Function at 0x5108a0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x244
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x513570
mov esi, ecx
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
cmp dword [edi + 0x10], 0
je 0x51095f
cmp dword [edi + 0x14], 7
mov eax, edi
jbe 0x5108e9
mov eax, dword [edi]
push 0
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
test eax, eax
je 0x510908
cmp eax, 0xb7
je 0x510908
cmp eax, 0x50
jne 0x5109ab
lea eax, [ebp - 0x24e]
push 0x20a
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov ebx, dword [edi + 0x10]
cmp dword [edi + 0x14], 7
jbe 0x510937
mov edi, dword [edi]
cmp ebx, 8
mov dword [ebp - 0x24], esi
jae 0x510966
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
lea esi, [ebp - 0x3c]
mov ecx, 7
mov dword [ebp - 0x20], esi
movsd qword [ebp - 0x34], xmm1
movsd qword [ebp - 0x3c], xmm0
jmp 0x5109de
mov bl, 1
jmp 0x510a47
mov dword [ebp - 0x44], ebx
or ebx, 7
mov ecx, 0x7ffffffe
cmp ebx, 0x7ffffffe
mov dword [ebp - 0x40], ebx
cmovb ecx, ebx
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
jb 0x5109b2
cmp ecx, 0x7fffffee
jae 0x510b53
add eax, 0x25
push eax
call fcn.005d0220
add esp, 4
lea esi, [eax + 0x23]
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x5109c0
xor ebx, ebx
jmp 0x510a47
add eax, 2
push eax
call fcn.005d0220
add esp, 4
mov esi, eax
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x3c], esi
lea eax, [ebx + ebx + 2]
push eax
push edi
push esi
call fcn.0061e340
add esp, 0xc
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ecx
mov edi, dword [eax]
mov eax, dword [edi]
mov ebx, dword [eax + 0x60]
mov ecx, ebx
call dword [0x64689c]
mov dword [ebp - 0x10], 1
mov ecx, edi
push esi
push 0
push 0
call ebx
test eax, eax
je 0x510a5f
xor ebx, ebx
mov ecx, dword [ebp - 0x28]
cmp ecx, 8
jb 0x510a47
mov eax, dword [ebp - 0x3c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x510a3d
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x510b58
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, ebx
add esp, 0x244
pop esi
pop edi
pop ebx
pop ebp
ret 4
cmp dword [ebp - 0x28], 7
mov esi, dword [ebp - 0x20]
jbe 0x510a6b
mov esi, dword [ebp - 0x3c]
mov eax, 0xfffffdf6
lea edx, [ebp - 0x24e]
nop word cs:[eax + eax]
movzx ecx, word [esi + eax + 0x20a]
test cx, cx
je 0x510aa5
mov word [ebp + eax - 0x44], cx
add eax, 2
jne 0x510a80
mov word [ebp + eax - 0x46], 0
xor ebx, ebx
jmp 0x510a0c
mov word [ebp + eax - 0x44], 0
mov dword [ebp - 0x10], 1
push edx
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
test eax, eax
je 0x510a0a
mov esi, dword [ebp - 0x24]
mov eax, 0x105
lea edi, [ebp - 0x24e]
cmp word [edi], 0
je 0x510ae1
add edi, 2
dec eax
jne 0x510ad0
jmp 0x510a0a
xor edx, edx
nop word cs:[eax + eax]
nop dword [eax]
mov ecx, edx
movzx edx, word [edx + edx + 0x659400]
test dx, dx
je 0x510b17
mov word [edi + ecx*2], dx
lea edx, [ecx + 1]
cmp eax, edx
jne 0x510af0
mov word [edi + ecx*2], 0
xor ebx, ebx
jmp 0x510a0c
mov word [edi + ecx*2], 0
mov esi, dword [esi]
mov eax, dword [esi]
mov edi, dword [eax + 0x60]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0x64689c]
lea eax, [ebp - 0x24e]
mov dword [ebp - 0x10], 1
mov ecx, esi
push eax
push 0
push 0
call edi
test eax, eax
sete bl
jmp 0x510a0c
call fcn.005e8c60
mov dword [ebp - 0x10], 0
call fcn.006207e0
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0xc
add ebp, 0xc
mov ecx, dword [ebp - 0x28]
cmp ecx, 8
jb 0x510bbe
mov eax, dword [ebp - 0x3c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x510bb4
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x510bc3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
add esp, 0xc
pop ebp
ret
call fcn.006207e0
int3