Function at 0x100173f0
Capabilities:
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101098f6
mov eax, dword fs:[0]
push eax
sub esp, 0x67c
mov eax, dword [0x1013d070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push 0
push 0x1c
lea eax, [ebp - 0x114]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
je 0x10017824
push 0
push 0x1012fc88
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0x518], 0xf
mov dword [ebp - 0x51c], 0
mov byte [ebp - 0x52c], 0
call fcn.1000e850
mov dword [ebp - 4], 0
cmp byte [ebp - 0x114], 0
jne 0x1001747c
xor ecx, ecx
jmp 0x1001748e
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10017485
sub ecx, edx
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x52c]
call fcn.10010a30
push 7
push str.HQSdes
lea ecx, [ebp - 0x52c]
call fcn.10010a30
push 1
push 0x1013184c
lea ecx, [ebp - 0x52c]
call fcn.10010a30
push 3
push 0x10131850
lea ecx, [ebp - 0x52c]
call fcn.10010a30
push 1
lea eax, [ebp - 0x688]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
push 0
push 0
push 1
lea eax, [ebp - 0x688]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
push 0
lea eax, [ebp - 0x688]
mov dword [ebp - 0x674], 0xc
push 0x1012fc88
lea ecx, [ebp - 0x544]
mov dword [ebp - 0x66c], 1
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x530], 0xf
mov dword [ebp - 0x534], 0
mov byte [ebp - 0x544], 0
call fcn.1000e850
mov byte [ebp - 4], 1
cmp byte [ebp - 0x114], 0
jne 0x10017557
xor ecx, ecx
jmp 0x10017569
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10017560
sub ecx, edx
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x544]
call fcn.10010a30
push 7
push str.HQSdes
lea ecx, [ebp - 0x544]
call fcn.10010a30
cmp dword [ebp - 0x530], 0x10
lea eax, [ebp - 0x544]
lea ecx, [ebp - 0x65c]
cmovae eax, dword [ebp - 0x544]
push 3
mov dword [ebp - 0x660], ecx
lea ecx, [ebp - 0x660]
push eax
call fcn.10018b00
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp - 0x674]
push eax
push dword [ebp - 0x660]
call esi
mov eax, dword [ebp - 0x660]
lea ecx, [ebp - 0x65c]
cmp eax, ecx
je 0x100175ea
push eax
call fcn.100eb475
add esp, 4
cmp dword [ebp - 0x518], 0x10
lea eax, [ebp - 0x52c]
lea ecx, [ebp - 0x65c]
cmovae eax, dword [ebp - 0x52c]
push 3
mov dword [ebp - 0x660], ecx
lea ecx, [ebp - 0x660]
push eax
call fcn.10018b00
lea eax, [ebp - 0x674]
push eax
push dword [ebp - 0x660]
call esi
mov eax, dword [ebp - 0x660]
lea ecx, [ebp - 0x65c]
cmp eax, ecx
je 0x10017640
push eax
call fcn.100eb475
add esp, 4
cmp dword [ebp - 0x518], 0x10
lea edx, [ebp - 0x52c]
cmovae edx, dword [ebp - 0x52c]
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x10017656
sub edx, esi
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10017662
mov ecx, edx
lea eax, [ebp - 0x668]
shr ecx, 2
xorps xmm0, xmm0
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
movlpd qword [ebp - 0x668], xmm0
call fcn.100ec1ec
lea eax, [ebp - 0x668]
push eax
call fcn.100ec4b8
push 0x400
mov esi, eax
lea eax, [ebp - 0x514]
push 0
push eax
call fcn.100e5e30
push esi
push str._Y__m__d.log
lea eax, [ebp - 0x514]
push 0x400
push eax
call fcn.100eb940
add esp, 0x24
mov dword [ebp - 0x548], 0xf
cmp byte [ebp - 0x514], 0
mov dword [ebp - 0x54c], 0
mov byte [ebp - 0x55c], 0
jne 0x100176f2
xor ecx, ecx
jmp 0x10017709
lea ecx, [ebp - 0x514]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10017700
sub ecx, edx
push ecx
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x55c]
call fcn.1000e850
xorps xmm0, xmm0
lea edi, [ebx - 1]
movlpd qword [ebp - 0x668], xmm0
nop word [eax + eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10017730
cmp dword [ebp - 0x548], 0x10
lea edx, [ebp - 0x55c]
mov ax, word [0x1013184c]
cmovae edx, dword [ebp - 0x55c]
mov word [edi], ax
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10017760
sub edx, esi
dec ebx
nop word [eax + eax]
mov al, byte [ebx + 1]
inc ebx
test al, al
jne 0x10017770
mov ecx, edx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
push 0x24
rep movsb byte es:[edi], byte [esi]
push 0
call fcn.100aef5f
mov eax, dword [ebp - 0x548]
add esp, 8
cmp eax, 0x10
jb 0x100177b2
inc eax
lea ecx, [ebp - 0x55c]
push eax
push dword [ebp - 0x55c]
call fcn.1000ea80
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x548], 0xf
mov dword [ebp - 0x54c], 0
mov byte [ebp - 0x55c], 0
cmp eax, 0x10
jb 0x100177eb
inc eax
lea ecx, [ebp - 0x544]
push eax
push dword [ebp - 0x544]
call fcn.1000ea80
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x530], 0xf
mov dword [ebp - 0x534], 0
mov byte [ebp - 0x544], 0
cmp eax, 0x10
jb 0x10017824
inc eax
lea ecx, [ebp - 0x52c]
push eax
push dword [ebp - 0x52c]
call fcn.1000ea80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ae9aa
mov esp, ebp
pop ebp
ret