Function at 0x140088cae
Capabilities:
Create directory
Get disk information
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x7c2bb11e
pushf
not eax
add eax, 0x70c6c74a
xor eax, 0xbd034c7
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x25b00c29
xor eax, 0x4521cc23
rol eax, 0x86
popf
pushf
not eax
add eax, 0x60ff4f84
xor eax, 0x7e4e3fa7
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x5acf2b37
xor eax, 0x13d9a220
rol eax, 0x58
popf
cmp eax, 0xd
jne 0x140088d11
popf
pop rax
jmp 0x1400895ef
cmp eax, 8
jne 0x140088d20
popf
pop rax
jmp 0x14008932c
cmp eax, 0xa
jne 0x140088d2f
popf
pop rax
jmp 0x14008942a
cmp eax, 3
jne 0x140088d3e
popf
pop rax
jmp 0x1400890da
cmp eax, 7
jne 0x140088d4d
popf
pop rax
jmp 0x140089295
cmp eax, 0xe
jne 0x140088d5c
popf
pop rax
jmp 0x140089666
cmp eax, 0x11
jne 0x140088d6b
popf
pop rax
jmp 0x14008993a
cmp eax, 9
jne 0x140088d7a
popf
pop rax
jmp 0x14008938d
cmp eax, 5
jne 0x140088d89
popf
pop rax
jmp 0x1400891c5
cmp eax, 0xf
jne 0x140088d98
popf
pop rax
jmp 0x140089757
cmp eax, 0x13
jne 0x140088da7
popf
pop rax
jmp 0x140089a5a
cmp eax, 0xc
jne 0x140088db6
popf
pop rax
jmp 0x1400894eb
cmp eax, 0
jne 0x140088dc5
popf
pop rax
jmp 0x140088e3d
cmp eax, 1
jne 0x140088dd4
popf
pop rax
jmp 0x140088f35
cmp eax, 0x10
jne 0x140088de3
popf
pop rax
jmp 0x1400898c3
cmp eax, 2
jne 0x140088df2
popf
pop rax
jmp 0x140088f99
cmp eax, 0xb
jne 0x140088e01
popf
pop rax
jmp 0x140089483
cmp eax, 4
jne 0x140088e10
popf
pop rax
jmp 0x14008912b
cmp eax, 0x12
jne 0x140088e1f
popf
pop rax
jmp 0x1400899e7
cmp eax, 6
jne 0x140088e2e
popf
pop rax
jmp 0x140089259
cmp eax, 0x14
jne 0x140088e3d
popf
pop rax
jmp 0x140089aa3
push rdi
mov eax, 0x22b6096a
pushf
not eax
add eax, 0x6fbe3e2c
xor eax, 0x247f87a6
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x2d69be89
xor eax, 0x78ade0d1
rol eax, 0x24
popf
call fcn.14009bcb8
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x4030], rax
xor r8d, r8d
xor edx, edx
call fcn.1400900bf
mov rdi, rax
test rax, rax
jne 0x140088edc
push rax
pushf
mov eax, 0xb36a4e92
pushf
not eax
add eax, 0x1bfad14b
xor eax, 0x6831eaef
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x57fc5d23
xor eax, 0x569556b6
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x533335e8
xor eax, 0x1ad3a6f9
rol eax, 0x61
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0x7ff3b4d4
pushf
not eax
add eax, 0x63821c9d
xor eax, 0x1382b1e0
rol eax, 0x82
popf
pushf
not eax
add eax, 0x789d3cb2
xor eax, 0x29463884
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x10e6e452
xor eax, 0x48b2e67a
rol eax, 0x23
popf
pushf
not eax
add eax, 0x7bddb2c
xor eax, 0x57ca0be5
rol eax, 0x4a
popf
jmp 0x140088d02
lea rcx, [0x18585cce3]
pushf
sub rcx, 0x4582f783
popf
call fcn.14006fae0
xor eax, eax
jmp 0x140089aab
mov r8d, 0x6a02254d
pushf
not r8d
add r8d, 0x569a836a
xor r8d, 0x2012385c
rol r8d, 0x4c
popf
pushf
not r8d
add r8d, 0x88f619
xor r8d, 0x627f9676
rol r8d, 0x12
popf
pushf
not r8d
add r8d, 0x48e515aa
xor r8d, 0x5d1ac740
rol r8d, 0x24
popf
pushf
not r8d
add r8d, 0x77dcd349
xor r8d, 0x626dbb87
rol r8d, 0xbf
popf
mov qword [rsp + 0x4058], rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
jmp 0x140089014
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov rcx, rdi
