Function at 0x418f92
Capabilities:
Create directory
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x81fc
call fcn.0042fc10
mov eax, dword [0x43e078]
xor eax, esp
mov dword [esp + 0x81f8], eax
push ebx
push esi
push edi
push 0x437786
lea esi, [esp + 0x50]
call fcn.00412143
call fcn.004128af
push eax
push str.abc_
lea esi, [esp + 0x18]
lea eax, [esp + 0x54]
call fcn.00412265
lea esi, [esp + 0x20]
call fcn.00412265
lea esi, [esp + 0x4c]
call fcn.004121e9
mov eax, dword [esp + 0x1c]
call fcn.00402910
mov eax, dword [esp + 0x10]
call fcn.00402910
xor edi, edi
mov esi, 0x1f0003
jmp 0x41900d
push eax
call dword [0x642060]
push dword [esp + 0x4c]
push edi
push esi
call dword [0x64202c]
cmp eax, edi
jne 0x419006
push dword [esp + 0x4c]
push edi
push edi
push edi
call dword [0x6421a4]
push 0x437787
lea esi, [esp + 0xec]
mov dword [esp + 0xc4], eax
call fcn.00412143
lea eax, [esp + 0x58]
call fcn.004198ca
push 0x4377fe
lea esi, [esp + 0x5c]
mov dword [esp + 0xd0], edi
mov dword [esp + 0xc8], edi
mov dword [esp + 0xcc], edi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd8], edi
mov dword [esp + 0xe8], edi
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], edi
call fcn.004121a5
push 0x4377ff
lea esi, [esp + 0x88]
call fcn.004121a5
mov ecx, 0xc7
mov dword [esp + 0xa4], edi
mov dword [esp + 0xb0], 1
mov dword [esp + 0x98], edi
mov dword [esp + 0x94], edi
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], 0x9c40
mov dword [esp + 0xbc], edi
mov dword [0x641ff8], edi
mov dword [0x641ff0], edi
mov dword [0x641fec], edi
mov edx, ecx
lea eax, [esp + 0x62d4]
mov dword [eax - 0xc], edi
mov dword [eax - 0x14], edi
mov dword [eax - 0x10], edi
mov dword [eax + 4], edi
mov dword [eax - 4], edi
mov dword [eax], edi
add eax, 0x28
dec edx
jns 0x419117
lea eax, [esp + 0x4cf4]
mov dword [eax - 0xc], edi
mov dword [eax - 0x14], edi
mov dword [eax - 0x10], edi
mov dword [eax + 4], edi
mov dword [eax - 4], edi
mov dword [eax], edi
add eax, 0x1c
dec ecx
jns 0x419135
push 0x63
lea esi, [esp + 0x1c74]
pop ebx
mov ecx, esi
call fcn.00419942
add esi, 0x3c
dec ebx
jns 0x419156
push 0x63
pop ebx
mov ecx, ebx
lea eax, [esp + 0xb54]
mov dword [eax - 0xc], edi
mov dword [eax - 0x14], edi
mov dword [eax - 0x10], edi
mov dword [eax + 4], edi
mov dword [eax - 4], edi
mov dword [eax], edi
mov dword [eax + 0x10], edi
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
add eax, 0x2c
dec ecx
jns 0x41916f
lea esi, [esp + 0x33e0]
mov ecx, esi
call fcn.004199d8
add esi, 0x40
dec ebx
jns 0x419196
push 0x31
lea esi, [esp + 0x11c]
pop ebx
mov ecx, esi
call fcn.00419a00
add esi, 0x34
dec ebx
jns 0x4191ad
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x3c], edi
call fcn.00402edf
call fcn.0041a132
push 0xc
pop ebx
lea edi, [esp + 0x1c]
call fcn.004138a6
lea esi, [esp + 0x70]
call fcn.004121e9
mov eax, dword [esp + 0x1c]
call fcn.00402910
push 0x437803
lea esi, [esp + 0x20]
call fcn.00412143
push dword [0x641df0]
lea esi, [esp + 0x44]
lea eax, [esp + 0x20]
call fcn.00412265
lea edi, [esp + 0x70]
lea esi, [esp + 0x10]
call fcn.00412223
lea esi, [esp + 0x1c]
call fcn.004121e9
mov eax, dword [esp + 0x10]
call fcn.00402910
mov eax, dword [esp + 0x40]
call fcn.00402910
push 0
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
sub esp, 0x68
lea ebx, [esp + 0xc0]
