Function at 0x1800cbb10
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x998
mov qword [rsp + 0x920], 0xfffffffffffffffe
mov rax, qword [0x180284030]
xor rax, rsp
mov qword [rsp + 0x980], rax
mov dword [rsp + 0x870], 0
xor eax, eax
mov word [rsp + 0x660], ax
lea rax, [rsp + 0x662]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x450], ax
lea rax, [rsp + 0x452]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rax, [rsp + 0x40]
lea rcx, [0x1802292c8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xa
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x4a]
mov rdi, rax
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
lea rax, [rsp + 0x248]
lea rcx, str.Booten_US
mov rdi, rax
mov rsi, rcx
mov ecx, SafeArrayCopy
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x25e]
mov rdi, rax
xor eax, eax
mov ecx, 0x1f2
rep stosb byte [rdi], al
mov qword [rsp + 0x878], 0
jmp 0x1800cbbfe
mov rax, qword [rsp + 0x878]
inc rax
mov qword [rsp + 0x878], rax
cmp qword [rsp + 0x878], 2
jae 0x1800cbccd
mov rax, qword [rsp + 0x878]
imul rax, rax, 0x208
lea rax, [rsp + rax + 0x40]
mov qword [rsp + 0x928], rax
lea rdx, [rsp + 0x880]
mov rcx, qword [rsp + 0x9b0]
call fcn.1800cb8a0
mov qword [rsp + 0x930], rax
mov rax, qword [rsp + 0x930]
mov qword [rsp + 0x938], rax
mov rcx, qword [rsp + 0x938]
call fcn.18000122b
mov rcx, qword [rsp + 0x928]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [0x1802292f0]
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x880]
call fcn.18000165e
xor edx, edx
lea rcx, [rsp + 0x450]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800cbcc8
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800cbcc8
mov dword [rsp + 0x870], 0xffffefdd
jmp 0x1800cbccd
jmp 0x1800cbbeb
cmp dword [rsp + 0x870], 0
je 0x1800cbcdc
jmp 0x1800cbf29
lea rdx, [rsp + 0x8a0]
mov rcx, qword [rsp + 0x9b0]
call fcn.1800cb8a0
mov qword [rsp + 0x940], rax
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0x948], rax
mov rcx, qword [rsp + 0x948]
call fcn.18000122b
mov r9, rax
lea r8, [0x180229300]
mov edx, 0x104
lea rcx, [rsp + 0x660]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x8a0]
call fcn.18000165e
lea rdx, [rsp + 0x8c0]
mov rcx, qword [rsp + 0x9b0]
call fcn.1800cb8a0
mov qword [rsp + 0x950], rax
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x958], rax
mov rcx, qword [rsp + 0x958]
call fcn.18000122b
mov r9, rax
lea r8, str._sBoot_bcd
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x8c0]
call fcn.18000165e
lea r8, [rsp + 0x450]
lea rdx, str.WindowsBootDVDPCAT_bcd
lea rcx, [rsp + 0x660]
call fcn.1800c6850
mov dword [rsp + 0x870], eax
cmp dword [rsp + 0x870], 0
je 0x1800cbdd6
jmp 0x1800cbf29
lea rdx, [rsp + 0x8e0]
mov rcx, qword [rsp + 0x9b0]
call fcn.1800cb8a0
mov qword [rsp + 0x960], rax
mov rax, qword [rsp + 0x960]
mov qword [rsp + 0x968], rax
mov rcx, qword [rsp + 0x968]
call fcn.18000122b
mov r9, rax
lea r8, str._sBoot_boot.sdi
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x8e0]
call fcn.18000165e
lea r8, [rsp + 0x450]
lea rdx, str.WindowsBootDVDPCAT_boot.sdi
lea rcx, [rsp + 0x660]
call fcn.1800c6850
mov dword [rsp + 0x870], eax
cmp dword [rsp + 0x870], 0
je 0x1800cbe6c
jmp 0x1800cbf29
lea rdx, [rsp + 0x900]
mov rcx, qword [rsp + 0x9b0]
call fcn.1800cb8a0
mov qword [rsp + 0x970], rax
mov rax, qword [rsp + 0x970]
mov qword [rsp + 0x978], rax
mov rcx, qword [rsp + 0x978]
call fcn.18000122b
mov r9, rax
lea r8, str._sBootetfsboot.com
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x900]
call fcn.18000165e
lea r8, [rsp + 0x450]
lea rdx, str.WindowsBootDVDPCATetfsboot.com
lea rcx, [rsp + 0x660]
call fcn.1800c6850
mov dword [rsp + 0x870], eax
cmp dword [rsp + 0x870], 0
je 0x1800cbeff
jmp 0x1800cbf29
mov rcx, qword [rsp + 0x9b0]
call fcn.1800ccbc0
mov dword [rsp + 0x870], eax
cmp dword [rsp + 0x870], 0
je 0x1800cbf1f
jmp 0x1800cbf29
xor eax, eax
test eax, eax
jne 0x1800cbbdd
mov eax, dword [rsp + 0x870]
mov rcx, qword [rsp + 0x980]
xor rcx, rsp
call fcn.1800d65d0
add rsp, 0x998
pop rdi
pop rsi
ret