mov ebx, eax
call fcn.1400e5a56
test ebx, ebx
jne 0x140089081
push rax
pushf
mov eax, 0x45da51c7
pushf
not eax
add eax, 0x75fbeb4b
xor eax, 0x3e4d8167
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x93c5b90
xor eax, 0x73f33b80
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x62ea70ca
xor eax, 0x42f708b4
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x5e6e3d1e
xor eax, 0x73f6639b
rol eax, 0x18
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0x3c42b2b1
pushf
not eax
add eax, 0x492927d7
xor eax, 0xaf509d1
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x11babd46
xor eax, 0x169e21ed
rol eax, 0x39
popf
pushf
not eax
add eax, 0x78ccc6b3
xor eax, 0x172f37e2
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x10f66e8c
xor eax, 0x923365e
rol eax, 0xa4
popf
jmp 0x140088d02
lea rcx, [0x196499483]
pushf
sub rcx, 0x5646bea3
popf
call fcn.14006fae0
xor eax, eax
jmp 0x140089aa3
lea rcx, [rsp + 0x30]
call fcn.14008f478
test eax, eax
je 0x140089192
push rax
pushf
mov eax, 0xcd076a9f
pushf
not eax
add eax, 0x148c6c03
xor eax, 0x36b6897e
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x74d63bd9
xor eax, 0x3ed80fad
rol eax, 0x43
popf
pushf
not eax
add eax, 0xe5d358f
xor eax, 0x6c25bdb3
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x597de00a
xor eax, 0x5a0e41e1
rol eax, 0xaa
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0x3d4ed89
pushf
not eax
add eax, 0x66c4a4ae
xor eax, 0x41348f1b
rol eax, 0x41
popf
pushf
not eax
add eax, 0x6f70d4d9
xor eax, 0x27bbe45a
rol eax, 0x13
popf
jmp 0x140088d02
cmp word [rsp + 0x34], 0x5c
je 0x140089226
push rax
pushf
mov eax, 0x254828bf
pushf
not eax
add eax, 0xceb621b
xor eax, 0x42ecc019
rol eax, 0x15
popf
pushf
not eax
add eax, 0x544b7cd8
xor eax, 0x6dd636e8
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x5dede5ff
xor eax, 0x236c77bc
rol eax, 0x46
popf
pushf
not eax
add eax, 0x13fd1b42
xor eax, 0x22579326
rol eax, 0xc3
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0xe5480339
pushf
not eax
add eax, 0x289b3fd8
xor eax, 0x31a2ce2d
rol eax, 0x25
popf
pushf
not eax
add eax, 0x6487f172
xor eax, 0x4099b03
rol eax, 0x8a
popf
jmp 0x140088d02
lea rcx, [rsp + 0x30]
sub rcx, 2
push rax
pushf
mov eax, 0x285617e1
pushf
not eax
add eax, 0x4d3aabae
xor eax, 0x70c1f06
rol eax, 0xee
popf
pushf
not eax
add eax, 0x5f4f5a5f
xor eax, 0x3c12d164
rol eax, 0x6f
popf
jmp 0x140088d02
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1400892f9
push rax
pushf
mov eax, 0xe8bf8d55
pushf
not eax
add eax, 0x3516071d
xor eax, 0x51691966
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x682b240c
xor eax, 0x3bbc695e
rol eax, 3
popf
pushf
not eax
add eax, 0x405dc0a2
xor eax, 0x332dc4b7
rol eax, 0x94
popf
pushf
not eax
add eax, 0x644cf049
xor eax, 0x66359f58
rol eax, 0x59
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0x25c0a899
pushf
not eax
add eax, 0x141646fd
xor eax, 0x1dc80f3f
rol eax, 0xf
popf
pushf
not eax
add eax, 0x254c618d
xor eax, 0x5c9dfbbe
rol eax, 0x96
popf
jmp 0x140088d02
mov eax, dword [0x14002d670]
mov dword [rcx], eax
push rax
pushf
mov eax, 0xbbdacf47
pushf
not eax
add eax, 0x55147168
xor eax, 0x22e78160
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x2c6492db
