Function at 0x1000c530
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0xc]
lea edx, [eax + 0x63]
mov ecx, eax
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], edx
cmp eax, edx
ja case.0x1000c9a7.234
jmp 0x1000c563
mov esi, dword [ebp + 0xc]
cmp ecx, 0x39af
ja 0x1000cab2
je 0x1000ca9a
cmp ecx, 0x3d3
je 0x1000c703
cmp ecx, 0x1339
je 0x1000c5be
cmp ecx, 0x39a6
jne 0x1000cb79
mov eax, dword [0x10067ba4]
mov ecx, dword [0x10067ba8]
mov edx, dword [0x10067bac]
mov dword [ebp - 0x28], eax
mov ax, word [0x10067bb0]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
mov word [ebp - 0x1c], ax
jmp 0x1000cb79
mov eax, dword [esi]
cmp eax, 0xffffffff
je 0x1000c66d
test eax, eax
je 0x1000c617
cmp eax, 0x2d
jne 0x1000c6b8
mov esi, 0x40f7
jmp 0x1000c5e0
mov eax, esi
sub eax, 0x40f7
je 0x1000c5f4
sub eax, 0x4e
je case.0x1000c9a7.234
jmp 0x1000c60c
push ds
sbb dword [edi - 0x29], edx
xchg dword [edx + 0x30], ebp
mov eax, edi
call fcn.1002b7a0
add esp, 4
mov dword [ebp - 4], 2
add esi, 0x4e
cmp esi, 0x4145
jbe 0x1000c5e0
mov esi, 0x2746
lea esp, [esp]
mov eax, esi
sub eax, 0x2746
je 0x1000c652
sub eax, 2
je 0x1000c639
sub eax, 2
je case.0x1000c9a7.234
jmp 0x1000c662
push edx
pop ds
and byte [edi - 0x29793], ah
add byte [eax], al
push edi
call fcn.1002fc90
mov dword [ebp - 4], 2
jmp 0x1000c65f
mov eax, 0xd0740b7a
push 2
push edi
call fcn.1003afd0
add esp, 8
add esi, 2
cmp esi, 0x274a
jbe 0x1000c620
xor esi, esi
nop
cmp esi, 0x66
ja case.0x1000c67c.1
movzx ecx, byte [esi + 0x1000cbd0]
jmp dword [ecx*4 + 0x1000cbbc]
push 0
mov eax, edi
call fcn.1002b7a0
add esp, 4
jmp case.0x1000c67c.1
mov edx, dword [ebp + 8]
push edx
push edi
call fcn.10025ab0
jmp 0x1000c6a5
push 0x1c
push edi
call fcn.1003afd0
add esp, 8
add esi, 0x22
lea eax, [esi + 0x209c]
cmp eax, 0x2102
jbe 0x1000c670
mov esi, 0x6553
lea ecx, [ecx]
mov eax, esi
sub eax, 0x6553
je 0x1000c6dd
sub eax, 0x36
jne 0x1000c6f3
sub eax, 0xf9d8cac0
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
push edx
push edi
call fcn.1002fc90
add esp, 8
mov dword [ebp - 4], 2
add esi, 0x36
cmp esi, 0x6589
jbe 0x1000c6c0
jmp 0x1000cb79
add byte [eax], al
push 0x96
push 0x68
push 0x67
push 0
mov eax, ebx
call fcn.1000b260
add esp, 0x10
test al, al
je 0x1000c7ea
mov ebx, 0x478
jmp 0x1000c730
mov eax, ebx
sub eax, 0x478
je 0x1000c7c2
sub eax, 0x4f
je 0x1000c770
sub eax, 0x4f
jne 0x1000c7d0
mov esi, ebx
leave
leave
lodsb al, byte [esi]
out dx, al
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
push edx
push eax
call fcn.1000c4f0
add esp, 8
pop edi
mov byte [ebp - 4], al
mov eax, dword [ebp - 4]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor bh, cl
mov bl, ch
jmp 0x1000c701
jne 0x1000c74c
mov ecx, 0x4d8bb2ba
adc al, 0x8b
push ecx
sbb byte [ecx - 0x3c7c13ab], cl
dec edi
add ebx, 0x4f
cmp ebx, 0x516
jbe 0x1000c730
mov ebx, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
jmp 0x1000cb79
push 0x96
push 0x66
push 0x64
push 0x68
push 0x65
push 0x67
push 0x63
push 0x61
push 0x62
push 0x60
push 1
mov eax, ebx
call fcn.1000b260
add esp, 0x2c
test al, al
je 0x1000c8ee
xor ebx, ebx
mov dword [ebp - 8], 0x5eb4
mov dword [ebp - 0xc], ebx
cmp ebx, 0x84
ja case.0x1000c834.1
movzx eax, byte [ebx + 0x1000cc4c]
jmp dword [eax*4 + 0x1000cc38]
mov edi, dword [ebp + 0x10]
push 0x68
call fcn.1002fcc0
add esp, 4
test al, al
jne case.0x1000c834.1
push 0x67
call fcn.1002fcc0
add esp, 4
test al, al
jne case.0x1000c834.1
mov ebx, dword [ebp + 0x14]
xor esi, esi
nop
cmp esi, 0x7e
ja case.0x1000c86c.1
movzx ecx, byte [esi + 0x1000cce8]
jmp dword [ecx*4 + 0x1000ccd4]
mov edi, dword [ebp + 0x10]
call fcn.10032800
jmp case.0x1000c86c.1
call fcn.1003db30
mov ecx, dword [ebp + 0x10]
mov eax, ebx
call fcn.10030df0
jmp case.0x1000c86c.1
mov byte [ebp - 4], 0
add esi, 0x2a
lea edx, [esi + 0x2534]
cmp edx, 0x25b2
jbe 0x1000c860
mov ebx, dword [ebp - 0xc]
jmp case.0x1000c834.1
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0xc]
mov esi, dword [ebp + 0x14]