mov edi, esp
call fcn.00401ced
lea eax, [esp + 0x15c]
push eax
call fcn.00418705
add esp, 0x6c
mov ebx, eax
lea edi, [esp + 0xc4]
call fcn.00419a28
lea esi, [esp + 0xf4]
call fcn.00418ada
mov eax, edi
lea esi, [esp + 0x58]
call fcn.004121e9
lea eax, [esp + 0xd0]
lea esi, [esp + 0x64]
call fcn.004121e9
lea eax, [esp + 0x58]
lea esi, [esp + 0x10]
call fcn.00412175
push str._1235456
lea esi, [esp + 0x44]
lea eax, [esp + 0x14]
call fcn.00412265
lea esi, [esp + 0x10]
call fcn.004121e9
mov eax, dword [esp + 0x40]
call fcn.00402910
lea edi, [esp + 0xdc]
lea esi, [esp + 0x40]
lea eax, [esp + 0x10]
call fcn.00412223
lea esi, [esp + 0x10]
call fcn.004121e9
mov eax, dword [esp + 0x40]
call fcn.00402910
xor ebx, ebx
push ebx
push ebx
push ebx
push 1
push dword [esp + 0x74]
call dword [0x642104]
mov dword [esp + 0x7c], eax
push ebx
push ebx
push ebx
push 1
push dword [esp + 0x74]
call dword [0x642104]
sub esp, 0xc
mov edi, esp
sub esp, 0xc
mov dword [esp + 0x98], eax
lea eax, [esp + 0x7c]
mov esi, esp
call fcn.00412175
sub esp, 0xc
mov esi, esp
push str.68fa61169d8a1f0521b8a06aa1f33efb
call fcn.00412143
sub esp, 0xc
mov ecx, esp
call fcn.004125fe
sub esp, 0xc
lea eax, [esp + 0x94]
mov esi, esp
call fcn.00412175
mov ecx, edi
call fcn.00404a56
add esp, 0x30
lea edi, [esp + 0x64]
call fcn.004156ff
add esp, 0xc
cmp dword [esp + 0xb8], ebx
jne 0x41938e
mov dword [esp + 0xb8], 0xcb20
sub esp, 0xc
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c7c
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edi, [esp + 0x34]
lea ebx, [esp + 0x1c7c]
call fcn.0041514a
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c80
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edi, [esp + 0x34]
lea ebx, [esp + 0x62cc]
call fcn.00414ea7
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c84
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edi, [esp + 0x34]
lea ebx, [esp + 0x4cec]
call fcn.00414fdf
sub esp, 0x5c
lea ebx, [esp + 0xc0]
mov edi, esp
call fcn.00401ced
call fcn.004158c3
add esp, 0x5c
lea eax, [esp + 0x70]
mov esi, esp
call fcn.00412175
sub esp, 0xc
mov esi, esp
push dword [esp + 0x28]
call fcn.00412143
call fcn.0040515f
push 6
pop ecx
mov edi, esp
push edx
push eax
lea esi, [esp + 0x48]
sub esp, 0x68
rep movsd dword es:[edi], dword [esi]
mov edi, esp
call fcn.00401ced
lea eax, [esp + 0x1cf8]
push eax
lea eax, [esp + 0x4d6c]
push eax
lea eax, [esp + 0x6350]
push eax
call fcn.0040fabd
add esp, 0x94
cmp dword [esp + 0x98], 0
je 0x419543
sub esp, 0xc
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c88
call fcn.00412143
sub esp, 0x68
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edi, [esp + 0x34]
lea ebx, [esp + 0xb4c]
call fcn.004151fc
sub esp, 0xc
push 6
pop ecx
mov esi, edi
mov edi, esp
sub esp, 0x68
rep movsd dword es:[edi], dword [esi]
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
lea eax, [esp + 0xbc0]
call fcn.0040273e
add esp, 0x80
cmp dword [esp + 0xb4], 0
je 0x4195c2
sub esp, 0xc
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c8c
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edi, [esp + 0x34]
lea ebx, [esp + 0x124]
call fcn.00414de6
sub esp, 0xc
push 6
pop ecx
mov esi, edi
mov edi, esp
sub esp, 0x68
rep movsd dword es:[edi], dword [esi]
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
lea eax, [esp + 0x198]
