Function at 0x419fb5
Capabilities:
Create directory
Hide graphical window

Disassembly:
push 0x150
mov eax, 0x43a6cc
call fcn.00427d33
mov ebx, ecx
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp + 8]
cmp eax, dword [ebx + 0x10f4]
jbe 0x41a755
push 0
pop ecx
dec eax
je 0x41a708
dec eax
je 0x41a6a6
dec eax
je 0x41a5ba
dec eax
je 0x41a42a
dec eax
je 0x41a06f
dec eax
jne 0x41a741
lea esi, [ebx + 0x884]
mov ecx, esi
call fcn.00423b61
xor edi, edi
mov ecx, esi
push edi
call fcn.004141dc
mov ecx, dword [ebx + 0x10f8]
test ecx, ecx
je 0x41a02c
mov eax, dword [ecx]
push edi
push dword [ebx + 4]
push ecx
call dword [eax + 0x28]
push 1
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_FlashWindow]
push 0x442aac
lea ecx, [ebp - 0xb4]
call fcn.00401590
lea ecx, [ebx + 0x618]
mov dword [ebp - 4], 0xd
mov eax, dword [ecx]
lea edx, [ebp - 0xb4]
push edx
call dword [eax + 0x8c]
push edi
lea ecx, [ebp - 0xb4]
jmp 0x41a696
push 9
lea eax, [ebp - 0x38]
push eax
call fcn.00422092
mov dword [ebp - 4], 5
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
push 0
cmovae eax, dword [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
push 0x404
push dword [ebx + 4]
mov dword [ebx + 0x10f0], 2
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea esi, [ebx + 0x618]
and dword [esi + 0x88], 0
lea ecx, [ebp - 0x84]
push 0x442f50
mov byte [esi + 0x30], 0
call fcn.00401590
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x84]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
push 0
push 1
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 5
call fcn.004017dc
lea ecx, [ebx + 0x884]
call fcn.00423a4f
mov ecx, dword [ebx + 0x1120]
add ecx, 0x1e0
call fcn.0040d40c
mov eax, dword [ebx + 0x9d8]
xor ecx, ecx
and dword [ebp - 0x3c], 0
mov byte [ebx + 0x9bc], 1
mov esi, dword [eax]
mov edi, dword [eax + 4]
sub edi, esi
add edi, 3
shr edi, 2
cmp esi, dword [eax + 4]
cmova edi, ecx
test edi, edi
je 0x41a166
mov ebx, dword [ebp - 0x3c]
mov ecx, dword [esi]
push 0
push 0x1000
push 0x45d
call fcn.00423ff3
inc ebx
lea esi, [esi + 4]
cmp ebx, edi
jne 0x41a148
mov ebx, dword [ebp - 0x14]
push ecx
lea ecx, [ebx + 0x884]
call fcn.004239d0
lea esi, [ebx + 0x3c0]
mov eax, dword [esi]
mov ecx, esi
push 0xffffff
call dword [eax + 0x7c]
push 1
mov ecx, esi
mov dword [ebx + 0x3c8], 0x383226
call fcn.004141dc
lea esi, [ebx + 0x348]
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
push 1
mov ecx, esi
mov dword [ebx + 0x350], 0x717171
call fcn.004141dc
push 0x442d18
lea ecx, [ebp - 0xcc]
call fcn.00401590
lea ecx, [ebx + 0x168]
mov byte [ebp - 4], 7
mov eax, dword [ecx]
lea edx, [ebp - 0xcc]
push edx
call dword [eax + 0x8c]
push 0
push 1
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 5
call fcn.004017dc
push 0x442ab8
lea ecx, [ebp - 0x54]
call fcn.00401590
lea ecx, [ebx + 0x1e0]
mov byte [ebp - 4], 8
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
call dword [eax + 0x8c]
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.004017dc
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebx + 0x1120]
