Function at 0x42c190
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x4d33b4]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push esi
mov dword [ebp - 0x5c], eax
xor eax, eax
push edi
mov dword [ebp - 0x58], edx
xor edi, edi
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], 0
mov word [ebp - 0x38], ax
nop dword [eax + eax]
xor eax, eax
mov dword [ebp - 0xc], 7
push 0xffffffffffffffff
push eax
push edx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10], 0
mov word [ebp - 0x20], ax
call fcn.0041dc30
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0x50]
call fcn.0042f1d0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.0041fa40
mov eax, dword [ebp - 0x3c]
cmp eax, 8
jb 0x42c263
mov ecx, dword [ebp - 0x50]
inc eax
cmp eax, 0x7fffffff
ja 0x42c45e
add eax, eax
cmp eax, 0x1000
jb 0x42c25a
test cl, 0x1f
jne 0x42c45e
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42c45e
sub ecx, eax
cmp ecx, 4
jb 0x42c45e
cmp ecx, 0x23
ja 0x42c45e
mov ecx, eax
push ecx
call fcn.004aa12f
add esp, 4
cmp dword [ebp - 0xc], 8
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
cmovae ecx, dword [ebp - 0x20]
push 0x5f
push 1
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
cmovae ecx, dword [ebp - 0x20]
sub eax, ecx
lea ecx, [ebp - 0x20]
sar eax, 1
push eax
call fcn.004247c0
nop dword [eax]
lea ecx, [ebp - 0x64]
call fcn.00450ac0
cmp dword [ebp - 0x60], 0xffffffff
ja 0x42c290
mov edx, dword [ebp - 0x64]
jb 0x42c2ab
cmp edx, 0xffff7fff
ja 0x42c290
and edx, 0x7fff
lea ecx, [ebp - 0x50]
call fcn.0042f1d0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.0041fa40
mov eax, dword [ebp - 0x3c]
cmp eax, 8
jb 0x42c31c
mov ecx, dword [ebp - 0x50]
inc eax
cmp eax, 0x7fffffff
ja 0x42c45e
add eax, eax
cmp eax, 0x1000
jb 0x42c313
test cl, 0x1f
jne 0x42c45e
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42c45e
sub ecx, eax
cmp ecx, 4
jb 0x42c45e
cmp ecx, 0x23
ja 0x42c45e
mov ecx, eax
push ecx
call fcn.004aa12f
add esp, 4
sub esp, 8
lea eax, [ebp - 0x20]
cmp dword [ebp - 0xc], 8
mov ecx, esp
cmovae eax, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x50]
mov ecx, dword [ebp - 0x54]
push eax
call fcn.00426e30
lea ecx, [ebp - 0x38]
cmp ecx, eax
je 0x42c351
push 0xffffffffffffffff
push 0
push eax
call fcn.0041dc30
mov eax, dword [ebp - 0x3c]
cmp eax, 8
jb 0x42c3a4
mov ecx, dword [ebp - 0x50]
inc eax
cmp eax, 0x7fffffff
ja 0x42c45e
add eax, eax
cmp eax, 0x1000
jb 0x42c39b
test cl, 0x1f
jne 0x42c45e
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42c45e
sub ecx, eax
cmp ecx, 4
jb 0x42c45e
cmp ecx, 0x23
ja 0x42c45e
mov ecx, eax
push ecx
call fcn.004aa12f
add esp, 4
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
push 0
cmovae eax, dword [ebp - 0x38]
push eax
call ebx
test eax, eax
jne 0x42c3df
mov eax, dword [ebp - 0xc]
cmp eax, 8
jb 0x42c3cd
inc eax
lea ecx, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
call fcn.0041fc80
inc edi
cmp edi, 0x32
jge 0x42c3db
mov edx, dword [ebp - 0x58]
jmp 0x42c1d0
xor bl, bl
jmp 0x42c40c
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x38]
cmp eax, ecx
je 0x42c3f5
push 0xffffffffffffffff
push 0
push ecx
mov ecx, eax
call fcn.0041dc30
mov eax, dword [ebp - 0xc]
cmp eax, 8
jb 0x42c40a
inc eax
lea ecx, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
call fcn.0041fc80
mov bl, 1
mov eax, dword [ebp - 0x24]
cmp eax, 8
jb 0x42c44b
mov ecx, dword [ebp - 0x38]
inc eax
cmp eax, 0x7fffffff
ja 0x42c45e
add eax, eax
cmp eax, 0x1000
jb 0x42c442
test cl, 0x1f
jne 0x42c463
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42c468
sub ecx, eax
cmp ecx, 4
jb 0x42c46d
cmp ecx, 0x23
ja 0x42c472
mov ecx, eax
push ecx
call fcn.004aa12f
add esp, 4
mov ecx, dword [ebp - 8]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004aab4c
mov esp, ebp
pop ebp
ret
call fcn.004b1851
call fcn.004b1851
call fcn.004b1851
call fcn.004b1851
call fcn.004b1851
int3