Function at 0x10010600
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a7df8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x100db774]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
test esi, esi
jne 0x10010643
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.10002dd0
mov ecx, eax
test ecx, ecx
je 0x10010813
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov dword [ebp - 4], 0
test esi, 0xffff0000
jne 0x1001067a
movzx eax, si
lea ecx, [ebp + 8]
push eax
call fcn.100104c0
jmp 0x10010693
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10010680
sub ecx, edx
push ecx
push esi
lea ecx, [ebp + 8]
call fcn.10011180
mov esi, dword [ebp + 8]
mov dword [ebp - 4], 1
mov ecx, dword [esi - 0xc]
lea eax, [ecx - 1]
test eax, eax
js 0x1001082c
cmp eax, ecx
jg 0x1001082c
mov al, byte [eax + esi]
or edi, 0xffffffff
cmp al, 0x5c
je 0x100107cd
push 0x5c
push esi
call fcn.10085bed
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1001080f
sub ebx, esi
js 0x1001080f
cmp ebx, dword [esi - 0xc]
jl 0x100106f7
lea ebx, [esi - 0x10]
push ebx
call fcn.10010460
add esp, 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
jmp 0x10010753
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x10010709
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x1001071f
call fcn.10002dd0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x1001081d
mov eax, dword [ecx]
push 1
push ebx
call dword [eax]
test eax, eax
je 0x10010827
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
cmp ebx, dword [edi - 8]
jg 0x1001082c
push ebx
push esi
push ebx
mov dword [edi - 0xc], ebx
push edi
mov byte [edi + ebx], 0
call fcn.1000c3c0
add esp, 0x10
lea ebx, [esi - 0x10]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], edx
cmp edx, ebx
je 0x100107b2
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x100107a0
mov eax, dword [edx]
cmp eax, dword [ebx]
jne 0x100107a0
push edx
call fcn.10010460
or edi, 0xffffffff
mov dword [ebp - 0x18], eax
add esp, 4
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x10010795
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
lea esi, [eax + 0x10]
mov dword [ebp + 8], esi
jmp 0x100107b5
push dword [edi - 0xc]
lea ecx, [ebp + 8]
push edi
call fcn.10011180
mov esi, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 1
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100107cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push esi
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExA]
xor ebx, ebx
test eax, eax
sete bl
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x100107fb
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ebx, ebx
jmp 0x100107df
push 0x80004005
call fcn.10001a70
push 0x80004005
call fcn.10001a70
call fcn.10002940
push 0x80070057
call fcn.10001a70
int3