Function at 0x1000be0e
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d54d1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x4370
call fcn.10022c40
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea edi, [ebp - 0x4380]
mov ecx, 0x10dc
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xb4]
call fcn.10016798
mov dword [ebp - 0x4344], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb4]
call fcn.1001690e
lea ecx, [ebp - 0x42fc]
call fcn.1000f460
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x42fc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.10016fe2
mov edx, dword [ebp - 0x42dc]
add edx, 1
mov dword [ebp - 0x431c], edx
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x431c]
push eax
push 0x101070c4
push 0
lea ecx, [ebp - 0xb4]
call fcn.10016fe2
mov esi, esp
push 0x400
push 0x101074c4
push 0xffffffffffffffff
push 0x101070c4
push 1
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp esi, esp
call fcn.10021b10
mov ecx, dword [ebp - 0x42dc]
xor edx, edx
mov dx, word [ecx*2 + 0x101074c2]
cmp edx, 0x2f
je 0x1000bf1b
mov eax, dword [ebp - 0x42dc]
xor ecx, ecx
mov cx, word [eax*2 + 0x101074c2]
cmp ecx, 0x5c
jne 0x1000bf20
jmp 0x1000c269
push 0
push 0
lea edx, [ebp - 0x2b4]
push edx
lea eax, [ebp - 0x42bc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.100252f0
add esp, 0x14
lea edx, [ebp - 0x42bc]
push edx
lea ecx, [ebp - 0x432c]
call fcn.1006a161
mov dword [ebp - 0x4348], eax
mov eax, dword [ebp - 0x4348]
mov dword [ebp - 0x434c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2b4]
push ecx
mov edx, dword [ebp - 0x434c]
push edx
lea eax, [ebp - 0x42c0]
push eax
call fcn.1006a536
mov dword [ebp - 0x4350], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x432c]
call fcn.1006a0d0
mov dword [ebp - 0x4310], 0x101074c4
mov dword [ebp - 0x4314], 0
jmp 0x1000bfba
mov ecx, dword [ebp - 0x4314]
add ecx, 1
mov dword [ebp - 0x4314], ecx
mov edx, dword [ebp - 0x4314]
cmp edx, dword [ebp - 0x42dc]
jge 0x1000c0d5
mov eax, dword [ebp - 0x4314]
xor ecx, ecx
mov cx, word [eax*2 + 0x101074c4]
cmp ecx, 0x2f
je 0x1000bffa
mov edx, dword [ebp - 0x4314]
xor eax, eax
mov ax, word [edx*2 + 0x101074c4]
cmp eax, 0x5c
jne 0x1000c0d0
mov ecx, dword [ebp - 0x4314]
mov word [ecx*2 + 0x101074c4], 0
push 1
lea edx, [ebp - 0x4334]
push edx
lea ecx, [ebp - 0x42c0]
call fcn.1004f8e7
mov dword [ebp - 0x4354], eax
mov eax, dword [ebp - 0x4354]
mov dword [ebp - 0x4358], eax
mov byte [ebp - 4], 5
push 0x100f4ecc
mov ecx, dword [ebp - 0x4358]
push ecx
call fcn.100acec2
mov byte [ebp - 0x4359], al
mov dl, byte [ebp - 0x4359]
mov byte [ebp - 0x4330], dl
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4334]
call fcn.1006a0d0
mov eax, dword [ebp - 0x4330]
and eax, 0xff
test eax, eax
je 0x1000c082
push 0x5c
lea ecx, [ebp - 0x42c0]
call fcn.1006a843
mov ecx, dword [ebp - 0x4310]
push ecx
lea ecx, [ebp - 0x42c0]
call fcn.1006a7e8
lea ecx, [ebp - 0x42c0]
call fcn.100acc14
mov dword [ebp - 0x4360], eax
mov esi, esp
push 0
mov edx, dword [ebp - 0x4360]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp esi, esp
call fcn.10021b10
mov eax, dword [ebp - 0x4314]
lea ecx, [eax*2 + 0x101074c6]
mov dword [ebp - 0x4310], ecx
jmp 0x1000bfab
push 0x5c
lea edx, [ebp - 0x42c0]
push edx
lea eax, [ebp - 0x4338]
push eax
call fcn.1004f017
mov dword [ebp - 0x4364], eax
mov ecx, dword [ebp - 0x4364]
mov dword [ebp - 0x4368], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4310]
push edx
mov eax, dword [ebp - 0x4368]
push eax
lea ecx, [ebp - 0x433c]
push ecx
call fcn.1006a536
mov dword [ebp - 0x436c], eax
mov edx, dword [ebp - 0x436c]
mov dword [ebp - 0x4370], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4370]
call fcn.100acc14
mov dword [ebp - 0x4374], eax
push 0x1001
mov eax, dword [ebp - 0x4374]
push eax
lea ecx, [ebp - 0x430c]
call fcn.1006b567
mov dword [ebp - 0x4378], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x433c]
call fcn.1006a0d0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4338]
call fcn.1006a0d0
lea ecx, [ebp - 0xb4]
call fcn.10016dc1
push 0x4000
lea ecx, [ebp - 0x42b4]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.1001704a
mov dword [ebp - 0x437c], eax
mov edx, dword [ebp - 0x437c]
mov dword [ebp - 0x4318], edx
cmp dword [ebp - 0x4318], 0
jle 0x1000c1d2
mov eax, dword [ebp - 0x4318]
push eax
lea ecx, [ebp - 0x42b4]
push ecx
lea ecx, [ebp - 0x430c]
call fcn.1006bc27
cmp dword [ebp - 0x4318], 0x4000
jne 0x1000c1f8
mov esi, esp
push 0
push 0x10107cc4
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
cmp esi, esp
call fcn.10021b10
test eax, eax
je 0x1000c187
mov esi, esp
push 0
push 0x10107cc4
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
cmp esi, esp
call fcn.10021b10
test eax, eax
je 0x1000c232
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x430c]
call fcn.1006b63e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x42c0]
call fcn.1006a0d0
jmp 0x1000c2a8
lea edx, [ebp - 0x42fc]
push edx
lea eax, [ebp - 0x430c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.10017fc2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x430c]
call fcn.1006b63e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x42c0]
call fcn.1006a0d0
lea ecx, [ebp - 0xb4]
call fcn.10016b39
mov byte [ebp - 0x4380], al
mov ecx, dword [ebp - 0x4380]
and ecx, 0xff
test ecx, ecx
je 0x1000c2a8
mov esi, esp
push 0
push 0x10107cc4
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
cmp esi, esp
call fcn.10021b10
test eax, eax
je 0x1000be74
lea ecx, [ebp - 0xb4]
call fcn.10016825
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.1001764a
jmp 0x1000c34c
mov dword [ebp - 4], 0xffffffff
mov esi, esp
push 0
push 0x10107cc4
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
cmp esi, esp
call fcn.10021b10
test eax, eax
je 0x1000c377
mov dword [0x10107cf4], 0x80010001
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x4380
cmp ebp, esp
call fcn.10021b10
mov esp, ebp
pop ebp
ret 4