call fcn.004202e5
mov eax, dword [ebx + 0x1120]
mov esi, dword [eax + 0x1e8]
mov edi, dword [eax + 0x1e4]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], eax
jmp 0x41a26f
push edi
lea ecx, [ebp - 0x14]
call fcn.0041a75d
add edi, 4
cmp edi, esi
jne 0x41a263
mov ecx, dword [ebx + 0x68]
test ecx, ecx
je 0x41a2ed
mov eax, dword [ecx]
push 0
call dword [eax + 0x18]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x41a29f
mov ecx, dword [ebx + 0x1120]
lea eax, [ebp - 0x3c]
push eax
add ecx, 0x1e4
call fcn.0040d9d4
jmp 0x41a2e4
mov ecx, dword [ebx + 0x68]
lea eax, [ebp - 0x114]
push eax
call fcn.00406aea
mov edi, eax
mov byte [ebp - 4], 0xa
mov esi, dword [ebx + 0x1120]
push 0
call fcn.00424dca
pop ecx
push edx
push eax
push edi
lea eax, [esi + 0x264]
push eax
call fcn.0040d2b2
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 9
call fcn.004017dc
push 0
mov ecx, ebx
call fcn.00419e47
mov ecx, dword [ebx + 0x6c]
test ecx, ecx
je 0x41a35e
mov eax, dword [ecx]
push 0
call dword [eax + 0x18]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x41a319
mov ecx, dword [ebx + 0x1120]
lea eax, [ebp - 0x3c]
push eax
add ecx, 0x1e4
call fcn.0040d9d4
jmp 0x41a35e
mov ecx, dword [ebx + 0x6c]
lea eax, [ebp - 0x144]
push eax
call fcn.00406aea
mov edi, eax
mov byte [ebp - 4], 0xb
mov esi, dword [ebx + 0x1120]
push 0
call fcn.00424dca
pop ecx
push edx
push eax
push edi
lea eax, [esi + 0x264]
push eax
call fcn.0040d2b2
push 0
push 1
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 9
call fcn.004017dc
mov ecx, dword [ebx + 0x1120]
call fcn.004202f3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
push 0x18
cdq
pop ecx
idiv ecx
test eax, eax
je 0x41a3b5
mov ecx, dword [ebx + 0x1120]
lea eax, [ebp - 0x12c]
push eax
call fcn.00421a91
push eax
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x20]
mov ecx, dword [ebx + 0x1120]
push eax
add ecx, 4
call fcn.0040f29d
push 0
push 1
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 9
call fcn.004016fc
mov ecx, dword [ebx + 0x1120]
push dword [ebp - 0x14]
mov edx, dword [ecx + 0x1e8]
mov eax, edx
mov ecx, dword [ecx + 0x1e4]
sub eax, ecx
sar eax, 2
push eax
call fcn.0041c087
pop ecx
pop ecx
mov ecx, dword [ebx + 0x1120]
call fcn.00421253
mov edx, dword [ebx + 0x10f8]
test edx, edx
je 0x41a3f9
mov eax, dword [edx]
push 2
push dword [ebx + 4]
push edx
call dword [eax + 0x28]
lea esi, [ebx + 0x884]
mov ecx, esi
call fcn.00423b61
push 0
mov ecx, esi
call fcn.004141dc
push 0xa
push 1
mov ecx, ebx
call fcn.0041a9f3
lea ecx, [ebp - 0x20]
call fcn.00411b86
lea ecx, [ebp - 0x38]
jmp 0x41a694
cmp dword [ebx + 0x6c], ecx
je 0x41a437
push ecx
mov ecx, ebx
call fcn.0041ba41
mov ecx, dword [ebx + 0x1120]
add ecx, 0x1e0
push 0
call fcn.0040d36b
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebx + 0x68], eax
test eax, eax
je 0x41a462
push 1
mov ecx, ebx
call fcn.00419e47
jmp 0x41a475
push 0
push 0x404
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
push dword [ebx + 0x8a4]
call dword [sym.imp.USER32.dll_SetFocus]
lea esi, [ebx + 0x348]
mov eax, dword [esi]
