Function at 0x46e718
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdd4
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov edi, edx
mov ebx, eax
mov esi, dword [ebp + 0x10]
mov byte [ebp - 5], 1
mov eax, dword [ebp + 0x1c]
mov dword [ebx + 0x48c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebx + 0x490], eax
cmp byte [ebx + 0x55d], 0
jle 0x46e831
mov eax, dword [0x48d550]
cmp byte [eax + 0x19c4], 0
je 0x46e831
movsx eax, byte [ebx + 0x55d]
mov edx, dword [0x48d340]
mov al, byte [edx + eax - 1]
cmp al, 1
je 0x46e79a
movsx edx, byte [ebx + 0x55d]
mov ecx, dword [0x48d340]
cmp al, 2
je 0x46e79a
movsx edx, byte [ebx + 0x55d]
mov ecx, dword [0x48d340]
cmp al, 3
jne 0x46e808
movsx eax, byte [ebx + 0x55d]
mov edx, dword [0x48d9a0]
movzx eax, word [edx + eax*2 + 0x4c]
mov dword [ebp - 0x220], eax
fild dword [ebp - 0x220]
fild qword [ebp + 0x1c]
fdivrp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.0040fd58
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x15]
push eax
lea edx, [ebx + 0x4a4]
mov eax, dword [ebp - 0x14]
call fcn.0041ea20
mov edx, eax
movsx eax, byte [ebx + 0x55d]
mov ecx, dword [0x48d340]
mov cl, byte [ecx + eax - 1]
lea eax, [ebx + 0x4a4]
call fcn.0041f554
cmp byte [ebp - 0x15], 1
ja 0x46ee8a
jmp 0x46e831
push 0
lea eax, [ebp - 0x11b]
push eax
lea edx, [ebx + 0x4a4]
mov al, byte [ebx + 0x55d]
mov ecx, dword [ebp - 0x14]
call fcn.0041e8f0
test al, al
jle 0x46e831
cmp al, 4
jl 0x46ee8a
inc dword [edi]
mov eax, dword [0x48d8fc]
mov edx, dword [ebp + 0x14]
cmp byte [eax + edx - 1], 0
jne 0x46e89f
lea eax, [esi + 1]
call fcn.0040fd30
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19cc]
mov dword [ebp - 0x220], eax
fild dword [ebp - 0x220]
fmulp st(1)
fsub dword [0x46ee98]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, dword [0x48d550]
fild dword [eax + 0x19d8]
fild qword [ebp + 0x1c]
faddp st(1)
fsub dword [0x46ee98]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.0040bb94
fistp qword [ebx + 0x494]
wait
jmp 0x46ea76
mov eax, dword [0x48d550]
mov al, byte [eax + 0x18c1]
mov byte [ebp - 0x18], al
mov eax, dword [0x48d550]
mov al, byte [eax + 0x1934]
mov byte [ebp - 0x19], al
mov eax, dword [0x48d550]
mov al, byte [eax + 0x18c8]
mov byte [ebp - 0x17], al
mov eax, dword [0x48d550]
mov al, byte [eax + 0x18b7]
mov byte [ebp - 0x1a], al
mov eax, dword [0x48d550]
mov byte [eax + 0x18c8], 0
mov eax, dword [0x48d550]
mov byte [eax + 0x18b7], 0
mov eax, dword [0x48d550]
mov byte [eax + 0x18c1], 1
mov eax, dword [0x48d550]
mov byte [eax + 0x1934], 0
mov eax, esi
call fcn.0040fd30
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19cc]
mov dword [ebp - 0x220], eax
fild dword [ebp - 0x220]
fmulp st(1)
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, dword [0x48d550]
fild dword [eax + 0x19d8]
fild qword [ebp + 0x1c]
faddp st(1)
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.0040bb94
fistp qword [ebx + 0x494]
wait
xor eax, eax
mov dword [ebx + 0x474], eax
mov dword [ebx + 0x478], eax
mov eax, dword [0x48d8fc]
mov edx, dword [ebp + 0x14]
mov al, byte [eax + edx - 1]
mov edx, dword [0x48d51c]
mov edx, dword [edx]
mov byte [edx + 0x136], al
mov eax, dword [ebp + 0x14]
