Function at 0x46eb67
Capabilities:
Accept command line arguments
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4aff8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xfc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x46ebc1
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb0], eax
push dword [ebp - 0xb0]
push 0
push dword [ebp - 0xd0]
call fcn.0047215a
add esp, 0xc
jmp 0x46f04b
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x58], 0x7214
mov dword [ebp - 0x6c], str.rkjoue_cjdit_lhkzuzvvq_bkiodw_gihhjwoer
cmp dword [ebp - 0x58], 0x72bd
jle 0x46eca9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
and dword [ebp - 0x30], 0
jmp 0x46ebf9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x416
jge 0x46eca9
and dword [ebp - 0x20], 0
jmp 0x46ec13
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x641c
jge 0x46eca4
and dword [ebp - 0x38], 0
jmp 0x46ec2d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x798c
jge 0x46ec9f
and dword [ebp - 0x28], 0
jmp 0x46ec43
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x7c24
jge 0x46ec9d
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x20]
shl eax, cl
mov ecx, dword [ebp - 0x38]
shl eax, cl
and eax, dword [ebp - 0x28]
cdq
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xf4]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0xf4]
call fcn.00409baf
jmp 0x46ec3c
jmp 0x46ec26
jmp 0x46ec0c
jmp 0x46ebf2
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x84], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x58], 0x7100
jge 0x46ecc8
push dword [ebp - 0x6c]
call fcn.00499a27
pop ecx
jmp 0x46ece4
or dword [ebp - 4], 0xffffffff
jmp 0x46ecee
lea eax, [ebp + 0x24]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x5c], 0x4387
mov dword [ebp - 0xa8], str.rbtscaz_aow_fbrjgc_xfpa_klyjvbm_crlxf_vyqfqb_epq_brodz_ksyto_wig_kztkkp
cmp dword [ebp - 0x5c], 0x43cb
jle 0x46edd2
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
and dword [ebp - 0x40], 0
jmp 0x46ed4c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x60da
jge 0x46edd2
and dword [ebp - 0x3c], 0
jmp 0x46ed62
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x7b23
jge 0x46edcd
and dword [ebp - 0x34], 0
jmp 0x46ed78
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x6a2a
jge 0x46edcb
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0x34]
cdq
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x10c]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x10c]
call fcn.00409baf
jmp 0x46ed71
jmp 0x46ed5b
jmp 0x46ed45
mov eax, dword [ebp - 0xa4]
movzx eax, byte [eax]
test eax, eax
je 0x46efac
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x50], 0x5a84
mov dword [ebp - 0xac], str.wdghdk_dppe_pxhyyehnm_nfjdy
cmp dword [ebp - 0x50], 0x5ca7
jle 0x46eea8
and dword [ebp - 0x24], 0
jmp 0x46ee20
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x6c4f
jge 0x46eea8
and dword [ebp - 0x1c], 0
jmp 0x46ee36
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x656d
jge 0x46eea3
and dword [ebp - 0x2c], 0
jmp 0x46ee4c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x3a38
jge 0x46eea1
and dword [ebp - 0x18], 0
jmp 0x46ee62
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x5498
jge 0x46ee9f
mov eax, dword [ebp - 0x2c]
cdq
idiv dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
sub eax, edx
and eax, dword [ebp - 0x24]
cdq
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], edx
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x46ee5b
jmp 0x46ee45
jmp 0x46ee2f
jmp 0x46ee19
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x50], 0x5a2e
jge 0x46eed1
mov edx, dword [ebp - 0xac]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x46eeed
or dword [ebp - 4], 0xffffffff
jmp 0x46eef7
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 0
je 0x46ef53
mov eax, 0x91cb4e76
test eax, eax
je 0x46ef53
and dword [ebp - 0x48], 0
jmp 0x46ef5a
mov dword [ebp - 0x48], 1
cmp dword [ebp - 0x48], 0xfffffffc
je 0x46ef69
mov dword [ebp - 0x64], 1
jmp 0x46ef6d
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x68]
mov dword [eax], 1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
cmp dword [eax], ecx
je 0x46ef96
mov dword [ebp - 0x44], 1
jmp 0x46ef9a
and dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
jmp 0x46f009
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
jmp 0x46efec
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax], 2
jge 0x46f009
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0xa0]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x46efe1
mov dword [ebp - 4], 4
cmp dword [ebp - 0x5c], 0x41fb
jge 0x46f025
push dword [ebp - 0xa8]
call fcn.00499a27
pop ecx
jmp 0x46f041
or dword [ebp - 4], 0xffffffff
jmp 0x46f04b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret