Function at 0x402fa0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x550e08
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x5aa170]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push dword [ebp + 8]
lea ecx, [ebp - 0x10]
call fcn.00404020
push 0x585f0c
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0
call fcn.00404020
mov byte [ebp - 4], 1
mov esi, 1
mov eax, dword [ebp - 0x10]
test esi, esi
js 0x40301a
cmp esi, dword [eax - 0xc]
jg 0x40301a
lea eax, [eax + esi*2]
push 0x585db4
push eax
call fcn.00529fdf
mov esi, eax
add esp, 8
test esi, esi
je 0x40301a
sub esi, dword [ebp - 0x10]
sar esi, 1
jmp 0x40301d
or esi, 0xffffffff
inc esi
push esi
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
call fcn.00403440
mov byte [ebp - 4], 2
mov edx, dword [eax]
mov ebx, dword [ebp + 8]
lea edi, [edx - 0x10]
add ebx, 0xfffffff0
cmp edi, ebx
je 0x4030e2
cmp dword [ebx + 0xc], 0
jl 0x4030d6
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x4030d6
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
mov ecx, eax
jl 0x403075
cmp ecx, dword [edi]
jne 0x403075
mov eax, 1
lock xadd dword [edx], eax
jmp 0x4030b7
mov eax, dword [ecx]
push 2
push dword [edi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x14], edx
test edx, edx
je 0x4031aa
mov ecx, dword [edi + 4]
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [edi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.00529720
mov edi, dword [ebp - 0x14]
add esp, 0x10
or eax, 0xffffffff
lea ecx, [ebx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4030ce
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [edi + 0x10]
mov dword [ebp + 8], eax
jmp 0x4030e2
push dword [edx - 0xc]
lea ecx, [ebp + 8]
push edx
call fcn.00403ed0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x403105
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, 0x585f0c
mov edx, eax
nop
mov di, word [edx]
cmp di, word [ecx]
jne 0x403136
test di, di
je 0x403132
mov di, word [edx + 2]
cmp di, word [ecx + 2]
jne 0x403136
add edx, 4
add ecx, 4
test di, di
jne 0x403110
xor ecx, ecx
jmp 0x40313b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x403150
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov eax, dword [ebp + 8]
test esi, esi
jg 0x402ff0
lea edx, [eax - 0x10]
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x403175
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x403196
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.004040e0
int3