Function at 0x1014d43
Capabilities:
Create directory

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x102e050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x1c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x34]
xor ebx, ebx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0101ce9b
fld qword [ebp + 0x2c]
push dword [ebp - 0x3c]
push ecx
push ecx
fstp qword [esp]
push edi
call fcn.010148c3
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push esi
call fcn.0100b49e
mov edi, eax
cmp edi, ebx
jl 0x1014edc
cmp dword [ebp - 0x34], ebx
je 0x1014dc2
lea eax, [ebp - 0x1c]
push eax
call fcn.01009545
mov edi, eax
cmp edi, ebx
jl 0x1014edc
xor esi, esi
cmp esi, 0x10
jae 0x1014edc
lea ecx, [ebp - 0xc]
call fcn.0101ce9b
lea ecx, [ebp - 0x24]
call fcn.0101ce9b
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc]
call fcn.0101d352
mov edi, eax
cmp edi, ebx
jl 0x1014eb1
push 0x10031c4
lea ecx, [ebp - 0xc]
call fcn.0101d26a
mov edi, eax
cmp edi, ebx
jl 0x1014eb1
push dword [esi + 0x102e380]
lea ecx, [ebp - 0xc]
call fcn.0101d26a
mov edi, eax
cmp edi, ebx
jl 0x1014eb1
cmp dword [ebp - 0x34], ebx
je 0x1014e89
lea ecx, [ebp - 0x14]
call fcn.0101ce9b
lea eax, [ebp - 0x14]
push eax
push dword [esi + 0x102e380]
push dword [ebp - 0x30]
call fcn.01014c35
mov edi, eax
cmp edi, ebx
jl 0x1014e7f
push dword [ebp - 0x18]
lea eax, [ebp - 0x24]
push dword [ebp - 0x10]
push dword [0x102e454]
push eax
call fcn.0101d4ed
add esp, 0x10
push ebx
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1014e78
xor edi, edi
jmp 0x1014e7f
call fcn.01005299
mov edi, eax
lea ecx, [ebp - 0x14]
call fcn.0101cff5
jmp 0x1014e9d
lea eax, [ebp - 0x24]
push eax
push dword [esi + 0x102e380]
push dword [ebp - 0x30]
call fcn.01014c35
mov edi, eax
cmp edi, ebx
jl 0x1014eb1
push dword [ebp - 0x20]
push dword [ebp - 8]
push dword [ebp - 0x30]
call fcn.0100c55d
mov edi, eax
push 0x70d
call fcn.010052b3
cmp edi, eax
jne 0x1014ec1
xor edi, edi
lea ecx, [ebp - 0x24]
call fcn.0101cff5
lea ecx, [ebp - 0xc]
call fcn.0101cff5
add esi, 4
cmp edi, ebx
jge 0x1014dcc
cmp edi, ebx
mov dword [ebp - 0x28], ebx
jl 0x10150b9
mov esi, dword [ebp - 0x44]
add esi, 0xc
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp + 0x14]
jae 0x1014fe4
cmp dword [esi - 0xc], 4
jne 0x1014fd6
cmp dword [esi - 8], ebx
je 0x1014fd6
lea ecx, [ebp - 0xc]
mov dword [esi - 4], ebx
call fcn.0101ce9b
push dword [esi + 8]
cmp dword [ebp - 0x34], ebx
je 0x1014f36
push dword [ebp - 0x18]
lea eax, [ebp - 0xc]
push dword [0x102e454]
push eax
call fcn.0101d4ed
add esp, 0x10
jmp 0x1014f3e
lea ecx, [ebp - 0xc]
call fcn.0101d352
mov edi, eax
cmp edi, ebx
jl 0x1014f7a
push dword [esi]
push dword [ebp - 8]
push dword [esi + 4]
push dword [ebp - 0x30]
call sub.WINSPOOL.DRV_AddPrintProcessorW
test eax, eax
je 0x1014f6f
push ebx
push ebx
push dword [esi]
push 0x40020018
push 4
push 4
call fcn.0100d069
inc dword [ebp - 0x2c]
jmp 0x1014f76
call fcn.01005299
mov edi, eax
cmp edi, ebx
jge 0x1014fb0
mov eax, edi
and eax, 0xffff
push ebx
cmp eax, 0xbbd
jne 0x1014f9c
push ebx
push dword [esi]
push 0xc002003f
push 4
push 2
call fcn.0100d069
jmp 0x1014fb0
push dword [esi]
push edi
push 0xc0020019
push 4
push 1
call fcn.0100d0dd
mov dword [esi - 4], edi
push dword [ebp - 0x3c]
fld qword [ebp + 0x24]
push ecx
push ecx
fstp qword [esp]
push dword [esi]
push dword [esi + 8]
push dword [esi + 4]
push edi
push dword [ebp - 0x40]
call fcn.010147f1
lea ecx, [ebp - 0xc]
xor edi, edi
call fcn.0101cff5
inc dword [ebp - 0x28]
add esi, 0x20
cmp edi, ebx
jge 0x1014eed
cmp edi, ebx
jl 0x10150b9
cmp dword [ebp - 0x2c], ebx
je 0x10150b9
cmp dword [ebp - 0x34], ebx
je 0x10150b9
cmp dword [ebp - 0x38], ebx
jne 0x10150b9
push dword [ebp - 0x30]
call fcn.01009941
mov esi, eax
lea eax, [ebp - 0x28]
push eax
push esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0100d583
mov edi, eax
cmp edi, ebx
jl 0x1015036
lea eax, [ebp - 0x2c]
push eax
push esi
push dword [ebp - 0x28]
call fcn.0100dec0
mov edi, eax
cmp dword [ebp - 0x28], ebx
je 0x1015046
push dword [ebp - 0x28]
call sub.CLUSAPI.dll_CloseCluster
mov dword [ebp - 0x28], ebx
cmp edi, ebx
jl 0x10150ac
push dword [ebp - 0x2c]
call sub.CLUSAPI.dll_OfflineClusterResource
mov ebx, 0x3e5
mov esi, 0x80070000
test eax, eax
je 0x101507d
cmp eax, ebx
je 0x1015071
test eax, eax
jle 0x101507b
and eax, 0xffff
or eax, esi
jmp 0x101507b
push 3
push dword [ebp - 0x2c]
call fcn.0100d1f5
mov edi, eax
test edi, edi
jl 0x10150aa
push dword [ebp - 0x2c]
call sub.CLUSAPI.dll_OnlineClusterResource
test eax, eax
je 0x10150aa
cmp eax, ebx
je 0x101509e
test eax, eax
jle 0x10150a8
and eax, 0xffff
or eax, esi
jmp 0x10150a8
push 2
push dword [ebp - 0x2c]
call fcn.0100d1f5
mov edi, eax
xor ebx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10150b9
push dword [ebp - 0x2c]
call sub.CLUSAPI.dll_CloseClusterResource
lea ecx, [ebp - 0x1c]
call fcn.0101cebc
test eax, eax
jne 0x1015129
xor esi, esi
lea ecx, [ebp - 0xc]
call fcn.0101ce9b
lea ecx, [ebp - 0x14]
call fcn.0101ce9b
lea eax, [ebp - 0xc]
push eax
push dword [esi + 0x102e380]
push dword [ebp - 0x30]
call fcn.01014c35
cmp eax, ebx
jl 0x1015111
push dword [ebp - 0x18]
lea eax, [ebp - 0x14]
push dword [ebp - 8]
push dword [0x102e454]
push eax
call fcn.0101d4ed
add esp, 0x10
cmp eax, ebx
jl 0x1015111
push dword [ebp - 0x10]
call fcn.0100a69d
lea ecx, [ebp - 0x14]
call fcn.0101cff5
lea ecx, [ebp - 0xc]
call fcn.0101cff5
add esi, 4
cmp esi, 0x10
jb 0x10150c7
lea ecx, [ebp - 0x1c]
call fcn.0101cff5
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01007c80
leave
ret 0x30