Function at 0x4238e0
Capabilities:
Create directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x11ac
call fcn.00609980
mov eax, dword [0x7286bc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
xor eax, eax
push esi
mov esi, dword [ebp + 0xc]
push eax
push eax
push eax
push eax
push 0x104
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x1160]
push eax
push ebx
call fcn.0040e350
add esp, 0x20
test eax, eax
je 0x42392c
xor eax, eax
jmp 0x423b9c
push ebx
call fcn.0040eef0
pop ecx
test eax, eax
jne 0x423925
push esi
lea ecx, [ebp - 0x1170]
mov byte [ebp - 0x1194], al
mov dword [ebp - 0x1190], fcn.0040f3d0
mov dword [ebp - 0x118c], ebx
call fcn.004177e7
call fcn.00418f81
push eax
lea ecx, [ebp - 0x116c]
call fcn.0041775d
test dword [ebp - 0x1158], 0x800
lea eax, [ebp - 0x108]
lea ecx, [ebp - 0x1168]
push eax
je 0x42398f
call fcn.00422752
push 0xfde9
jmp 0x423996
call fcn.00422752
push 0
lea eax, [ebp - 0x1168]
push eax
lea eax, [ebp - 0x1164]
push eax
call fcn.00422829
add esp, 0xc
lea ecx, [ebp - 0x116c]
push eax
call fcn.00418bac
mov ecx, dword [ebp - 0x1164]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x1168]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov esi, dword [ebp - 0x116c]
push edi
xor edi, edi
inc edi
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x1174], eax
cmp dword [esi - 4], edi
jle 0x4239fe
push eax
lea ecx, [ebp - 0x116c]
call fcn.00418f15
mov esi, dword [ebp - 0x116c]
or dword [ebp - 0x1198], 0xffffffff
lea eax, [ebp - 0x116c]
xor edx, edx
mov dword [ebp - 0x11a0], eax
mov eax, edx
mov byte [ebp - 0x11a4], dl
mov ecx, esi
mov dword [ebp - 0x119c], fcn.00422f17
mov dword [ebp - 0x1164], ecx
mov dword [ebp - 0x1168], edx
cmp dword [ebp - 0x1174], eax
jl 0x423aad
movzx edx, word [esi + eax*2]
test dx, dx
je 0x423aa1
cmp edx, 0x5c
je 0x423a4e
cmp edx, 0x2f
jne 0x423a90
xor edx, edx
push ecx
lea ecx, [ebp - 0x1170]
mov word [esi + eax*2], dx
call fcn.004228d4
push 0x683cc4
lea ecx, [ebp - 0x1170]
call fcn.004228d4
push 0
push dword [ebp - 0x1170]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov eax, dword [ebp - 0x1168]
lea ecx, [eax + 1]
lea ecx, [esi + ecx*2]
mov dword [ebp - 0x1164], ecx
inc eax
mov dword [ebp - 0x1168], eax
cmp eax, dword [ebp - 0x1174]
jle 0x423a3b
jmp 0x423aad
push ecx
lea ecx, [ebp - 0x1170]
call fcn.004228d4
mov eax, dword [ebp - 0x1164]
xor ecx, ecx
cmp word [eax], cx
je 0x423b63
push ecx
push ecx
push 2
push ecx
push ecx
push 0x40000000
push dword [ebp - 0x1170]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x1174], ecx
cmp ecx, 0xffffffff
jne 0x423ae8
mov edi, eax
jmp 0x423b63
mov byte [ebp - 0x1188], al
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1184], eax
mov dword [ebp - 0x1180], ecx
jmp 0x423b37
je 0x423bac
xor eax, eax
push eax
mov dword [ebp - 0x1164], eax
lea eax, [ebp - 0x1164]
push eax
push esi
lea eax, [ebp - 0x1108]
push eax
push dword [ebp - 0x1174]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x423b52
cmp dword [ebp - 0x1164], esi
jne 0x423b52
push 0x1000
lea eax, [ebp - 0x1108]
push eax
push ebx
call fcn.0040ef80
mov esi, eax
add esp, 0xc
test esi, esi
jns 0x423b01
xor eax, eax
mov edi, eax
lea eax, [ebp - 0x1188]
push eax
call fcn.004226c8
pop ecx
lea eax, [ebp - 0x11a4]
push eax
call fcn.00422668
pop ecx
mov ecx, dword [ebp - 0x116c]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x1170]
add ecx, 0xfffffff0
call fcn.00419521
lea eax, [ebp - 0x1194]
push eax
call fcn.00422699
pop ecx
mov eax, edi
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.00609802
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x11ac]
push eax
mov eax, dword [ebp - 0x1150]
push eax
shr eax, 0x10
push eax
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
lea eax, [ebp - 0x117c]
push eax
lea eax, [ebp - 0x11ac]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
lea eax, [ebp - 0x117c]
push eax
push eax
push eax
push dword [ebp - 0x1174]
call dword [sym.imp.KERNEL32.dll_SetFileTime]
jmp 0x423b56