Function at 0x4e1cec
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x56
push 0
push 0
dec ecx
jne 0x4e1cf4
push ecx
push ebx
push esi
push edi
lea eax, [ebp - 0x180]
mov edx, dword [0x40882c]
call fcn.0040597c
xor eax, eax
push ebp
push 0x4e2577
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x188]
mov eax, dword [0x4e7b80]
mov eax, dword [eax]
call fcn.004718c4
mov eax, dword [ebp - 0x188]
lea edx, [ebp - 0x184]
call fcn.0040a440
push dword [ebp - 0x184]
push 0x4e2590
push 0x4e25a4
lea eax, [ebp - 8]
mov edx, 3
call fcn.004050dc
lea edx, [ebp - 0x190]
mov eax, dword [0x4e7b80]
mov eax, dword [eax]
call fcn.004718c4
mov eax, dword [ebp - 0x190]
lea edx, [ebp - 0x18c]
call fcn.0040a440
mov edx, dword [ebp - 0x18c]
lea eax, [ebp - 4]
mov ecx, 0x4e25c4
call fcn.00405068
mov dl, 1
mov eax, dword [0x419ca4]
call fcn.00403e1c
mov esi, eax
mov eax, dword [ebp - 8]
call fcn.0040a188
test al, al
je 0x4e1db6
mov eax, dword [ebp - 8]
call fcn.0040a3a0
mov eax, dword [ebp - 4]
call fcn.0040a198
test al, al
jne 0x4e1dd7
push 0
mov eax, dword [ebp - 4]
call fcn.0040521c
push eax
call sub.kernel32.dll_CreateDirectoryA
jmp 0x4e23fc
mov ecx, dword [0x4e7b80]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x497514]
call fcn.0049bc48
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x14]
call fcn.0049c9bc
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, 0x4e25d4
mov eax, dword [ebp - 0x14]
call fcn.0049e570
lea ecx, [ebp - 0x18]
mov edx, 0x4e25e4
mov eax, dword [ebp - 0x14]
call fcn.0049d254
lea eax, [ebp - 0x1a0]
mov edx, 0x4e25c4
call fcn.00415be0
lea ecx, [ebp - 0x1a0]
mov edx, 0x4e25f0
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax]
call dword [ebx + 0x58]
push dword [ebp - 4]
push 0x4e2600
push 0x4e260c
lea eax, [ebp - 0x1a4]
mov edx, 3
call fcn.004050dc
mov eax, dword [ebp - 0x1a4]
lea ecx, [ebp - 0x180]
mov edx, 0x3f
call fcn.0040a310
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4e23bf
mov eax, dword [ebp - 0x174]
mov edx, 0x4e2618
call fcn.00405168
je 0x4e23a7
mov eax, dword [ebp - 0x174]
mov edx, 0x4e2624
call fcn.00405168
je 0x4e23a7
cmp dword [ebp - 0x178], 0x10
jne 0x4e1ef8
push 0
lea eax, [ebp - 0x1c]
push eax
mov cl, 1
mov edx, 0x4e262c
mov eax, dword [ebp - 0x14]
call fcn.0049d340
lea eax, [ebp - 0x1b4]
mov edx, dword [ebp - 0x174]
call fcn.00415be0
lea ecx, [ebp - 0x1b4]
mov edx, 0x4e25f0
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0x58]
jmp 0x4e20c2
push 0
lea eax, [ebp - 0x1c]
push eax
mov cl, 1
mov edx, 0x4e2638
mov eax, dword [ebp - 0x14]
call fcn.0049d340
lea eax, [ebp - 0x1c8]
push eax
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 0x174]
call fcn.0040a4ac
mov eax, dword [ebp - 0x1cc]
call fcn.0040501c
push eax
mov eax, dword [ebp - 0x174]
call fcn.0040501c
mov ecx, eax
pop eax
sub ecx, eax
mov edx, 1
mov eax, dword [ebp - 0x174]
call fcn.0040527c
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
call fcn.00415be0
lea ecx, [ebp - 0x1c4]
mov edx, 0x4e25f0
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0x58]
lea eax, [ebp - 0x1e4]
push eax
lea edx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x174]
call fcn.0040a4ac
mov eax, dword [ebp - 0x1e8]
call fcn.0040501c
dec eax
push eax
lea edx, [ebp - 0x1ec]
mov eax, dword [ebp - 0x174]
call fcn.0040a4ac
mov eax, dword [ebp - 0x1ec]
call fcn.0040501c
push eax
mov eax, dword [ebp - 0x174]
call fcn.0040501c
mov edx, eax
pop eax
sub edx, eax
add edx, 2
mov eax, dword [ebp - 0x174]
pop ecx
call fcn.0040527c
mov eax, dword [ebp - 0x1e4]
lea edx, [ebp - 0x1e0]
call fcn.004095cc
mov edx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1dc]
call fcn.00415be0
lea ecx, [ebp - 0x1dc]
mov edx, 0x4e2644
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0x58]
lea eax, [ebp - 0x204]
mov ecx, dword [ebp - 0x174]
mov edx, 0x4e2654
call fcn.00405068
mov eax, dword [ebp - 0x204]
call fcn.004df458
lea edx, [ebp - 0x200]
call fcn.00409c50
mov edx, dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
call fcn.00415be0
lea ecx, [ebp - 0x1fc]
mov edx, 0x4e2664
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0x58]
push 0x10
lea eax, [ebp - 0x208]
mov ecx, dword [ebp - 0x174]
mov edx, 0x4e2654
call fcn.00405068
mov ecx, dword [ebp - 0x208]
mov dl, 1
mov eax, dword [0x419ec8]
call fcn.0041f060
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x21c]
mov eax, dword [ebp - 0x24]
call fcn.004de358
mov edx, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
call fcn.00415be0
lea ecx, [ebp - 0x218]
mov edx, 0x4e2670
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0x58]
mov eax, dword [ebp - 0x24]
call fcn.00403e4c
push dword [ebp - 4]
push 0x4e2600
push dword [ebp - 0x174]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004050dc
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0xc]
