Function at 0x438708
Capabilities:
Create directory
Delete directory

Disassembly:
sub esp, 0x30
and dword [esp + 0x1c], 0
push ebx
push ebp
push esi
mov ebx, edx
or ebp, 0xffffffff
push edi
mov edi, ecx
mov dword [esp + 0x10], ebx
push ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
call fcn.0052fd64
push 4
pop esi
push esi
push 0x563148
push ebx
mov dword [esp + 0x24], eax
call fcn.0053003c
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x2f
test eax, eax
je 0x4387a5
cmp ecx, 3
jl 0x43878f
movzx eax, word [ebx]
mov edx, eax
cmp eax, 0x61
jb 0x43876b
cmp eax, 0x7a
jbe 0x438774
lea eax, [edx - 0x41]
cmp ax, 0x19
ja 0x43878f
cmp word [ebx + 2], 0x3a
jne 0x43878f
movzx eax, word [ebx + 4]
push 0x5c
pop edx
cmp ax, dx
je 0x4387a5
push 0x2f
pop edx
cmp ax, dx
je 0x4387a5
mov dword [edi + 0x48], 0xfffff019
mov dword [edi + 0xf0], 0x32
jmp 0x4389d3
lea ecx, [ecx*4 + 0x20]
call fcn.004396f2
mov ebx, eax
mov dword [esp + 0x38], ebx
test ebx, ebx
je 0x4389db
push esi
lea eax, [ebx + 0x10]
push 0x563124
push eax
call fcn.0052ea61
and dword [esp + 0x40], 0
xor eax, eax
mov ecx, dword [esp + 0x1c]
add esp, 0xc
cmp dword [esp + 0x20], eax
cmove eax, esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], eax
lea edx, [ecx + eax*2]
movzx eax, word [edx]
mov dword [esp + 0x18], edx
mov ecx, eax
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x10]
test ax, ax
je 0x438855
mov ebp, dword [esp + 0x34]
movzx edi, ax
movzx eax, di
push 0x5c
pop edi
cmp ax, di
je 0x438834
cmp ax, word [esp + 0x1c]
je 0x438834
test ebp, ebp
je 0x438829
mov word [ebx + esi*2 + 0x10], di
inc esi
xor ebp, ebp
mov ax, word [edx]
mov word [ebx + esi*2 + 0x10], ax
inc esi
jmp 0x438837
xor ebp, ebp
inc ebp
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
lea edx, [ecx + eax*2]
movzx eax, word [edx]
mov edi, eax
test ax, ax
jne 0x43880b
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
push 0x5c
lea edx, [ebx + 0x10]
pop eax
mov word [edx + esi*2], ax
xor eax, eax
inc esi
mov word [ebx + 8], ax
lea eax, [esi + esi]
mov word [ebx + 0xa], ax
xor eax, eax
and dword [esp + 0x30], eax
mov word [edx + esi*2], ax
inc esi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], esi
movzx eax, word [eax]
mov ecx, eax
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x10]
test ax, ax
je 0x4388e9
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
movzx edi, ax
movzx eax, di
push 0x5c
pop edi
cmp ax, di
je 0x4388c4
cmp ax, word [esp + 0x1c]
je 0x4388c4
test ebp, ebp
je 0x4388ba
mov word [edx + esi*2], di
inc esi
xor ebp, ebp
mov ax, word [ebx]
mov word [edx + esi*2], ax
inc esi
jmp 0x4388c7
xor ebp, ebp
inc ebp
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
lea ebx, [ecx + eax*2]
movzx eax, word [ebx]
mov edi, eax
test ax, ax
jne 0x43889d
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
mov ecx, esi
sub ecx, eax
cmp ecx, 2
jne 0x438901
push 0x5c
pop ecx
mov word [edx + esi*2], cx
inc esi
push 3
pop ecx
add eax, eax
mov word [ebx + 0xc], ax
lea eax, [ecx + ecx]
mov word [ebx + 0xe], ax
xor eax, eax
mov word [edx + esi*2], ax
lea esi, [esi*2 + 0x12]
lea eax, [esi - 8]
mov dword [ebx], 0xa0000003
mov word [ebx + 4], ax
xor eax, eax
push eax
push dword [esp + 0x48]
mov word [ebx + 6], ax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x438983
xor eax, eax
mov dword [esp + 0x2c], 1
push eax
push 0x2200000
push 3
push eax
push eax
push 0x40000000
push dword [esp + 0x5c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x438983
xor ecx, ecx
lea eax, [esp + 0x3c]
push ecx
push eax
push ecx
push ecx
push esi
push ebx
push 0x900a4
push ebp
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x4389c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov ecx, eax
call fcn.00449d08
mov dword [edi + 0x48], eax
mov ecx, ebx
mov dword [edi + 0xf0], edx
call fcn.00439702
cmp ebp, 0xffffffff
je 0x4389ae
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x2c], 0
je 0x4389d3
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x4389d3
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, ebx
call fcn.00439702
and dword [edi + 0x48], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
push 0xe
mov edx, str.uv__malloc
pop ecx
call fcn.00449c84
int3