Function at 0x436d85
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x22c
push ebx
push edi
push 0x104
lea eax, [ebp - 0x22c]
push eax
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push edi
push 0x88d7d8
call ebx
push 0x516764
call fcn.004263e6
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x20], edi
mov dword [esp], 0x1000000
call fcn.004b93d7
mov dword [ebp - 4], eax
cmp eax, edi
jne 0x436dee
push 0x516708
call fcn.004263e6
pop ecx
xor al, al
jmp 0x436ee7
push esi
push edi
push 0x80
push 4
pop edx
lea ecx, [ebp - 0x22c]
call fcn.00482361
mov esi, eax
cmp esi, 0xffffffff
jne 0x436e11
push 0x5166c8
jmp 0x436e39
mov edx, dword [0x556d68]
push edi
mov ecx, esi
call fcn.00483b5a
push esi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0x18]
jne 0x436e4e
push 0x516678
call fcn.004263e6
pop ecx
mov ecx, dword [ebp - 4]
mov dl, 1
call fcn.00479b79
jmp 0x436ee4
mov edx, 0x516668
xor ecx, ecx
call fcn.0048245f
push dword [ebp - 0x20]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], eax
call fcn.004a0ff9
mov edx, dword [ebp - 4]
mov ecx, eax
call fcn.004b9462
mov ecx, dword [ebp - 4]
mov dl, 1
mov byte [ebp - 0xd], al
call fcn.00479b79
cmp byte [ebp - 0xd], 0
jne 0x436e8c
push 0x516620
jmp 0x436eac
push dword [ebp - 0x18]
lea ecx, [ebp - 0x14]
push dword [ebp - 0x1c]
call fcn.004a0ff9
mov ecx, eax
call fcn.004f9fec
mov esi, eax
cmp esi, edi
jne 0x436eb4
push 0x5165f4
call fcn.004263e6
pop ecx
jmp 0x436edc
push 0x5165d0
call fcn.004263e6
pop ecx
mov ecx, esi
call fcn.004fa250
test al, al
jne 0x436eeb
push 0x516588
call fcn.004263e6
pop ecx
mov ecx, esi
call fcn.004fa058
lea ecx, [ebp - 0x14]
call fcn.004a0c7d
xor al, al
pop esi
pop edi
pop ebx
leave
ret
mov ecx, 0x512b3c
call fcn.0049a53c
push edi
push eax
call ebx
cmp dword [esi + 0x18], edi
jne 0x436f1e
push 0x516530
call fcn.004263e6
pop ecx
mov ecx, esi
call fcn.004fa058
xor bl, bl
lea ecx, [ebp - 0x14]
call fcn.004a0c7d
mov al, bl
jmp 0x436ee6
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov edi, 0x51651c
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp - 8]
mov ebx, dword [ecx + eax]
mov ecx, ebx
call fcn.0049e604
push eax
lea ecx, [ebp - 4]
call fcn.004a0fd9
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov edx, edi
mov ecx, eax
call fcn.0049fc6f
test al, al
jne 0x436fa3
lea ecx, [ebp - 4]
call fcn.004a0c7d
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
add dword [ebp - 8], 0x14
cmp eax, dword [esi + 0x18]
jne 0x436f29
mov ecx, esi
call fcn.004fa058
push edi
lea eax, [ebp - 0x24]
push 0x5164d8
push eax
call fcn.004a1618
add esp, 0xc
lea ecx, [ebp - 0x24]
call fcn.004a0ff9
push eax
call fcn.004263e6
pop ecx
lea ecx, [ebp - 0x24]
call fcn.004a0c7d
jmp 0x436f10
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.0049e604
mov edx, eax
mov ecx, esi
call fcn.004fa290
mov ecx, 0x5164c4
mov edi, eax
call fcn.0049e627
mov ecx, eax
call fcn.0049a515
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], eax
call fcn.004a0ff9
mov edx, edi
mov ecx, eax
call fcn.004b9462
mov bl, al
test bl, bl
je 0x437000
lea ecx, [ebp - 0xc]
call fcn.004a0ff9
push eax
lea ecx, [ebp - 4]
call fcn.004a0ff9
push eax
push 0x51648c
jmp 0x437013
push 0x516474
lea ecx, [ebp - 4]
call fcn.004a0ff9
push eax
push 0x516420
lea eax, [ebp - 8]
push eax
call fcn.004a1618
add esp, 0x10
lea ecx, [ebp - 8]
call fcn.004a0ff9
push eax
call fcn.004263e6
pop ecx
lea ecx, [ebp - 8]
call fcn.004a0c7d
mov dl, 1
mov ecx, edi
call fcn.00479b79
mov ecx, esi
call fcn.004fa058
lea ecx, [ebp - 0xc]
call fcn.004a0c7d
lea ecx, [ebp - 4]
call fcn.004a0c7d
jmp 0x436f12