Function at 0x104f060
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x1084b00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x34]
mov dword [esp + 0x24], ebp
mov bl, 1
call fcn.01016902
xor eax, eax
push 0x104
lea ecx, [esp + 0x2c]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], 0x10866dc
call fcn.01009602
mov eax, dword [esp + 0x80]
or ecx, 0xffffffff
mov edi, dword [eax + 4]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x2c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x104f0fa
mov ecx, dword [0x1098824]
mov dword [esp + 0x10], ecx
jmp 0x104f10a
mov dword [esp + 0x10], eax
mov ecx, dword [eax - 0xc]
cmp ecx, 0xffffffff
je 0x104f10a
inc ecx
mov dword [eax - 0xc], ecx
lea edx, [esp + 0x84]
push 0x5c
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x80], 2
mov byte [esp + 0x88], 1
call fcn.01008dcc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], 3
call fcn.01008a01
mov eax, dword [esp + 0x84]
mov byte [esp + 0x78], 2
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x104f162
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x104f162
push eax
call fcn.0105b157
add esp, 4
lea ecx, [esp + 0x84]
push 0x2f
push ecx
lea ecx, [esp + 0x18]
call fcn.01008dcc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], 4
call fcn.01008a01
mov edx, dword [esp + 0x84]
mov byte [esp + 0x78], 2
mov ecx, dword [edx - 0xc]
lea eax, [edx - 0xc]
cmp ecx, 0xffffffff
je 0x104f1ab
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x104f1ab
push eax
call fcn.0105b157
add esp, 4
lea eax, [esp + 0x1c]
push 0x2c
push eax
lea ecx, [esp + 0x18]
call fcn.01008eba
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x78], 5
mov eax, dword [ecx - 8]
test eax, eax
je 0x104f1d9
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x10]
push edx
call fcn.01008a01
lea ecx, [esp + 0x28]
call fcn.01009915
test al, al
jne 0x104f1fe
push 0
lea ecx, [esp + 0x2c]
call fcn.0100972d
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp eax, 1
sete bl
push 0x10989d8
lea ecx, [esp + 0x2c]
call fcn.01009731
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x28]
push eax
call fcn.01009731
test bl, bl
je 0x104f4a2
push 0xffffffffffffff9b
push str.desktoptheme
lea ecx, [esp + 0x8c]
call fcn.010087b8
mov ecx, dword [esp + 0x10]
push str..jpg
push ecx
mov byte [esp + 0x80], 6
call fcn.0105b710
add esp, 8
test eax, eax
je 0x104f25a
push str.image_jpeg
jmp 0x104f275
mov edx, dword [esp + 0x10]
push str..fig
push edx
call fcn.0105b710
add esp, 8
test eax, eax
je 0x104f289
push str.image_fig
lea ecx, [esp + 0x88]
call fcn.01008a50
mov byte [esp + 0x80], 0
call fcn.01026d1c
mov eax, dword [eax + 0x34]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x88]
push eax
push ecx
mov ecx, ebp
call fcn.0102202f
mov ebp, eax
test ebp, ebp
je 0x104f2bf
mov ecx, ebp
call fcn.0100a5ee
test eax, eax
mov dword [esp + 0x20], eax
jle 0x104f2bf
mov bl, 1
jmp 0x104f2c1
xor bl, bl
mov edx, dword [esp + 0x84]
mov byte [esp + 0x78], 5
mov ecx, dword [edx - 0xc]
lea eax, [edx - 0xc]
cmp ecx, 0xffffffff
je 0x104f2e8
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x104f2e8
push eax
call fcn.0105b157
add esp, 4
test bl, bl
je 0x104f4a2
mov al, byte [esp + 0x80]
test al, al
je 0x104f349
mov ecx, ebp
call fcn.0100a5e6
mov esi, eax
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
inc eax
push eax
call fcn.0105b249
mov edx, eax
mov eax, dword [esp + 0x18]
mov edi, edx
mov dword [esp + 0x1c], edx
lea ecx, [eax + 1]
xor eax, eax
mov ebx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x18]
push ecx
push edx
mov edx, dword [esp + 0x2c]
push edx
push esi
call fcn.010197ae
add esp, 0x14
mov bl, al
test bl, bl
je 0x104f4a2
mov al, byte [esp + 0x8c]
test al, al
je 0x104f36a
push str..bmp
lea ecx, [esp + 0x2c]
call fcn.010097c1
push 1
lea ecx, [esp + 0x2c]
call fcn.0100972d
push eax
lea ecx, [esp + 0x3c]
call fcn.01016be3
test eax, eax
setge bl
test bl, bl
je 0x104f4a2
mov al, byte [esp + 0x8c]
test al, al
jne 0x104f403
mov al, byte [esp + 0x80]
test al, al
je 0x104f3ae
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push ecx
jmp 0x104f3cc
mov ecx, ebp
call fcn.0100a5ee
lea edx, [esp + 0x8c]
mov ecx, ebp
push edx
mov dword [esp + 0x90], eax
call fcn.0100a5e6
push eax
lea ecx, [esp + 0x3c]
call fcn.01016a76
test eax, eax
mov eax, dword [esp + 0x24]
setge bl
mov cl, byte [eax + 0x48]
test cl, cl
jne 0x104f488
lea ecx, [esp + 0x28]
call fcn.0100972d
mov ecx, dword [0x10a41bc]
push eax
call fcn.0100b289
jmp 0x104f488
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
push 0xc
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov esi, eax
call fcn.01026d1c
mov eax, dword [eax + 0x50]
mov ecx, dword [eax + 0x41c]
mov edx, dword [eax + 0x420]
mov eax, dword [ecx + edx*4]
mov edx, dword [eax + 0x14]
test edx, edx
jne 0x104f438
mov eax, dword [ecx]
mov ebx, dword [eax + 8]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
and esi, 0xffff
push ebx
push esi
mov ecx, ebp
call fcn.0100a5ee
push eax
mov ecx, ebp
call fcn.0100a5e6
push eax
lea ecx, [esp + 0x50]
call fcn.010710ac
lea eax, [esp + 0x34]
lea ecx, [esp + 0x40]
push eax
mov byte [esp + 0x7c], 7
call fcn.01071767
lea ecx, [esp + 0x40]
mov bl, al
mov byte [esp + 0x78], 5
call fcn.0107113c
test bl, bl
je 0x104f4a2
lea ecx, [esp + 0x28]
call fcn.0100972d
mov ecx, dword [esp + 0x88]
push eax
call fcn.01008a50
lea ecx, [esp + 0x34]
call fcn.01016ae8
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0105ad60
mov edx, dword [esp + 0x20]
add esp, 4
mov ecx, dword [edx - 0xc]
lea eax, [edx - 0xc]
cmp ecx, 0xffffffff
je 0x104f4d7
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x104f4d7
push eax
call fcn.0105b157
add esp, 4
mov eax, dword [esp + 0x10]
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x104f4f5
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x104f4f5
push eax
call fcn.0105b157
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x78], 0
call fcn.010095e5
lea ecx, [esp + 0x34]
mov dword [esp + 0x78], 0xffffffff
call fcn.01016958
mov ecx, dword [esp + 0x70]
pop edi
pop esi
mov al, bl
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x6c
ret 0x10