Function at 0x1000cbb0
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x1004d9b3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4d54
call fcn.10036fa0
mov eax, dword [0x1005d330]
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x4d5c], eax
push edi
mov dword [esp + 0x10], esi
mov ebx, dword [esp + 0x4d78]
xor eax, eax
mov byte [esp + 0x154], 0
mov ecx, 0xff
lea edi, [esp + 0x155]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0x154]
stosb byte es:[edi], al
mov dword [esp + 0x4d6c], 2
mov eax, ebx
sub edx, ebx
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1000cc20
mov eax, dword [ebx - 0xc]
test eax, eax
jne 0x1000cd04
mov ecx, dword [0x10050c9c]
mov eax, dword [str.Unknown]
mov dword [esp + 0x158], ecx
lea ecx, [esi + 0x56c]
mov dword [esp + 0x154], eax
call fcn.10001290
mov eax, dword [esi + 0x53c]
xor ebp, ebp
mov dword [esp + 0x14], eax
xor ebx, ebx
test eax, eax
je 0x1000cc84
mov ecx, dword [esi + 0x540]
sub ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jge 0x1000ccea
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x53c]
mov edi, dword [esp + 0x4d74]
add edi, 8
lea esi, [ebx + eax + 0x13c]
mov ecx, 4
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x1000ccbd
mov eax, dword [esp + 0x14]
inc ebp
add ebx, 0x150
mov esi, edx
jmp 0x1000cc67
mov ecx, dword [esp + 0x10]
imul ebp, ebp, 0x150
mov eax, dword [ecx + 0x53c]
add ebp, eax
mov eax, ebp
lea edx, [esp + 0x154]
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1000cce0
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x56c]
add ecx, 0x56c
call dword [edx + 0x14]
mov ebx, dword [esp + 0x4d78]
mov edx, dword [esp + 0x4d74]
xor eax, eax
mov byte [esp + 0x1d58], 0
mov ecx, 0x400
lea edi, [esp + 0x1d59]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x4d7c]
push eax
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0x158]
push ecx
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x1d64]
push str._s__s__s
push ecx
call fcn.10036e11
mov eax, dword [0x100678e0]
add esp, 0x14
test eax, eax
je 0x1000cd95
mov eax, dword [esp + 0x4d80]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000cd65
lea edi, [esp + 0x1d58]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x1000cd76
mov ebx, dword [esp + 0x4d78]
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x100678e4]
test eax, eax
jne 0x1000cf21
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x955]
mov byte [esp + 0x954], 0
rep stosd dword es:[edi], eax
lea ebx, [ebx]
mov cl, byte [esp + eax + 0x1d58]
mov byte [esp + eax + 0x954], cl
inc eax
test cl, cl
jne 0x1000cdc0
lea edx, [esp + 0x954]
push edx
call fcn.10044f52
lea eax, [esp + 0x958]
push str..gif
push eax
call fcn.10036fe0
add esp, 0xc
test eax, eax
je 0x1000ce04
lea eax, [ebx - 0x10]
or ebp, 0xffffffff
jmp 0x1000d26d
lea eax, [esp + 0x954]
push str..jpg
push eax
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000ce28
lea eax, [ebx - 0x10]
or ebp, 0xffffffff
jmp 0x1000d26d
lea eax, [esp + 0x954]
push str..bmp
push eax
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000ce4c
lea eax, [ebx - 0x10]
or ebp, 0xffffffff
jmp 0x1000d26d
lea eax, [esp + 0x954]
push str..jpeg
push eax
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000ce70
lea eax, [ebx - 0x10]
or ebp, 0xffffffff
jmp 0x1000d26d
lea eax, [esp + 0x954]
push str..png
push eax
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000ce94
lea eax, [ebx - 0x10]
or ebp, 0xffffffff
jmp 0x1000d26d
lea eax, [esp + 0x954]
push str..css
push eax
call fcn.10036fe0
add esp, 8
test eax, eax
jne 0x1000cef8
lea ecx, [esp + 0x954]
push 0x10050ce0
push ecx
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000cedf
lea edx, [esp + 0x954]
push str..jsp
push edx
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000cef8
lea eax, [esp + 0x954]
push str..swf
push eax
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x1000cf21
lea ecx, [esp + 0x4d78]
call fcn.10002590
lea ecx, [esp + 0x4d7c]
call fcn.10002590
lea ecx, [esp + 0x4d80]
call fcn.10002590
jmp 0x1000d2d8
mov ebx, dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ecx, [esp + 0x18]
push ecx
call ebx
movzx edx, word [esp + 0x24]
movzx eax, word [esp + 0x22]
movzx ecx, word [esp + 0x20]
push edx
movzx edx, word [esp + 0x22]
push eax
movzx eax, word [esp + 0x22]
push ecx
movzx ecx, word [esp + 0x24]
push edx
push eax
push ecx
lea edx, [esp + 0x1970]
push str._04d__02d__02d__02d:_02d:_02d
push edx
call fcn.10036e11
lea eax, [esp + 0x1d78]
push eax
lea ecx, [esp + 0x197c]
push ecx
lea edx, [esp + 0x2d84]
push str.__s___s
push edx
call fcn.10036e11
add esp, 0x30
lea eax, [esp + 0x2d5c]
push eax
lea ecx, [esp + 0x18]
call fcn.10001dc0
mov esi, dword [eax]
test esi, esi
mov byte [esp + 0x4d6c], 3
je 0x1000cfbf
mov eax, dword [esi + 4]
test eax, eax
jne 0x1000cfba
mov ecx, dword [esi]
push ecx
call fcn.10044980
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x1000cfc1
xor esi, esi
push esi
push 0
push 0x8065
or ebp, 0xffffffff
push ebp
mov ecx, 0x1005f3a8
call fcn.10019ed0
mov esi, dword [esp + 0x14]
test esi, esi
mov byte [esp + 0x4d6c], 2
je 0x1000d01f
lea edx, [esi + 8]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x1000d01f
test esi, esi
je 0x1000d01f
mov eax, dword [esi]
test eax, eax
je 0x1000d006
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x1000d016
push eax
call fcn.10045c46
add esp, 4
push esi
call fcn.10045c46
add esp, 4
lea edi, [esp + 0x2d5c]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1000d027
mov ax, word [0x100506d0]
mov cl, byte [0x100506d2]
mov word [edi], ax
mov eax, dword [0x100674dc]
test eax, eax
mov byte [edi + 2], cl
jne 0x1000d06d
mov eax, dword [esp + 0x4d78]
add eax, 0xfffffff0
mov byte [esp + 0x4d6c], 1
lea edx, [eax + 0xc]
mov ecx, ebp
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x1000d281
xor eax, eax
mov byte [esp + 0x4c], 0
mov ecx, 0x41
lea edi, [esp + 0x4d]
push 0x100674e0
rep stosd dword es:[edi], eax
lea eax, [esp + 0x50]
push 0x100506fc
push eax
call fcn.10036e11
add esp, 0xc
push 0
lea ecx, [esp + 0x50]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [0x100678ec]
test eax, eax
jne 0x1000d0c5
push 0x100674e0
lea edx, [esp + 0x50]
push str._slog.txt
push edx
call fcn.10036e11
add esp, 0xc
jmp 0x1000d12a
xor eax, eax
mov byte [esp + 0x554], 0
mov ecx, 0xff
lea edi, [esp + 0x555]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x28]
push eax
call ebx
movzx ecx, word [esp + 0x2e]
movzx edx, word [esp + 0x2a]
movzx eax, word [esp + 0x28]
push ecx
push edx
push eax
lea ecx, [esp + 0x560]
push str._04d_02d_02d
push ecx
call fcn.10036e11
lea edx, [esp + 0x568]
push edx
push 0x100674e0
lea eax, [esp + 0x68]
push str._slog_s.txt
push eax
call fcn.10036e11
add esp, 0x24
mov ebx, dword [esp + 0x10]
add ebx, 0x5c4
mov ecx, ebx
call fcn.10001290
lea ecx, [esp + 0x4c]
push 0x10050ca8
push ecx
call fcn.10037995
mov esi, eax
add esp, 8
test esi, esi
jne 0x1000d177
lea edx, [esp + 0x4c]
push 0x10050c94
push edx
call fcn.10037995
mov esi, eax
add esp, 8
test esi, esi
jne 0x1000d177
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
jmp 0x1000d263
xor eax, eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
push esi
mov dword [esp + 0x45], eax
push 1
mov dword [esp + 0x4d], eax
lea ecx, [esp + 0x40]
mov word [esp + 0x51], ax
push 8
push ecx
mov byte [esp + 0x48], 0
mov byte [esp + 0x5b], al
call fcn.10037672
lea edx, [esp + 0x48]
push edx
call fcn.10036e69
mov edi, eax
add esp, 0x14
test edi, edi
jne 0x1000d1d3
push esi
call fcn.10037538
lea eax, [esp + 0x50]
push 0x10050c94
push eax
call fcn.10037995
add esp, 0xc
mov esi, eax
test esi, esi
je 0x1000d25c
cmp edi, dword [0x100678e8]
jg 0x1000d253
inc edi
push edi
lea ecx, [esp + 0x3c]
push str._08ld_r_n
push ecx
call fcn.10036e11
push 0
push 0
push esi
call fcn.100378f0
lea eax, [esp + 0x50]
add esp, 0x18
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000d208
push esi
sub eax, edx
push 1
push eax
lea edx, [esp + 0x44]
push edx
call fcn.100385ee
push 2
push 0
push esi
call fcn.100378f0
lea eax, [esp + 0x2d78]
add esp, 0x1c
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000d236
push esi
sub eax, edx
push 1
push eax
lea eax, [esp + 0x2d68]
push eax
call fcn.100385ee
add esp, 0x10
push esi
call fcn.10037538
add esp, 4
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x14]
mov eax, dword [esp + 0x4d78]
add eax, 0xfffffff0
mov byte [esp + 0x4d6c], 1
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000d28b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x4d7c]
add eax, 0xfffffff0
mov byte [esp + 0x4d6c], 0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000d2b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x4d80]
add eax, 0xfffffff0
mov dword [esp + 0x4d6c], ebp
lea ecx, [eax + 0xc]
lock xadd dword [ecx], ebp
dec ebp
test ebp, ebp
jg 0x1000d2d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x4d64]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x4d54]
pop ebx
call fcn.10036c09
add esp, 0x4d60
ret 0x10