Function at 0x42b4b4
Capabilities:
Create directory
Move file
Write file on windows

Disassembly:
push 0x1b0
mov eax, 0x6d8218
call fcn.0057bf64
mov eax, dword [ebp + 0x18]
xor ebx, ebx
mov esi, 0x7d20fc
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x1bc], eax
cmp byte [0x7c342c], bl
je 0x42b52c
cmp dword [0x7d2110], 0x10
mov eax, esi
push ebx
cmovae eax, dword [0x7d20fc]
push eax
mov byte [0x7c342c], bl
call fcn.006a2dec
pop ecx
pop ecx
test eax, eax
jne 0x42b52c
cmp dword [0x7d2128], 0x10
mov ecx, 0x7d2114
mov eax, esi
cmovae ecx, dword [0x7d2114]
cmp dword [0x7d2110], 0x10
push ecx
cmovae eax, dword [0x7d20fc]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
push 0x32
lea eax, [ebp - 0x44]
push ebx
push eax
call fcn.00695a40
add esp, 0xc
mov dword [ebp - 0x178], ebx
mov byte [ebp - 0x188], bl
push 0xf
pop eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x18c], eax
mov byte [ebp - 0x1a0], bl
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x170]
push 0x78b40e
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], eax
mov byte [ebp - 0x170], bl
call fcn.004024ce
push 0xff
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 2
push ebx
push eax
call fcn.00695a40
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x14a]
push eax
movzx eax, word [ebp - 0x14c]
push eax
movzx eax, word [ebp - 0x14e]
push eax
movzx eax, word [ebp - 0x150]
push eax
movzx eax, word [ebp - 0x152]
push eax
movzx eax, word [ebp - 0x156]
push eax
movzx eax, word [ebp - 0x158]
push eax
lea eax, [ebp - 0x44]
push str._04d__02d__02d__02d:_02d:_02d._03d
push eax
call fcn.004035b8
add esp, 0x24
lea ecx, [ebp - 0x188]
push edi
call fcn.004024ce
cmp dword [ebp - 0x174], 0x10
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0x178]
cmovae edx, dword [ebp - 0x188]
or edi, 0xffffffff
test eax, eax
je 0x42b641
dec eax
mov ecx, edi
cmp eax, edi
cmovb ecx, eax
add ecx, edx
jmp 0x42b638
cmp ecx, edx
je 0x42b641
dec ecx
cmp byte [ecx], 0x5c
jne 0x42b633
sub ecx, edx
jmp 0x42b643
mov ecx, edi
push ecx
lea eax, [ecx + 1]
push edi
push eax
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00419a89
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00409b2a
lea ecx, [ebp - 0x1b8]
call fcn.004024a8
mov ecx, dword [ebp + 0x10]
cmp byte [ecx], 0
jne 0x42b6ac
push 0xff
lea eax, [ebp - 0x148]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x42b6be
lea eax, [ebp - 0x148]
push 0x5c
push eax
call fcn.006952e0
pop ecx
pop ecx
mov byte [eax + 1], bl
jmp 0x42b6be
lea edx, [ebp - 0x148]
sub edx, ecx
mov al, byte [ecx]
mov byte [edx + ecx], al
inc ecx
test al, al
jne 0x42b6b4
lea eax, [ebp - 0x148]
push eax
call fcn.006a2e59
cmp dword [0x7d2110], 0x10
mov dword [esp], 0x78f5b8
cmovae esi, dword [0x7d20fc]
push esi
call fcn.0069cb3a
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x42b6f5
push 0xfffffffffffffffe
pop ebx
jmp 0x42b806
push dword [ebp + 0x20]
lea ecx, [ebp - 0x170]
call fcn.00402325
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x42b727
lea esi, [ebp + 0x24]
cmp byte [eax], 0
je 0x42b727
push eax
lea ecx, [ebp - 0x170]
call fcn.00402325
add esi, 4
mov eax, dword [esi]
test eax, eax
jne 0x42b70d
mov eax, dword [ebp - 0x160]
add eax, 0xc8
push eax
call fcn.00436b22
cmp dword [ebp - 0x15c], 0x10
lea edx, [ebp - 0x170]
lea ecx, [ebp - 0x1a0]
mov esi, eax
cmovae edx, dword [ebp - 0x170]
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x18c], 0x10
push edx
push dword [ebp + 0x1c]
cmovae ecx, dword [ebp - 0x1a0]
push dword [ebp - 0x1bc]
push ecx
push eax
push str._TIME:_s___FILE:_s__s___d___OUT:_s_n
push esi
call fcn.004035b8
push 2
push ebx
push edi
call fcn.0069cf1c
mov ecx, esi
add esp, 0x2c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42b78d
push edi
sub ecx, edx
push 1
push ecx
push esi
call fcn.0069f112
push edi
call fcn.0069cbc7
add esp, 0x14
cmp dword [ebp + 8], 2
jne 0x42b7ff
cmp byte [0x7d1fe0], 0
je 0x42b7ff
cmp dword [0x7c3410], 0x10
mov eax, 0x7c33fc
push 0x78f5b8
cmovae eax, dword [0x7c33fc]
push eax
call fcn.0069cb3a
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x42b7ff
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42b7e3
push edi
sub ecx, edx
push 1
push ecx
push esi
call fcn.0069f112
push edi
call fcn.0069cbc7
add esp, 0x14
push esi
call fcn.00436b1d
pop ecx
lea ecx, [ebp - 0x170]
call fcn.004024a8
lea ecx, [ebp - 0x1a0]
call fcn.004024a8
lea ecx, [ebp - 0x188]
call fcn.004024a8
mov eax, ebx
call fcn.0057bf0e
ret