Function at 0x416fe0
Capabilities:
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6003a5
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x69ee98]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x220], ebx
call fcn.00485933
mov edi, eax
test edi, edi
je 0x41797b
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x613aec]
mov ecx, edi
call esi
lea esi, [eax + 0x10]
mov dword [ebp - 0x230], esi
mov dword [ebp - 4], 0
mov eax, dword [ebx + 0x8c]
mov edx, dword [eax + 8]
mov eax, ebx
mov dword [ebx + 0x310], edx
mov eax, dword [eax + 0x84]
cmp dword [eax + 0xe4], 0
jne 0x417074
mov edx, ebx
mov dword [edx + 0x310], 0
jmp 0x4170cf
test edx, edx
jle 0x4170c9
xor ecx, ecx
mov eax, edx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00489916
mov edx, dword [ebp - 0x220]
add esp, 4
mov dword [ebx + 0x31c], eax
xor ecx, ecx
mov eax, dword [edx + 0x310]
mov dword [ebx + 0x318], eax
test eax, eax
jle 0x4170e3
mov eax, dword [ebx + 0x31c]
mov dword [eax + ecx*4], 0
inc ecx
cmp ecx, dword [edx + 0x310]
jl 0x4170b1
jmp 0x4170e3
mov edx, dword [ebp - 0x220]
mov dword [ebx + 0x31c], 0
mov dword [ebx + 0x318], 0
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x23c], eax
mov eax, dword [edx + 0x90]
mov dword [ebp - 0x234], ebx
cmp dword [eax + 0x28], ebx
jle 0x41792f
push 0x18
call fcn.00488616
mov ecx, eax
add esp, 4
mov dword [ebp - 0x248], ecx
mov byte [ebp - 4], 1
test ecx, ecx
je 0x41715d
mov eax, dword [ebp - 0x220]
mov eax, dword [eax + 0x90]
cmp ebx, dword [eax + 0x28]
jge 0x41714b
test ebx, ebx
js 0x41798f
mov eax, dword [eax + 0x24]
mov eax, dword [eax + ebx*4]
push eax
call fcn.00421740
mov edi, eax
mov dword [ebp - 0x224], eax
jmp 0x417165
xor eax, eax
push eax
call fcn.00421740
mov edi, eax
mov dword [ebp - 0x224], eax
jmp 0x417165
xor edi, edi
mov dword [ebp - 0x224], edi
mov byte [ebp - 4], 0
mov eax, dword [edi + 4]
sub eax, 0x10
mov dword [edi], ebx
push eax
call fcn.00403750
lea ebx, [eax + 0x10]
mov dword [ebp - 0x244], ebx
mov byte [ebp - 4], 2
mov eax, dword [edi + 4]
sub eax, 0x10
push eax
call fcn.00403750
lea edi, [eax + 0x10]
mov dword [ebp - 0x240], edi
push 0x2e
push ebx
mov byte [ebp - 4], 3
call fcn.005daaeb
add esp, 0x10
test eax, eax
jne 0x4171b1
or eax, 0xffffffff
jmp 0x4171b3
sub eax, ebx
lea ecx, [eax + 1]
mov eax, dword [edi - 0xc]
sub eax, ecx
push eax
push ecx
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x240]
call fcn.004031e0
mov byte [ebp - 4], 4
lea ebx, [esi - 0x10]
mov eax, dword [ebp - 0x250]
lea edi, [eax - 0x10]
mov dword [ebp - 0x238], edi
cmp edi, ebx
je 0x417253
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x41723e
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x41723e
push edi
call fcn.00403750
add esp, 4
mov dword [ebp - 0x21c], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x417233
mov edi, dword [ebx]
push ebx
mov edx, dword [edi]
mov esi, dword [edx + 4]
mov ecx, esi
call dword [0x613aec]
mov ecx, edi
call esi
mov edi, dword [ebp - 0x238]
mov eax, dword [ebp - 0x21c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x230], esi
jmp 0x417253
push dword [eax - 0xc]
lea ecx, [ebp - 0x230]
push eax
call fcn.004038a0
mov esi, dword [ebp - 0x230]
mov byte [ebp - 4], 3
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x417278
mov ebx, dword [edi]
push edi
mov eax, dword [ebx]
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x613aec]
mov ecx, ebx
call edi
mov byte [ebp - 4], 2
or eax, 0xffffffff
mov ecx, dword [ebp - 0x240]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4172a6
mov ebx, dword [ecx]
push ecx
mov eax, dword [ebx]
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x613aec]
mov ecx, ebx
call edi
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x244]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4172d4
mov ebx, dword [ecx]
push ecx
mov eax, dword [ebx]
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x613aec]
mov ecx, ebx
call edi
mov ebx, dword [ebp - 0x224]
mov eax, dword [ebx + 4]
sub eax, 0x10
push eax
call fcn.00403750
lea edi, [eax + 0x10]
mov dword [ebp - 0x254], edi
push 0x674e14
push esi
mov byte [ebp - 4], 5
call fcn.005e3136
add esp, 0xc
test eax, eax
je 0x4176c8
push str.jpeg
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4176c8
push 0x674e20
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4176c8
push 0x674e24
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4176c8
push 0x674e28
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4176c8
push 0x674e2c
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4176c8
push 0x674e30
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4176c8
cmp dword [ebx + 0x14], 1
je 0x4176c8
push 0x674e34
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4175ea
push 0x674e38
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4175ea
push str.midi
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4175ea
push 0x674e44
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x4175ea
cmp dword [ebx + 0x14], 3
je 0x4175ea
push 0x674e48
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x417505
push 0x674e4c
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x417505
push 0x674e50
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x417505
push 0x674e54
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x417505
push 0x674e58
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x417505
push str.mpeg
push esi
call fcn.005e3136
add esp, 8
test eax, eax
je 0x417505
cmp dword [ebx + 0x14], 2
je 0x417505
mov ecx, dword [ebx + 8]
or eax, 0xffffffff
sub ecx, 0x10
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4174be
mov eax, dword [ecx]
mov dword [ebp - 0x21c], eax
push ecx
mov eax, dword [eax]
mov ebx, dword [eax + 4]
mov ecx, ebx
call dword [0x613aec]
mov ecx, dword [ebp - 0x21c]
call ebx
mov ebx, dword [ebp - 0x224]
mov ecx, dword [ebx + 4]
or eax, 0xffffffff
sub ecx, 0x10
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4174f5
mov eax, dword [ecx]
mov dword [ebp - 0x21c], eax
push ecx
mov eax, dword [eax]
mov ebx, dword [eax + 4]
mov ecx, ebx
call dword [0x613aec]
mov ecx, dword [ebp - 0x21c]
call ebx
mov ebx, dword [ebp - 0x224]
push 0x18
push ebx
call fcn.005d4edd
add esp, 8
jmp 0x4176dd
mov ecx, dword [ebp - 0x220]
add ecx, 0x2cc
push ebx
push dword [ecx + 8]
call fcn.004970c6
lea eax, [ebp - 0x228]
mov dword [ebp - 0x238], eax
call fcn.00485933
mov dword [ebp - 0x21c], eax
test eax, eax
je 0x41797b
mov ecx, dword [eax]
mov ebx, dword [ecx + 0xc]
mov ecx, ebx
call dword [0x613aec]
mov ecx, dword [ebp - 0x21c]
call ebx
add eax, 0x10
mov dword [ebp - 0x228], eax
mov eax, 0x674642
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x228]
test eax, 0xffff0000
jne 0x417578
movzx eax, ax
push eax
call fcn.004030c0
jmp 0x417584
push 0
push 0x674642
call fcn.004038a0
mov ecx, dword [ebp - 0x220]
lea eax, [ebp - 0x228]
add ecx, 0x2e0
mov byte [ebp - 4], 9
push eax
push dword [ecx + 8]
call fcn.004894ec
mov byte [ebp - 4], 5
or eax, 0xffffffff
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4175db
mov eax, dword [ecx]
mov dword [ebp - 0x21c], eax
push ecx
mov eax, dword [eax]
mov ebx, dword [eax + 4]
mov ecx, ebx
call dword [0x613aec]
mov ecx, dword [ebp - 0x21c]
call ebx
mov dword [ebp - 0x23c], 1
jmp 0x4176dd
push ebx
push dword [0x6c7b1c]
mov ecx, 0x6c7b14
call fcn.004970c6
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x238], eax
