Function at 0x4063b1
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push ebx
mov dword [ebp - 0x24], edx
push esi
mov esi, ecx
xor ecx, ecx
inc ecx
xor ebx, ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x1c], 0xbb6748f6
mov dword [ebp - 0x1c], 0x814b733c
mov dword [ebp - 0x1c], 0x46b6eb6
mov dword [ebp - 0x1c], 0xb49d
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0xc], ebx
jmp 0x406402
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x34], 0xfffffffc
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x4063f4
dec dword [ebp - 0x1c]
cmp dword [esi + 0x10], ebx
jne 0x406416
xor al, al
jmp 0x406878
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], 0xa4c8
mov dword [ebp - 0xc], 0xfffffffa
cmp dword [ebp - 0xc], 0x12
push edi
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
jl 0x40659b
jmp 0x40643d
xor ecx, ecx
inc ecx
mov dword [ebp - 8], 0xffff
mov dword [ebp - 0x1c], 0x1e1c5a3d
mov dword [ebp - 0x10], ebx
jmp 0x40645e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48], 0x1188
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x406450
cmp dword [ebp - 0xc], ebx
jne 0x406470
mov edx, ebx
cmp dword [ebp - 0x48], ebx
je 0x406472
mov edx, ecx
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp eax, 0x891c
setl cl
add ecx, edx
je 0x406498
mov dword [ebp - 0x1c], 0x32cf415d
cmp dword [ebp - 0x1c], ebx
jne 0x40659b
jmp 0x40658e
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x10], ebx
jmp 0x4064b5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x4064ab
mov eax, dword [ebp - 8]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0x23a266d2
setl cl
imul eax, ecx, 0xb96
test eax, eax
je 0x406514
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 8], 0xfffffff7
jmp 0x40650c
inc dword [ebp - 0x1c]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x406509
push 0x1e3d
push ebx
call edi
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xa
jg 0x4064ec
jmp 0x406528
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x406528
push 0x1c8d
push ebx
call dword [sym.imp.USER32.dll_GetSubMenu]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
add ecx, 0xac1e
cmp ecx, eax
setl dl
xor eax, eax
add edx, 0xd2e9
cmp edx, 0x72d5
setl al
xor edx, edx
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setne dl
xor ecx, ecx
cmp edx, 0x7d04
setl cl
xor eax, eax
cmp ecx, 0xfffffffd
setge al
imul eax, eax, 0x1c8
test eax, eax
je 0x406589
cmp dword [ebp - 0x18], ebx
je 0x406589
xor eax, eax
inc eax
jmp 0x40658b
mov eax, ebx
mov dword [ebp - 0x58], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x12
jge 0x40643a
push ebx
lea eax, [ebp - 0x24]
push eax
push 0x4228
call fcn.0040afaa
mov dword [ebp - 8], 0xe0648261
add esp, 0xc
mov dword [ebp - 0x1c], 0x87a5eafb
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xfefb659b
mov dword [ebp - 0x10], ebx
jmp 0x4065dc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x20], 0x5e04a276
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x4065ce
mov dword [ebp - 8], 0xffffffeb
jmp 0x406712
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x10], 0x99da9727
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
xor eax, eax
cmp ecx, 0xa14c
setg al
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x18]
sets cl
add eax, 4
add eax, ecx
je 0x40662a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setg dl
xor ecx, ecx
cmp edx, 4
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0xc]
jge 0x40666c
cmp dword [ebp - 0x10], ebx
je 0x40666c
xor eax, eax
inc eax
jmp 0x40666e
mov eax, ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x40667f
cmp dword [ebp - 0xc], ebx
jne 0x40667f
mov ecx, ebx
jmp 0x406682
xor ecx, ecx
inc ecx
or eax, 0xffffffff
mov dword [ebp - 0x20], ecx
sub eax, ecx
mov dword [ebp - 0x10], eax
je 0x406699
cmp dword [ebp - 0x20], ebx
je 0x406699
xor eax, eax
inc eax
jmp 0x40669b
mov eax, ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], ebx
je 0x4066de
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x40670f
push ebx
push 0xd2d
push 0x2052
push 0x167b
push 0x21e2
push 0x1e8a
push 0xf5e
push 0xac9
push 0x1cde
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
jmp 0x40670f
mov dword [ebp - 0xc], ebx
jmp 0x406709
mov dword [ebp - 0x10], ebx
jmp 0x4066f2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x4066e8
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp eax, 0xffffffff
setl cl
mov dword [ebp - 0x10], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 7
jle 0x4066e3
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff2
jg 0x4065ee
mov dword [ebp - 8], 0x13
jmp 0x406740
cmp dword [ebp - 0x18], ebx
jne 0x406746
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x40673d
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x13
jl 0x406725
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.004034c1
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.004034d5
push eax
lea ecx, [ebp - 0x14]
call fcn.00402f03
pop edi
jmp 0x4067a7
lea ecx, [ebp - 0x14]
call fcn.004035bb
mov al, byte [eax]
cmp al, 0x30
jl 0x4067b7
cmp al, 0x39
jg 0x4067b7
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00407459
add esp, 0xc
lea ecx, [ebp - 0x14]
call fcn.00425d7c
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.004034d5
push eax
lea ecx, [ebp - 0x14]
call fcn.00402f03
test al, al
jne 0x406768
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 8], ebx
jmp 0x406803
push 0x522
push ebx
lea eax, [ebp - 0x24]
push eax
push 0x527e
call fcn.0040729d
push ebx
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x6ba0
push eax
push 0x1099
push 0x146c
mov dword [ebp - 0x38], str.neqjvwkc_apsv_pisooef_jngrpgse_godvexu_xhz_zauxxj_yprs
call fcn.00412679
add esp, 0x20
jmp 0x40640f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x40], 1
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x4067f5
mov dword [ebp - 8], ebx
jmp 0x40681c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x28], 0x3c633843
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jl 0x40680e
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
test eax, eax
je 0x406840
cmp dword [ebp - 0x40], ebx
je 0x406834
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x10], 0x10
jmp 0x406860
mov dword [ebp - 0x1c], 0xcad
inc dword [ebp - 0x1c]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff1
jge 0x406853
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x406876
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov al, 1
pop esi
pop ebx
mov esp, ebp
pop ebp
ret