Function at 0x1000ea20
Capabilities:
Check if file exists
Create directory
Get file attributes

Disassembly:
sub esp, 0x44
push ebx
push esi
mov esi, dword [esp + 0x50]
xor ebx, ebx
cmp dword [esi + 8], ebx
je 0x1000eb2a
mov al, byte [esi]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.100036b0
mov ecx, dword [0x1001f2c8]
push ecx
push ebx
push esi
lea ecx, [esp + 0x28]
call fcn.10004ba0
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x1000ea63
mov eax, 0x1001f2c4
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1000eab1
mov edx, dword [esp + 0x20]
shr eax, 4
and al, 1
cmp edx, ebx
mov byte [esp + 0x50], al
je 0x1000ec7e
mov cl, byte [edx - 1]
cmp cl, bl
je 0x1000ea9b
cmp cl, 0xff
je 0x1000ea9b
dec cl
pop esi
mov byte [edx - 1], cl
pop ebx
add esp, 0x44
ret
add edx, 0xfffffffe
push edx
call fcn.10011d80
mov al, byte [esp + 0x54]
add esp, 4
pop esi
pop ebx
add esp, 0x44
ret
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 2
je 0x1000eae5
call esi
cmp eax, 3
je 0x1000eae5
mov ecx, dword [esp + 0x20]
cmp ecx, ebx
je 0x1000eb2a
mov al, byte [ecx - 1]
cmp al, bl
je 0x1000eb1e
cmp al, 0xff
je 0x1000eb1e
dec al
pop esi
mov byte [ecx - 1], al
xor al, al
pop ebx
add esp, 0x44
ret
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x1000eaf2
mov eax, 0x1001f2c4
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1000eb32
mov ecx, dword [esp + 0x20]
cmp ecx, ebx
je 0x1000eb2a
mov al, byte [ecx - 1]
cmp al, bl
je 0x1000eb1e
cmp al, 0xff
je 0x1000eb1e
dec al
pop esi
mov byte [ecx - 1], al
xor al, al
pop ebx
add esp, 0x44
ret
add ecx, 0xfffffffe
push ecx
call fcn.10011d80
add esp, 4
pop esi
xor al, al
pop ebx
add esp, 0x44
ret
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x1000eb3f
mov eax, 0x1001f2c4
push ebx
push 0x2000000
push 3
push ebx
push ebx
push 0x60000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x1000ec50
lea edx, [esp + 0xc]
push edi
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push ebx
push ebx
push 4
push 1
push esi
mov dword [esp + 0x30], ebx
call dword [sym.imp.ADVAPI32.dll_GetSecurityInfo]
lea ecx, [esp + 0x54]
lea edx, [esp + 0x18]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push edx
mov dword [esp + 0x80], ebx
mov byte [esp + 0x44], bl
mov byte [esp + 0x45], bl
mov byte [esp + 0x46], bl
mov byte [esp + 0x47], bl
mov byte [esp + 0x48], bl
mov byte [esp + 0x49], 1
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov edx, dword [esp + 0x14]
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0xc]
mov dword [esp + 0x4c], eax
push ecx
lea eax, [esp + 0x34]
push edx
push eax
push 1
mov dword [esp + 0x44], 1
mov dword [esp + 0x40], 0x10000000
mov dword [esp + 0x48], 3
mov dword [esp + 0x58], 2
mov dword [esp + 0x54], ebx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.ADVAPI32.dll_SetEntriesInAclA]
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x1000ec22
push ebx
push eax
push ebx
push ebx
push 4
push 1
push esi
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
mov ecx, dword [esp + 0x54]
push ecx
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov edx, dword [esp + 0xc]
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
push edx
call edi
mov eax, dword [esp + 0x10]
push eax
call edi
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov ecx, dword [esp + 0x20]
cmp ecx, ebx
je 0x1000ec7c
mov al, byte [ecx - 1]
cmp al, bl
je 0x1000ec70
cmp al, 0xff
je 0x1000ec70
dec al
pop esi
mov byte [ecx - 1], al
mov al, 1
pop ebx
add esp, 0x44
ret
add ecx, 0xfffffffe
push ecx
call fcn.10011d80
add esp, 4
mov al, 1
pop esi
pop ebx
add esp, 0x44
ret