Function at 0x140033860
Capabilities:
Create directory

Disassembly:
mov rax, rsp
sub rsp, 0x78
mov rcx, qword [0x14018eb20]
lea r9, [rax + 0x10]
mov qword [rax + 0x18], rbx
lea rdx, [0x14018ead8]
mov qword [rax - 8], rbp
xor r8d, r8d
mov qword [rax - 0x10], rsi
mov qword [rax - 0x20], r14
mov qword [rax - 0x28], r15
call fcn.140014bb0
mov rdx, rax
lea rcx, str.ProcessTreeListColumns
mov rbx, rax
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSetStringSetting2
mov rdx, qword [rsp + 0x88]
lea rcx, str.ProcessTreeListSort
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSetStringSetting2
mov rbp, 0xffffffffffffffff
lea rcx, [rbx - 0x10]
mov eax, ebp
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400338d7
call fcn.1400d9400
mov rcx, qword [rsp + 0x88]
mov eax, ebp
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400338f4
call fcn.1400d9400
cmp byte [0x14018da49], 0
je 0x140033973
mov rcx, qword [0x14018f448]
lea r9, [rsp + 0x88]
xor r8d, r8d
lea rdx, [0x14018f3e0]
call fcn.140014bb0
mov rdx, rax
lea rcx, str.ServiceTreeListColumns
mov rbx, rax
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSetStringSetting2
mov rdx, qword [rsp + 0x88]
lea rcx, str.ServiceTreeListSort
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSetStringSetting2
lea rcx, [rbx - 0x10]
mov eax, ebp
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140033956
call fcn.1400d9400
mov rcx, qword [rsp + 0x88]
mov eax, ebp
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140033973
call fcn.1400d9400
cmp byte [0x14018da44], 0
je 0x1400339f2
mov rcx, qword [0x14018e380]
lea r9, [rsp + 0x88]
xor r8d, r8d
lea rdx, [0x14018e338]
call fcn.140014bb0
mov rdx, rax
lea rcx, str.NetworkTreeListColumns
mov rbx, rax
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSetStringSetting2
mov rdx, qword [rsp + 0x88]
lea rcx, str.NetworkTreeListSort
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSetStringSetting2
lea rcx, [rbx - 0x10]
mov eax, ebp
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400339d5
call fcn.1400d9400
mov rcx, qword [rsp + 0x88]
mov eax, ebp
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400339f2
call fcn.1400d9400
call fcn.140051b50
mov r15d, dword [0x14018e178]
lock bts qword [0x14018d8b0], 0
setb al
test al, al
je 0x140033a1b
lea rcx, [0x14018d8b0]
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhfAcquireQueuedLockExclusive
mov rsi, qword [0x140191a30]
lea rax, str.IconNotifyMask
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x28], 0x1c
mov qword [rsp + 0x30], rax
call qword [rsi + 0x10]
mov ecx, dword [rsi + 0x18]
btr eax, 0x1f
mov r14d, eax
dec ecx
mov rax, qword [rsi + 0x20]
and rcx, r14
mov edx, dword [rax + rcx*4]
cmp edx, 0xffffffff
je 0x140033a8c
nop
mov ebx, dword [rsi]
add ebx, 8
imul ebx, edx
add rbx, qword [rsi + 0x30]
cmp dword [rbx], r14d
jne 0x140033a84
lea rdi, [rbx + 8]
mov rcx, rdi
lea rdx, [rsp + 0x20]
call qword [rsi + 8]
test al, al
jne 0x140033af2
mov edx, dword [rbx + 4]
cmp edx, 0xffffffff
jne 0x140033a60
xor ebx, ebx
lock xadd qword [0x14018d8b0], rbp
mov r15, qword [rsp + 0x50]
movzx eax, bpl
mov r14, qword [rsp + 0x58]
and al, 6
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
cmp al, 2
jne 0x140033ad4
lea rax, [rbp - 1]
lea rdx, [rax + 4]
lock cmpxchg qword [0x14018d8b0], rdx
jne 0x140033ad4
lea rcx, [0x14018d8b0]
call fcn.1400ee3a0
mov rbp, qword [rsp + 0x70]
test rbx, rbx
mov rbx, qword [rsp + 0x90]
jne 0x140033b05
mov ecx, 0xc0000225
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
mov rbx, rdi
test rdi, rdi
je 0x140033a8e
cmp dword [rdi], 1
jne 0x140033a8e
mov dword [rdi + 0x28], r15d
jmp 0x140033a8e
mov r8, qword [sym.4yUlCM3HuVsHzW5CaCX.exe_PhMainWndHandle]
lea rdx, str.MainWindowSize
lea rcx, str.MainWindowPosition
call sym.4yUlCM3HuVsHzW5CaCX.exe_PhSaveWindowPlacementToSetting
call fcn.140033b50
mov rcx, qword [0x14018cd78]
test rcx, rcx
je 0x140033b3d
mov rcx, qword [rcx + 8]
add rsp, 0x78
jmp fcn.1400aecb0
add rsp, 0x78
ret