Function at 0x4b1b70
Capabilities:
Create directory
Print debug messages

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51419a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x358
mov eax, dword [0x567040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 0x364], edi
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [0x572898], edi
jne 0x4b1d5b
lea eax, [ebp - 0x290]
mov dword [ebp - 0x26c], edi
xorps xmm0, xmm0
mov dword [ebp - 0x28c], edi
push eax
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x288], edi
movq qword [ebp - 0x274], xmm0
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x290], 2
mov dword [ebp - 0x264], edi
mov dword [ebp - 0x35c], eax
call fcn.004d619c
add esp, 4
test eax, eax
jne 0x4b25cd
mov eax, dword [ebp - 0x264]
cmp eax, 0x7fffffff
je 0x4b25d4
mov dword [ebp - 4], edi
call fcn.004340c0
lea ecx, [ebp - 0x260]
lea edx, [eax + 0x34]
call fcn.004163b0
mov edi, eax
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 1
call fcn.004171d0
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2d8]
call fcn.00417a00
mov esi, eax
mov edx, esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x248]
call fcn.00417870
cmp dword [ebp - 0x238], 0
mov dword [ebp - 0x364], 0x100
jbe 0x4b1cba
cmp dword [esi + 0x14], 7
mov ecx, esi
jbe 0x4b1c9f
mov ecx, dword [esi]
mov eax, dword [esi + 0x10]
mov edx, 0x5c
cmp dx, word [ecx + eax*2 - 2]
je 0x4b1cba
push edx
lea ecx, [ebp - 0x248]
call fcn.004165b0
push edi
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x230]
call fcn.0041bdc0
lea ecx, [ebp - 0x248]
mov edi, 0x200
call fcn.00414ec0
lea ecx, [ebp - 0x2d8]
call fcn.00414ec0
lea ecx, [ebp - 0x2c0]
call fcn.00414ec0
lea ecx, [ebp - 0x260]
call fcn.00414ec0
cmp dword [ebp - 0x21c], 7
lea eax, [ebp - 0x230]
cmova eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea ecx, [ebp - 0x230]
mov dword [0x572898], eax
call fcn.00414ec0
lea eax, [ebp - 0x290]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.004d61ad
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
add esp, 4
cmp dword [0x572898], 0
jne 0x4b1d5b
push 0x53a860
call esi
call fcn.004adb60
test al, al
jne 0x4b1d6b
push 0x53a880
call esi
lea ecx, [ebp - 0x2c0]
call fcn.004171d0
mov edx, eax
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x2d8]
call fcn.00417a00
push 3
push 0x53a9d8
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.00416a40
mov dword [ebp - 0x220], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x230], xmm0
mov dword [ebp - 0x21c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 2
push ecx
movups xmmword [ebp - 0x230], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x220], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 7
cmova eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x4b1e1b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 0x351], 1
cmp eax, 0xb7
jne 0x4b1e22
mov byte [ebp - 0x351], 0
mov ecx, dword [ebp - 0x21c]
cmp ecx, 7
jbe 0x4b1e62
mov edx, dword [ebp - 0x230]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b1e58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25e2
push ecx
push edx
call fcn.004d3ab1
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00414ec0
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00414ec0
cmp byte [ebp - 0x351], 0
je 0x4b1eac
push 0x53a9e0
call esi
call fcn.004d60ad
push 0
push 0x989680
push edx
push eax
call fcn.00506a30
mov dword [ebp - 0x360], eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x284]
mov dword [ebp - 0x35c], edx
push eax
call fcn.004ef77c
push dword [ebp - 0x278]
mov eax, dword [ebp - 0x274]
inc eax
push eax
mov eax, dword [ebp - 0x270]
add eax, 0x76c
push eax
push 0x522d04
lea eax, [ebp - 0x218]
push 0x100
push eax
call fcn.00416f10
xorps xmm0, xmm0
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x21c], 0
add esp, 0x20
lea edx, [ecx + 2]
movups xmmword [ebp - 0x230], xmm0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b1f40
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00416c50
or edi, 0x10
mov dword [ebp - 4], 7
call fcn.004340c0
lea ecx, [ebp - 0x320]
lea edx, [eax + 0x7c]
call fcn.004163b0
mov esi, eax
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 8
call fcn.004171d0
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2f0]
call fcn.00417a00
push 4
push str.log_
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00416a40
xor ecx, ecx
or edi, 0x20
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x250], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push esi
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0xb
push eax
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x2d8]
call fcn.0041bdc0
or edi, 1
push 1
push 0x531c28
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0xc
call fcn.00416a40
xor ecx, ecx
or edi, 8
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x248], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x238], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x2c0]
call fcn.0041bdc0
or edi, 4
push 4
push str..log
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0xe
call fcn.00416a40
xorps xmm0, xmm0
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
xor ecx, ecx
mov dword [ebp - 0x294], 0
or edi, 0x40
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x298], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0x2c0]
call fcn.00414ec0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x234]
cmp ecx, 7
jbe 0x4b2119
mov edx, dword [ebp - 0x248]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b210f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25e7
push ecx
push edx
call fcn.004d3ab1
add esp, 8
lea ecx, [ebp - 0x2d8]
call fcn.00414ec0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x24c]
cmp ecx, 7
jbe 0x4b2168
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b215e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25e7
push ecx
push edx
call fcn.004d3ab1
add esp, 8
lea ecx, [ebp - 0x2f0]
call fcn.00414ec0
lea ecx, [ebp - 0x308]
call fcn.00414ec0
lea ecx, [ebp - 0x320]
call fcn.00414ec0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x21c]
cmp ecx, 7
jbe 0x4b21cd
mov edx, dword [ebp - 0x230]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b21c3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25e7
push ecx
push edx
call fcn.004d3ab1
add esp, 8
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0x230]
call fcn.00415f70
or edi, 0x80
mov dword [ebp - 0x35c], edi
mov dword [ebp - 0x364], edi
mov byte [ebp - 4], 0x18
lea edi, [ebp - 0x230]
cmp dword [ebp - 0x21c], 0xf
cmova edi, dword [ebp - 0x230]
call fcn.004f0716
mov esi, dword [eax]
call fcn.004f0710
push 0x6400000
push edi
push esi
push dword [eax]
call dword [0x57253c]
mov byte [ebp - 4], 0x17
add esp, 0x10
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0xf
jbe 0x4b2264
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4b225a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25ec
push ecx
push edx
call fcn.004d3ab1
add esp, 8
push 1
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call dword [0x572534]
add esp, 4
push 1
call dword [0x572538]
mov ecx, dword [0x57289c]
add esp, 4
test ecx, ecx
jne 0x4b255d
call fcn.004340c0
lea ecx, [ebp - 0x278]
lea edx, [eax + 4]
call fcn.004163b0
mov edi, eax
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x19
call fcn.004171d0
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x338]
call fcn.00417a00
mov esi, eax
mov edx, esi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x248]
call fcn.00417870
mov ecx, dword [ebp - 0x35c]
or ecx, 0x400
cmp dword [ebp - 0x238], 0
mov dword [ebp - 0x364], ecx
jbe 0x4b232b
cmp dword [esi + 0x14], 7
mov ecx, esi
jbe 0x4b2310
mov ecx, dword [esi]
mov eax, dword [esi + 0x10]
mov edx, 0x5c
cmp dx, word [ecx + eax*2 - 2]
je 0x4b232b
push edx
lea ecx, [ebp - 0x248]
call fcn.004165b0
push edi
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x230]
call fcn.0041bdc0
lea ecx, [ebp - 0x248]
call fcn.00414ec0
lea ecx, [ebp - 0x338]
call fcn.00414ec0
lea ecx, [ebp - 0x350]
call fcn.00414ec0
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x21
call fcn.00414ec0
cmp dword [ebp - 0x21c], 7
lea edx, [ebp - 0x230]
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
cmova edx, dword [ebp - 0x230]
mov ecx, edx
mov dword [ebp - 0x24c], 0
movups xmmword [ebp - 0x260], xmm0
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b23b0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.00416c50
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x250], 0
jne 0x4b23e0
xor eax, eax
jmp 0x4b24ee
cmp dword [ebp - 0x24c], 7
lea edx, [ebp - 0x260]
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
cmova edx, dword [ebp - 0x260]
mov ecx, edx
mov dword [ebp - 0x234], 0
movups xmmword [ebp - 0x248], xmm0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b2417
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x248]
call fcn.00416c50
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
push 0
cmova eax, dword [ebp - 0x248]
push eax
call fcn.004ef241
add esp, 8
test eax, eax
je 0x4b2462
mov byte [ebp - 0x351], 1
cmp eax, 0xd
jne 0x4b2469
mov byte [ebp - 0x351], 0
mov ecx, dword [ebp - 0x234]
cmp ecx, 7
jbe 0x4b24a9
mov edx, dword [ebp - 0x248]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b249f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25f1
push ecx
push edx
call fcn.004d3ab1
add esp, 8
cmp byte [ebp - 0x351], 0
je 0x4b24b6
xor eax, eax
jmp 0x4b24ee
cmp dword [ebp - 0x24c], 7
lea ecx, [ebp - 0x260]
cmova ecx, dword [ebp - 0x260]
call fcn.0041b350
test eax, eax
je 0x4b24ee
cmp dword [ebp - 0x24c], 7
lea eax, [ebp - 0x260]
cmova eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ecx, dword [ebp - 0x24c]
mov dword [0x57289c], eax
cmp ecx, 7
jbe 0x4b2533
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b2529
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25f6
push ecx
push edx
call fcn.004d3ab1
add esp, 8
lea ecx, [ebp - 0x230]
call fcn.00414ec0
mov ecx, dword [0x57289c]
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test ecx, ecx
jne 0x4b2563
push 0x53a9b4
call esi
mov ecx, dword [0x57289c]
jmp 0x4b2563
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call fcn.004a9740
test al, al
jne 0x4b2573
push 0x53a980
call esi
mov ecx, dword [ebp - 0x294]
cmp ecx, 7
jbe 0x4b25af
mov edx, dword [ebp - 0x2a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4b25a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b25fb
push ecx
push edx
call fcn.004d3ab1
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d3a9e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 5
call fcn.004d613e
dec eax
push 6
mov dword [ebp - 0x264], eax
call fcn.004d613e
call fcn.004e2ffc
call fcn.004e2ffc
call fcn.004e2ffc
call fcn.004e2ffc
call fcn.004e2ffc
call fcn.004e2ffc
int3