Function at 0x433c20
Capabilities:
Create directory

Disassembly:
sub esp, 0x58
push ebx
push ebp
push esi
mov esi, ecx
push edi
push 0x48f024
lea ebp, [esi + 0x18fb50]
mov ecx, ebp
call fcn.00445d20
mov ecx, ebp
call fcn.00445cf0
mov edi, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
xor ebx, ebx
mov byte [esi + 0x684], 1
push ebx
mov dword [esi], edi
mov dword [esi + 4], eax
mov word [esi + 0x604], 0x11
mov word [esi + 0x606], bx
mov byte [esi + 0x61c], bl
call dword [sym.imp.user32.dll_ShowCursor]
mov edx, dword [esp + 0x70]
mov eax, 0x42a00000
mov dword [esi + 0x5d0], eax
mov dword [esi + 0x5dc], eax
mov eax, 0x42480000
push edx
mov dword [esi + 0x5d4], eax
mov dword [esi + 0x5e0], eax
mov eax, 0x42b40000
lea ecx, [esi + 0x18f5a8]
mov dword [esi + 0x5e8], eax
mov dword [esi + 0x5f4], eax
mov eax, 0x428c0000
push edi
mov dword [esi + 0x18], ebx
mov dword [esi + 0x5d8], ebx
mov dword [esi + 0x5e4], ebx
mov dword [esi + 0x5ec], ebx
mov dword [esi + 0x5f8], ebx
mov dword [esi + 0x5f0], eax
mov dword [esi + 0x5fc], eax
mov dword [esi + 0x5bc], 0x41a00000
mov dword [esi + 0x5c0], ebx
mov dword [esi + 0x5c8], 0x3f490fdb
call fcn.0043a5d0
test al, al
jne 0x433d0d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
lea edi, [esi + 0x24]
mov ecx, 0x166
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, 0xd
lea edi, [esi + 0x564]
mov dword [esi + 0x598], 0x20
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x18fb4c]
lea edi, [esi + 0x28ed10]
push eax
push esi
mov ecx, edi
call fcn.00403410
mov ecx, edi
call fcn.00403520
lea edi, [esi + 0x74f9a8]
push esi
mov ecx, edi
call fcn.0040c380
mov ecx, edi
call fcn.0040c3b0
lea ecx, [esi + 0x751b00]
push esi
call fcn.0040f470
push 0x48f00c
mov ecx, esi
call fcn.004349f0
lea ecx, [esi + 0x620]
mov dword [esi + 0x580], ebx
mov word [esi + 0x530], 0x55
mov byte [esi + 0x600], bl
mov word [esi + 0x602], bx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], 8
mov edx, dword [esp + 0x70]
mov eax, dword [edx]
cmp eax, ebx
je 0x433e0d
push 0x48f004
push eax
call fcn.004398a0
add esp, 8
test al, al
je 0x433dcc
mov word [esi + 0x530], 0x3c
mov eax, dword [esp + 0x70]
push 0x48effc
mov ecx, dword [eax]
push ecx
call fcn.004398a0
add esp, 8
test al, al
je 0x433dee
mov dword [esi + 0x580], 1
mov edx, dword [esp + 0x70]
push 0x48eff4
mov eax, dword [edx]
push eax
call fcn.004398a0
add esp, 8
test al, al
je 0x433e0d
mov byte [esi + 0x600], 1
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x10]
add ecx, 4
dec eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], eax
jne 0x433da7
mov ecx, 2
cmp word [esi + 0x28ed5c], cx
jne 0x433e45
mov word [esi + 0x52c], 0x320
mov word [esi + 0x52e], 0x258
jmp 0x433e57
mov word [esi + 0x52c], 0x400
mov word [esi + 0x52e], 0x300
mov eax, 6
push 0x498e60
mov dword [esi + 0x5b4], eax
mov dword [esi + 0x5b8], eax
lea eax, [esi + 0x24]
mov dword [esi + 0x538], 1
push eax
mov dword [esi + 0x534], 0x17
mov byte [esi + 0x5b0], 1
mov byte [esi + 0x5b1], 1
mov dword [esi + 0x59c], ecx
mov dword [esi + 0x5a0], ecx
mov dword [esi + 0x5a4], 0x5622
mov dword [esi + 0x5a8], 0x10
mov word [esi + 0x5ac], 3
mov dword [eax], ebx
call fcn.00439930
mov al, byte [esi + 0x28ed77]
add esp, 8
cmp al, bl
lea edi, [esi + 0x18fb60]
