Function at 0x41e3fc
Capabilities:
Create directory

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x30c
mov esi, dword [esp + 0x320]
sub esp, 4
lea eax, [esp + 0x10]
push 0x100
push 0
push eax
call fcn.006f003b
add esp, 0x10
sub esp, 4
lea eax, [esp + 0x110]
push pe_nt_image_headers32
push 0
push eax
call fcn.006f003b
add esp, 0x10
test esi, esi
je 0x41e50d
sub esp, 0xc
push esi
call fcn.006f01a0
add esp, 0x10
mov ebx, eax
mov edi, 0xfffffffe
cmp ebx, 0x102
jg 0x41e797
mov dword [esp + 8], ebx
add ebx, 0x10
sub esp, 0xc
push ebx
call fcn.006e864c
add esp, 0x10
mov ebp, eax
sub esp, 0xc
push ebx
call fcn.006e864c
add esp, 0x10
mov ebx, eax
sub esp, 8
push esi
mov esi, ebp
push esi
call fcn.006f0154
add esp, 0x10
sub esp, 8
push 0
push esi
call fcn.0041e298
add esp, 0x10
test eax, eax
je 0x41e517
sub esp, 8
push 0
push esi
call fcn.00420218
add esp, 0x10
test eax, eax
lea edi, [esp + 0xc]
je 0x41e75a
sub esp, 4
push 0
push str.chkFE3A7B92.tmp
push esi
call fcn.004230b4
add esp, 0x10
test al, al
je 0x41e52b
sub esp, 8
push str.chkFE3A7B92.tmp
push esi
call fcn.00422f18
add esp, 0x10
test al, al
je 0x41e52b
sub esp, 4
push 0
push str.chkFE3A7B92.tmp
push esi
call fcn.00420f68
add esp, 0x10
test al, al
je 0x41e52b
mov ebp, 1
jmp 0x41e51c
mov edi, 0xffffffff
jmp 0x41e797
mov ebp, 0xfffffffd
xor edi, edi
test esi, esi
jne 0x41e765
jmp 0x41e771
sub esp, 0xc
push 1
push 0x5c
push 0x40
push edi
mov dword [esp + 0x1c], esi
push esi
call fcn.00420d60
add esp, 0x20
mov esi, eax
test esi, esi
jle 0x41e9ee
lea ebp, [esi - 1]
xor edi, edi
nop word cs:[eax + eax]
sub esp, 8
push 0x717589
push dword [esp + edi*4 + 0x18]
call fcn.006f0104
add esp, 0x10
test eax, eax
je 0x41fb9c
inc edi
cmp edi, esi
jl 0x41e55c
cmp esi, 2
jl 0x41e9ee
mov edi, 1
nop
sub esp, 8
push 0x716b37
push dword [esp + edi*4 + 0x18]
call fcn.006f0104
add esp, 0x10
test eax, eax
je 0x41fb9c
inc edi
cmp edi, esi
jl 0x41e58c
cmp esi, 2
jl 0x41e9ee
test ebx, ebx
je 0x41e608
test ebp, ebp
jle 0x41e608
xor edi, edi
nop word cs:[eax + eax]
mov eax, dword [esp + edi*4 + 0xc]
test eax, eax
je 0x41e608
sub esp, 8
test edi, edi
je 0x41e5e7
push eax
push ebx
call fcn.006f0054
add esp, 0x10
jmp 0x41e5f1
push eax
push ebx
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push ebx
call fcn.006f01a0
add esp, 0x10
mov word [ebx + eax], 0x5c
inc edi
cmp edi, ebp
jl 0x41e5cc
sub esp, 8
push 0
push 1
push 0x80
lea eax, [esp + 0x120]
push eax
push dword [esp + ebp*4 + 0x24]
push ebx
call fcn.004231b8
add esp, 0x20
cmp eax, 1
je 0x41e636
cmp ebp, 1
lea ebp, [ebp - 1]
jg 0x41e5b6
lea eax, [ebp + 1]
xor edi, edi
cmp eax, esi
jge 0x41e6eb
mov dword [esp + 4], eax
test ebx, ebx
je 0x41e699
cmp ebp, 0xffffffff
jl 0x41e699
mov edi, 0xffffffff
nop dword [eax]
mov eax, dword [esp + edi*4 + 0x10]
test eax, eax
je 0x41e699
sub esp, 8
cmp edi, 0xffffffff
je 0x41e678
push eax
push ebx
call fcn.006f0054
add esp, 0x10
jmp 0x41e682
push eax
push ebx
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push ebx
call fcn.006f01a0
add esp, 0x10
mov word [ebx + eax], 0x5c
inc edi
cmp edi, ebp
jle 0x41e65c
sub esp, 0xc
push ebx
call fcn.0042103c
add esp, 0x10
mov edi, eax
sub esp, 8
push 0
push edi
call sub.KERNEL32.DLL_CreateDirectoryW
add esp, 8
test eax, eax
jne 0x41e6ca
call sub.KERNEL32.DLL_GetLastError
cmp eax, 3
je 0x41e6eb
cmp eax, 0xb7
je 0x41e6eb
test edi, edi
je 0x41e6da
sub esp, 0xc
push edi
call fcn.006e2f5c
add esp, 0x10
mov ebp, dword [esp + 4]
lea eax, [ebp + 1]
cmp eax, esi
jl 0x41e643
xor edi, edi
sub esp, 0x10
movzx eax, byte [esp + 0x334]
mov dword [esp + 0x14], eax
mov dword [esp + 8], eax
mov esi, dword [esp + 0x10]
mov dword [esp], esi
mov dword [esp + 4], str.chkFE3A7B92.tmp
mov ebp, 0xfffffff9
call fcn.004230b4
add esp, 0x10
test al, al
je 0x41e761
sub esp, 8
mov ebp, 0xfffffff9
push str.chkFE3A7B92.tmp
push esi
call fcn.00422f18
add esp, 0x10
test al, al
je 0x41e761
sub esp, 4
push dword [esp + 8]
push str.chkFE3A7B92.tmp
push esi
call fcn.00420f68
add esp, 0x10
movzx eax, al
lea ebp, [eax + eax*8 - 7]
test esi, esi
jne 0x41e765
jmp 0x41e771
mov ebp, 0xfffffff8
xor edi, edi
test esi, esi
je 0x41e771
sub esp, 0xc
push esi
call fcn.006e2f5c
add esp, 0x10
test ebx, ebx
je 0x41e781
sub esp, 0xc
push ebx
call fcn.006e2f5c
add esp, 0x10
test edi, edi
je 0x41e791
sub esp, 0xc
push edi
call fcn.006e2f5c
add esp, 0x10
mov edi, ebp
mov ebx, dword [esp + 8]
xor esi, esi
nop dword [eax]
mov eax, dword [esp + esi*4 + 0xc]
test eax, eax
je 0x41e7b0
sub esp, 0xc
push eax
call fcn.006e2f5c
add esp, 0x10
inc esi
cmp esi, 0x40
jne 0x41e79c
xor esi, esi
nop dword [eax]
mov eax, dword [esp + esi*4 + 0x10c]
test eax, eax
je 0x41e7d3
sub esp, 0xc
push eax
call fcn.006e2f5c
add esp, 0x10
inc esi
cmp esi, 0x80
jne 0x41e7bc
cmp byte [esp + 0x324], 0
je case.default.0x41e7f6
lea eax, [edi + 0xa]
cmp eax, 9
ja case.default.0x41e7f6
jmp dword [eax*4 + 0x41fbb4]
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41e818
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
mov byte [0x7286bb], 0
mov word [0x7286b9], 0x2e72
mov dword [0x7286b5], 0x6f727265
mov dword [0x7286b1], 0x206e776f
mov dword [0x7286ad], 0x6e6b6e55
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x23a1
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41e903
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41e989
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
mov ebp, 0xfffffffc
xor edi, edi
jmp 0x41fba3
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41ea15
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0x24
push str.Dots_in_path__.._or_._____fail.
push 0x7286ad
call fcn.006efe70
add esp, 0x10
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x239e
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41eae9
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41eb6f
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41ebef
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0x22
push str.Ki_AddCurrentDirectoryDot___fail.
