Function at 0x4698c0
Capabilities:
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbb4
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov byte [ebp - 0xd], 0
mov byte [ebp - 0x3f], 0
mov edx, dword [ebp - 4]
movsx edx, byte [edx + 0x442]
mov eax, dword [0x4be4fc]
mov al, byte [eax + edx - 1]
cmp al, 3
je 0x4698ff
cmp dword [ebp - 8], 0xffffffff
jne 0x4698ff
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 1
jbe 0x469913
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x174]
mov dword [ebp - 0x24], eax
jmp 0x469949
mov ecx, dword [ebp - 4]
movsx ecx, byte [ecx + 0x442]
mov ebx, dword [0x4be4fc]
cmp al, 3
jne 0x469930
mov byte [ebp - 0xd], 1
jmp 0x469dfb
mov eax, dword [ebp - 4]
mov eax, dword [0x4becf0]
movzx eax, word [eax + edx*2 + 0x54]
mov edx, dword [ebp - 4]
imul dword [edx + 0x1c8]
mov dword [ebp - 0x24], eax
push 4
push 0x1000
mov eax, dword [ebp - 0x24]
push eax
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov esi, eax
test esi, esi
jne 0x469980
fild dword [ebp - 0x24]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004b1e30
mov edx, eax
mov ax, 0xb
call fcn.004acdac
jmp 0x469dfb
cmp dword [ebp - 8], 1
jbe 0x46999c
mov edx, dword [ebp - 4]
add edx, 0x15c
mov eax, dword [ebp - 8]
call fcn.004a25d8
mov dword [ebp - 0x14], eax
jmp 0x4699a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x16c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x448], eax
xor eax, eax
mov dword [ebp - 0x444], eax
fild qword [ebp - 0x448]
fistp qword [ebp - 0x38]
wait
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x15c]
mov dword [ebp - 0x44c], eax
fild dword [ebp - 0x44c]
fild qword [ebp - 0x38]
fmulp st(1)
fistp qword [ebp - 0x38]
wait
mov eax, dword [ebp - 0x24]
push eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov ecx, esi
mov ebx, dword [eax + 0x1a0]
call dword [ebx + 0x18]
cmp eax, dword [ebp - 0x24]
jl 0x469d2c
mov byte [ebp - 0xd], 1
cmp dword [ebp - 8], 2
setbe dl
mov eax, esi
call fcn.004a1da8
test al, al
je 0x469d2c
mov byte [ebp - 0x3f], 1
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3f
je 0x469a39
lea eax, [ebp - 0x43f]
mov edx, dword [ebp - 0xc]
call fcn.004b81b0
jmp 0x469a70
push 0
lea eax, [ebp - 0x43f]
push eax
mov edx, dword [ebp - 4]
add edx, 0x15c
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x442]
mov ecx, dword [ebp - 0x14]
call fcn.004a2448
cmp al, 1
je 0x469a70
mov edx, 0x469e08
lea eax, [ebp - 0x43f]
call fcn.004b81b0
mov eax, dword [ebp - 0x24]
test eax, eax
jns 0x469a7a
add eax, 0x1f
sar eax, 5
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x1c]
dec ebx
test ebx, ebx
jl 0x469d28
inc ebx
mov dword [ebp - 0x18], 0
mov edi, dword [ebp - 0x18]
shl edi, 5
add edi, esi
cmp byte [edi], 0
je 0x469d1e
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x3d]
push eax
push 0
lea ecx, [ebp - 0x13f]
mov edx, esi
mov eax, edi
call fcn.004a0fe4
test al, al
je 0x469d1e
cmp byte [ebp - 0x13f], 0x3f
jne 0x469ada
mov byte [ebp - 0x13f], 0x23
cmp byte [ebp + 8], 0
je 0x469ae5
cmp byte [edi], 0xe5
jne 0x469ae9
xor eax, eax
jmp 0x469aeb
mov al, 1
mov byte [ebp - 0x3e], al
cmp byte [ebp - 0x3d], 0
jne 0x469bf4
mov edx, dword [0x4be644]
lea eax, [ebp - 0x13f]
xor ecx, ecx
call fcn.004ae4fc
cmp al, 1
jne 0x469cea
mov eax, dword [0x4be784]
cmp byte [eax + 0x1890], 1
jne 0x469b27
cmp byte [ebp - 0x3e], 0
je 0x469b4d
mov eax, dword [0x4be784]
cmp byte [eax + 0x1890], 2
jne 0x469b3b
cmp byte [ebp - 0x3e], 0
jne 0x469b4d
mov eax, dword [0x4be784]
cmp byte [eax + 0x1890], 0
