Function at 0x495d3b
Capabilities:
Create directory
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a1a42
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x4d2a20]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x18]
push eax
call fcn.0049a528
mov ecx, eax
call fcn.004998ee
and dword [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00420cd9
movzx eax, al
test eax, eax
jne 0x495dac
lea ecx, [ebp - 0x18]
call fcn.00413706
push eax
call fcn.0040808d
pop ecx
test eax, eax
jne 0x495dac
push 0
lea ecx, [ebp - 0x18]
call fcn.00413706
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
lea eax, [ebp - 0x18]
push eax
call fcn.0048bca2
pop ecx
push 1
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0048bd93
add esp, 0xc
mov byte [ebp - 4], 1
push 0x4ba378
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00402e88
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.00413706
push eax
call fcn.0040808d
pop ecx
test eax, eax
jne 0x495e26
and dword [ebp - 0x28], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00406df8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00406df8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00406df8
mov eax, dword [ebp - 0x28]
jmp 0x495f89
push 0x4ba394
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00402e88
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.00413706
push eax
call fcn.0040808d
pop ecx
test eax, eax
jne 0x495e8e
and dword [ebp - 0x2c], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00406df8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00406df8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00406df8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00406df8
mov eax, dword [ebp - 0x2c]
jmp 0x495f89
push 0x4ba3b8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402e88
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x14]
call fcn.00413706
push eax
call fcn.0040808d
pop ecx
test eax, eax
jne 0x495f42
lea ecx, [ebp - 0x14]
call fcn.00413706
push eax
lea ecx, [ebp - 0x10]
call fcn.00413706
push eax
call fcn.0048b6f8
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x14]
call fcn.00413706
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x4ba3d4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00402e88
add esp, 0xc
lea ecx, [ebp - 0x24]
call fcn.00413706
push eax
call fcn.0040808d
pop ecx
test eax, eax
jne 0x495f3a
lea ecx, [ebp - 0x24]
call fcn.00413706
push eax
lea ecx, [ebp - 0x1c]
call fcn.00413706
push eax
call fcn.0048b6f8
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x24]
call fcn.00413706
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x24]
call fcn.00406df8
call fcn.0048ee1f
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00406df8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00406df8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00406df8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00406df8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00406df8
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
leave
ret