sete cl
push ecx
push 0x20
push 0x300
push 0x400
mov ecx, edi
call fcn.0043d6a0
push ebx
mov ecx, edi
call fcn.0043dd90
lea eax, [esi + 0x24]
lea ecx, [esi + 0x18f5a8]
push eax
call fcn.0043a760
test al, al
jne 0x433f10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
lea ebx, [esi + 0x208870]
push 0x48efd8
mov ecx, ebx
call fcn.004455f0
lea ecx, [esi + 0x28ed10]
call fcn.00403bd0
push eax
mov ecx, ebx
call fcn.004455f0
mov dx, word [esi + 0x28ed64]
lea ebx, [esi + 0x1e3d94]
imul dx, dx, 0xa
push edx
mov ecx, ebx
call fcn.0043f390
mov ax, word [esi + 0x28ed62]
mov ecx, ebx
imul ax, ax, 0xa
and eax, 0xffff
push eax
call fcn.0043f370
mov cx, word [esi + 0x28ed60]
push ecx
mov ecx, esi
call fcn.00433ba0
push 0
push 0x1c
mov ecx, edi
call fcn.0043c4d0
push 0xaabbff
push 0x437a0000
push 0x42c80000
mov ecx, edi
call fcn.0043e500
lea ecx, [esi + 0x1e43b0]
push 0x48efb8
call fcn.0044a580
test al, al
jne 0x433fb4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
lea ecx, [esi + 0x1e43c0]
push 0x48ef9c
call fcn.0043bd20
test al, al
jne 0x433fd2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
push 0x48ef8c
mov ecx, ebp
call fcn.00445d20
mov ecx, esi
call fcn.00433bf0
push 0x48ef68
mov ecx, ebp
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0x42800000
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x20], 0
call fcn.00445d20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0xc
lea ebx, [esi + 0x1e38f8]
mov edx, esp
sub esp, 0xc
mov dword [edx], eax
mov eax, dword [esp + 0x34]
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0xc
mov dword [edx + 8], eax
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov dword [ecx], edx
mov edx, dword [esp + 0x4c]
mov dword [ecx + 4], eax
mov eax, esp
mov dword [ecx + 8], edx
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov ecx, ebx
call fcn.00441230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0xc
mov edx, esp
sub esp, 0xc
mov dword [edx], eax
mov eax, dword [esp + 0x34]
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0xc
mov dword [edx + 8], eax
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov dword [ecx], edx
mov edx, dword [esp + 0x4c]
mov dword [ecx + 4], eax
mov eax, esp
mov dword [ecx + 8], edx
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov ecx, ebx
call fcn.00441230
push 0x48ef4c
mov ecx, ebp
call fcn.00445d20
push 0x48cc10
lea ecx, [esi + 0x1e43c0]
call fcn.0043bb80
push 0x48cc10
lea ecx, [esi + 0x1e43b0]
mov word [esi + 0x37cfc0], ax
mov byte [esi + 0x37cfa0], 1
call fcn.00449fc0
lea ebx, [esi + 0x37cf60]
mov word [esi + 0x37cfa6], ax
mov ecx, ebx
call fcn.0043b290
push 0x3fc00000
mov ecx, ebx
call fcn.0043b640
push 0
push 0
push 0
mov ecx, ebx
call fcn.0043b5a0
push 0x48ef34
mov ecx, ebp
call fcn.00445d20
push 0xffffffffffffffff
push 3
mov ecx, edi
call fcn.0043e5f0
mov ecx, edi
call fcn.0043e750
push 0xffffffffffffffff
push 3
mov ecx, edi
call fcn.0043e5f0
mov ecx, edi
call fcn.0043e7b0
push 0x48ef24
mov ecx, ebp
call fcn.00445d20
lea ecx, [esi + 0x688]
call fcn.00443280
mov ecx, edi
call fcn.0043e810
mov ecx, edi
call fcn.0043e750
lea ebx, [esi + 0x1e43b0]
push 0x48ef08
mov ecx, ebx
call fcn.0044a580
test al, al
jne 0x4341bf
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
push 0x48eef0
