Function at 0x415ee0
Capabilities:
Create directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fe0a6
mov eax, dword fs:[0]
push eax
mov eax, 0x12dc
call fcn.004bb2e0
mov eax, dword [0x53806c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x12b4], ecx
push 0
push 0
push 0
push 0
push 0x200
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004bc0e0
add esp, 0x20
test eax, eax
je 0x415f47
xor al, al
jmp 0x41626b
lea eax, [ebp - 0x210]
mov dword [ebp - 0x1290], eax
mov ecx, dword [ebp - 0x1290]
add ecx, 1
mov dword [ebp - 0x129c], ecx
mov edx, dword [ebp - 0x1290]
mov al, byte [edx]
mov byte [ebp - 0x1281], al
add dword [ebp - 0x1290], 1
cmp byte [ebp - 0x1281], 0
jne 0x415f62
mov ecx, dword [ebp - 0x1290]
sub ecx, dword [ebp - 0x129c]
mov dword [ebp - 0x12a0], ecx
mov edx, dword [ebp - 0x12a0]
mov dword [ebp - 0x1298], edx
cmp dword [ebp - 0x1298], 0
ja 0x415fae
xor al, al
jmp 0x41626b
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1228]
call fcn.00405640
mov dword [ebp - 4], 0
push 0x5193b4
lea ecx, [ebp - 0x1228]
push ecx
lea edx, [ebp - 0x12e8]
push edx
call fcn.0041f1b0
add esp, 0xc
mov dword [ebp - 0x12a4], eax
mov eax, dword [ebp - 0x12a4]
mov dword [ebp - 0x12a8], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0x12a8]
push edx
lea eax, [ebp - 0x12d0]
push eax
call fcn.0041f170
add esp, 0xc
mov dword [ebp - 0x12ac], eax
mov ecx, dword [ebp - 0x12ac]
push ecx
lea ecx, [ebp - 0x1228]
call fcn.00405530
lea ecx, [ebp - 0x12d0]
call fcn.004054e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12e8]
call fcn.004054e0
mov edx, dword [ebp - 0x1298]
movsx eax, byte [ebp + edx - 0x211]
cmp eax, 0x5c
je 0x41606a
mov ecx, dword [ebp - 0x1298]
movsx edx, byte [ebp + ecx - 0x211]
cmp edx, 0x2f
jne 0x4160a2
lea ecx, [ebp - 0x1228]
call fcn.004052c0
push eax
call fcn.004e4226
add esp, 4
mov byte [ebp - 0x1282], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.004054e0
mov al, byte [ebp - 0x1282]
jmp 0x41626b
push 0x519424
lea ecx, [ebp - 0x1228]
call fcn.004052c0
push eax
call fcn.004e36c2
add esp, 8
mov dword [ebp - 0x128c], eax
cmp dword [ebp - 0x128c], 0
jne 0x4160ee
mov byte [ebp - 0x1283], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.004054e0
mov al, byte [ebp - 0x1283]
jmp 0x41626b
mov dword [ebp - 0x12b8], 0x1000
mov eax, dword [ebp + 8]
push eax
call fcn.004bc270
add esp, 4
test eax, eax
je 0x41613b
mov ecx, dword [ebp - 0x128c]
push ecx
call fcn.004de644
add esp, 4
mov byte [ebp - 0x1284], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.004054e0
mov al, byte [ebp - 0x1284]
jmp 0x41626b
mov edx, 1
test edx, edx
je 0x416231
push 0x1000
lea eax, [ebp - 0x1210]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004bc9b0
add esp, 0xc
mov dword [ebp - 0x1294], eax
cmp dword [ebp - 0x1294], 0
jge 0x4161b0
mov edx, dword [ebp + 8]
push edx
call fcn.004bc050
add esp, 4
mov eax, dword [ebp - 0x128c]
push eax
call fcn.004de644
add esp, 4
mov byte [ebp - 0x1285], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.004054e0
mov al, byte [ebp - 0x1285]
jmp 0x41626b
cmp dword [ebp - 0x1294], 0
jne 0x4161bd
jmp 0x416231
mov ecx, dword [ebp - 0x128c]
push ecx
mov edx, dword [ebp - 0x1294]
push edx
push 1
lea eax, [ebp - 0x1210]
push eax
call fcn.004df6e1
add esp, 0x10
mov dword [ebp - 0x12b0], eax
mov ecx, dword [ebp - 0x12b0]
cmp ecx, dword [ebp - 0x1294]
je 0x41622c
mov edx, dword [ebp + 8]
push edx
call fcn.004bc050
add esp, 4
mov eax, dword [ebp - 0x128c]
push eax
call fcn.004de644
add esp, 4
mov byte [ebp - 0x1286], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.004054e0
mov al, byte [ebp - 0x1286]
jmp 0x41626b
jmp 0x41613b
mov ecx, dword [ebp + 8]
push ecx
call fcn.004bc050
add esp, 4
mov edx, dword [ebp - 0x128c]
push edx
call fcn.004de644
add esp, 4
mov byte [ebp - 0x1287], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.004054e0
mov al, byte [ebp - 0x1287]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b9f48
mov esp, ebp
pop ebp
ret 8