Function at 0x41ba39
Capabilities:
Create directory

Disassembly:
sub esp, 0x428
mov byte [0x4c2e2d], 0
push ebx
push ebp
push esi
push edi
mov esi, edx
mov edi, ecx
call fcn.0041c763
mov ebp, 0x497a60
lea ecx, [esp + 0x1c]
push ebp
call fcn.00402244
lea ecx, [esp + 0x444]
call fcn.0040229a
push ecx
mov ecx, esp
test al, al
je 0x41ba82
push ebp
call fcn.00402244
call fcn.00416e87
jmp 0x41ba94
lea eax, [esp + 0x448]
push eax
call fcn.00402274
call fcn.0041b9d4
pop ecx
lea ecx, [esp + 0x14]
call fcn.00402286
push str..log
lea ecx, [esp + 0x1c]
call fcn.00416e48
mov ecx, eax
call fcn.0040590f
push eax
mov ebx, 0x49a36c
lea eax, [esp + 0x1c]
push ebx
push eax
call fcn.0040289a
add esp, 0x10
lea ecx, [esp + 0x18]
call fcn.0040223f
lea eax, [esp + 0x14]
mov ecx, 0x4c30e8
push eax
call fcn.0040222d
push str.Connect.log
mov ecx, 0x4c30e8
call fcn.0040590f
push eax
push ebx
mov ebx, 0x4c30e4
push ebx
call fcn.0040289a
add esp, 0x10
mov ecx, 0x4c30f0
push edi
call fcn.0040221b
push ebp
push esi
call fcn.00463964
pop ecx
pop ecx
test eax, eax
je 0x41bb21
push esi
mov ecx, 0x4c30f4
call fcn.0040221b
push ebp
push esi
call fcn.00463964
pop ecx
pop ecx
test eax, eax
je 0x41bb3d
push str.Connect.log
mov ecx, 0x4c30ec
call fcn.0040221b
call fcn.0041b907
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x4c2e44], eax
lea eax, [esp + 0x230]
push 0x104
push eax
call fcn.0046c9d1
pop ecx
pop ecx
test eax, eax
je 0x41bd79
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
lea ecx, [esp + 0x20]
mov dword [0x4c2e30], eax
call fcn.0041b432
lea ecx, [esp + 0x20]
call fcn.0041b42a
and dword [0x4c2e3c], 0
mov ecx, 0x4c30e8
mov edi, eax
call fcn.00402642
push eax
call fcn.004667ba
mov cx, word [0x497a60]
neg eax
mov dword [esp], 0x206
sbb esi, esi
mov word [esp + 0x2c], cx
lea eax, [esp + 0x2e]
and esi, 1
push 0
push eax
call fcn.0045b550
add esp, 0xc
lea eax, [esp + 0x28]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push ebp
mov ecx, ebx
call fcn.00402642
push eax
call fcn.00463964
pop ecx
pop ecx
test eax, eax
jne 0x41bc0c
mov ecx, 0x4c30e8
call fcn.0040590f
push eax
push str._sLogFile.log
push ebx
call fcn.0040289a
add esp, 0xc
push str.r_n:w
mov ecx, ebx
call fcn.00402642
push eax
call fcn.0046464a
mov dword [0x4c2e34], eax
pop ecx
pop ecx
test eax, eax
je 0x41bd68
push 0x80
mov ecx, ebx
call fcn.00402642
push eax
call fcn.0046c5ad
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x41bd79
push dword [0x4c2e34]
call fcn.0046c3f2
mov ebp, 0xffff
jmp 0x41bc73
cmp ax, 0xa
jne 0x41bc68
inc dword [0x4c2e3c]
push dword [0x4c2e34]
call fcn.0046c3f2
movzx eax, ax
pop ecx
cmp ax, bp
jne 0x41bc5c
push dword [0x4c2e34]
mov byte [0x4c2e2e], 1
call fcn.0046471f
pop ecx
test esi, esi
je 0x41bd79
push 0x4af2c0
mov ecx, ebx
call fcn.00402642
push eax
call fcn.0046464a
mov dword [0x4c2e34], eax
pop ecx
pop ecx
test eax, eax
je 0x41bd79
push str._n_n_n
push eax
call fcn.00406cd4
pop ecx
pop ecx
mov ecx, 0x4c30f4
call fcn.0040590f
push eax
mov ecx, 0x4c30f0
call fcn.0040590f
push eax
mov eax, dword [edi + 0x14]
add eax, 0x76c
push eax
mov eax, dword [edi + 0x10]
inc eax
push eax
push dword [edi + 0xc]
push str._t_t_tLogging_started_from:___.2d__.2d__.4d__GMT___n_t_t_tProduct_Name:__s__n_t_t_tVersion:__s
push dword [0x4c2e34]
call fcn.00406cd4
add esp, 0x1c
push str._n_n
push dword [0x4c2e34]
call fcn.00406cd4
pop ecx
pop ecx
mov ecx, ebx
call fcn.0040590f
push eax
mov esi, 0x4af444
push esi
push dword [0x4c2e34]
call fcn.00406cd4
add esp, 0xc
lea eax, [esp + 0x28]
push eax
push esi
push dword [0x4c2e34]
call fcn.00406cd4
add esp, 0xc
push str.PDT_TIME_STARTED_n
push dword [0x4c2e34]
call fcn.00406cd4
push dword [0x4c2e34]
add dword [0x4c2e3c], 9
call fcn.0046471f
add esp, 0xc
jmp 0x41bd79
call fcn.00462f9e
cmp dword [eax], 2
je 0x41bd79
mov byte [0x4c2e2d], 1
lea ecx, [esp + 0x14]
call fcn.0040223f
lea ecx, [esp + 0x1c]
call fcn.0040223f
lea ecx, [esp + 0x444]
call fcn.0040223f
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x428
ret