mov ecx, esi
push 0xffffff
call dword [eax + 0x7c]
push 1
mov ecx, esi
mov dword [ebx + 0x350], 0x383226
call fcn.004141dc
lea esi, [ebx + 0x2d0]
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
push 1
mov ecx, esi
mov dword [ebx + 0x2d8], 0x717171
call fcn.004141dc
push 0x442c98
lea ecx, [ebp - 0xfc]
call fcn.00401590
lea ecx, [ebx + 0x168]
mov dword [ebp - 4], 2
mov eax, dword [ecx]
lea edx, [ebp - 0xfc]
push edx
call dword [eax + 0x8c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
push 0
push 1
call fcn.004017dc
push 0x442afc
lea ecx, [ebp - 0xe4]
call fcn.00401590
lea esi, [ebx + 0x1e0]
mov dword [ebp - 4], 3
mov eax, dword [esi]
lea ecx, [ebp - 0xe4]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
push 0
push 1
call fcn.004017dc
push 1
push dword [esi + 0x20]
call edi
push 0
push dword [ebx + 0x278]
call edi
push 0x442b8c
lea ecx, [ebp - 0x6c]
call fcn.00401590
lea ecx, [ebx + 0x618]
mov dword [ebp - 4], 4
mov eax, dword [ecx]
lea edx, [ebp - 0x6c]
push edx
call dword [eax + 0x8c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
push 0
push 1
call fcn.004017dc
push dword [ebx + 0x8a4]
mov ecx, ebx
call fcn.00418ae1
lea esi, [ebx + 0x884]
mov ecx, esi
call fcn.00423b61
push 0
mov ecx, esi
call fcn.004141dc
jmp 0x41a741
mov ecx, dword [ebx + 0x1120]
mov edi, 0x1e0
add ecx, edi
call fcn.0040ce2e
push 0
mov ecx, ebx
call fcn.00419c6f
push 0x441a24
lea ecx, [ebp - 0x9c]
call fcn.00401590
and dword [ebp - 4], 0
lea eax, [ebp - 0x9c]
lea esi, [ebx + 0x884]
push eax
mov ecx, esi
call fcn.00423bb5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
push 0
push 1
call fcn.004017dc
mov ecx, esi
call fcn.00423a4f
mov ecx, dword [ebx + 0x1120]
add ecx, edi
call fcn.0040d40c
mov ecx, dword [ebx + 0x1120]
call fcn.004202e5
mov ecx, dword [ebx + 0x1120]
add ecx, edi
call fcn.0040d474
mov ecx, dword [ebx + 0x1120]
call fcn.004202f3
mov ecx, dword [ebx + 0x1120]
add ecx, edi
push 1
call fcn.0040d36b
mov dword [ebx + 0x6c], eax
test eax, eax
je 0x41a741
push 1
mov ecx, ebx
call fcn.0041ba41
mov ecx, dword [ebx + 0x6c]
lea eax, [ebp - 0x15c]
push eax
call fcn.00406aea
mov dword [ebp - 4], 1
mov ecx, dword [ebx + 0x1120]
push eax
add ecx, edi
call fcn.0040d6b4
lea ecx, [ebp - 0x15c]
push 0
or dword [ebp - 4], 0xffffffff
push 1
call fcn.004017dc
jmp 0x41a741
push 5
push 0x404
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call edi
push 0
push 0
mov ecx, ebx
call fcn.0041a9f3
push 0
push dword [ebx + 0x5c0]
call edi
push 1
mov ecx, ebx
call fcn.00419c6f
push 1
lea esi, [ebx + 0x884]
push dword [esi + 0x20]
call edi
mov ecx, esi
call fcn.00423b61
push 0
mov ecx, esi
call fcn.004141dc
push dword [ebx + 0x8a4]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x41a741
push ecx
push 0x404
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 0x1f4
push 1
mov ecx, ebx
call fcn.0041a9f3
push 0
push dword [ebx + 0x200]
call esi
push 0
mov ecx, ebx
call fcn.00419e47
mov eax, dword [ebp + 8]
mov ecx, ebx
push 0
push 0
mov dword [ebx + 0x10f4], eax
call fcn.0041bc01
call fcn.00427ce2
ret 4