Function at 0x1001f1a0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10043b23
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x10059084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 4], 0
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa8], edi
mov byte [ebp - 4], 2
test eax, eax
je 0x1001f34f
push 2
xor eax, eax
mov dword [ebp - 0x28], edi
push 0x10052bc0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.100077a0
mov eax, dword [ebp - 0xa4]
movzx eax, al
mov byte [ebp - 4], 3
test eax, eax
je 0x1001f269
cmp eax, 1
jne 0x1001f23d
push str._A_OICI_FR___WD_
jmp 0x1001f247
cmp eax, 2
jne 0x1001f24f
push str._A_OICI_FA___WD_
lea ecx, [ebp - 0x28]
call fcn.1001fae0
push str._A_OICI_FA___BA_
lea ecx, [ebp - 0x28]
call fcn.1001fae0
push str._A_OICI_FA___SY_
lea ecx, [ebp - 0x28]
call fcn.1001fae0
movups xmm1, xmmword [ebp - 0x28]
xor eax, eax
movq xmm0, qword [ebp - 0x18]
movups xmmword [ebp - 0x58], xmm1
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x48], xmm0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
movd eax, xmm1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x44], 8
push 0
cmovae ecx, eax
lea eax, [ebp - 0xb4]
push eax
push 1
push ecx
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
push 0x18
call fcn.10025ad3
mov edi, eax
xorps xmm0, xmm0
lea esi, [edi + 0xc]
mov dword [ebp - 0xa4], edi
add esp, 4
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xac], esi
movq qword [edi], xmm0
mov dword [edi + 8], 0
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov dword [edi], vtable.std::_Ref_count_obj2_struct__SECURITY_ATTRIBUTES_.0
movq xmm0, qword [ebp - 0xb8]
movq qword [esi], xmm0
mov eax, dword [ebp - 0xb0]
mov dword [esi + 8], eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xa8], edi
cmp edx, 8
jb 0x1001f34f
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f345
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f65e
push edx
push ecx
call fcn.10025ac5
add esp, 8
lea ecx, [ebp + 8]
call fcn.1001ea20
test al, al
jne 0x1001f366
mov byte [ebp - 0x99], al
jmp 0x1001f598
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x40]
call fcn.100037f0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp + 0x20]
call fcn.1001e8d0
cmp dword [ebp + 0x34], 8
lea ecx, [ebp + 0x20]
mov eax, dword [ebp + 0x30]
xorps xmm0, xmm0
cmovae ecx, dword [ebp + 0x20]
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x94], 0
movq qword [ebp - 0x84], xmm0
lea esi, [ecx + eax*2]
mov dword [ebp - 0x84], 0
xor eax, eax
mov dword [ebp - 0x98], esi
mov word [ebp - 0x94], ax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x78], esi
je 0x1001f4c4
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x58]
call fcn.100037f0
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x58]
call fcn.10001890
push eax
lea ecx, [ebp - 0x28]
call fcn.100037f0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x1001f445
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f43b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f65e
push edx
push ecx
call fcn.10025ac5
add esp, 8
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
call fcn.10003760
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x1001f48b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f481
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f663
push edx
push ecx
call fcn.10025ac5
add esp, 8
lea ecx, [ebp - 0x40]
call fcn.1001ea20
test al, al
jne 0x1001f4b3
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push dword [ebp - 0xa0]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1001f4f6
lea ecx, [ebp - 0x78]
call fcn.1001f9a0
cmp dword [ebp - 0x78], esi
jne 0x1001f3e2
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x1001f543
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f539
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f663
jmp 0x1001f539
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x1001f530
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f526
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f663
push edx
push ecx
call fcn.10025ac5
add esp, 8
mov byte [ebp - 0x99], 0
jmp 0x1001f54a
push edx
push ecx
call fcn.10025ac5
add esp, 8
mov byte [ebp - 0x99], 1
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x1001f584
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f57a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f668
push edx
push ecx
call fcn.10025ac5
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
test edi, edi
je 0x1001f5bd
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x1001f5bd
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x1001f5bd
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb 0x1001f5f3
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f5e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f668
push edx
push ecx
call fcn.10025ac5
add esp, 8
mov edx, dword [ebp + 0x34]
xor eax, eax
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
cmp edx, 8
jb 0x1001f63d
mov ecx, dword [ebp + 0x20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001f633
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001f668
push edx
push ecx
call fcn.10025ac5
add esp, 8
mov al, byte [ebp - 0x99]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10025a94
mov esp, ebp
pop ebp
ret
call fcn.1002a52f
call fcn.1002a52f
call fcn.1002a52f
int3