Function at 0x10f0b4a
Capabilities:
Check if file exists
Create directory
Get file attributes
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
and dword [ebp - 8], 0
push ebx
lea eax, [ebp - 1]
push eax
call fcn.010f08cc
cmp byte [ebp - 1], 0
mov ebx, eax
jne 0x10f0d43
test ebx, ebx
jl 0x10f0d47
lea eax, [ebp - 8]
push eax
call fcn.010f0a9b
mov ebx, eax
test ebx, ebx
jl 0x10f0d34
push edi
xor eax, eax
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x18]
push eax
call fcn.01083f73
mov ebx, eax
test ebx, ebx
jl 0x10f0d33
push esi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x10f0bee
call esi
cmp eax, 0xb7
jne 0x10f0c06
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10f0bee
test byte [eax + 0x1c], 1
je 0x10f0bee
cmp byte [eax + 0x19], 5
jb 0x10f0bee
push 0x10124b0
push 0x12
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x10f0c32
call esi
test eax, eax
jg 0x10f0c1d
call esi
jmp 0x10f0c0a
test eax, eax
jg 0x10f0c11
mov ebx, eax
jmp 0x10f0d29
and eax, 0xffff
or eax, 0x80070000
jmp 0x10f0c0a
call esi
mov ebx, eax
and ebx, 0xffff
or ebx, 0x80070000
jmp 0x10f0d29
or eax, 2
push eax
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x10f0bfc
push 0xa
xor eax, eax
pop ecx
lea edi, [ebp - 0x40]
xor esi, esi
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], esi
mov eax, dword [0x111124c]
mov edi, 0x111124c
cmp eax, edi
je 0x10f0c81
test byte [eax + 0x1c], 1
je 0x10f0c81
cmp byte [eax + 0x19], 5
jb 0x10f0c81
push dword [ebp - 8]
push 0x10124b0
push 0x13
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov eax, dword [ebp - 8]
or dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x1f6
push esi
mov dword [ebp - 0x40], 0x100413c
mov dword [ebp - 0x3c], 0x80000000
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], esi
call sub.NETAPI32.dll_NetShareAdd
mov esi, eax
test esi, esi
je 0x10f0d02
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10f0cec
test byte [eax + 0x1c], 1
je 0x10f0cec
cmp byte [eax + 0x19], 2
jb 0x10f0cec
push dword [ebp - 0xc]
push esi
push 0x10124b0
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba57
test esi, esi
jg 0x10f0cf4
mov ebx, esi
jmp 0x10f0d29
and esi, 0xffff
or esi, 0x80070000
jmp 0x10f0cf0
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10f0d29
test byte [eax + 0x1c], 1
je 0x10f0d29
cmp byte [eax + 0x19], 5
jb 0x10f0d29
push 0x10124b0
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
lea eax, [ebp - 0x18]
push eax
call fcn.01084341
pop esi
pop edi
cmp dword [ebp - 8], 0
je 0x10f0d43
push dword [ebp - 8]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
test ebx, ebx
jge 0x10f0d72
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10f0d72
test byte [eax + 0x1c], 1
je 0x10f0d72
cmp byte [eax + 0x19], 2
jb 0x10f0d72
push ebx
push 0x10124b0
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
mov eax, ebx
pop ebx
leave
ret