Function at 0x1800cefd0
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1028
call fcn.1800d92c0
sub rsp, rax
mov qword [rsp + 0xf38], 0xfffffffffffffffe
mov rax, qword [0x180284030]
xor rax, rsp
mov qword [rsp + 0x1010], rax
mov dword [rsp + 0xc80], 0
xor eax, eax
mov word [rsp + 0x40], ax
lea rax, [rsp + 0x42]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
movzx eax, word [0x180228b74]
mov word [rsp + 0x250], ax
lea rax, [rsp + 0x252]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rax, [rsp + 0x458]
lea rcx, [0x18022a0b8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xa
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x462]
mov rdi, rax
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
lea rax, [rsp + 0x660]
lea rcx, [0x18022a0c8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x14
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x674]
mov rdi, rax
xor eax, eax
mov ecx, 0x1f4
rep stosb byte [rdi], al
lea rax, [rsp + 0x868]
lea rcx, [0x18022a0e0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x12
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x87a]
mov rdi, rax
xor eax, eax
mov ecx, 0x1f6
rep stosb byte [rdi], al
lea rax, [rsp + 0xa70]
lea rcx, [0x18022a0f8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.OLEAUT32.dll_SafeArrayCopy
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xa8a]
mov rdi, rax
xor eax, eax
mov ecx, 0x1ee
rep stosb byte [rdi], al
mov qword [rsp + 0xc88], 0
jmp 0x1800cf129
mov rax, qword [rsp + 0xc88]
inc rax
mov qword [rsp + 0xc88], rax
cmp qword [rsp + 0xc88], 5
jae 0x1800cf1ad
mov rax, qword [rsp + 0xc88]
imul rax, rax, 0x208
lea rax, [rsp + rax + 0x250]
mov qword [rsp + 0xf40], rax
mov rcx, qword [rsp + 0x1040]
add rcx, 0x78
call fcn.18000122b
mov rcx, qword [rsp + 0xf40]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [0x18022a118]
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.1800d6e60
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800cf1a8
mov dword [rsp + 0xc80], 0xffffefdd
jmp 0x1800cf1ad
jmp 0x1800cf116
cmp dword [rsp + 0xc80], 0
je 0x1800cf1bc
jmp 0x1800cf81a
mov rax, qword [rsp + 0x1040]
add rax, 0xd8
mov rcx, rax
call fcn.18000122b
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800cf1f1
mov dword [rsp + 0xc80], 0xffffefdd
jmp 0x1800cf81a
lea rdx, str.ISO_boot
lea rcx, [rsp + 0xc98]
call fcn.1800334a0
nop
lea rdx, str._boot
lea rcx, [rsp + 0xcd8]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0x1040]
add rax, 0x78
lea r8, [rsp + 0xc98]
mov rdx, rax
lea rcx, [rsp + 0xcb8]
call fcn.180033cc0
mov qword [rsp + 0xf48], rax
mov rax, qword [rsp + 0xf48]
mov qword [rsp + 0xf50], rax
mov rax, qword [rsp + 0x1040]
add rax, 0x198
lea r8, [rsp + 0xcd8]
mov rdx, rax
lea rcx, [rsp + 0xcf8]
call fcn.180033cc0
mov qword [rsp + 0xf58], rax
mov rax, qword [rsp + 0xf58]
mov qword [rsp + 0xf60], rax
mov rdx, qword [rsp + 0xf50]
mov rcx, qword [rsp + 0xf60]
call fcn.18007bf70
movzx eax, al
test eax, eax
jne 0x1800cf2be
mov dword [rsp + 0xf68], 1
jmp 0x1800cf2c9
mov dword [rsp + 0xf68], 0
movzx eax, byte [rsp + 0xf68]
mov byte [rsp + 0xc90], al
lea rcx, [rsp + 0xcf8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xcb8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xcd8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xc98]
call fcn.18000165e
movzx eax, byte [rsp + 0xc90]
test eax, eax
je 0x1800cf32b
mov dword [rsp + 0xc80], 0xffffefda
jmp 0x1800cf81a
lea rdx, str.ISOefi
lea rcx, [rsp + 0xd20]
call fcn.1800334a0
nop
lea rdx, str.efi
lea rcx, [rsp + 0xd60]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0x1040]
add rax, 0x78
lea r8, [rsp + 0xd20]
mov rdx, rax
lea rcx, [rsp + 0xd40]
call fcn.180033cc0
mov qword [rsp + 0xf70], rax
mov rax, qword [rsp + 0xf70]
mov qword [rsp + 0xf78], rax
mov rax, qword [rsp + 0x1040]
add rax, 0x198
lea r8, [rsp + 0xd60]
mov rdx, rax
lea rcx, [rsp + 0xd80]
call fcn.180033cc0
mov qword [rsp + 0xf80], rax
mov rax, qword [rsp + 0xf80]
mov qword [rsp + 0xf88], rax
mov rdx, qword [rsp + 0xf78]
mov rcx, qword [rsp + 0xf88]
call fcn.18007bf70
movzx eax, al
test eax, eax
jne 0x1800cf3f8
mov dword [rsp + 0xf90], 1
jmp 0x1800cf403
mov dword [rsp + 0xf90], 0
movzx eax, byte [rsp + 0xf90]
mov byte [rsp + 0xd18], al
lea rcx, [rsp + 0xd80]
call fcn.18000165e
nop
lea rcx, [rsp + 0xd40]
call fcn.18000165e
nop
lea rcx, [rsp + 0xd60]
call fcn.18000165e
nop
lea rcx, [rsp + 0xd20]
call fcn.18000165e
movzx eax, byte [rsp + 0xd18]
test eax, eax
je 0x1800cf465
mov dword [rsp + 0xc80], 0xffffefda
jmp 0x1800cf81a
lea rdx, str.ISO_bootmgr
lea rcx, [rsp + 0xda8]
call fcn.1800334a0
nop
lea rdx, str._bootmgr
lea rcx, [rsp + 0xde8]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0x1040]
add rax, 0x78
lea r8, [rsp + 0xda8]
mov rdx, rax
lea rcx, [rsp + 0xdc8]
call fcn.180033cc0
mov qword [rsp + 0xf98], rax
mov rax, qword [rsp + 0xf98]
mov qword [rsp + 0xfa0], rax
mov rax, qword [rsp + 0x1040]
add rax, 0x198
lea r8, [rsp + 0xde8]
mov rdx, rax
lea rcx, [rsp + 0xe08]
call fcn.180033cc0
mov qword [rsp + 0xfa8], rax
mov rax, qword [rsp + 0xfa8]
mov qword [rsp + 0xfb0], rax
mov rdx, qword [rsp + 0xfa0]
mov rcx, qword [rsp + 0xfb0]
call fcn.18007beb0
movzx eax, al
test eax, eax
jne 0x1800cf532
mov dword [rsp + 0xfb8], 1
jmp 0x1800cf53d
mov dword [rsp + 0xfb8], 0
movzx eax, byte [rsp + 0xfb8]
mov byte [rsp + 0xda0], al
lea rcx, [rsp + 0xe08]
call fcn.18000165e
nop
lea rcx, [rsp + 0xdc8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xde8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xda8]
call fcn.18000165e
movzx eax, byte [rsp + 0xda0]
test eax, eax
je 0x1800cf59f
mov dword [rsp + 0xc80], 0xffffefdc
jmp 0x1800cf81a
lea rdx, [0x18022a1b0]
lea rcx, [rsp + 0xe30]
call fcn.1800334a0
nop
lea rdx, [0x18022a1e0]
lea rcx, [rsp + 0xe70]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0x1040]
add rax, 0x78
lea r8, [rsp + 0xe30]
mov rdx, rax
lea rcx, [rsp + 0xe50]
call fcn.180033cc0
mov qword [rsp + 0xfc0], rax
mov rax, qword [rsp + 0xfc0]
mov qword [rsp + 0xfc8], rax
mov rax, qword [rsp + 0x1040]
add rax, 0x198
lea r8, [rsp + 0xe70]
mov rdx, rax
lea rcx, [rsp + 0xe90]
call fcn.180033cc0
mov qword [rsp + 0xfd0], rax
mov rax, qword [rsp + 0xfd0]
mov qword [rsp + 0xfd8], rax
mov rdx, qword [rsp + 0xfc8]
mov rcx, qword [rsp + 0xfd8]
call fcn.18007beb0
movzx eax, al
test eax, eax
jne 0x1800cf66c
mov dword [rsp + 0xfe0], 1
jmp 0x1800cf677
mov dword [rsp + 0xfe0], 0
movzx eax, byte [rsp + 0xfe0]
mov byte [rsp + 0xe28], al
lea rcx, [rsp + 0xe90]
call fcn.18000165e
nop
lea rcx, [rsp + 0xe50]
call fcn.18000165e
nop
lea rcx, [rsp + 0xe70]
call fcn.18000165e
nop
lea rcx, [rsp + 0xe30]
call fcn.18000165e
movzx eax, byte [rsp + 0xe28]
test eax, eax
je 0x1800cf6d9
mov dword [rsp + 0xc80], 0xffffefdc
jmp 0x1800cf81a
lea rdx, [0x18022a1f8]
lea rcx, [rsp + 0xeb8]
call fcn.1800334a0
nop
lea rdx, str._bootetfsboot.com
lea rcx, [rsp + 0xef8]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0x1040]
add rax, 0x78
lea r8, [rsp + 0xeb8]
mov rdx, rax
lea rcx, [rsp + 0xed8]
call fcn.180033cc0
mov qword [rsp + 0xfe8], rax
mov rax, qword [rsp + 0xfe8]
mov qword [rsp + 0xff0], rax
mov rax, qword [rsp + 0x1040]
add rax, 0x198
lea r8, [rsp + 0xef8]
mov rdx, rax
lea rcx, [rsp + 0xf18]
call fcn.180033cc0
mov qword [rsp + 0xff8], rax
mov rax, qword [rsp + 0xff8]
mov qword [rsp + 0x1000], rax
mov rdx, qword [rsp + 0xff0]
mov rcx, qword [rsp + 0x1000]
call fcn.18007beb0
movzx eax, al
test eax, eax
jne 0x1800cf7a6
mov dword [rsp + 0x1008], 1
jmp 0x1800cf7b1
mov dword [rsp + 0x1008], 0
movzx eax, byte [rsp + 0x1008]
mov byte [rsp + 0xeb0], al
lea rcx, [rsp + 0xf18]
call fcn.18000165e
nop
lea rcx, [rsp + 0xed8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xef8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xeb8]
call fcn.18000165e
movzx eax, byte [rsp + 0xeb0]
test eax, eax
je 0x1800cf810
mov dword [rsp + 0xc80], 0xffffefdc
jmp 0x1800cf81a
xor eax, eax
test eax, eax
jne 0x1800cf108
mov eax, dword [rsp + 0xc80]
mov rcx, qword [rsp + 0x1010]
xor rcx, rsp
call fcn.1800d65d0
add rsp, 0x1028
pop rdi
pop rsi
ret