Function at 0x41c652
Capabilities:
Create directory

Disassembly:
push 0x64
mov eax, 0x46db58
call fcn.0045199e
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x30]
call fcn.00409b38
and dword [ebp - 4], 0
lea ecx, [ebp - 0x30]
lea edi, [ebp - 0x58]
call fcn.0041b0e7
mov byte [ebp - 4], 1
call dword [section..data]
mov dword [ebp - 0x68], eax
mov eax, dword [0x491894]
mov esi, 0x491894
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 2
mov eax, dword [0x491894]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 3
mov eax, dword [0x491894]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 4
mov eax, dword [0x491894]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 5
mov eax, dword [0x491894]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
push 0x4813fc
mov eax, edi
push eax
mov byte [ebp - 4], 6
call fcn.0041b315
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0041d7fe
push 0x481400
mov eax, edi
push eax
call fcn.0041b315
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0041d7fe
push 0x481404
mov eax, edi
push eax
call fcn.0041b315
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0041d7fe
push 0x481408
mov eax, edi
push eax
call fcn.0041b315
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0041d7fe
push 0x481410
mov eax, edi
push eax
call fcn.0041b315
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0041d7fe
or edi, 0xffffffff
push edi
push 0x48141c
lea eax, [ebp - 0x58]
push eax
call fcn.0041b3a1
push edi
mov byte [0x48fb78], al
push 0x481424
lea eax, [ebp - 0x58]
push eax
call fcn.0041b3a1
push 0xa
mov dword [0x48fb7c], eax
push 0x481430
lea eax, [ebp - 0x58]
push eax
call fcn.0041b3a1
push eax
call fcn.0044e19f
mov dword [0x492748], eax
pop ecx
lea eax, [ebp - 0x58]
push eax
call fcn.0041b432
push edi
mov dword [0x49274c], eax
push 0x48144c
lea eax, [ebp - 0x58]
push eax
call fcn.0041b3a1
push edi
mov dword [0x492750], eax
push 0x481458
lea eax, [ebp - 0x58]
push eax
call fcn.0041b3a1
push edi
mov dword [0x492754], eax
push 0x481460
lea eax, [ebp - 0x58]
push eax
call fcn.0041b3a1
mov dword [0x492758], eax
push 0x481468
lea eax, [ebp - 0x58]
push eax
call fcn.0041b315
push eax
push 0x49281c
call fcn.0041d7fe
push 0x481474
lea eax, [ebp - 0x58]
push eax
call fcn.0041b315
push eax
call fcn.0041c5e3
mov ebx, dword [ebp - 0x40]
cmp dword [ebx - 0xc], 0
pop ecx
jne 0x41c88b
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
call fcn.004019a6
lea eax, [ebx - 0x10]
call fcn.004019a6
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
call fcn.004019a6
mov byte [ebp - 4], 0
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], 0x48160c
call fcn.0041e00d
push 0
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.00409695
xor eax, eax
lea esp, [ebp - 0x80]
call fcn.00451a21
ret
mov eax, dword [0x491894]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 7
push dword [ebp - 0x34]
call fcn.0044dffa
pop ecx
lea ebx, [ebp - 0x5c]
mov dword [0x4927d0], eax
call fcn.00409ff4
lea edi, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.004013b6
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x5c]
add eax, 0xfffffff0
call fcn.004019a6
mov esi, edi
call fcn.00401000
push 0x481398
mov eax, edi
push eax
call fcn.00401a16
mov ebx, dword [ebp - 0x38]
push 0
push ebx
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push dword [ebp + 8]
lea eax, [ebp - 0x64]
push eax
call fcn.0041ce90
mov eax, dword [0x4927f8]
pop ecx
pop ecx
lea edi, [ebp - 0x70]
lea esi, [ebp - 0x64]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0x4927f4
call fcn.0041e099
test al, al
je 0x41c989
lea eax, [ebx - 0x10]
call fcn.004019a6
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x40]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
call fcn.004019a6
xor esi, esi
mov byte [ebp - 4], 0
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], 0x48160c
call fcn.0041e00d
or dword [ebp - 4], 0xffffffff
push 0
push 1
lea ecx, [ebp - 0x30]
call fcn.00409695
mov eax, esi
jmp 0x41c882
mov esi, dword [ebp - 0x64]
test esi, esi
jne 0x41c995
call fcn.0044a196
mov ebx, dword [ebp - 0x60]
cmp ebx, dword [esi + 4]
jne 0x41c9a2
call fcn.0044a196
lea edi, [ebx + 0x18]
lea eax, [ebp - 0x40]
call fcn.004013b6
lea eax, [ebp - 0x6c]
push eax
call fcn.0041cb4b
pop ecx
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 9
call fcn.0040147e
pop ecx
pop ecx
mov edi, eax
mov byte [ebp - 4], 0xa
cmp ebx, dword [esi + 4]
jne 0x41c9da
call fcn.0044a196
lea ecx, [ebx + 0x1c]
mov eax, edi
mov edi, ecx
call fcn.004013b6
mov eax, dword [ebp - 0x5c]
add eax, 0xfffffff0
call fcn.004019a6
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x6c]
add eax, 0xfffffff0
call fcn.004019a6
cmp ebx, dword [esi + 4]
jne 0x41ca0a
call fcn.0044a196
lea edi, [ebx + 0x20]
lea eax, [ebp - 0x44]
call fcn.004013b6
cmp ebx, dword [esi + 4]
jne 0x41ca1f
call fcn.0044a196
lea edi, [ebx + 0x24]
lea eax, [ebp - 0x34]
call fcn.004013b6
cmp ebx, dword [esi + 4]
jne 0x41ca34
call fcn.0044a196
lea edi, [ebx + 0x28]
lea eax, [ebp - 0x3c]
call fcn.004013b6
cmp ebx, dword [esi + 4]
jne 0x41ca49
call fcn.0044a196
lea esi, [ebx + 0x10]
call fcn.0041ae08
mov esi, dword [ebp - 0x64]
cmp ebx, dword [esi + 4]
jne 0x41ca5e
call fcn.0044a196
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x41ca74
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41ca78
xor edi, edi
jmp 0x41ca95
lea esi, [eax + eax]
mov eax, esi
call fcn.00457b10
mov eax, esp
push dword [ebp - 0x68]
push esi
push edi
mov esi, eax
call fcn.0041ed1c
mov esi, dword [ebp - 0x64]
mov edi, eax
cmp ebx, dword [esi + 4]
jne 0x41ca9f
call fcn.0044a196
mov ecx, dword [ebx + 0x30]
push edi
call fcn.00409b5a
cmp ebx, dword [esi + 4]
jne 0x41cab2
call fcn.0044a196
mov edi, dword [ebx + 0x1c]
test edi, edi
je 0x41cac8
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41cacc
xor edi, edi
jmp 0x41cae9
lea esi, [eax + eax]
mov eax, esi
call fcn.00457b10
mov eax, esp
push dword [ebp - 0x68]
push esi
push edi
mov esi, eax
call fcn.0041ed1c
mov esi, dword [ebp - 0x64]
mov edi, eax
cmp ebx, dword [esi + 4]
jne 0x41caf3
call fcn.0044a196
mov ebx, dword [ebx + 0x30]
add ebx, 0x1c
push edi
mov ecx, ebx
call fcn.00409b5a
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x40]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
call fcn.004019a6
xor esi, esi
inc esi
jmp 0x41c95f