Function at 0x4103cd
Capabilities:
Create directory

Disassembly:
mov eax, 0x5b1a02
call fcn.005b0d74
sub esp, 0x88
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x38], 0xf
push edi
mov esi, ecx
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
mov dword [ebp - 4], ebx
cmp dword [esi + 0x14], 0x10
mov edi, dword [esi + 0x10]
jb 0x4103ff
mov ecx, dword [esi]
push 1
push 0x5ff818
push ebx
mov edx, edi
call fcn.00411487
add esp, 0xc
test eax, eax
jne 0x410470
lea eax, [edi - 1]
mov ecx, esi
push eax
push 1
lea eax, [ebp - 0x7c]
push eax
call fcn.00410e6d
mov esi, eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.00410201
push esi
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34]
call fcn.004111a4
pop ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00410fb3
lea ecx, [ebp - 0x34]
call fcn.0040672a
lea ecx, [ebp - 0x94]
call fcn.0040672a
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040672a
jmp 0x410489
lea eax, [ebp - 0x4c]
cmp eax, esi
je 0x410489
cmp dword [esi + 0x14], 0x10
jb 0x41047f
mov esi, dword [esi]
push edi
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040682d
mov al, 0x2e
mov byte [ebp - 0xf], bl
xor al, bl
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xe], al
lea eax, [ebp - 0xe]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00410ed6
mov esi, eax
mov byte [ebp - 0xd], bl
mov al, pe_nt_image_headers32
mov cl, 0xdc
xor cl, al
mov byte [ebp - 0xf], al
push ecx
lea eax, [ebp - 0xe]
mov byte [ebp - 0xe], cl
push eax
lea ecx, [ebp - 0x4c]
call fcn.00410ed6
cmp esi, eax
jbe 0x4104e5
inc eax
lea ecx, [ebp - 0x4c]
push eax
push ebx
lea eax, [ebp - 0x7c]
push eax
call fcn.00410e6d
push eax
lea ecx, [ebp - 0x4c]
call fcn.00410fb3
lea ecx, [ebp - 0x7c]
call fcn.0040672a
mov byte [ebp - 0x10], bl
lea edx, [ebp - 0x4c]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x34]
call fcn.004115dd
pop ecx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.00411cf7
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0
mov bl, al
call fcn.00412ad9
test bl, bl
jne 0x410637
xor ebx, ebx
lea ecx, [ebp - 0x34]
mov al, 0x5c
mov byte [ebp - 0xf], bl
xor al, bl
mov byte [ebp - 0xd], bl
push 0xf
mov byte [ebp - 0xe], al
lea eax, [ebp - 0xe]
pop esi
push eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], esi
mov byte [ebp - 0x34], bl
call fcn.00406876
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
call fcn.0040ff41
pop ecx
lea ecx, [ebp - 0x34]
call fcn.0040672a
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], esi
mov byte [ebp - 0x64], bl
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x4105ee
mov byte [ebp - 0x10], bl
push 0x5ff814
mov edx, esi
lea ecx, [ebp - 0x7c]
call fcn.00411136
pop ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 8
call fcn.004122c5
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 7
call fcn.0040672a
push dword [ebp - 0x10]
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x34]
call fcn.004115dd
pop ecx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00411cf7
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 7
mov bl, al
call fcn.00412ad9
test bl, bl
jne 0x4105e3
cmp dword [ebp - 0x50], 0x10
lea eax, [ebp - 0x64]
cmovae eax, dword [ebp - 0x64]
xor ebx, ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
jmp 0x4105e5
xor ebx, ebx
push 0x18
pop eax
add esi, eax
cmp esi, edi
jne 0x410576
lea ecx, [ebp - 0x64]
call fcn.0040672a
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x410637
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x410617
mov ecx, esi
call fcn.0040672a
push 0x18
pop eax
add esi, eax
cmp esi, edi
jne 0x410604
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
sub eax, esi
push 0x18
pop ecx
cdq
idiv ecx
imul eax, eax, 0x18
push eax
push esi
call fcn.004024e9
pop ecx
pop ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0x4c]
call fcn.0040672a
mov ecx, dword [ebp - 0xc]
mov al, 1
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret