Function at 0x409006
Capabilities:
Create directory

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x184
mov eax, dword [0x41b040]
xor eax, ebp
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x70]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x7c]
push esi
mov dword [ebp - 0xc4], eax
lea esi, [ebx + 0x54]
mov eax, dword [esi]
push edi
sub eax, 0x10
mov dword [ebp - 0xd0], esi
call fcn.0040252d
add eax, 0x10
mov dword [ebp - 0xc8], eax
mov eax, ebx
call fcn.0040848f
mov edi, eax
test edi, edi
jge 0x409060
push 0xb
pop esi
jmp 0x4093ee
lea eax, [ebx + 0x70]
mov ecx, edi
call fcn.004096e5
cmp byte [eax], 0
jne 0x40907e
lea eax, [ebp - 0xc8]
push eax
push edi
mov ecx, ebx
call fcn.00408a18
lea ecx, [ebx + 0x58]
mov eax, edi
mov dword [ebp - 0xd4], ecx
call fcn.00404d14
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.004028d2
mov eax, dword [ebp + 0x78]
cmp eax, 0xffffffff
jne 0x4090af
mov eax, ebx
call fcn.00408075
mov ecx, eax
test ecx, ecx
mov dword [ebp - 0xbc], eax
jge 0x4090bf
push 0xc
jmp 0x40905a
lea eax, [ebx + 0x70]
call fcn.004096e5
mov byte [eax], 1
and dword [ebp - 0xb0], 0
xor eax, eax
and dword [ebp - 0xb4], eax
push 0x44
pop ecx
lea edi, [ebp - 0xac]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
test eax, eax
mov dword [ebp - 0xb8], eax
jle 0x40911c
mov esi, dword [ebp - 0xb4]
mov edi, dword [ebp - 0xd0]
call fcn.004027e2
mov ecx, esi
mov byte [ebp + ecx - 0xa4], al
inc ecx
cmp ecx, dword [ebp - 0xb8]
mov dword [ebp - 0xb4], ecx
jl 0x4090f3
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xd4]
call fcn.00404d14
mov eax, dword [eax]
sub eax, 0x10
call fcn.0040252d
mov esi, eax
add esi, 0x10
push 0x5c
mov eax, esi
mov dword [ebp - 0xc0], esi
call fcn.00404db2
test eax, eax
pop ecx
je 0x409169
sub eax, esi
mov ecx, eax
js 0x409169
mov eax, dword [esi - 0xc]
lea edx, [ebp - 0xc0]
sub eax, ecx
push edx
call fcn.00404a57
jmp 0x409174
lea eax, [ebp - 0xc0]
call fcn.00402888
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax - 0xc]
xor esi, esi
test eax, eax
mov dword [ebp - 0xb8], eax
jle 0x4091b0
lea edi, [ebp - 0xc0]
call fcn.004027e2
mov ecx, dword [ebp - 0xb4]
inc dword [ebp - 0xb4]
inc esi
cmp esi, dword [ebp - 0xb8]
mov byte [ebp + ecx - 0xa4], al
jl 0x409189
mov edi, dword [ebp - 0xb4]
push 0
lea eax, [ebp - 0xa4]
lea esi, [ebp + edi - 0xa4]
push eax
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp byte [ebp + edi - 0xa5], 0x5c
je 0x4091dd
mov byte [esi], 0x5c
inc edi
mov byte [ebp + edi - 0xa4], 0
xor edi, edi
cmp dword [ebp - 0xc4], edi
je 0x409201
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0xc4]
call fcn.00402497
mov eax, dword [ebp - 0xbc]
lea esi, [ebx + 0x64]
mov ecx, esi
call fcn.0040967e
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xbc]
mov ecx, esi
call fcn.0040967e
mov eax, dword [eax + 8]
push edi
push 0x80
push 4
push edi
push 1
push 0x80000000
lea esi, [ebx + 0x50]
mov dword [ebp - 0xa8], eax
call fcn.0040233c
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
lea esi, [ebp - 0xc8]
mov dword [ebp - 0xb0], eax
call fcn.0040233c
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [ebp - 0xb4], eax
jne 0x409285
push dword [ebp - 0xb0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xb
pop esi
jmp 0x4093e0
push str.ExtractFiles
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
push 0x10
pop esi
sub eax, esi
call fcn.0040252d
add eax, esi
cmp byte [ebx + 0xb0], 0
mov dword [ebp - 0xcc], eax
je 0x4092d5
cmp dword [eax - 0xc], 0
mov byte [ebp + 0x74], 0
jne 0x4092df
push ebx
call fcn.00409559
lea edi, [ebp - 0xcc]
call fcn.00402393
cmp byte [ebp + 0x74], 0
jne 0x4093a6
xor eax, eax
mov al, byte [ebx + 0xb0]
lea ecx, [ebp - 0xcc]
lea edi, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0xc4]
call fcn.00407a95
cmp byte [ebx + 0xb0], 0
je 0x409368
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
sub eax, esi
call fcn.0040252d
mov ecx, dword [ebp - 0xd4]
add eax, esi
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xbc]
call fcn.00404d14
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.004028d2
lea eax, [ebp - 0xb8]
lea edi, [ebp - 0xdc]
call fcn.00402393
mov eax, dword [ebp - 0xb8]
add eax, 0xfffffff0
call fcn.00402515
lea eax, [ebp - 0xfc]
push 0
mov dword [ebp + 0x60], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea eax, [ebp - 0x11c]
call fcn.00409770
cmp byte [ebp - 0xf0], 0
jne 0x409396
mov edi, dword [ebp - 0xe4]
jmp 0x409399
or edi, 0xffffffff
lea esi, [ebp - 0x11c]
call fcn.00407b04
jmp 0x4093b5
lea eax, [ebp - 0xb0]
push eax
call dword [ebp - 0xc4]
mov edi, eax
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
jge 0x4093ca
push 0xe
pop esi
jmp 0x4093d2
je 0x4093d0
push 0xd
jmp 0x4093c7
xor esi, esi
mov eax, dword [ebp - 0xcc]
add eax, 0xfffffff0
call fcn.00402515
mov eax, dword [ebp - 0xc0]
add eax, 0xfffffff0
call fcn.00402515
mov eax, dword [ebp - 0xc8]
add eax, 0xfffffff0
call fcn.00402515
mov ecx, dword [ebp + 0x64]
pop edi
mov eax, esi
xor ecx, ebp
pop esi
call fcn.00415ea8
add ebp, 0x68
leave
ret 0x10