call fcn.00485933
mov dword [ebp - 0x21c], eax
test eax, eax
je 0x41797b
mov ecx, dword [eax]
mov ebx, dword [ecx + 0xc]
mov ecx, ebx
call dword [0x613aec]
mov ecx, dword [ebp - 0x21c]
call ebx
add eax, 0x10
mov dword [ebp - 0x22c], eax
mov eax, 0x674642
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x22c]
test eax, 0xffff0000
jne 0x417659
movzx eax, ax
push eax
call fcn.004030c0
jmp 0x417665
push 0
push 0x674642
call fcn.004038a0
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 7
push eax
push dword [0x6c7b44]
mov ecx, 0x6c7b3c
call fcn.004894ec
mov byte [ebp - 4], 5
or eax, 0xffffffff
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4175db
mov eax, dword [ecx]
mov dword [ebp - 0x21c], eax
push ecx
mov eax, dword [eax]
mov ebx, dword [eax + 4]
mov ecx, ebx
call dword [0x613aec]
mov ecx, dword [ebp - 0x21c]
call ebx
mov dword [ebp - 0x23c], 1
jmp 0x4176dd
mov ecx, dword [ebp - 0x220]
add ecx, 0x23c
push ebx
push dword [ecx + 8]
call fcn.004970c6
mov byte [ebp - 4], 0
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x417705
mov ebx, dword [edi]
push edi
mov eax, dword [ebx]
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x613aec]
mov ecx, ebx
call edi
mov ecx, dword [ebp - 0x220]
mov ebx, dword [ebp - 0x234]
inc ebx
mov dword [ebp - 0x234], ebx
mov eax, dword [ecx + 0x90]
cmp ebx, dword [eax + 0x28]
jl 0x417102
cmp dword [ebp - 0x23c], 0
je 0x41792f
mov dword [ecx + 0x750], 1
mov dword [0x6c7b00], 1
call fcn.00485933
mov edi, eax
test edi, edi
je 0x417985
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x613aec]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0xa
mov esi, 0x7fff
lea ebx, [ebx]
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x21c]
push eax
call fcn.005e101c
add esp, 4
test eax, eax
jne 0x417806
mov eax, dword [ebp - 0x21c]
fild dword [ebp - 0x21c]
test eax, eax
jns 0x4177bb
fadd qword [0x6769b8]
fstp qword [ebp - 0x24c]
fld qword [ebp - 0x24c]
fmul qword [0x676900]
fnstcw word [ebp - 0x222]
movzx eax, word [ebp - 0x222]
or eax, 0xc00
mov dword [ebp - 0x238], eax
fmul qword [0x6769b0]
fldcw word [ebp - 0x238]
fistp qword [ebp - 0x24c]
mov edx, dword [ebp - 0x24c]
fldcw word [ebp - 0x222]
wait
jmp 0x41781e
push 0
call fcn.005e1064
push eax
call fcn.005e0c1f
add esp, 8
call fcn.005e0bfe
cdq
idiv esi
test edx, edx
jne 0x417827
mov edx, 0x44d
lea eax, [ebp - 0x114]
push eax
push edx
push str.ssmXXXXX
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417850
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x104
jae 0x417976
mov byte [ebp + ecx - 0x114], al
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417878
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x234]
call fcn.004038a0
push 0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x417780
mov ecx, dword [ebp - 0x220]
lea edx, [ebp - 0x114]
lea esi, [edx + 1]
lea ecx, [ecx + 0x754]
mov al, byte [edx]
inc edx
test al, al
jne 0x4178c0
sub edx, esi
lea eax, [ebp - 0x114]
push edx
push eax
call fcn.004038a0
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4178e0
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
mov ecx, 0x6c7b04
call fcn.004038a0
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x417929
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x613aec]
mov ecx, edi
call esi
mov esi, dword [ebp - 0x230]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41795a
mov edi, dword [esi]
push esi
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x613aec]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005d4ba5
mov esp, ebp
pop ebp
ret
call fcn.005d5035
push 0x80004005
call fcn.00402cb0
push 0x80004005
call fcn.00402cb0
call fcn.00486c16
int3