Function at 0x180075f30
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x60
call fcn.180095800
lea rcx, [rsp + 0x40]
call fcn.180011a20
mov rdi, qword [rax]
mov rbx, qword [rax + 8]
lea rcx, [rsp + 0x40]
call fcn.180012180
cmp rdi, rbx
je 0x180075fa8
lea rcx, [rsp + 0x40]
call fcn.180011a20
nop
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
sub rcx, rdx
sar rcx, 5
test rcx, rcx
je 0x180076254
lea rcx, [rsp + 0x20]
call fcn.180012040
mov rcx, rax
call fcn.18000e6d0
nop
lea rcx, [rsp + 0x40]
call fcn.180012180
jmp 0x18007608b
movabs rbx, 0xc6e65d1a68d3975a
mov qword [rsp + 0x20], rbx
movabs rax, 0xf23a7efe696ca0f2
mov qword [rsp + 0x28], rax
movabs rsi, 0xb3873b7f2c8fad19
mov qword [rsp + 0x40], rsi
movabs rdi, 0xf23a168a083cd49e
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x20], xmm0
xor edx, edx
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov qword [rsp + 0x40], rbx
movabs rax, 0x91667efe696ca0f2
mov qword [rsp + 0x48], rax
movabs rax, 0xff7714d60662c474
mov qword [rsp + 0x50], rax
movabs rax, 0xc719d60ccadc58b3
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], rdi
movabs rax, 0xa83a4bb16f04aa1b
mov qword [rsp + 0x30], rax
movabs rax, 0xc719d60ccadc5880
mov qword [rsp + 0x38], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x50], xmm1
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 1
call fcn.180076260
call fcn.1800154d0
test eax, eax
jne 0x1800760fe
mov rax, qword [0x180148158]
mov rbx, qword [rax + 0x460]
lea r8, [0x180148148]
lea rdx, [0x180015110]
mov rcx, rbx
call fcn.180095930
test eax, eax
jne 0x1800760ce
mov rcx, rbx
call 0x180095e10
mov rax, qword [0x180148158]
mov rbx, qword [rax + 0x488]
lea r8, [0x180148130]
lea rdx, [0x180015480]
mov rcx, rbx
call fcn.180095930
test eax, eax
jne 0x1800760fe
mov rcx, rbx
call 0x180095e10
lea rcx, str.Gdi32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.BitBlt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtGdiStretchBlt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r8, [0x180148358]
lea rdx, [0x180075620]
mov rcx, qword [0x180147d70]
call fcn.180095930
mov rcx, qword [0x180147d70]
call 0x180095e10
lea r8, [0x180148378]
lea rdx, [0x180075a20]
mov rcx, qword [0x180147d68]
call fcn.180095930
mov rcx, qword [0x180147d68]
call 0x180095e10
lea r8, [0x180148380]
lea rdx, [0x1800759a0]
mov rcx, qword [0x180147d58]
call fcn.180095930
mov rcx, qword [0x180147d58]
call 0x180095e10
lea r8, [0x180148370]
lea rdx, [0x180075ab0]
mov rcx, qword [0x180147d78]
call fcn.180095930
mov rcx, qword [0x180147d78]
call 0x180095e10
lea r8, [0x180148388]
lea rdx, [0x1800758b0]
mov rcx, qword [0x180147e00]
call fcn.180095930
mov rcx, qword [0x180147e00]
call 0x180095e10
lea r8, [0x180148368]
lea rdx, [0x180075b90]
mov rcx, qword [0x180147da0]
call fcn.180095930
mov rcx, qword [0x180147da0]
call 0x180095e10
lea r8, [0x180148248]
lea rdx, [0x180014c10]
mov rcx, qword [0x180147ed8]
call fcn.180095930
mov rcx, qword [0x180147ed8]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
jmp 0x180095e10
call fcn.180012160
nop
int3
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x20
mov rdi, rsp
mov ecx, 8
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov rcx, qword [rsp + 0x30]
call fcn.180096f70
add rsp, 0x20
pop rdi
ret