mov byte [eax + 0x34], 1
call fcn.100346f0
mov byte [ebp - 4], al
jmp case.0x1000c834.1
mov esi, 0xae5c2fc
call fcn.1003db30
mov eax, dword [ebp - 8]
add eax, 0x2c
add ebx, 0x2c
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], ebx
cmp eax, 0x5f38
jbe 0x1000c821
mov ebx, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
jmp 0x1000cb79
push 0x96
push 0
push 0x61
push 0x62
push 0x60
push 0xa
push 0
mov eax, ebx
call fcn.1000b260
add esp, 0x1c
test al, al
je 0x1000c956
mov esi, 0x1ffc
mov eax, esi
sub eax, 0x1ffc
je 0x1000c931
sub eax, 0x59
je 0x1000c92b
sub eax, 0x59
je case.0x1000c9a7.234
jmp 0x1000c946
mov byte [ebp - 4], 0
jmp 0x1000c946
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
mov ecx, edi
call fcn.10030df0
call fcn.10032800
mov ebx, dword [ebp + 0x14]
add esi, 0x59
cmp esi, 0x20ae
jbe 0x1000c912
jmp 0x1000cb79
push 0x96
push 0x66
push 0x64
push 0x65
push 0x63
push 0x5f
push 0
mov eax, ebx
call fcn.1000b260
add esp, 0x1c
test al, al
je 0x1000ca54
mov dword [ebp - 0xc], 0x3b8b
mov dword [ebp - 8], 0
jmp 0x1000c990
cmp dword [ebp - 8], 0xea
ja case.0x1000c9a7.1
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x1000cd7c]
jmp dword [edx*4 + 0x1000cd68]
xor al, 0xbb
cdq
push es
dec ebp
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
call fcn.100346f0
mov byte [ebp - 4], al
jmp case.0x1000c9a7.1
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
mov byte [ecx + 0x34], 1
jmp case.0x1000c9a7.1
mov ebx, dword [ebp + 0x14]
mov edx, dword [ebx + 0x18]
mov edi, dword [ebp + 0x10]
push edx
call fcn.1002fcc0
add esp, 4
test al, al
jne case.0x1000c9a7.1
mov esi, 0x70cc
lea ebx, [ebx]
mov eax, esi
sub eax, 0x70cc
je 0x1000ca18
sub eax, 0x2d
je 0x1000ca12
sub eax, 0xe8831474
sub eax, 0xf6e22375
sub eax, 0x2d
jne 0x1000ca26
loop 0x1000c9fb
lcall 0x5e5f, 0xfc458b8a
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 4], 0
jmp 0x1000ca26
mov eax, ebx
mov ecx, edi
call fcn.10030df0
call fcn.10032800
add esi, 0x2d
cmp esi, 0x7126
jbe 0x1000c9f0
mov eax, dword [ebp - 0xc]
add dword [ebp - 8], 0x4e
add eax, 0x4e
mov dword [ebp - 0xc], eax
cmp eax, 0x3c75
jbe 0x1000c990
mov ebx, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
jmp 0x1000cb79
mov esi, 0x72a5
lea esp, [esp]
mov eax, esi
sub eax, 0x72a5
je 0x1000ca7d
sub eax, 0x3d
jne 0x1000ca8a
add esi, ecx
pop esp
dec esp
std
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push edi
call fcn.1000be00
add esp, 8
mov byte [ebp - 4], al
add esi, 0x3d
cmp esi, 0x72e2
jbe 0x1000ca60
jmp 0x1000cb79
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x1c], 0x2f
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
add bh, bh
adc eax, sym.imp.KERNEL32.dll_CreateDirectoryW
jmp 0x1000cb79
cmp ecx, 0x39b8
je 0x1000cac7
cmp ecx, 0x7049
je 0x1000cade
jmp 0x1000cb79
mov eax, 0x3340
cmp eax, eax
je 0x1000cbad
add eax, 0x15
cmp eax, 0x3340
jbe 0x1000cace
js 0x1000caf2
sub esp, edi
cwde
cmp dword [esi], 0x2d
jne 0x1000cb36
mov esi, 0x4fe3
lea ecx, [ecx]
mov eax, esi
sub eax, 0x4fe3
je 0x1000cb0d
sub eax, 0x1e
jne 0x1000cb29
pop ds
ja 0x1000caa6
push ss
daa
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x17
mov eax, edi
call fcn.1002b7a0
mov ecx, dword [ebp + 8]
add esp, 4
mov eax, edi
call fcn.10021b90
movzx ecx, al
mov dword [ebp - 4], ecx
add esi, 0x1e
cmp esi, 0x5001
jbe 0x1000caf0
jmp 0x1000cb79
mov esi, 0x7155
jmp 0x1000cb40
mov eax, esi
sub eax, 0x7155
je 0x1000cb62
sub eax, 0x4a
je 0x1000cb55
sub eax, 0x4a
je case.0x1000c9a7.234
jmp 0x1000cb6e
mov byte [ebx + 4], 1
mov dword [ebp - 4], 2
jmp 0x1000cb6e
push 5
mov eax, edi
call fcn.1002b7a0
add esp, 4
add esi, 0x4a
cmp esi, 0x71e9
jbe 0x1000cb40
mov ecx, dword [ebp - 0x10]
add ecx, 9
mov dword [ebp - 0x10], ecx
cmp ecx, dword [ebp - 0x18]
jbe 0x1000c560
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
aam 0x29
popal
xchg edi, eax
jnp 0x6e60c7ed
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 4]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret