Function at 0x24b7f62
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Get file attributes
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x280
mov eax, dword [0x6400104]
xor eax, esp
mov dword [esp + 0x27c], eax
push ebx
push ebp
mov ebp, dword [esp + 0x28c]
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x278], ebx
mov dword [esp + 0x14], ebx
call fcn.0247d9cc
push eax
lea ecx, [esp + 0x18]
call fcn.0247a7ff
mov dword [esp + 0x270], ebx
mov dword [esp + 0x18], 0x44457748
mov dword [esp + 0x1c], 0x3039524f
mov dword [esp + 0x20], 0x4c637965
mov dword [esp + 0x24], 0x4263674c
mov dword [esp + 0x28], 0x514d7743
mov dword [esp + 0x2c], 0x5551474e
mov dword [esp + 0x30], 0x77414744
mov dword [esp + 0x34], 0x35775441
mov dword [esp + 0x38], 0x2b597849
mov dword [esp + 0x3c], 0x6c4e5247
mov dword [esp + 0x40], 0x4463444b
mov dword [esp + 0x44], 0x45775450
mov dword [esp + 0x48], 0x37565349
mov dword [esp + 0x4c], 0x764a4147
mov dword [esp + 0x50], 0x6a556949
mov dword [esp + 0x54], 0x7474784a
mov dword [esp + 0x58], 0x35567a45
mov dword [esp + 0x5c], 0x70396947
mov dword [esp + 0x60], 0x72777748
mov dword [esp + 0x64], 0x594d4447
mov dword [esp + 0x68], 0x64414443
mov dword [esp + 0x6c], 0x52496749
mov dword [esp + 0x70], 0x2b63474f
mov dword [esp + 0x74], 0x7174674b
mov dword [esp + 0x78], 0x37594464
mov dword [esp + 0x7c], 0x344d794d
mov dword [esp + 0x80], 0x76555842
mov dword [esp + 0x84], 0x576b784d
mov dword [esp + 0x88], 0x3078444c
mov dword [esp + 0x8c], 0x6a6f3347
mov dword [esp + 0x90], 0x4e4d7945
mov dword [esp + 0x94], 0x2f516d49
mov dword [esp + 0x98], 0x6730424a
mov dword [esp + 0x9c], 0x5341414a
mov dword [esp + 0xa0], 0x4d674864
mov dword [esp + 0xa4], 0x584d7a4f
mov dword [esp + 0xa8], 0x4e454248
mov dword [esp + 0xac], 0x7767514f
mov dword [esp + 0xb0], 0x77344264
mov dword [esp + 0xb4], 0x5538434f
mov dword [esp + 0xb8], 0x38495845
mov dword [esp + 0xbc], 0x72497a48
mov dword [esp + 0xc0], 0x374e574a
mov dword [esp + 0xc4], 0x79773266
mov dword [esp + 0xc8], 0x41596a49
mov dword [esp + 0xcc], 0x744a7a63
mov dword [esp + 0xd0], 0x2f646a50
mov dword [esp + 0xd4], 0x784d4350
mov dword [esp + 0xd8], 0x2f635461
mov dword [esp + 0xdc], 0x636b544b
mov dword [esp + 0xe0], 0x72777742
mov dword [esp + 0xe4], 0x314e7841
mov dword [esp + 0xe8], 0x2b6c6942
mov dword [esp + 0xec], 0x31496d42
mov dword [esp + 0xf0], 0x69784144
mov dword [esp + 0xf4], 0x3855544b
mov dword [esp + 0xf8], 0x53675763
mov dword [esp + 0xfc], 0x726b5347
mov dword [esp + 0x100], 0x724e684f
mov dword [esp + 0x104], 0x71527946
mov dword [esp + 0x108], 0x7445784f
mov dword [esp + 0x10c], 0x4a4d4147
mov dword [esp + 0x110], 0x684d674f
mov dword [esp + 0x114], 0x79557849
mov dword [esp + 0x118], 0x4b6b4263
mov dword [esp + 0x11c], 0x50777a4a
mov dword [esp + 0x120], 0x7731694d
mov dword [esp + 0x124], 0x38414342
mov dword [esp + 0x128], 0x77745159
mov dword [esp + 0x12c], 0x7255694f
mov dword [esp + 0x130], 0x56597946
mov dword [esp + 0x134], 0x4534424e
mov dword [esp + 0x138], 0x4e414466
mov dword [esp + 0x13c], 0x65495466
mov dword [esp + 0x140], 0x45416e63
mov dword [esp + 0x144], 0x744d7844
mov dword [esp + 0x148], 0x6e637a4d
mov dword [esp + 0x14c], 0x6a685442
mov dword [esp + 0x150], 0x70494341
mov dword [esp + 0x154], 0x77735463
mov dword [esp + 0x158], 0x55674741
mov dword [esp + 0x15c], 0x6d344345
mov dword [esp + 0x160], 0x7838524c
mov dword [esp + 0x164], 0x3755534f
mov dword [esp + 0x168], 0x48556963
mov dword [esp + 0x16c], 0x335a4144
mov dword [esp + 0x170], 0x48384446
mov dword [esp + 0x174], 0x41736a4c
mov dword [esp + 0x178], 0x2b684362
mov dword [esp + 0x17c], 0x48496747
mov dword [esp + 0x180], 0x61304144
mov dword [esp + 0x184], 0x4a776a48
mov dword [esp + 0x188], 0x646f6841
mov dword [esp + 0x18c], 0x3255684c
mov dword [esp + 0x190], 0x6a49684a
mov dword [esp + 0x194], 0x67556741
mov dword [esp + 0x198], 0x44497a41
mov dword [esp + 0x19c], 0x76306e4c
mov dword [esp + 0x1a0], 0x43455844
mov dword [esp + 0x1a4], 0x414d6745
mov dword [esp + 0x1a8], 0x51776a43
mov dword [esp + 0x1ac], 0x7545524b
mov dword [esp + 0x1b0], 0x6741534c
mov dword [esp + 0x1b4], 0x77734147
mov dword [esp + 0x1b8], 0x7349534f
mov dword [esp + 0x1bc], 0x79305264
mov dword [esp + 0x1c0], 0x446b7946
mov dword [esp + 0x1c4], 0x696c4844
mov dword [esp + 0x1c8], 0x41734361
mov dword [esp + 0x1cc], 0x7a77584c
mov dword [esp + 0x1d0], 0x68455149
mov dword [esp + 0x1d4], 0x564d5142
mov dword [esp + 0x1d8], 0x65555248
mov dword [esp + 0x1dc], 0x59456865
mov dword [esp + 0x1e0], 0x484d6962
mov dword [esp + 0x1e4], 0x34594145
mov dword [esp + 0x1e8], 0x35646745
mov dword [esp + 0x1ec], 0x3251434f
mov dword [esp + 0x1f0], 0x38306744
mov dword [esp + 0x1f4], 0x34733350
mov dword [esp + 0x1f8], 0x72494846
mov dword [esp + 0x1fc], 0x57494161
mov dword [esp + 0x200], 0x43737847
mov dword [esp + 0x204], 0x526f6a50
mov dword [esp + 0x208], 0x2f59584b
mov dword [esp + 0x20c], 0x4e307a4b
mov dword [esp + 0x210], 0x6d67674e
mov dword [esp + 0x214], 0x7138584f
mov dword [esp + 0x218], 0x55636850
mov dword [esp + 0x21c], 0x6a526848
mov dword [esp + 0x220], 0x7a676943
mov dword [esp + 0x224], 0x556b7847
mov dword [esp + 0x228], 0x4d496a44
mov dword [esp + 0x22c], 0x7359524b
mov dword [esp + 0x230], 0x7a736964
mov dword [esp + 0x234], 0x46515164
mov dword [esp + 0x238], 0x78455349
mov dword [esp + 0x23c], 0x35387a48
mov dword [esp + 0x240], 0x334d334c
mov dword [esp + 0x244], 0x71316843
mov dword [esp + 0x248], 0x31465449
mov dword [esp + 0x24c], 0x52307a4d
mov dword [esp + 0x250], 0x6e6b7848
mov dword [esp + 0x254], 0x3455434c
mov dword [esp + 0x258], 0x4d4d684d
mov dword [esp + 0x25c], 0x466f5247
mov dword [esp + 0x260], 0x4b6f5143
mov dword [esp + 0x264], 0x71494249
mov dword [esp + 0x268], 0x42414141
push ebx
sub esp, 0xc
mov byte [esp + 0x20], bl
mov ecx, esp
mov word [esp + 0x27c], 0x7775
lea eax, [esp + 0x27e]
push dword [esp + 0x20]
mov dword [ecx], ebx
push eax
lea eax, [esp + 0x30]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.024799be
lea eax, [esp + 0x290]
push eax
call fcn.024b8ec7
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
lea ecx, [esp + 0x274]
call fcn.0247a86d
lea ecx, [esp + 0x280]
call fcn.0247fe92
mov dword [esp + 0x10], ebx
call fcn.0247d9cc
push eax
lea ecx, [esp + 0x14]
call fcn.0247a7ff
mov dword [esp + 0x18], 0x64387948
mov dword [esp + 0x1c], 0x75596946
mov dword [esp + 0x20], 0x6a347a4b
mov dword [esp + 0x24], 0x49636765
mov dword [esp + 0x28], 0x34737847
mov dword [esp + 0x2c], 0x51554349
mov dword [esp + 0x30], 0x346f5347
mov dword [esp + 0x34], 0x78457745
mov dword [esp + 0x38], 0x7055774c
mov dword [esp + 0x3c], 0x4e30694f
mov dword [esp + 0x40], 0x31346949
mov dword [esp + 0x44], 0x2b747a50
mov dword [esp + 0x48], 0x614d5248
mov dword [esp + 0x4c], 0x786b484f
mov dword [esp + 0x50], 0x6b554145
mov dword [esp + 0x54], 0x76787763
mov dword [esp + 0x58], 0x2b394150
mov dword [esp + 0x5c], 0x716f4441
mov dword [esp + 0x60], 0x5255534d
mov dword [esp + 0x64], 0x726b694c
mov dword [esp + 0x68], 0x2f597745
mov dword [esp + 0x6c], 0x4f517a4a
mov dword [esp + 0x70], 0x36706a50
mov dword [esp + 0x74], 0x6a6b6865
mov dword [esp + 0x78], 0x42496e65
mov dword [esp + 0x7c], 0x4b775364
mov dword [esp + 0x80], 0x6a636749
mov dword [esp + 0x84], 0x736b6e5a
mov dword [esp + 0x88], 0x4d414361
mov dword [esp + 0x8c], 0x4c304247
mov dword [esp + 0x90], 0x78385143
mov dword [esp + 0x94], 0x6d55414f
mov dword [esp + 0x98], 0x376f4448
mov dword [esp + 0x9c], 0x78636a42
mov dword [esp + 0xa0], 0x364d7742
mov dword [esp + 0xa4], 0x6534534f
mov dword [esp + 0xa8], 0x37314748
mov dword [esp + 0xac], 0x4b517863
mov dword [esp + 0xb0], 0x325a784b
mov dword [esp + 0xb4], 0x67466744
mov dword [esp + 0xb8], 0x6a45444b
mov dword [esp + 0xbc], 0x30777a46
mov dword [esp + 0xc0], 0x6355414b
mov dword [esp + 0xc4], 0x41736844
mov dword [esp + 0xc8], 0x4e49334f
mov dword [esp + 0xcc], 0x77776a48
mov dword [esp + 0xd0], 0x34675364
mov dword [esp + 0xd4], 0x74776963
mov dword [esp + 0xd8], 0x68304346
mov dword [esp + 0xdc], 0x2b6f6747
mov dword [esp + 0xe0], 0x54386744
lea eax, [esp + 0x278]
mov byte [esp + 0x27c], bl
push eax
push ebx
sub esp, 0xc
mov dword [esp + 0xf8], 0x7a45444d
mov ecx, esp
mov dword [esp + 0xfc], 0x6f516d65
lea eax, [esp + 0x1e3]
mov dword [esp + 0x100], 0x2f4d5744
mov dword [esp + 0x104], 0x64554843
push dword [esp + 0x290]
mov dword [esp + 0x10c], 0x2b775464
push eax
mov dword [esp + 0x114], 0x5a417850
lea eax, [esp + 0x34]
mov dword [esp + 0x118], 0x3134784a
mov dword [esp + 0x11c], 0x304d434e
mov dword [esp + 0x120], 0x38454263
mov dword [esp + 0x124], 0x38493364
mov dword [esp + 0x128], 0x6c674446
mov dword [esp + 0x12c], 0x5063434b
mov dword [esp + 0x130], 0x68357847
mov dword [esp + 0x134], 0x6852784d
mov dword [esp + 0x138], 0x7439574d
mov dword [esp + 0x13c], 0x59416d4c
mov dword [esp + 0x140], 0x30346a42
mov dword [esp + 0x144], 0x3877514e
mov dword [esp + 0x148], 0x6a355266
mov dword [esp + 0x14c], 0x66557a4e
mov dword [esp + 0x150], 0x6d497a5a
mov dword [esp + 0x154], 0x49776e46
mov dword [esp + 0x158], 0x4d55544f
mov dword [esp + 0x15c], 0x676c4249
mov dword [esp + 0x160], 0x755a7742
mov dword [esp + 0x164], 0x366f794d
mov dword [esp + 0x168], 0x37594341
mov dword [esp + 0x16c], 0x43597a49
mov dword [esp + 0x170], 0x77736e66
mov dword [esp + 0x174], 0x6451424b
mov dword [esp + 0x178], 0x39515743
mov dword [esp + 0x17c], 0x364d794b
mov dword [esp + 0x180], 0x51494363
mov dword [esp + 0x184], 0x35635146
mov dword [esp + 0x188], 0x3738534f
mov dword [esp + 0x18c], 0x66456a4b
mov dword [esp + 0x190], 0x416b4144
mov dword [esp + 0x194], 0x53517a4b
mov dword [esp + 0x198], 0x6b675366
mov dword [esp + 0x19c], 0x4338444a
mov dword [esp + 0x1a0], 0x78525261
mov dword [esp + 0x1a4], 0x2b425347
mov dword [esp + 0x1a8], 0x56304744
mov dword [esp + 0x1ac], 0x59514848
mov dword [esp + 0x1b0], 0x7a63444d
mov dword [esp + 0x1b4], 0x69737863
mov dword [esp + 0x1b8], 0x316b6866
mov dword [esp + 0x1bc], 0x466b424f
mov dword [esp + 0x1c0], 0x78387a44
mov dword [esp + 0x1c4], 0x306b6764
mov dword [esp + 0x1c8], 0x2b526a41
mov dword [esp + 0x1cc], 0x49305449
mov dword [esp + 0x1d0], 0x7a385465
mov dword [esp + 0x1d4], 0x58515446
mov dword [esp + 0x1d8], 0x765a7943
mov dword [esp + 0x1dc], 0x2b34694c
mov dword [esp + 0x1e0], 0x386b4342
mov dword [esp + 0x1e4], 0x41414159
mov word [esp + 0x1e8], 0x5541
mov byte [esp + 0x1ea], 0x51
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.024799be
lea eax, [esp + 0x294]
push eax
call fcn.024b8ec7
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
lea eax, [esp + 0x27c]
mov ecx, ebp
push eax
call fcn.025394d1
push eax
lea ecx, [esp + 0x18]
call fcn.024b1fea
mov ecx, dword [esp + 0x274]
lea ecx, [ecx - 0x10]
call fcn.0247de5b
lea ecx, [esp + 0x280]
call fcn.0247fe92
mov esi, dword [esp + 0x10]
jmp 0x24b8ba3
lea ecx, [esp + 0x10]
cmp dword [esi - 0xc], ebx
jne 0x24b8b46
lea eax, [esp + 0x14]
push eax
call fcn.024b1fea
mov esi, dword [esp + 0x10]
jmp 0x24b8b6c
push edi
call fcn.024b4fd5
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x24b8b60
test al, 0x10
jne 0x24b8b6c
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x24b8bae
lea eax, [esp + 0x278]
mov ecx, ebp
push eax
push dword [esp + 0x274]
lea eax, [esp + 0x27c]
push eax
call fcn.025394d1
push eax
lea ecx, [esp + 0x18]
call fcn.024b1fea
mov ecx, dword [esp + 0x274]
lea ecx, [ecx - 0x10]
call fcn.0247de5b
mov edi, dword [esp + 0x14]
cmp dword [edi - 0xc], ebx
jne 0x24b8b2d
jmp 0x24b8bbe
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
cmp eax, 0xb7
cmovne ebx, eax
lea ecx, [esi - 0x10]
call fcn.0247de5b
mov ecx, dword [esp + 0x270]
lea ecx, [ecx - 0x10]
call fcn.0247de5b
lea ecx, [edi - 0x10]
call fcn.0247de5b
mov ecx, dword [esp + 0x28c]
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.02585cf8
add esp, 0x280
ret