Function at 0x100011c0
Capabilities:
Create directory
Get file attributes

Disassembly:
push 0xffffffffffffffff
push 0x10003930
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1000601c]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x30], ebx
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx - 0xc]
cmp edx, 2
jge 0x1000122f
or ebp, 0xffffffff
mov dword [esp + 0x30], ebp
lea eax, [ecx - 0x10]
lea ecx, [eax + 0xc]
lock xadd dword [ecx], ebp
dec ebp
test ebp, ebp
jg 0x10001219
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
lea eax, [edx - 1]
cmp eax, ebx
jl 0x10001413
cmp eax, edx
jg 0x10001413
movzx esi, word [ecx + eax*2]
mov edi, 0x5c
or ebp, 0xffffffff
cmp di, si
jne 0x10001298
lea ecx, [esp + 0x14]
lea edx, [esp + 0x38]
call fcn.10001e30
lea edi, [esp + 0x38]
mov byte [esp + 0x30], 1
call fcn.10001d90
mov byte [esp + 0x30], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10001291
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx - 0xc]
cmp edx, ebx
jle 0x100011fc
cmp edx, 3
push ecx
jg 0x100012fe
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebp
je 0x100012ee
test al, 0x10
je 0x100012ee
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
lock xadd dword [ecx], ebp
dec ebp
test ebp, ebp
jg 0x100012d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
jmp 0x10001203
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebp
je 0x1000130c
test al, 0x10
jne 0x100012b4
mov edx, dword [0x100060dc]
mov eax, dword [edx + 0xc]
mov ecx, 0x100060dc
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x30], 2
mov ecx, dword [esp + 0x38]
push 0x5c
push ecx
call dword [sym.imp.MSVCR90.dll_wcsrchr]
add esp, 8
cmp eax, ebx
jne 0x10001340
mov eax, ebp
jmp 0x10001346
sub eax, dword [esp + 0x38]
sar eax, 1
lea ecx, [esp + 0x18]
lea edx, [esp + 0x38]
call fcn.10001e30
lea edi, [esp + 0x14]
mov byte [esp + 0x30], 3
call fcn.10001d90
mov byte [esp + 0x30], 2
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
lock xadd dword [edx], ebp
dec ebp
test ebp, ebp
jg 0x10001383
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], ebx
jg 0x100013a3
lea eax, [esp + 0x14]
call fcn.10001d70
lea eax, [esp + 0x38]
call fcn.10001d70
jmp 0x10001219
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
call fcn.100020d0
add eax, 0x10
mov dword [esi], eax
call sym.OSUtil.dll_Ordinal_16
add esp, 4
cmp eax, ebx
je 0x1000138c
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x1c]
push ecx
push edx
mov dword [esp + 0x24], 0xc
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov esi, eax
dec esi
neg esi
sbb esi, esi
lea eax, [esp + 0x14]
inc esi
call fcn.10001d70
lea eax, [esp + 0x38]
call fcn.10001d70
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
mov eax, 0x80070057
call fcn.10002c00
int3