Function at 0x4c3160
Capabilities:
Create directory
Query environment variable

Disassembly:
push 0xffffffffffffffff
push 0x58f65b
mov eax, dword fs:[0]
push eax
sub esp, 0x43c
mov eax, dword [0x5e173c]
xor eax, esp
mov dword [esp + 0x438], eax
push esi
push edi
mov eax, dword [0x5e173c]
xor eax, esp
push eax
lea eax, [esp + 0x448]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], 0
mov eax, dword [0x7e2418]
mov dword [esp + 0x18], esi
test al, 1
jne 0x4c31f4
or eax, 1
mov dword [0x7e2418], eax
mov dword [esp + 0x450], 1
xor eax, eax
push 0x5a0040
mov dword [0x7e2414], 7
mov dword [0x7e2410], 0
mov word [0x7e2400], ax
call fcn.00565027
add esp, 4
mov byte [esp + 0x450], 0
xor eax, eax
cmp dword [0x7e2410], eax
je 0x4c3232
push 0xffffffffffffffff
push eax
mov dword [esi + 0x14], 7
mov ecx, esi
mov dword [esi + 0x10], eax
push 0x7e2400
mov word [esi], ax
call fcn.00404960
mov dword [esp + 0x450], 0
mov dword [esp + 0x14], 1
jmp 0x4c33f4
push 0x40e
mov word [esp + 0x38], ax
lea eax, [esp + 0x3a]
push 0
push eax
call fcn.0056cbb0
add esp, 0xc
call fcn.00409cc0
test al, al
lea eax, [esp + 0x34]
push 0x208
push eax
je 0x4c3265
push 0x5bab64
jmp 0x4c326a
push 0x5bab10
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x38]
call fcn.004c30c0
mov edi, 0x208
test eax, eax
js 0x4c32a2
mov eax, dword [esp + 0x10]
mov edx, edi
push ecx
push 0x5a87e8
push ecx
lea ecx, [esp + 0x40]
sub edx, eax
lea ecx, [ecx + eax*2]
call fcn.004c3110
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x38]
call fcn.004c30c0
test eax, eax
js 0x4c32cf
mov eax, dword [esp + 0x10]
sub edi, eax
push ecx
push 0x5a9500
push ecx
lea ecx, [esp + 0x40]
mov edx, edi
lea ecx, [ecx + eax*2]
call fcn.004c3110
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [esp + 0x34]
push 0
push eax
call edi
xor eax, eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
cmp word [esp + 0x34], ax
jne 0x4c3310
xor ecx, ecx
jmp 0x4c3326
lea ecx, [esp + 0x34]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c3317
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x24]
call fcn.00404a80
mov dword [esp + 0x450], 2
lea ecx, [esp + 0x1c]
push 5
push 0x5bab58
call fcn.00404880
cmp dword [esp + 0x30], 8
lea eax, [esp + 0x1c]
push 0
cmovae eax, dword [esp + 0x20]
push eax
call edi
lea eax, [esp + 0x1c]
mov ecx, 0x7e2400
push eax
call fcn.004042a0
mov ecx, dword [0x7e2410]
mov eax, dword [esp + 0x2c]
mov dword [0x7e2410], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
mov ecx, dword [0x7e2414]
mov dword [0x7e2414], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esp + 0x34], ecx
mov ecx, esi
push eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push 0x7e2400
mov word [esi], ax
call fcn.00404960
mov dword [esp + 0x14], 1
mov byte [esp + 0x450], 0
cmp dword [esp + 0x30], 8
jb 0x4c33dd
push dword [esp + 0x1c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
mov eax, esi
mov ecx, dword [esp + 0x448]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x438]
xor ecx, esp
call fcn.00564de8
add esp, 0x448
ret