Function at 0x1800d0050
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xde8
mov qword [rsp + 0xd00], 0xfffffffffffffffe
mov rax, qword [0x180284030]
xor rax, rsp
mov qword [rsp + 0xdd8], rax
mov dword [rsp + 0xa70], 0
xor eax, eax
mov word [rsp + 0x40], ax
lea rax, [rsp + 0x42]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
movzx eax, word [0x180228b94]
mov word [rsp + 0x250], ax
lea rax, [rsp + 0x252]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rax, [rsp + 0x458]
lea rcx, str.drivers
mov rdi, rax
mov rsi, rcx
mov ecx, 0x12
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x46a]
mov rdi, rax
xor eax, eax
mov ecx, 0x1f6
rep stosb byte [rdi], al
lea rax, [rsp + 0x660]
lea rcx, [0x18022a568]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xa
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x66a]
mov rdi, rax
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
lea rax, [rsp + 0x868]
lea rcx, str.ISO_sources
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.OLEAUT32.dll_SafeArrayCopy
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x882]
mov rdi, rax
xor eax, eax
mov ecx, 0x1ee
rep stosb byte [rdi], al
mov qword [rsp + 0xa78], 0
jmp 0x1800d0173
mov rax, qword [rsp + 0xa78]
inc rax
mov qword [rsp + 0xa78], rax
cmp qword [rsp + 0xa78], 4
jae 0x1800d01f7
mov rax, qword [rsp + 0xa78]
imul rax, rax, 0x208
lea rax, [rsp + rax + 0x250]
mov qword [rsp + 0xd08], rax
mov rcx, qword [rsp + 0xe00]
add rcx, 0x78
call fcn.18000122b
mov rcx, qword [rsp + 0xd08]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str._s_s
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.1800d6e60
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800d01f2
mov dword [rsp + 0xa70], 0xffffefdd
jmp 0x1800d01f7
jmp 0x1800d0160
cmp dword [rsp + 0xa70], 0
je 0x1800d0206
jmp 0x1800d07ed
mov rax, qword [rsp + 0xe00]
add rax, 0xd8
mov rcx, rax
call fcn.18000122b
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800d023b
mov dword [rsp + 0xa70], 0xffffefdd
jmp 0x1800d07ed
lea rdx, str.ISO
lea rcx, [rsp + 0xa88]
call fcn.1800334a0
nop
lea rdx, str.Media
lea rcx, [rsp + 0xac8]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0xe00]
add rax, 0x78
lea r8, [rsp + 0xa88]
mov rdx, rax
lea rcx, [rsp + 0xaa8]
call fcn.180033cc0
mov qword [rsp + 0xd10], rax
mov rax, qword [rsp + 0xd10]
mov qword [rsp + 0xd18], rax
mov rax, qword [rsp + 0xe00]
add rax, 0x198
lea r8, [rsp + 0xac8]
mov rdx, rax
lea rcx, [rsp + 0xae8]
call fcn.180033cc0
mov qword [rsp + 0xd20], rax
mov rax, qword [rsp + 0xd20]
mov qword [rsp + 0xd28], rax
mov rdx, qword [rsp + 0xd18]
mov rcx, qword [rsp + 0xd28]
call fcn.18007bf70
movzx eax, al
test eax, eax
jne 0x1800d0308
mov dword [rsp + 0xd30], 1
jmp 0x1800d0313
mov dword [rsp + 0xd30], 0
movzx eax, byte [rsp + 0xd30]
mov byte [rsp + 0xa80], al
lea rcx, [rsp + 0xae8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xaa8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xac8]
call fcn.18000165e
nop
lea rcx, [rsp + 0xa88]
call fcn.18000165e
movzx eax, byte [rsp + 0xa80]
test eax, eax
je 0x1800d0375
mov dword [rsp + 0xa70], 0xffffefda
jmp 0x1800d07ed
lea rdx, str.ISO_sources_boot.wim
lea rcx, [rsp + 0xb10]
call fcn.1800334a0
nop
lea rdx, [0x18022a5e8]
lea rcx, [rsp + 0xb50]
call fcn.1800334a0
nop
lea rdx, [0x180228ca4]
lea rcx, [rsp + 0xb70]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0xe00]
add rax, 0x78
lea r8, [rsp + 0xb10]
mov rdx, rax
lea rcx, [rsp + 0xb30]
call fcn.180033cc0
mov qword [rsp + 0xd38], rax
mov rax, qword [rsp + 0xd38]
mov qword [rsp + 0xd40], rax
mov rax, qword [rsp + 0xe00]
add rax, 0x178
mov qword [rsp + 0xd48], rax
