Function at 0x10722b8
Capabilities:
Create directory
Set file attributes
Write file on windows

Disassembly:
push 0x5b4
mov eax, 0x10d0555
call fcn.01098a6e
push 0
sub esp, 0x58
mov dword [ebp - 0x538], esp
mov dword [ebp - 0x53c], ecx
mov ecx, esp
mov esi, 0xff
push esi
push 1
push 0x7c
push 0x1018dc8
mov edi, 0x1018b1c
push edi
mov ebx, 0x1018ab0
push ebx
call fcn.0109958e
lea ecx, [ebp - 0x57c]
call fcn.0109aa5f
and dword [ebp - 4], 0
and dword [ebp - 0x534], 0
push 2
push 0x80
lea eax, [ebp - 0x52c]
push eax
mov byte [ebp - 0x4ac], 0
mov byte [ebp - 0x4ab], 0
mov byte [ebp - 0x4aa], 0
mov byte [ebp - 0x4a9], 0
mov byte [ebp - 0x4a8], 0
mov byte [ebp - 0x4a7], 5
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x107239f
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1072366
and eax, 0xffff
or eax, 0x80070000
push 0x100700c
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x538], esp
push esi
push 1
push 0x91
push 0x1018dc8
push edi
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
lea eax, [ebp - 0x534]
push eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x12
push 1
lea eax, [ebp - 0x4ac]
push eax
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
jne 0x1072411
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10723d8
and eax, 0xffff
or eax, 0x80070000
push 0x1018d94
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x538], esp
push esi
push 1
push 0xa5
push 0x1018dc8
push edi
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
push dword [ebp - 0x534]
lea eax, [ebp - 0x52c]
push 0x101f0000
push 2
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.ADVAPI32.dll_AddAccessAllowedAce]
test eax, eax
jne 0x1072480
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1072447
and eax, 0xffff
or eax, 0x80070000
push 0x1006fe4
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0xb4
push 0x1018dc8
push edi
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
push dword [ebp - 0x534]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
and dword [ebp - 0x534], 0
push 1
lea eax, [ebp - 0x5c0]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x10724f3
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10724ba
and eax, 0xffff
or eax, 0x80070000
push 0x1006fa8
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0xbf
push 0x1018dc8
push edi
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
push 0
lea eax, [ebp - 0x52c]
push eax
push 1
lea eax, [ebp - 0x5c0]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x107255c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1072523
and eax, 0xffff
or eax, 0x80070000
push 0x1006f74
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0xc5
push 0x1018dc8
push edi
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
xor eax, eax
lea edi, [ebp - 0x58c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x5c0]
mov dword [ebp - 0x588], eax
lea eax, [ebp - 0x4a4]
push eax
mov dword [ebp - 0x58c], 0xc
mov dword [ebp - 0x584], 1
call fcn.01071e8e
lea eax, [ebp - 0x4a4]
push eax
push 0x1018d5c
lea eax, [ebp - 0x29c]
push 0x144
push eax
call fcn.010475bf
add esp, 0x10
mov dword [ebp - 0x574], eax
test eax, eax
jge 0x10725f2
push 0x1007038
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0xdb
push 0x1018dc8
push 0x1018b1c
push ebx
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.0109c5e0
mov edi, dword [ebp - 0x53c]
lea eax, [ebp - 0x29c]
push eax
mov ecx, edi
call fcn.01071fc0
test al, al
jne 0x10726de
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x29c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1072677
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x107263a
and eax, 0xffff
or eax, 0x80070000
push 0x1018d3c
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0xe4
push 0x1018dc8
push 0x1018b1c
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
push 0x2006
lea eax, [ebp - 0x29c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x10726de
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10726a1
and eax, 0xffff
or eax, 0x80070000
push 0x1018d18
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0xf2
push 0x1018dc8
push 0x1018b1c
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
cmp byte [ebp + 8], 0
mov eax, dword [0x10e3168]
jne 0x10726ee
mov eax, dword [0x10e3164]
push eax
movzx eax, byte [edi + 0xf7]
push eax
movzx eax, byte [edi + 0xf6]
push eax
movzx eax, byte [edi + 0xf5]
push eax
movzx eax, byte [edi + 0xf4]
push eax
movzx eax, byte [edi + 0xf3]
push eax
movzx eax, byte [edi + 0xf2]
push eax
movzx eax, byte [edi + 0xf1]
push eax
movzx eax, byte [edi + 0xf0]
push eax
movzx eax, word [edi + 0xee]
push eax
movzx eax, word [edi + 0xec]
push eax
push dword [edi + 0xe8]
lea eax, [ebp - 0x4a4]
push eax
push dword [0x10e3170]
lea eax, [ebp - 0x29c]
push 0x144
push eax
call fcn.010475bf
add esp, 0x40
mov dword [ebp - 0x574], eax
test eax, eax
jge 0x107278a
push 0x1007038
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push esi
jmp 0x10725d6
push 0
push 0x80
push 1
lea eax, [ebp - 0x58c]
push eax
push 3
push 0xc0000000
lea eax, [ebp - 0x29c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x594], 0x10059a0
mov dword [ebp - 0x590], eax
mov byte [ebp - 4], 2
cmp eax, 0xffffffff
jne 0x1072821
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10727e1
and eax, 0xffff
or eax, 0x80070000
push 0x1018d00
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0x112
mov edi, 0x1018dc8
push edi
push 0x1018b1c
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
jmp 0x1072826
mov edi, 0x1018dc8
push 0x2006
lea eax, [ebp - 0x29c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x1072889
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1072850
and eax, 0xffff
or eax, 0x80070000
push 0x1018d18
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0x11f
push edi
push 0x1018b1c
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
and dword [ebp - 0x598], 0
push 0
lea eax, [ebp - 0x538]
push eax
push 0xc
lea eax, [ebp - 0x5a0]
push eax
push dword [ebp - 0x53c]
mov dword [ebp - 0x5a0], 0x9d4feff5
mov dword [ebp - 0x59c], 1
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x10728cf
cmp dword [ebp - 0x538], 0xc
je 0x107291c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10728e3
and eax, 0xffff
or eax, 0x80070000
push 0x1018cec
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x530], esp
push esi
push 1
push 0x12e
push edi
push 0x1018b1c
push ebx
mov dword [ebp - 0x574], eax
call fcn.0109958e
lea eax, [ebp - 0x57c]
push eax
call fcn.01043227
add esp, 0x60
lea ecx, [ebp - 0x594]
call fcn.0104a1c0
and dword [ebp - 4], 0
cmp dword [ebp - 0x574], 0
jge 0x1072a44
cmp dword [ebp - 0x534], 0
je 0x107294d
push dword [ebp - 0x534]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x580], eax
push 0x10d4b40
lea eax, [ebp - 0x580]
push eax
call sub.msvcrt.dll__CxxThrowException
push dword [ebp - 0x564]
lea ecx, [ebp - 0x57c]
push 0x132
push 0x1018dc8
push 0x1018b1c
push 0x1018ab0
push dword [ebp - 0x5ac]
call fcn.0109a8a5
and dword [ebp - 4], 0
mov eax, 0x107299f
ret
lea ecx, [ebp - 0x57c]
call fcn.0109ab18
call fcn.01098ad9
ret 4