Function at 0x4049e0
Capabilities:
Create directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x6c0558]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x4c], ecx
xor ebx, ebx
mov esi, 0x1d4
nop
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404a2a
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404a23
mov ecx, eax
call fcn.00404460
jmp 0x404a25
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax + 0xbc], 1
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404a5f
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404a58
mov ecx, eax
call fcn.00404460
jmp 0x404a5a
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax], edi
cmp ebx, 5
jge 0x404aff
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404a95
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404a8e
mov ecx, eax
call fcn.00404460
jmp 0x404a90
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x88], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404ac6
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404abf
mov ecx, eax
call fcn.00404460
jmp 0x404ac1
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x34], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404af4
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404aed
mov ecx, eax
call fcn.00404460
jmp 0x404aef
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax + 0x88], 1
cmp ebx, 4
jge 0x404b99
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404b32
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404b2b
mov ecx, eax
call fcn.00404460
jmp 0x404b2d
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x74], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404b60
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404b59
mov ecx, eax
call fcn.00404460
jmp 0x404b5b
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x20], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404b8e
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404b87
mov ecx, eax
call fcn.00404460
jmp 0x404b89
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax + 0x9c], 5
cmp ebx, 2
jge 0x404cc4
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404bcc
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404bc5
mov ecx, eax
call fcn.00404460
jmp 0x404bc7
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x64], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404bfa
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404bf3
mov ecx, eax
call fcn.00404460
jmp 0x404bf5
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x5c], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404c28
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404c21
mov ecx, eax
call fcn.00404460
jmp 0x404c23
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 0x10], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404c56
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404c4f
mov ecx, eax
call fcn.00404460
jmp 0x404c51
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax + 0xac], 5
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404c8b
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404c84
mov ecx, eax
call fcn.00404460
jmp 0x404c86
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax - 8], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404cb9
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404cb2
mov ecx, eax
call fcn.00404460
jmp 0x404cb4
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [esi + eax + 0xb4], 5
add esi, 4
inc ebx
cmp esi, 0x1ec
jl 0x404a00
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404cfe
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404cf7
mov ecx, eax
call fcn.00404460
jmp 0x404cf9
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x240], 0x1e
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404d32
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404d2b
mov ecx, eax
call fcn.00404460
jmp 0x404d2d
xor eax, eax
mov dword [0x6c1b20], eax
mov ebx, 1
mov dword [eax + 0x180], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404d67
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404d60
mov ecx, eax
call fcn.00404460
jmp 0x404d62
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x184], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404d97
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404d90
mov ecx, eax
call fcn.00404460
jmp 0x404d92
xor eax, eax
mov dword [0x6c1b20], eax
mov esi, 0xfa
mov dword [eax + 0x228], esi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404dcc
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404dc5
mov ecx, eax
call fcn.00404460
jmp 0x404dc7
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x22c], esi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404dfc
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404df5
mov ecx, eax
call fcn.00404460
jmp 0x404df7
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x188], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404e2c
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404e25
mov ecx, eax
call fcn.00404460
jmp 0x404e27
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x18c], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404e5c
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404e55
mov ecx, eax
call fcn.00404460
jmp 0x404e57
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x250], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404e8c
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404e85
mov ecx, eax
call fcn.00404460
jmp 0x404e87
xor eax, eax
mov dword [0x6c1b20], eax
mov esi, 3
mov dword [eax + 0x254], esi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404ec1
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404eba
mov ecx, eax
call fcn.00404460
jmp 0x404ebc
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x190], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404ef1
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404eea
mov ecx, eax
call fcn.00404460
jmp 0x404eec
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x12c], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404f21
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404f1a
mov ecx, eax
call fcn.00404460
jmp 0x404f1c
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0xf0], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404f51
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404f4a
mov ecx, eax
call fcn.00404460
jmp 0x404f4c
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0xf4], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404f81
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404f7a
mov ecx, eax
call fcn.00404460
jmp 0x404f7c
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0xf8], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404fb1
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404faa
mov ecx, eax
call fcn.00404460
jmp 0x404fac
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x194], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x404fe1
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x404fda
mov ecx, eax
call fcn.00404460
jmp 0x404fdc
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x198], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x405011
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x40500a
mov ecx, eax
call fcn.00404460
jmp 0x40500c
xor eax, eax
mov dword [0x6c1b20], eax
mov ebx, 5
mov dword [eax + 0x218], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x405046
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x40503f
mov ecx, eax
call fcn.00404460
jmp 0x405041
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x220], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x405076
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x40506f
mov ecx, eax
call fcn.00404460
jmp 0x405071
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x21c], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x4050a6
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x40509f
mov ecx, eax
call fcn.00404460
jmp 0x4050a1
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x258], esi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x4050d6
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x4050cf
mov ecx, eax
call fcn.00404460
jmp 0x4050d1
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x204], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x405106
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x4050ff
mov ecx, eax
call fcn.00404460
jmp 0x405101
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x19c], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x405136
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x40512f
mov ecx, eax
call fcn.00404460
jmp 0x405131
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0xfc], edi
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x405166
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x40515f
mov ecx, eax
call fcn.00404460
jmp 0x405161
xor eax, eax
mov dword [0x6c1b20], eax
mov ebx, 1
mov dword [eax + 0x10c], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x40519b
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x405194
mov ecx, eax
call fcn.00404460
jmp 0x405196
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x110], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x4051cb
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x4051c4
mov ecx, eax
call fcn.00404460
jmp 0x4051c6
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x118], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x4051fb
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x4051f4
mov ecx, eax
call fcn.00404460
jmp 0x4051f6
xor eax, eax
mov dword [0x6c1b20], eax
mov dword [eax + 0x120], ebx
mov eax, dword [0x6c1b20]
cmp eax, edi
jne 0x40522b
push 0x1d88
call fcn.0057ae31
add esp, 4
cmp eax, edi
je 0x405224
mov ecx, eax
call fcn.00404460
jmp 0x405226
xor eax, eax
mov dword [0x6c1b20], eax
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push edi
push str.data
mov dword [eax + 0x2a8], edi
call esi
push edi
push str.data_aiconfig
call esi
mov eax, dword [0x6cfd4c]
movzx ecx, word [eax + 0x129]
push ecx
lea edx, [ebp - 0x44]
push str.._data_aiconfig__d.dat
push edx
call fcn.0057acb0
push 0x599640
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x48]
push ecx
call fcn.0057ac69
mov eax, dword [ebp - 0x48]
add esp, 0x18
cmp eax, edi
je 0x4052a0
mov edx, dword [ebp - 0x4c]
push eax
push ebx
add edx, 0xec
push 0x1c64
push edx
call fcn.0057ab1c
mov eax, dword [ebp - 0x48]
push eax
call fcn.0057a951
add esp, 0x14
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0057ad52
mov esp, ebp
pop ebp
ret