mov rcx, qword [rsp + 0xe00]
add rcx, 0x198
lea r8, [rsp + 0xb70]
mov rdx, rcx
lea rcx, [rsp + 0xb90]
call fcn.180033cc0
mov qword [rsp + 0xd50], rax
mov rax, qword [rsp + 0xd50]
mov qword [rsp + 0xd58], rax
mov rax, qword [rsp + 0xd48]
mov r8, rax
mov rdx, qword [rsp + 0xd58]
lea rcx, [rsp + 0xbb0]
call fcn.180033cc0
mov qword [rsp + 0xd60], rax
mov rax, qword [rsp + 0xd60]
mov qword [rsp + 0xd68], rax
lea r8, [rsp + 0xb50]
mov rdx, qword [rsp + 0xd68]
lea rcx, [rsp + 0xbd0]
call fcn.180033cc0
mov qword [rsp + 0xd70], rax
mov rax, qword [rsp + 0xd70]
mov qword [rsp + 0xd78], rax
mov rdx, qword [rsp + 0xd40]
mov rcx, qword [rsp + 0xd78]
call fcn.18007beb0
movzx eax, al
test eax, eax
jne 0x1800d04db
mov dword [rsp + 0xd80], 1
jmp 0x1800d04e6
mov dword [rsp + 0xd80], 0
movzx eax, byte [rsp + 0xd80]
mov byte [rsp + 0xb08], al
lea rcx, [rsp + 0xbd0]
call fcn.18000165e
nop
lea rcx, [rsp + 0xbb0]
call fcn.18000165e
nop
lea rcx, [rsp + 0xb90]
call fcn.18000165e
nop
lea rcx, [rsp + 0xb30]
call fcn.18000165e
nop
lea rcx, [rsp + 0xb70]
call fcn.18000165e
nop
lea rcx, [rsp + 0xb50]
call fcn.18000165e
nop
lea rcx, [rsp + 0xb10]
call fcn.18000165e
movzx eax, byte [rsp + 0xb08]
test eax, eax
je 0x1800d0572
mov dword [rsp + 0xa70], 0xffffefdc
jmp 0x1800d07ed
lea rdx, [0x18022a600]
lea rcx, [rsp + 0xbf8]
call fcn.1800334a0
nop
lea rdx, str.etfsboot.com
lea rcx, [rsp + 0xc38]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0xe00]
add rax, 0x78
lea r8, [rsp + 0xbf8]
mov rdx, rax
lea rcx, [rsp + 0xc18]
call fcn.180033cc0
mov qword [rsp + 0xd88], rax
mov rax, qword [rsp + 0xd88]
mov qword [rsp + 0xd90], rax
mov rax, qword [rsp + 0xe00]
add rax, 0x1d8
lea r8, [rsp + 0xc38]
mov rdx, rax
lea rcx, [rsp + 0xc58]
call fcn.180033cc0
mov qword [rsp + 0xd98], rax
mov rax, qword [rsp + 0xd98]
mov qword [rsp + 0xda0], rax
mov rdx, qword [rsp + 0xd90]
mov rcx, qword [rsp + 0xda0]
call fcn.18007beb0
movzx eax, al
test eax, eax
jne 0x1800d063f
mov dword [rsp + 0xda8], 1
jmp 0x1800d064a
mov dword [rsp + 0xda8], 0
movzx eax, byte [rsp + 0xda8]
mov byte [rsp + 0xbf0], al
lea rcx, [rsp + 0xc58]
call fcn.18000165e
nop
lea rcx, [rsp + 0xc18]
call fcn.18000165e
nop
lea rcx, [rsp + 0xc38]
call fcn.18000165e
nop
lea rcx, [rsp + 0xbf8]
call fcn.18000165e
movzx eax, byte [rsp + 0xbf0]
test eax, eax
je 0x1800d06ac
mov dword [rsp + 0xa70], 0xffffefdc
jmp 0x1800d07ed
lea rdx, [0x18022a640]
lea rcx, [rsp + 0xc80]
call fcn.1800334a0
nop
lea rdx, str.efisys.bin
lea rcx, [rsp + 0xcc0]
call fcn.1800334a0
nop
mov rax, qword [rsp + 0xe00]
add rax, 0x78
lea r8, [rsp + 0xc80]
mov rdx, rax
lea rcx, [rsp + 0xca0]
call fcn.180033cc0
mov qword [rsp + 0xdb0], rax
mov rax, qword [rsp + 0xdb0]
mov qword [rsp + 0xdb8], rax
mov rax, qword [rsp + 0xe00]
add rax, 0x1d8
lea r8, [rsp + 0xcc0]
mov rdx, rax
lea rcx, [rsp + 0xce0]
call fcn.180033cc0
mov qword [rsp + 0xdc0], rax
mov rax, qword [rsp + 0xdc0]
mov qword [rsp + 0xdc8], rax
mov rdx, qword [rsp + 0xdb8]
mov rcx, qword [rsp + 0xdc8]
call fcn.18007beb0
movzx eax, al
test eax, eax
jne 0x1800d0779
mov dword [rsp + 0xdd0], 1
jmp 0x1800d0784
mov dword [rsp + 0xdd0], 0
movzx eax, byte [rsp + 0xdd0]
mov byte [rsp + 0xc78], al
lea rcx, [rsp + 0xce0]
call fcn.18000165e
nop
lea rcx, [rsp + 0xca0]
call fcn.18000165e
nop
lea rcx, [rsp + 0xcc0]
call fcn.18000165e
nop
lea rcx, [rsp + 0xc80]
call fcn.18000165e
movzx eax, byte [rsp + 0xc78]
test eax, eax
je 0x1800d07e3
mov dword [rsp + 0xa70], 0xffffefdc
jmp 0x1800d07ed
xor eax, eax
test eax, eax
jne 0x1800d0152
mov eax, dword [rsp + 0xa70]
mov rcx, qword [rsp + 0xdd8]
xor rcx, rsp
call fcn.1800d65d0
add rsp, 0xde8
pop rdi
pop rsi
ret