Function at 0x401a00
Capabilities:
Create directory

Disassembly:
sub esp, 0x674
mov eax, dword [0x40f020]
xor eax, esp
mov dword [esp + 0x670], eax
push ebx
push esi
mov esi, dword [esp + 0x680]
test esi, esi
push edi
mov edi, ecx
mov dword [esp + 0x10], edi
mov ebx, edx
je 0x401c96
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401a33
sub eax, edx
sar eax, 1
je 0x401c96
test ebx, ebx
je 0x401b28
lea edx, [esp + 0x268]
mov eax, ebx
sub edx, ebx
jmp 0x401a60
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401a60
xor eax, eax
movzx ecx, word [eax + 0x40daac]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401a71
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x26c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x401c96
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea edx, [esp + 0x470]
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401ab6
mov eax, esi
mov edx, esi
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401ad0
lea edi, [esp + 0x470]
sub eax, edx
add edi, 0xfffffffe
jmp 0x401af0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x401af0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401b10
sub eax, edx
sar eax, 1
lea esi, [esp + eax*2 + 0x268]
jmp 0x401b49
lea edx, [esp + 0x470]
mov eax, esi
sub edx, esi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401b33
lea esi, [esp + 0x268]
xor eax, eax
jmp 0x401b50
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401b50
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x401b91
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
jmp 0x401c9f
xor eax, eax
lea edi, [eax + 0x2a]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401ba0
push 0x5c
add esi, 2
push esi
call fcn.0040311f
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov esi, eax
add esp, 8
test esi, esi
je 0x401c43
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x26c]
push edx
mov word [esi + 2], di
mov word [esi + 4], 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
jne 0x401b96
xor eax, eax
jmp 0x401c00
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401c00
push 0x5c
push esi
call fcn.0040311f
mov esi, eax
add esp, 8
test esi, esi
je 0x401c43
push 0
lea eax, [esp + 0x26c]
push eax
mov word [esi], 0
call ebx
test eax, eax
je 0x401c89
add esi, 2
jne 0x401bf4
xor eax, eax
jmp 0x401c50
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401c50
push 0
lea edx, [esp + 0x26c]
push edx
call ebx
test eax, eax
jne 0x401b87
mov eax, dword [esp + 0x10]
mov dword [eax + 4], 0x101
jmp 0x401c9d
mov ecx, dword [esp + 0x10]
mov dword [ecx + 4], 0x101
jmp 0x401c9d
mov dword [edi + 4], 4
xor eax, eax
mov ecx, dword [esp + 0x67c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00403110
add esp, 0x674
ret 4