lea eax, [eax + eax*8]
mov edx, dword [0x48d454]
lea edx, [edx + eax - 9]
mov eax, dword [0x48d51c]
mov eax, dword [eax]
add eax, 0x104
mov ecx, 0x10
call fcn.00405a94
mov eax, dword [0x48d74c]
mov byte [eax], 2
lea eax, [ebx + 0xc]
call fcn.00428520
mov byte [ebp - 0x16], al
mov eax, dword [0x48d550]
mov dl, byte [ebp - 0x18]
mov byte [eax + 0x18c1], dl
mov eax, dword [0x48d550]
mov dl, byte [ebp - 0x17]
mov byte [eax + 0x18c8], dl
mov eax, dword [0x48d550]
mov dl, byte [ebp - 0x1a]
mov byte [eax + 0x18b7], dl
mov eax, dword [0x48d550]
mov dl, byte [ebp - 0x19]
mov byte [eax + 0x1934], dl
cmp byte [ebp - 0x16], 1
je 0x46ea39
mov edx, 0x46eea4
mov eax, 0x49c510
call fcn.00404918
call fcn.00402c54
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
xor eax, eax
mov al, byte [ebp + 0xc]
call fcn.00410234
mov edx, eax
mov eax, 0x49c510
call fcn.00403250
call fcn.004032bc
cmp byte [ebp - 0x16], 1
jbe 0x46ee8a
mov byte [ebp - 5], 0
jmp 0x46ee8a
mov eax, dword [ebx + 0x474]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x478]
mov dword [ebp - 0xc], eax
mov eax, dword [0x48d8fc]
mov edx, dword [ebp + 0x14]
movzx eax, byte [eax + edx - 1]
mov dword [ebp - 0x220], eax
fild dword [ebp - 0x220]
fild qword [ebp - 0x10]
faddp st(1)
fsub dword [0x46ee98]
fistp qword [ebx + 0x494]
wait
mov edx, dword [0x48d550]
add edx, 0x194b
mov eax, dword [0x48d830]
call fcn.00405c48
mov eax, dword [0x48d830]
mov dl, 0x7e
call fcn.00405e24
mov byte [ebp - 0x1b], al
mov eax, dword [ebp - 4]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
call fcn.00405bdc
movzx esi, byte [ebp - 0x1b]
and eax, 0xff
sub esi, eax
test esi, esi
jle 0x46eae4
mov eax, dword [0x48d830]
mov dl, 0x7e
call fcn.00405cf8
test eax, eax
je 0x46ead3
mov byte [eax], 0x30
dec esi
jne 0x46eac0
jmp 0x46eae4
mov eax, dword [0x48d830]
mov dl, 0x7e
call fcn.00405e4c
mov eax, dword [0x48d830]
mov dl, 0x7e
call fcn.00405e24
dec eax
jg 0x46ead8
mov edx, dword [0x48d550]
add edx, 0x400
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
call fcn.0040fb40
mov eax, dword [0x48d550]
cmp byte [eax + 0x1980], 0
je 0x46eb74
mov eax, dword [ebp + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [0x48d80c]
lea eax, [edx + eax*4 - 0xc]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov esi, dword [ebp + 0x14]
dec esi
mov edx, esi
mov eax, dword [0x48d214]
call fcn.0040ba5c
test al, al
jne 0x46eb6a
push 0
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_CreateDirectoryA
mov edx, esi
mov eax, dword [0x48d214]
call fcn.0040ba84
mov eax, dword [0x48da44]
call fcn.0040fb40
mov eax, dword [0x48d830]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
push 0x46eedc
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [ebp + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [0x48d80c]
lea eax, [edx + eax*4 - 0xc]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [ebp - 4]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, dword [0x48da44]
call fcn.0040f4d4
mov edx, dword [0x48da44]
lea eax, [ebp - 0x21b]
call fcn.00405c48
mov eax, ebx
mov dl, byte [ebp + 0xc]
call fcn.0046e69c
lea eax, [ebp - 0x21b]
call fcn.0040fb28
