Function at 0x40337d
Capabilities:
Create directory
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVCRT.dll_strncpy]
push edi
cmp byte [esi + 0x250], 0
lea edi, [esi + 0x250]
mov dword [ebp - 8], edi
jne 0x4034cd
mov eax, dword [esi]
push str.tmpdir
push str.TMPDIR
push dword [eax]
call fcn.004036b9
add esp, 0xc
mov dword [ebp - 4], eax
test eax, eax
je 0x40343a
push eax
call sub.MSVCRT.dll_strlen
cmp eax, 0x104
pop ecx
jle 0x4033e2
push dword [ebp - 4]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
jmp 0x4035e0
inc eax
push eax
push dword [ebp - 4]
push edi
call ebx
push dword [ebp - 4]
call dword [sym.imp.MSVCRT.dll_free]
add esp, 0x10
push edi
call sub.MSVCRT.dll_strlen
mov edi, eax
pop ecx
test edi, edi
je 0x403419
mov al, byte [0x40d1ac]
cmp byte [edi + esi + 0x24f], al
je 0x403419
mov byte [edi + esi + 0x250], al
inc edi
lea eax, [ebp + 8]
mov dword [ebp + 8], 0x104
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
je 0x403462
dec dword [ebp + 8]
jmp 0x403466
push edi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, 0x104
jle 0x4033f6
push 0x104
push str.TEMP_path_need_more_than__d_characters
call fcn.00402c6d
pop ecx
jmp 0x4033dc
and dword [ebp + 8], 0
mov eax, 0xfd
sub eax, dword [ebp + 8]
cmp edi, eax
jg 0x4035e0
push 3
lea eax, [edi + esi + 0x250]
push 0x40e890
push eax
call ebx
add esp, 0xc
add edi, 3
cmp dword [ebp + 8], 0
je 0x4034b6
mov byte [edi + esi + 0x250], 0x2d
push dword [ebp + 8]
inc edi
lea eax, [ebp - 0x118]
push eax
lea eax, [edi + esi + 0x250]
push eax
call ebx
add esp, 0xc
add edi, dword [ebp + 8]
mov al, byte [0x40d1ac]
add edi, esi
mov byte [edi + 0x250], al
and byte [edi + 0x251], 0
mov edi, dword [ebp - 8]
xor eax, eax
cmp dword [ebp + 0xc], eax
jne 0x403535
cmp dword [esi + 0x248], eax
jne 0x40352e
push edi
call dword [sym.imp.MSVCRT.dll__mkdir]
test eax, eax
pop ecx
je 0x4034ff
mov esi, dword [sym.imp.MSVCRT.dll__errno]
call esi
cmp dword [eax], 0x11
je 0x40352e
call esi
push dword [eax]
push edi
jmp 0x4035c9
push 0x1ed
push edi
call dword [sym.imp.MSVCRT.dll__chmod]
pop ecx
test eax, eax
pop ecx
je 0x403524
call dword [sym.imp.MSVCRT.dll__errno]
push dword [eax]
push edi
push str.chmod___s___0755__failed__errno_d_n
jmp 0x4035ce
mov dword [esi + 0x248], 1
mov eax, edi
jmp 0x403677
cmp dword [esi + 0x24c], eax
jne 0x403671
push edi
call sub.MSVCRT.dll_strlen
mov edi, eax
pop ecx
movsx eax, byte [0x40d1ac]
push eax
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
lea eax, [ebp - 0x14]
push str._d_c
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
push dword [ebp - 8]
mov dword [ebp + 8], eax
lea eax, [esi + 0x355]
push eax
call sub.MSVCRT.dll_strcpy
mov ecx, dword [ebp + 8]
mov eax, 0x104
sub eax, edi
add esp, 0x18
cmp ecx, eax
jg 0x4035e0
lea eax, [edi + esi]
inc ecx
push ecx
lea ecx, [ebp - 0x14]
mov byte [eax + 0x354], 0x2d
add eax, 0x355
push ecx
push eax
call ebx
lea ebx, [esi + 0x355]
push ebx
call dword [sym.imp.MSVCRT.dll__mkdir]
add esp, 0x10
test eax, eax
je 0x4035e7
mov edi, dword [sym.imp.MSVCRT.dll__errno]
call edi
cmp dword [eax], 0x11
je 0x4035e7
call edi
push dword [eax]
push ebx
push str.mkdir___s___failed__errno_d_n
mov eax, dword [sym.imp.MSVCRT.dll__iob]
add eax, 0x40
push eax
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0x10
xor eax, eax
jmp 0x403677
push 0x410780
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x4107a0]
test eax, eax
mov edi, eax
je 0x403616
push dword [edi + 4]
push ebx
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x403612
mov edi, dword [edi]
test edi, edi
jne 0x4035fd
test edi, edi
jne 0x40365c
push str.cleanup_entry
push 8
call fcn.0040367c
mov edi, eax
pop ecx
test edi, edi
pop ecx
je 0x40365c
mov eax, dword [0x4107a0]
push str.cleanup_path
push ebx
mov dword [edi], eax
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
call fcn.0040367c
pop ecx
mov dword [edi + 4], eax
test eax, eax
pop ecx
je 0x403656
push ebx
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
mov dword [0x4107a0], edi
push 0x410780
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esi + 0x24c], 1
lea eax, [esi + 0x355]
pop edi
pop esi
pop ebx
leave
ret