call fcn.004de3c0
mov esi, eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4e238b
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
push 0
lea eax, [ebp - 0x20]
push eax
mov cl, 1
mov edx, 0x4e2638
mov eax, dword [ebp - 0x14]
call fcn.0049d340
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x234]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x234]
call fcn.0040501c
push eax
lea ecx, [ebp - 0x23c]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 0x238]
call fcn.0040a4ac
mov eax, dword [ebp - 0x238]
call fcn.0040501c
pop edx
sub edx, eax
push edx
lea ecx, [ebp - 0x240]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x240]
mov edx, 1
pop ecx
call fcn.0040527c
mov edx, dword [ebp - 0x230]
lea eax, [ebp - 0x22c]
call fcn.00415be0
lea ecx, [ebp - 0x22c]
mov edx, 0x4e25f0
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0x58]
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x260]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x260]
lea edx, [ebp - 0x25c]
call fcn.0040a4ac
mov eax, dword [ebp - 0x25c]
call fcn.0040501c
dec eax
push eax
lea ecx, [ebp - 0x264]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x264]
call fcn.0040501c
push eax
lea ecx, [ebp - 0x26c]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 0x268]
call fcn.0040a4ac
mov eax, dword [ebp - 0x268]
call fcn.0040501c
pop edx
sub edx, eax
add edx, 2
push edx
lea ecx, [ebp - 0x270]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x270]
pop edx
pop ecx
call fcn.0040527c
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.004095cc
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x250]
call fcn.00415be0
lea ecx, [ebp - 0x250]
mov edx, 0x4e2644
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0x58]
push dword [ebp - 0xc]
push 0x4e2600
lea ecx, [ebp - 0x28c]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x28c]
lea eax, [ebp - 0x288]
mov edx, 3
call fcn.004050dc
mov eax, dword [ebp - 0x288]
call fcn.004df458
lea edx, [ebp - 0x284]
call fcn.00409c50
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0x280]
call fcn.00415be0
lea ecx, [ebp - 0x280]
mov edx, 0x4e2664
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0x58]
push 0x10
push dword [ebp - 0xc]
push 0x4e2600
lea ecx, [ebp - 0x294]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x294]
lea eax, [ebp - 0x290]
mov edx, 3
call fcn.004050dc
mov ecx, dword [ebp - 0x290]
mov dl, 1
mov eax, dword [0x419ec8]
call fcn.0041f060
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x2a8]
mov eax, dword [ebp - 0x24]
call fcn.004de358
mov edx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x2a4]
call fcn.00415be0
lea ecx, [ebp - 0x2a4]
mov edx, 0x4e2670
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0x58]
mov eax, dword [ebp - 0x24]
call fcn.00403e4c
lea edx, [ebp - 0x2ac]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x18]
inc ebx
dec dword [ebp - 0x28]
jne 0x4e2104
lea edx, [ebp - 0x2b0]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x18]
lea eax, [ebp - 0x180]
call fcn.0040a360
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4e1e85
lea eax, [ebp - 0x180]
call fcn.0040a384
lea eax, [ebp - 0x2b4]
mov edx, dword [ebp - 8]
call fcn.00405628
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x14]
mov si, 0xffe7
call fcn.00404054
xor edx, edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x14]
call fcn.00403e4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e2581
lea eax, [ebp - 0x2b4]
call fcn.004054a4
lea eax, [ebp - 0x2b0]
mov edx, dword [0x495d90]
mov ecx, 2
call fcn.00405a98
lea eax, [ebp - 0x2a8]
call fcn.00404d5c
lea eax, [ebp - 0x2a4]
call fcn.00411504
lea eax, [ebp - 0x294]
mov edx, 5
call fcn.00404d80
lea eax, [ebp - 0x280]
call fcn.00411504
lea eax, [ebp - 0x270]
mov edx, 8
call fcn.00404d80
lea eax, [ebp - 0x250]
call fcn.00411504
lea eax, [ebp - 0x240]
mov edx, 5
call fcn.00404d80
lea eax, [ebp - 0x22c]
call fcn.00411504
lea eax, [ebp - 0x21c]
call fcn.00404d5c
lea eax, [ebp - 0x218]
call fcn.00411504
lea eax, [ebp - 0x208]
mov edx, 3
call fcn.00404d80
lea eax, [ebp - 0x1fc]
call fcn.00411504
lea eax, [ebp - 0x1ec]
mov edx, 2
call fcn.00404d80
lea eax, [ebp - 0x1e4]
call fcn.00404d5c
lea eax, [ebp - 0x1e0]
call fcn.00404d5c
lea eax, [ebp - 0x1dc]
call fcn.00411504
lea eax, [ebp - 0x1cc]
call fcn.00404d5c
lea eax, [ebp - 0x1c8]
call fcn.00404d5c
lea eax, [ebp - 0x1c4]
mov edx, dword [0x4010f4]
mov ecx, 2
call fcn.00405a98
lea eax, [ebp - 0x1a4]
call fcn.00404d5c
lea eax, [ebp - 0x1a0]
call fcn.00411504
lea eax, [ebp - 0x190]
mov edx, 4
call fcn.00404d80
lea eax, [ebp - 0x180]
mov edx, dword [0x40882c]
call fcn.00405a4c
lea eax, [ebp - 0x20]
mov edx, dword [0x495d60]
mov ecx, 3
call fcn.00405a98
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404d80
ret