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov edx, dword [0x48da44]
mov eax, 0x49c510
call fcn.00403250
call fcn.00402c54
mov eax, dword [ebp - 4]
inc dword [eax]
mov eax, dword [ebp + 8]
cmp byte [eax], 0
jne 0x46ec7f
lea eax, [ebp - 0x21b]
call fcn.00412584
test al, al
je 0x46ec7f
mov edx, dword [0x48d550]
add edx, 0x400
mov eax, dword [0x48d830]
call fcn.00405c48
mov eax, dword [0x48d830]
call fcn.0040fb40
mov eax, dword [0x48d550]
add eax, 0x194b
push eax
mov eax, dword [0x48d830]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48d830]
xor edx, edx
call fcn.00411180
test al, al
jne 0x46ec79
mov byte [ebp - 5], 0
jmp 0x46ee8a
mov eax, dword [ebp + 8]
mov byte [eax], 1
push 1
lea edx, [ebp - 0x21b]
mov eax, ebx
xor ecx, ecx
call fcn.004692d0
test al, al
jne 0x46ecda
mov edx, 0x46eee8
mov eax, 0x49c510
call fcn.00404918
call fcn.004032bc
mov eax, dword [0x48d9fc]
cmp byte [eax], 0
jne 0x46ee8a
mov ax, 0xf7
call fcn.0040bc04
mov edx, 2
call fcn.00411d74
test al, al
jne 0x46ee8a
mov byte [ebp - 5], 0
jmp 0x46ee8a
mov eax, dword [ebp + 0x18]
inc dword [eax]
mov eax, 0x49c510
call fcn.004032bc
mov eax, 0x6f
call fcn.0042b9f4
mov edx, dword [0x48da44]
mov eax, dword [0x48d948]
call fcn.00405c48
mov eax, dword [0x48d268]
push eax
mov eax, dword [0x48d948]
push eax
call sub.kernel32.dll_lstrcatA
push 0x46eef0
mov eax, dword [0x48d948]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [ebp + 0x18]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
push eax
mov eax, dword [0x48d948]
push eax
call sub.kernel32.dll_lstrcatA
push 0x46eef0
mov eax, dword [0x48d948]
push eax
call sub.kernel32.dll_lstrcatA
mov ax, 0x2fc
call fcn.0040bc04
push eax
mov eax, dword [0x48d948]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48d948]
push eax
mov eax, dword [0x48db04]
mov eax, dword [eax]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d550]
cmp byte [eax + 0x19c7], 0
je 0x46ee8a
fild qword [ebx + 0x494]
fild qword [ebx + 0x48c]
fsubp st(1)
mov eax, dword [0x48d318]
fistp qword [eax]
wait
mov eax, dword [0x48d318]
fild qword [eax]
fsub dword [0x46ee98]
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19ce]
mov edx, dword [0x48d550]
movzx edx, word [edx + 0x19cc]
imul edx
mov dword [ebp - 0x220], eax
fild dword [ebp - 0x220]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.0040fd80
inc eax
mov dword [ebp - 0x228], eax
xor eax, eax
mov dword [ebp - 0x224], eax
fild qword [ebp - 0x228]
mov eax, dword [0x48d318]
fistp qword [eax]
wait
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19ce]
mov dword [ebp - 0x220], eax
fild dword [ebp - 0x220]
mov eax, dword [0x48d318]
fild qword [eax]
fmulp st(1)
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19cc]
mov dword [ebp - 0x22c], eax
fild dword [ebp - 0x22c]
fmulp st(1)
fild qword [ebx + 0x48c]
faddp st(1)
fsub dword [0x46ee98]
fistp qword [ebx + 0x494]
wait
mov eax, ebx
xor ecx, ecx
mov dl, 1
call fcn.00476b9c
mov eax, ebx
mov dl, byte [ebp + 0xc]
call fcn.0046e69c
push 0x46eef4
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov edx, dword [0x48da44]
mov eax, 0x49c510
call fcn.00403250
call fcn.004032bc
mov al, byte [ebp - 5]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c