push 0x7286ad
call fcn.006efe70
add esp, 0x10
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x239b
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41ecc3
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41ed49
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41edc9
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
mov dword [0x7286c9], 0x2e6c69
mov dword [0x7286c5], 0x61662029
mov dword [0x7286c1], 0x28737365
mov dword [0x7286bd], 0x63637553
mov dword [0x7286b9], 0x79726f74
mov dword [0x7286b5], 0x63657269
mov dword [0x7286b1], 0x446b6365
mov dword [0x7286ad], 0x6843694b
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x2398
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41eed6
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41ef5c
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41efdc
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0x30
push str.CreateDirectory___fail.__ERROR_PATH_NOT_FOUND_
push 0x7286ad
call fcn.006efe70
add esp, 0x10
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x2395
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41f0b0
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41f136
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41f1b6
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0x30
push str.CreateDirectory___fail.__ERROR_ALREADY_EXISTS_
push 0x7286ad
call fcn.006efe70
add esp, 0x10
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x2392
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41f28a
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41f310
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41f390
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
mov byte [0x7286c9], 0
mov dword [0x7286c5], 0x2e6c6961
mov dword [0x7286c1], 0x66202928
mov dword [0x7286bd], 0x656e4f6d
mov dword [0x7286b9], 0x6f724667
mov dword [0x7286b5], 0x6e697274
mov dword [0x7286b1], 0x534e656b
mov dword [0x7286ad], 0x6154694b
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x238f
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41f49a
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41f520
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41f5a0
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
mov dword [0x7286c5], 0x2e6c69
mov dword [0x7286c1], 0x61662029
mov dword [0x7286bd], 0x28687461
mov dword [0x7286b9], 0x50726944
mov dword [0x7286b5], 0x657a696c
mov dword [0x7286b1], 0x616d726f
mov dword [0x7286ad], 0x4e5f694b
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x238c
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41f6a3
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41f729
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41f7a9
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push ebx
push str.Length_of_input_parameter_szPath_too_long____d_
push 0x7286ad
call fcn.006f490c
add esp, 0x10
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x2389
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41f87c
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41f902
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
jmp 0x41fb71
call fcn.0041fbec
cmp byte [0x7285a8], 0
je 0x41f982
mov al, byte [0x71675f]
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.VRBS
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
sub esp, 4
push 0
push 0x716b75
push str.KiUseful.cpp
call fcn.0041fda4
add esp, 0x10
test al, al
jne 0x41fb71
mov dword [0x7286c9], 0x2e4c4c
mov dword [0x7286c5], 0x554e203d
mov dword [0x7286c1], 0x3d206874
mov dword [0x7286bd], 0x61507a73
mov dword [0x7286b9], 0x20726574
mov dword [0x7286b5], 0x656d6172
mov dword [0x7286b1], 0x61702074
mov dword [0x7286ad], 0x75706e49
sub esp, 4
push 0x7286ad
push str.KiCreateDirectory
push 0x2386
push str.KiUseful.cpp
push str.ERRO
push str.__s___s__d__s__:_t_s
push 0x7285a9
call fcn.006f490c
add esp, 0x20
sub esp, 4
push 0x716bc0
push 0x7287b1
push str.KiUseful.cpp
call fcn.0041fe9c
add esp, 0x10
sub esp, 8
push 0x716760
push 0x7288b5
call fcn.006f0154
add esp, 0x10
sub esp, 0xc
push 0x7288b5
call fcn.006f01a0
add esp, 0x10
cmp byte [eax + 0x7288b4], 0x5c
je 0x41fa8f
mov word [eax + 0x7288b5], 0x5c
sub esp, 8
push 0x7287b1
push 0x7288b5
call fcn.006f0054
add esp, 0x10
sub esp, 8
push 0x716864
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 0
push str.USFL_PROG
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb15
sub esp, 8
push 0x716864
push 0x7289b9
call fcn.006f0154
add esp, 0x10
sub esp, 4
push 1
push str.ERRO
push 0x7289b9
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7289b9
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
sub esp, 4
push 1
push 0x716b75
push str.ERRO
call fcn.0041fda4
add esp, 0x10
test al, al
je 0x41fb71
sub esp, 4
push 1
push str.ERRO
push 0x7288b5
call fcn.0041ff7c
add esp, 0x10
sub esp, 8
push 0x7288b5
push 0x7285a9
call fcn.0041e0a4
add esp, 0x10
mov dword [0x728ac0], 0
mov dword [0x728ac4], 0
mov dword [0x728ac8], 0
mov eax, edi
add esp, 0x30c
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
mov ebp, 0xfffffff7
mov esi, dword [esp]
test esi, esi
jne 0x41e765
jmp 0x41e771