call fcn.00414d5e
add esp, 0x80
sub esp, 0xc
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c90
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edx, [esp + 0x34]
lea ecx, [esp + 0x33ec]
call fcn.004152cc
sub esp, 0xc
push 6
pop ecx
mov edi, esp
lea esi, [esp + 0x40]
sub esp, 0x68
rep movsd dword es:[edi], dword [esi]
mov edi, esp
call fcn.00401ced
lea eax, [esp + 0x3460]
call fcn.004170cd
xor esi, esi
add esp, 0x80
cmp dword [esp + 0xa8], esi
je 0x41965b
sub esp, 0x68
mov edi, esp
call fcn.00401ced
call fcn.004173aa
mov edi, esp
call fcn.00401ced
call fcn.00418d06
add esp, 0x68
cmp dword [esp + 0x9c], esi
je 0x41967d
sub esp, 0x68
lea ebx, [esp + 0xc0]
mov edi, esp
call fcn.00401ced
call fcn.00417b46
add esp, 0x68
cmp dword [esp + 0xa0], esi
je 0x41969f
sub esp, 0x68
lea ebx, [esp + 0xc0]
mov edi, esp
call fcn.00401ced
call fcn.0041807f
add esp, 0x68
cmp dword [esp + 0xbc], esi
je 0x4196ce
sub esp, 0x68
lea ebx, [esp + 0xc0]
mov edi, esp
call fcn.00401ced
call fcn.0041820c
add esp, 0x68
jmp 0x4196ce
push 0x3e8
call dword [0x642038]
cmp dword [0x641ff0], esi
ja 0x4196c3
cmp dword [esp + 0xa4], esi
je 0x4196f8
sub esp, 0x68
lea ebx, [esp + 0xc0]
mov edi, esp
call fcn.00401ced
call fcn.00413bb1
add esp, 0x68
cmp dword [esp + 0xb4], esi
jne 0x419776
sub esp, 0xc
mov dword [esp + 0x18], esp
sub esp, 0xc
mov esi, esp
push 0x437c94
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
mov ecx, dword [esp + 0x8c]
call fcn.00405e61
add esp, 0x74
lea edi, [esp + 0x34]
lea ebx, [esp + 0x124]
call fcn.00414de6
sub esp, 0xc
push 6
pop ecx
mov esi, edi
mov edi, esp
sub esp, 0x68
rep movsd dword es:[edi], dword [esi]
lea ebx, [esp + 0xd8]
mov edi, esp
call fcn.00401ced
lea eax, [esp + 0x198]
call fcn.00414d5e
add esp, 0x80
sub esp, 0xc
mov esi, esp
push 0x437c98
call fcn.00412143
sub esp, 0x68
lea ebx, [esp + 0xcc]
mov edi, esp
call fcn.00401ced
lea ecx, [esp + 0xb4]
call fcn.00405e61
mov eax, dword [esp + 0xb4]
add esp, 0x74
call fcn.00402910
mov ecx, dword [esp + 0x1c]
call fcn.00414387
call fcn.00418d90
push dword [esp + 0xc0]
call dword [0x642060]
sub esp, 0x68
mov edi, esp
call fcn.00401ced
call fcn.00419a4c
mov eax, dword [esp + 0x78]
add esp, 0x68
call fcn.00402910
mov eax, dword [esp + 0x1c]
call fcn.00402910
push 0x31
lea esi, [esp + 0xb44]
pop edi
sub esi, 0x34
mov ecx, esi
call fcn.00414d3b
dec edi
jns 0x4197fa
push 0x63
lea esi, [esp + 0x4ce4]
pop edi
sub esi, 0x40
mov ecx, esi
call fcn.004170aa
dec edi
jns 0x419811
push 0x63
lea esi, [esp + 0x1c74]
pop edi
sub esi, 0x2c
mov ecx, esi
call fcn.004199bd
dec edi
jns 0x419828
push 0x63
lea esi, [esp + 0x33e4]
pop edi
sub esi, 0x3c
mov ecx, esi
call fcn.00419973
dec edi
jns 0x41983f
mov edi, 0xc7
lea esi, [esp + 0x62c0]
mov ebx, edi
mov eax, dword [esi - 0xc]
sub esi, 0x1c
call fcn.00402910
mov eax, dword [esi]
call fcn.00402910
dec ebx
jns 0x41985a
lea esi, [esp + 0x8200]
mov eax, dword [esi - 0x18]
sub esi, 0x28
call fcn.00402910
mov eax, dword [esi]
call fcn.00402910
dec edi
jns 0x419876
lea esi, [esp + 0xc4]
call fcn.00418ada
lea esi, [esp + 0x58]
call fcn.00401cce
mov eax, dword [esp + 0xe8]
call fcn.00402910
mov eax, dword [esp + 0x4c]
call fcn.00402910
mov ecx, dword [esp + 0x8204]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041e88c
mov esp, ebp
pop ebp
ret