jne 0x469cea
lea eax, [ebp - 0x43f]
push eax
lea eax, [ebp - 0x13f]
push eax
lea ecx, [ebp - 0x33f]
lea eax, [ebp - 0x23f]
mov edx, dword [ebp + 0xc]
call fcn.0046974c
mov eax, dword [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
push 0
push 0
push 0
lea ecx, [ebp - 0x23f]
lea edx, [ebp - 0x33f]
mov eax, dword [ebp - 4]
call fcn.00469140
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x469d1e
cmp dword [ebp - 0x20], 0xffffffff
jne 0x469bb1
mov byte [ebp - 0xd], 0
jmp 0x469d2c
lea eax, [ebp - 0x23f]
mov edx, edi
call fcn.0045f0bc
mov eax, dword [0x4bef50]
cmp dword [eax], 0
je 0x469cea
mov eax, dword [0x4be950]
cmp dword [eax], 0
je 0x469cea
cmp dword [ebp - 0x20], 1
jne 0x469cea
lea eax, [ebp - 0x33f]
call fcn.004aa2cc
jmp 0x469cea
mov eax, dword [0x4be784]
cmp byte [eax + 0x1831], 0
je 0x469cea
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x3c]
je 0x469cea
mov eax, dword [0x4be784]
cmp byte [eax + 0x1890], 2
jne 0x469c2a
cmp byte [ebp - 0x3e], 0
je 0x469cea
lea eax, [ebp - 0x43f]
push eax
lea eax, [ebp - 0x13f]
push eax
lea ecx, [ebp - 0x33f]
lea eax, [ebp - 0x23f]
mov edx, dword [ebp + 0xc]
call fcn.0046974c
lea eax, [ebp - 0x23f]
mov dl, 1
call fcn.004acbf0
mov eax, dword [0x4be784]
cmp byte [eax + 0x187b], 0
je 0x469c9a
lea eax, [ebp - 0x23f]
call fcn.004ab508
test al, al
jne 0x469c8e
lea edx, [ebp - 0x23f]
mov ax, 3
call fcn.004acdac
mov byte [ebp - 0xd], 0
jmp 0x469d2c
lea eax, [ebp - 0x23f]
push eax
call sub.kernel32.dll_DeleteFileA_1
push 0
lea eax, [ebp - 0x23f]
push eax
call sub.kernel32.dll_CreateDirectoryA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x469cc7
lea edx, [ebp - 0x23f]
mov ax, 3
call fcn.004acdac
mov byte [ebp - 0xd], 0
jmp 0x469d2c
mov eax, dword [0x4beefc]
inc dword [eax]
lea eax, [ebp - 0x23f]
push eax
mov al, byte [ebp - 0x3e]
push eax
lea ecx, [ebp - 0x33f]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x3c]
call fcn.004698c0
mov eax, dword [0x4be6a4]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x4bec28]
push eax
mov ecx, dword [0x4be550]
mov edx, dword [0x4beefc]
mov edx, dword [edx]
mov eax, dword [0x4be888]
mov eax, dword [eax]
call fcn.004ae318
mov eax, dword [0x4bed48]
cmp byte [eax], 0
jne 0x469d2c
inc dword [ebp - 0x18]
dec ebx
jne 0x469a94
mov byte [ebp - 0xd], 1
push 0x4000
mov eax, dword [ebp - 0x24]
push eax
push esi
call sub.kernel32.dll_VirtualFree_1
cmp byte [ebp - 0xd], 0
je 0x469dfb
cmp byte [ebp - 0x3f], 0
je 0x469dfb
mov eax, dword [0x4bed48]
cmp byte [eax], 0
jne 0x469dfb
xor ebx, ebx
mov eax, dword [ebp - 4]
cmp dword [eax + 0x17c], 0
je 0x469db0
push 0
mov eax, dword [ebp - 4]
movsx eax, byte [eax + 0x442]
mov edx, dword [0x4be4fc]
mov cl, byte [edx + eax - 1]
mov eax, dword [ebp - 4]
add eax, 0x15c
mov edx, dword [ebp - 8]
call fcn.004a3580
mov ebx, eax
cmp ebx, 1
jbe 0x469db0
mov eax, dword [ebp + 0xc]
push eax
mov al, byte [ebp + 8]
push eax
lea ecx, [ebp - 0x43f]
mov eax, dword [ebp - 4]
mov edx, ebx
call fcn.004698c0
mov esi, dword [ebp - 8]
inc esi
cmp ebx, esi
je 0x469dfb
cmp byte [ebp + 8], 0
jne 0x469dfb
mov eax, dword [ebp - 4]
movsx eax, byte [eax + 0x442]
mov edx, dword [0x4be4fc]
mov dl, byte [edx + eax - 1]
mov ecx, esi
mov eax, dword [ebp - 4]
add eax, 0x15c
call fcn.0049e1b0
test al, al
je 0x469dfb
mov eax, dword [ebp + 0xc]
push eax
push 0
lea ecx, [ebp - 0x43f]
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004698c0
mov al, byte [ebp - 0xd]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8