xor eax, 0x5e827496
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x363fbdc0
xor eax, 0x39781ff4
rol eax, 6
popf
pushf
not eax
add eax, 0x2614b4ec
xor eax, 0x1d9c57e1
rol eax, 0x72
popf
jmp 0x140088d02
lea rcx, [rsp + 0x30]
jmp 0x140089393
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 1
jg 0x1400893e4
push rax
pushf
mov eax, 0xe804c7a4
pushf
not eax
add eax, 0x24f1ab72
xor eax, 0x509261dc
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x2eb5c711
xor eax, 0x376b623e
rol eax, 0x29
popf
pushf
not eax
add eax, 0x17e08e5e
xor eax, 0x513595a6
rol eax, 0x19
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0x13d1f30
pushf
not eax
add eax, 0x1c4c6218
xor eax, 0x45f92b88
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x1a6ff89f
xor eax, 0x1af78d13
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x37b1d7cf
xor eax, 0x48e684af
rol eax, 0x74
popf
jmp 0x140088d02
mov r8d, eax
lea rdx, [rsp + 0x30]
lea rcx, [0x1b0a9d230]
pushf
sub rcx, 0x70a6fbb0
popf
call fcn.14006fae0
xor eax, eax
jmp 0x140089aa3
lea rcx, [rsp + 0x30]
call fcn.1400fdbc9
jmp 0x140089aa3
mov r8d, 0xa698d730
pushf
not r8d
add r8d, 0x333f0ed
xor r8d, 0x3b8ebff7
rol r8d, 0x59
popf
pushf
not r8d
add r8d, 0x433f2e37
xor r8d, 0x7af7f3db
rol r8d, 0x95
popf
pushf
not r8d
add r8d, 0x341164df
xor r8d, 0x5d69400
rol r8d, 0xd1
popf
lea rdx, [rsp + 0x30]
xor ecx, ecx
call fcn.140100801
mov rbx, rax
test rax, rax
jne 0x1400895a9
push rax
pushf
mov eax, 0xad3fba2d
pushf
not eax
add eax, 0x3750e668
xor eax, 0x1a69645f
rol eax, 0x10
popf
pushf
not eax
add eax, 0x6a7db8bf
xor eax, 0x2de0e71c
rol eax, 0x49
popf
pushf
not eax
add eax, 0x2bce16c7
xor eax, 0x586074b7
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x2ce46445
xor eax, 0x6840b824
rol eax, 0x31
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0x73189667
pushf
not eax
add eax, 0x6605322f
xor eax, 0x5ef23a8
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x53527e2d
xor eax, 0x52301749
rol eax, 0x83
popf
pushf
not eax
add eax, 0x75b86ff
xor eax, 0x4b7d848
rol eax, 0xfa
popf
jmp 0x140088d02
lea rcx, [0x1a2d95320]
pushf
sub rcx, 0x62d67c10
popf
call fcn.14006fae0
xor eax, eax
jmp 0x140089aa3
mov edx, 0x1fc900f4
pushf
not edx
add edx, 0x2908ce3b
xor edx, 0x4b9185e0
rol edx, 0xe2
popf
pushf
not edx
add edx, 0x253fa268
xor edx, 0x18667fce
rol edx, 0x2d
popf
mov rcx, rbx
call fcn.14009fd26
mov rdi, rax
test rax, rax
je 0x1400896fe
push rax
pushf
mov eax, 0x7bf7de14
pushf
not eax
add eax, 0x48f72377
xor eax, 0x7a11ddcd
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x4cc27e56
xor eax, 0x71597027
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x35887c69
xor eax, 0x7953cc2c
rol eax, 0x45
popf
pushf
not eax
add eax, 0x213e3c3a
xor eax, 0x5c92b100
rol eax, 0x7d
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0xe8658e6d
pushf
not eax
add eax, 0x3c557e24
xor eax, 0x75edcd4f
rol eax, 0x33
popf
pushf
not eax
add eax, 0x355314ff
xor eax, 0x16128410
rol eax, 4
popf
pushf
not eax
add eax, 0x7c3999e6
xor eax, 0x26895534
rol eax, 0x95
popf
pushf
not eax
add eax, 0x3017cc49
xor eax, 0x4bdbcaed
rol eax, 0x55
popf
jmp 0x140088d02
mov r9, rdi
mov qword [rsp + 0x20], rbx
push rbx
not rbx
add r9, rbx
pop rbx
add r9, 1
