Function at 0x40bb11
Capabilities:
Create directory

Disassembly:
mov eax, 0x4b3631
call fcn.004b3228
sub esp, 0x48
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], 0xe5477a75
mov dword [ebp - 0x30], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
xor esi, esi
inc esi
jmp 0x40bb4d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x18], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x40bb3f
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x40bb62
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffe3
je 0x40bd94
mov dword [ebp - 0x2c], 0x63070b7b
mov dword [ebp - 0x1c], ebx
jmp 0x40bb89
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40bb7b
mov dword [ebp - 0x1c], ebx
jmp 0x40bb9e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x48], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40bb94
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], 0xfffffffc
jle 0x40bca0
mov dword [ebp - 0x28], 0xfffffffa
cmp dword [ebp - 0x28], ebx
jne 0x40bca0
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40bc98
mov dword [ebp - 0x28], 0x4b29
cmp dword [ebp - 0x28], 0x4d6f
jle 0x40bc44
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov edi, ebx
mov edx, ebx
mov dword [ebp - 0x24], edx
lea eax, [edi + esi]
add eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, edx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
mov edx, dword [ebp - 0x24]
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x1e1c
mov eax, dword [ebp - 0x2c]
jl 0x40bbf4
inc edi
cmp edi, 0x2830
mov ecx, dword [ebp - 0x1c]
jl 0x40bbe7
inc esi
cmp esi, 0x5b98
jl 0x40bbe5
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x4a04
jl 0x40bbe3
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
xor esi, esi
inc esi
push 0x533
push 0x2428
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x28], 0x476d
jge 0x40bc6f
mov edx, str.vqc_krafobnk_twht
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40bc98
dec dword [ebp - 0x38]
jmp 0x40bba7
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x18]
jle 0x40bcab
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
sete cl
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
sete dl
mov ecx, dword [ebp - 0x38]
imul ecx, edx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x18]
sub ecx, eax
xor edx, edx
cmp ecx, 0x61d2
setl dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setge cl
xor edx, edx
add ecx, 0xe2
je 0x40bd3d
mov dword [ebp - 0x28], 0x7f1bd53d
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp eax, 0xe6bae055
setne dl
mov ecx, dword [ebp - 0x18]
imul ecx, edx
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x28]
imul eax, edx
mov dword [ebp - 0x20], eax
jmp 0x40bd8c
mov dword [ebp - 0x1c], 0xfffa
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x3c]
xor ebx, ebx
cmp eax, edx
setle bl
mov ecx, dword [ebp - 0x20]
add ecx, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x2c], ecx
xor ebx, ebx
dec dword [ebp - 0x18]
jmp 0x40bb65
push dword [ebp - 0x34]
call fcn.004510c8
pop ecx
mov edi, eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x40bdbc
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + ecx*4 - 0x54], 0x204e2db5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40bdae
mov dword [ebp - 0x1c], ebx
jmp 0x40bdde
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40bddb
push 0x241b
call dword [sym.imp.USER32.dll_SetCapture]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x40bdc7
cmp dword [ebp - 0x4c], ebx
je 0x40bdf0
cmp dword [ebp - 0x1c], ebx
mov edx, esi
jne 0x40bdf2
mov edx, ebx
cmp dword [ebp - 0x1c], 0x84515fdc
sbb eax, eax
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x1c]
jle 0x40be0c
cmp dword [ebp - 0x28], ebx
je 0x40be0e
mov esi, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp esi, eax
sete cl
mov dword [ebp - 0x1c], ecx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret