Function at 0x436525
Capabilities:
Create directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x920
cmp byte [0x45e460], 0
push ebx
push esi
push edi
je 0x436857
mov esi, 0x45e460
push 0x44d9e4
push esi
call fcn.00439351
mov ebx, dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
push eax
call ebx
pop ecx
test eax, eax
pop ecx
je 0x4365c9
push 0x44b6d0
push esi
call fcn.00439351
pop ecx
push eax
call ebx
pop ecx
test eax, eax
pop ecx
je 0x4365c9
push 0x44e9dc
push esi
call fcn.00439351
pop ecx
push eax
call ebx
pop ecx
test eax, eax
pop ecx
je 0x4365c9
push 0x44ad50
push esi
call dword [sym.imp.MSVCRT.dll__mbsstr]
pop ecx
pop ecx
test eax, eax
push esi
jne 0x4365b8
push 0x45f300
push str._s_s
push 0x45e220
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x43685e
push 0x45e220
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
jmp 0x43685e
mov edi, 0x45dfe0
push edi
push 0x45e220
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x44ad50
push esi
call dword [sym.imp.MSVCRT.dll__mbsstr]
pop ecx
pop ecx
test eax, eax
push esi
lea eax, [ebp - 0x520]
jne 0x436613
push 0x45f300
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x43661b
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x520]
push eax
call fcn.00445da0
xor esi, esi
pop ecx
cmp eax, esi
mov dword [ebp - 4], eax
je 0x43685e
push eax
mov dword [ebp - 0xc], esi
call fcn.004465a0
jmp 0x436676
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x110]
push 0x104
push eax
push esi
push dword [ebp - 4]
call fcn.004461d0
lea eax, [ebp - 0x110]
push str.skin.xml
push eax
call ebx
add esp, 0x28
test eax, eax
je 0x43667d
push dword [ebp - 4]
call fcn.004465f0
test eax, eax
pop ecx
je 0x436640
jmp 0x436684
mov dword [ebp - 0xc], 1
push dword [ebp - 4]
call fcn.004465a0
jmp 0x436841
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x110]
push 0x104
push eax
push esi
push dword [ebp - 4]
call fcn.004461d0
add esp, 0x20
cmp dword [ebp - 0xc], esi
je 0x43672d
push dword [ebp - 4]
call fcn.00446670
test eax, eax
pop ecx
jne 0x436839
mov ebx, dword [sym.imp.MSVCRT.dll__mbsstr]
lea eax, [ebp - 0x110]
push 0x44d61c
push eax
lea esi, [ebp - 0x110]
call ebx
pop ecx
test eax, eax
pop ecx
je 0x4366f6
lea eax, [ebp - 0x110]
push 0x44d61c
push eax
call ebx
pop ecx
mov esi, eax
pop ecx
inc esi
cmp byte [esi], 0x5c
je 0x4366f5
cmp byte [esi], 0
je 0x436837
push esi
push edi
lea eax, [ebp - 0x520]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x520]
push edi
push eax
call fcn.00436863
add esp, 0x18
jmp 0x4367c6
lea eax, [ebp - 0x110]
dec eax
push eax
lea eax, [ebp - 0x110]
push 0x44e9cc
push eax
call fcn.00439a62
mov esi, eax
inc esi
push esi
call fcn.00439351
mov ebx, eax
push 0x44e9c8
push ebx
call dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 0x18
test eax, eax
je 0x43679e
push 0x44e9c4
push ebx
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
je 0x43679e
push 0x44e9c0
push ebx
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
je 0x43679e
push 0x44be08
push ebx
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x436837
push dword [ebp - 4]
call fcn.00446670
test eax, eax
pop ecx
jne 0x436837
push esi
push edi
lea eax, [ebp - 0x520]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x520]
push 0x44e4ac
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov ebx, eax
pop ecx
test ebx, ebx
pop ecx
je 0x43682e
mov dword [ebp - 8], 1
lea eax, [ebp - 0x920]
push 0x400
push eax
push dword [ebp - 4]
call fcn.004469a0
mov esi, eax
add esp, 0xc
test esi, esi
jle 0x436826
push ebx
push esi
lea eax, [ebp - 0x920]
push 1
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
cmp esi, eax
je 0x436820
and dword [ebp - 8], 0
cmp dword [ebp - 8], 0
jne 0x4367e7
push ebx
call dword [sym.imp.MSVCRT.dll_fclose]
pop ecx
push dword [ebp - 4]
call fcn.00446b90
pop ecx
xor esi, esi
push dword [ebp - 4]
call fcn.004465f0
test eax, eax
pop ecx
je 0x436691
push dword [ebp - 4]
call fcn.00446190
jmp 0x4365c3
and byte [0x45e220], 0
pop edi
pop esi
pop ebx
leave
ret