lea r8, [0x1af6e6b32]
pushf
sub r8, 0x6f6b939a
popf
sar r9, 1
lea rcx, [rsp + 0x2030]
mov edx, 0xffbc6ec1
pushf
not edx
add edx, 0x4f8df33e
xor edx, 0x1ab8b4d7
rol edx, 0x5e
popf
pushf
not edx
add edx, 0x1842874e
xor edx, 0x788432ad
rol edx, 0xf6
popf
pushf
not edx
add edx, 0x6397ac6f
xor edx, 0x4959241b
rol edx, 0xaa
popf
pushf
not edx
add edx, 0x59d05c06
xor edx, 0x18fa3ee0
rol edx, 0x9e
popf
call fcn.14006f690
xor edx, edx
lea rcx, [rsp + 0x2030]
jmp 0x1400897f1
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov edx, 0x51003b35
pushf
not edx
add edx, 0x47bbbaa5
xor edx, 0x7f3415eb
rol edx, 0xd1
popf
pushf
not edx
add edx, 0x1aab4ae1
xor edx, 0x19a237c2
rol edx, 0xa8
popf
lea rcx, [rdi + 2]
call fcn.14009fd26
mov rdi, rax
test rax, rax
jne 0x14008986a
push rax
pushf
mov eax, 0x59a09b0
pushf
not eax
add eax, 0x44e9a7ff
xor eax, 0x29d0e913
rol eax, 0x55
popf
pushf
not eax
add eax, 0x5db2bdb9
xor eax, 0x7a0fe9ca
rol eax, 0x69
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0xad0d3686
pushf
not eax
add eax, 0x5ebdc1d5
xor eax, 0x34d5dd71
rol eax, 0x18
popf
pushf
not eax
add eax, 0x6571890f
xor eax, 0x59a7a1b8
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x47b3f709
xor eax, 0x420ff6df
rol eax, 0x36
popf
pushf
not eax
add eax, 0x15cee1e6
xor eax, 0x5edb7adf
rol eax, 0xa4
popf
jmp 0x140088d02
xor edx, edx
mov rcx, rbx
jmp 0x1400898c9
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x140089906
push rax
pushf
mov eax, 0x986f7d5
pushf
not eax
add eax, 0x4833eaf3
xor eax, 0x602a8fdc
rol eax, 0xef
popf
pushf
not eax
add eax, 0x7cdf1525
xor eax, 0x36fe65e1
rol eax, 0x89
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0xebc7d1a2
pushf
not eax
add eax, 0x42d8d91d
xor eax, 0x77342db3
rol eax, 0xab
popf
pushf
not eax
add eax, 0x32fcffd0
xor eax, 0x9a786ce
rol eax, 0x14
popf
jmp 0x140088d02
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1400899a0
push rax
pushf
mov eax, 0xd5e205a4
pushf
not eax
add eax, 0x4474b40f
xor eax, 0x63df7e5c
rol eax, 0x28
popf
pushf
not eax
add eax, 0x35c4d1a1
xor eax, 0x1a46a586
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x3992c5e3
xor eax, 0x7ff71816
rol eax, 0x30
popf
pushf
not eax
add eax, 0x1faddd6c
xor eax, 0x514d0771
rol eax, 5
popf
jmp 0x140088d02
push rax
pushf
mov eax, 0xa7fe4105
pushf
not eax
add eax, 0x321efafc
xor eax, 0x5a1d5c6b
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x14203728
xor eax, 0x2317092f
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x514a87fe
xor eax, 0x672e0492
rol eax, 0xcb
popf
jmp 0x140088d02
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rbx
lea r8, [0x1bfaad6c4]
pushf
sub r8, 0x7fa7ff14
popf
mov edx, eax
lea rcx, [0x1ae5ef616]
pushf
sub rcx, 0x6e5c1dfe
popf
call fcn.140070976
mov rcx, rbx
call fcn.1400e5a56
xor eax, eax
jmp 0x140089aa3
mov rax, rbx
push rax
pushf
mov eax, 0x510ddc21
pushf
not eax
add eax, 0x45a0243e
xor eax, 0x19caf1a2
rol eax, 0x82
popf
pushf
not eax
add eax, 0x65ba0568
xor eax, 0xc80645e
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x6eabf9fc
xor eax, 0x42de824c
rol eax, 0x60
popf
jmp 0x140088d02
mov rbx, qword [rsp + 0x4058]
mov rcx, qword [rsp + 0x4030]
xor rcx, rsp
call fcn.140098f5b
add rsp, 0x4040
pop rdi
ret