Function at 0x4471f0
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x4a3681
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x4eed38]
xor eax, esp
mov dword [esp + 0x26c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4eed38]
xor eax, esp
push eax
lea eax, [esp + 0x284]
mov dword fs:[0], eax
mov eax, dword [esp + 0x294]
test eax, eax
je 0x44757e
push eax
lea ecx, [esp + 0x1c]
call fcn.00402530
lea ecx, [esp + 0x1c]
mov dword [esp + 0x28c], 0
call fcn.0045e668
push 0x4a8ca8
lea ecx, [esp + 0x18]
mov byte [esp + 0x290], 1
call fcn.00402530
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x30]
push eax
push ecx
mov byte [esp + 0x294], 2
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp dword [esp + 0x30], 0x10
mov edi, eax
jne 0x447304
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x28c], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4472be
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x28c], 0
call fcn.0045e894
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x28c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4472fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x447580
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x24]
call fcn.0045e6e9
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
xor esi, esi
test eax, eax
jle 0x4473a8
test esi, esi
jl 0x44740c
cmp esi, eax
jg 0x44740c
movzx ecx, word [ecx + esi*2]
movzx edx, cx
cmp dx, 0x5c
je 0x447356
cmp esi, eax
jg 0x44740c
movzx eax, cx
push eax
lea ecx, [esp + 0x18]
call fcn.00446bb0
jmp 0x447379
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.0045e9e3
push 1
push 0x4accf8
lea ecx, [esp + 0x1c]
call fcn.00401ae0
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
dec eax
cmp esi, eax
jne 0x44739c
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.0045e9e3
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
inc esi
cmp esi, eax
jl 0x447322
mov ebp, dword [sym.imp.KERNEL32.dll_FindClose]
push edi
call ebp
mov eax, dword [esp + 0x24]
mov esi, 1
cmp eax, esi
jle 0x447430
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ebx, [ebx]
test esi, esi
jl 0x44751b
cmp esi, eax
jge 0x44751b
mov edx, dword [esp + 0x20]
lea eax, [edx + esi*4]
push eax
lea ecx, [esp + 0x18]
call fcn.00401c20
mov eax, dword [esp + 0x14]
push 0
push eax
call edi
test eax, eax
je 0x447416
mov ecx, dword [esp + 0x14]
push 0x80
push ecx
call ebx
jmp 0x447427
push 0x80070057
call fcn.00401150
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4474b4
mov eax, dword [esp + 0x24]
inc esi
cmp esi, eax
jl 0x4473d0
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x30]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
or edi, 0xffffffff
push edi
push 0
lea ecx, [esp + 0x24]
mov esi, eax
call fcn.0045e6e9
cmp dword [esp + 0x30], 0x10
push esi
jne 0x447520
call ebp
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x28c], 1
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x447486
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x28c], 0
call fcn.0045e894
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x28c], edi
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edi
dec edi
test edi, edi
jmp 0x4472ee
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x24]
call fcn.0045e6e9
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x28c], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4474e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x28c], 0
call fcn.0045e894
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x28c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x447572
call fcn.00451f1d
call ebp
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x28c], 1
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x447549
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x28c], 0
call fcn.0045e894
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x28c], edi
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edi
dec edi
test edi, edi
jg 0x44757e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x284]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x26c]
xor ecx, esp
call fcn.004820da
add esp, 0x27c
ret