x180073da0]
mov rcx, qword [0x180204120]
call fcn.18008c610
mov rcx, qword [0x180204120]
mov rbx, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
jmp 0x18008caf0
call fcn.18001ac10
nop
int3
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x20
mov rdi, rsp
mov ecx, 8
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov rcx, qword [rsp + 0x30]
call fcn.18008dc50
add rsp, 0x20
pop rdi
ret