Function at 0x10010230
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a9038
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x100db3fc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
test esi, esi
jne 0x10010273
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100029d0
mov ecx, eax
test ecx, ecx
je 0x10010443
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov dword [ebp - 4], 0
test esi, 0xffff0000
jne 0x100102aa
movzx eax, si
lea ecx, [ebp + 8]
push eax
call fcn.100100f0
jmp 0x100102c3
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100102b0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp + 8]
call fcn.10010db0
mov esi, dword [ebp + 8]
mov dword [ebp - 4], 1
mov ecx, dword [esi - 0xc]
lea eax, [ecx - 1]
test eax, eax
js 0x1001045c
cmp eax, ecx
jg 0x1001045c
mov al, byte [eax + esi]
or edi, 0xffffffff
cmp al, 0x5c
je 0x100103fd
push 0x5c
push esi
call fcn.10086e1d
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1001043f
sub ebx, esi
js 0x1001043f
cmp ebx, dword [esi - 0xc]
jl 0x10010327
lea ebx, [esi - 0x10]
push ebx
call fcn.10010090
add esp, 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
jmp 0x10010383
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x10010339
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x1001034f
call fcn.100029d0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x1001044d
mov eax, dword [ecx]
push 1
push ebx
call dword [eax]
test eax, eax
je 0x10010457
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
cmp ebx, dword [edi - 8]
jg 0x1001045c
push ebx
push esi
push ebx
mov dword [edi - 0xc], ebx
push edi
mov byte [edi + ebx], 0
call fcn.1000bfd0
add esp, 0x10
lea ebx, [esi - 0x10]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], edx
cmp edx, ebx
je 0x100103e2
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x100103d0
mov eax, dword [edx]
cmp eax, dword [ebx]
jne 0x100103d0
push edx
call fcn.10010090
or edi, 0xffffffff
mov dword [ebp - 0x18], eax
add esp, 4
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x100103c5
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
lea esi, [eax + 0x10]
mov dword [ebp + 8], esi
jmp 0x100103e5
push dword [edi - 0xc]
lea ecx, [ebp + 8]
push edi
call fcn.10010db0
mov esi, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 1
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100103fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push esi
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExA]
xor ebx, ebx
test eax, eax
sete bl
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x1001042b
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ebx, ebx
jmp 0x1001040f
push 0x80004005
call fcn.10001670
push 0x80004005
call fcn.10001670
call fcn.10002540
push 0x80070057
call fcn.10001670
int3