Function at 0x401860
Capabilities:
Create directory

Disassembly:
sub esp, 0x674
mov eax, dword [0x40f020]
xor eax, esp
mov dword [esp + 0x670], eax
push ebx
push esi
mov esi, dword [esp + 0x680]
test esi, esi
push edi
mov edi, ecx
mov dword [esp + 0x10], edi
mov ebx, edx
je 0x401af6
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401893
sub eax, edx
sar eax, 1
je 0x401af6
test ebx, ebx
je 0x401988
lea edx, [esp + 0x268]
mov eax, ebx
sub edx, ebx
jmp 0x4018c0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4018c0
xor eax, eax
movzx ecx, word [eax + 0x40da80]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x4018d1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x26c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x401af6
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea edx, [esp + 0x470]
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401916
mov eax, esi
mov edx, esi
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401930
lea edi, [esp + 0x470]
sub eax, edx
add edi, 0xfffffffe
jmp 0x401950
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x401950
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401970
sub eax, edx
sar eax, 1
lea esi, [esp + eax*2 + 0x268]
jmp 0x4019a9
lea edx, [esp + 0x470]
mov eax, esi
sub edx, esi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401993
lea esi, [esp + 0x268]
xor eax, eax
jmp 0x4019b0
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x4019b0
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x4019f1
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
jmp 0x401aff
xor eax, eax
lea edi, [eax + 0x2a]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401a00
push 0x5c
add esi, 2
push esi
call fcn.00403515
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov esi, eax
add esp, 8
test esi, esi
je 0x401aa3
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x26c]
push edx
mov word [esi + 2], di
mov word [esi + 4], 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
jne 0x4019f6
xor eax, eax
jmp 0x401a60
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401a60
push 0x5c
push esi
call fcn.00403515
mov esi, eax
add esp, 8
test esi, esi
je 0x401aa3
push 0
lea eax, [esp + 0x26c]
push eax
mov word [esi], 0
call ebx
test eax, eax
je 0x401ae9
add esi, 2
jne 0x401a54
xor eax, eax
jmp 0x401ab0
movzx ecx, word [esp + eax + 0x470]
mov word [esp + eax + 0x268], cx
add eax, 2
test cx, cx
jne 0x401ab0
push 0
lea edx, [esp + 0x26c]
push edx
call ebx
test eax, eax
jne 0x4019e7
mov eax, dword [esp + 0x10]
mov dword [eax + 4], 0x101
jmp 0x401afd
mov ecx, dword [esp + 0x10]
mov dword [ecx + 4], 0x101
jmp 0x401afd
mov dword [edi + 4], 4
xor eax, eax
mov ecx, dword [esp + 0x67c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004034bc
add esp, 0x674
ret 4