Function at 0x100b756
Capabilities:
Create directory
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x818
mov eax, dword [0x104a328]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
or dword [ebp - 0x814], 0xffffffff
push ebx
push esi
push edi
mov dword [ebp - 0x810], eax
xor eax, eax
push 0x7fe
mov word [ebp - 0x804], ax
xor edi, edi
lea eax, [ebp - 0x802]
push edi
push eax
mov esi, ecx
call sub.msvcrt.dll_memset
mov eax, dword [esi]
add esp, 0xc
mov dword [ebp - 0x808], edi
mov dword [ebp - 0x80c], edi
cmp eax, edi
je 0x100b7ba
mov dword [esi], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
push 0x1001fdc
push 0x17
push edi
push 0x1009cd8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
cmp ebx, edi
jge 0x100b7e1
push ebx
push 0x1002158
push 0x44
jmp 0x100b98e
mov eax, dword [esi]
mov ecx, dword [eax]
lea edx, [ebp - 0x814]
push edx
push dword [0x104a790]
push eax
call dword [ecx + 0x104]
mov ebx, eax
cmp ebx, edi
jge 0x100b80c
push ebx
push 0x1002158
push 0x49
jmp 0x100b98e
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x14], eax
cmp dword [ebp - 0x810], edi
jne 0x100b8e5
push 0x1002128
lea eax, [ebp - 0x808]
push eax
push 5
call fcn.0102f3d1
mov ebx, eax
cmp ebx, edi
jge 0x100b844
push ebx
push 0x1002158
push 0x58
jmp 0x100b98e
cmp dword [ebp - 0x808], edi
jne 0x100b85e
mov ebx, 0x8007000e
push ebx
push 0x1002158
push 0x59
jmp 0x100b98e
push edi
push dword [ebp - 0x808]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp - 0x80c]
push eax
call fcn.010312f8
mov ebx, eax
cmp ebx, edi
jge 0x100b88a
push ebx
push 0x1002158
push 0x5f
jmp 0x100b98e
cmp dword [ebp - 0x80c], edi
jne 0x100b8a4
mov ebx, 0x8007000e
push ebx
push 0x1002158
push 0x60
jmp 0x100b98e
push dword [ebp - 0x80c]
lea eax, [ebp - 0x804]
push dword [ebp - 0x808]
push 0x1002114
push 0x400
push eax
call fcn.0100ad97
mov ebx, eax
add esp, 0x14
cmp ebx, edi
jge 0x100b8dc
push ebx
push 0x1002158
push 0x66
jmp 0x100b98e
lea eax, [ebp - 0x804]
push eax
jmp 0x100b8eb
push dword [ebp - 0x810]
lea ecx, [esi + 4]
call fcn.0100ac19
mov eax, dword [ebp + 0xc]
push edi
push edi
mov dword [esi + 8], eax
mov eax, dword [ebp + 0x10]
push edi
push edi
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [esi + 0x1c], eax
cmp eax, edi
je 0x100b915
cmp eax, 0xffffffff
jne 0x100b948
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
test eax, eax
je 0x100b935
call ebx
cmp eax, edi
jle 0x100b931
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
jmp 0x100b93a
mov ebx, 0x80004005
cmp ebx, edi
jge 0x100b948
push ebx
push 0x1002158
push 0x7a
jmp 0x100b98e
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [esi + 0x24], eax
cmp eax, edi
je 0x100b95d
cmp eax, 0xffffffff
jne 0x100b9a4
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
test eax, eax
je 0x100b97d
call ebx
cmp eax, edi
jle 0x100b979
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
jmp 0x100b982
mov ebx, 0x80004005
cmp ebx, edi
jge 0x100b9a4
push ebx
push 0x1002158
push 0x7d
push 0x1002030
push 0x10018c8
mov ecx, 0x104abe8
call fcn.0102f8f0
jmp 0x100b9cd
lea eax, [ebp - 0x818]
push eax
push edi
push esi
push 0x100b716
push edi
push edi
mov dword [esi + 0x20], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x18], eax
cmp eax, edi
jne 0x100b9cd
mov ebx, 0x80004005
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x80c], edi
je 0x100b9e9
push dword [ebp - 0x80c]
call esi
mov dword [ebp - 0x80c], edi
cmp dword [ebp - 0x808], edi
je 0x100b9f9
push dword [ebp - 0x808]
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.0102da5f
leave
ret 0x10