lea ecx, [esi + 0x1e43c0]
call fcn.0043bd20
test al, al
jne 0x4341dd
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
mov edx, dword [esp + 0x6c]
lea edi, [esi + 0x751a94]
lea eax, [esi + 0x18f5a8]
push edx
push eax
mov ecx, edi
call fcn.00441380
push 0x48d6ec
mov ecx, ebx
mov byte [esi + 0x751ab8], 1
call fcn.00449fc0
push 0x3f800000
push 0x3e000000
push 0x3f600000
push 0
mov ecx, edi
mov word [esi + 0x751abe], ax
call fcn.00441570
push 0x10
push 0x10
push pe_nt_image_headers32
push pe_nt_image_headers32
mov ecx, edi
call fcn.00441540
push 0x64
push 0x64
mov ecx, edi
call fcn.004413d0
push 0x48eed8
lea ecx, [esi + 0x1e3d94]
call fcn.0043f6c0
test al, al
jne 0x434260
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8
lea ecx, [esi + 0x751b00]
call fcn.0040f510
push esi
lea ecx, [esi + 0x2a6080]
call fcn.00429390
lea edi, [esi + 0x1f70ec]
push 0x48eecc
mov ecx, edi
call fcn.00449070
push 8
mov ecx, edi
call fcn.00449460
lea edi, [esi + 0x2019ec]
push 0x48eec4
mov ecx, edi
call fcn.00449ae0
push 8
mov ecx, edi
call fcn.004349e0
push esi
lea ecx, [esi + 0x18e024]
call fcn.00416050
push esi
lea ecx, [esi + 0x74ef44]
call fcn.00406210
mov eax, dword [esi + 0x18fb4c]
push eax
call fcn.00439900
add esp, 4
cmp ax, 1
jbe 0x434353
mov ecx, dword [esi + 0x18fb4c]
lea edx, [esp + 0x70]
push ecx
push edx
mov dword [esp + 0x78], 0
call fcn.00439930
lea eax, [esp + 0x78]
push 0x48eebc
push eax
call fcn.00439b10
mov ecx, dword [esp + 0x80]
mov edi, dword [sym.imp.kernel32.dll_CreateDirectoryA]
add esp, 0x10
push 0
push ecx
call edi
mov edx, dword [esi + 0x18fb4c]
lea eax, [esp + 0x70]
push edx
push eax
call fcn.00439930
lea ecx, [esp + 0x78]
push 0x48d8d0
push ecx
call fcn.00439b10
mov edx, dword [esp + 0x80]
add esp, 0x10
push 0
push edx
call edi
lea eax, [esp + 0x70]
push eax
call fcn.00439990
add esp, 4
mov ecx, dword [esi + 0x18fb4c]
push ecx
push esi
lea ecx, [esi + 0x74fd6c]
call fcn.0041f820
lea edi, [esi + 0x7491d8]
push esi
mov ecx, edi
call fcn.00413620
mov ecx, edi
call fcn.00413890
push esi
lea ecx, [esi + 0x74d4b0]
call fcn.004131c0
push esi
lea ecx, [esi + 0x74fef4]
call fcn.00428380
xor edi, edi
lea ebx, [esi + 0x28ed80]
push edi
push esi
mov ecx, ebx
call fcn.00421490
inc edi
add ebx, 0xe30
cmp di, 0x18
jb 0x43439b
xor edi, edi
lea ebx, [esi + 0x2a4200]
push edi
push esi
mov ecx, ebx
call fcn.00401820
inc edi
add ebx, 0xf4
cmp di, 0x20
jb 0x4343b9
push esi
lea ecx, [esi + 0x28cdf4]
call fcn.00408cd0
push 0x48eeb4
mov ecx, ebp
call fcn.00445d20
lea edi, [esi + 0x37cfc4]
push esi
mov ecx, edi
call fcn.00410310
push 0x48eea0
mov ecx, ebp
call fcn.00445d20
push 0xd
mov ecx, edi
call fcn.00410f50
push 0x48ee94
mov ecx, ebp
call fcn.00445d20
mov ecx, edi
call fcn.00411010
push esi
lea ecx, [esi + 0x749090]
call fcn.00401000
push esi
lea ecx, [esi + 0x749128]
call fcn.0041f150
lea edi, [esi + 0x399764]
xor ebx, ebx
push esi
mov ecx, edi
mov word [esi + 0x608], bx
mov word [esi + 0x60a], 1
mov byte [esi + 0x61d], bl
call fcn.00417150
lea edx, [esp + 0x48]
push 0x48ee7c
push edx
mov dword [esp + 0x6c], ebx
mov word [esp + 0x58], bx
mov dword [esp + 0x68], 0x3f800000
mov dword [esp + 0x50], ebx
call fcn.00439930
add esp, 8
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.kernel32.dll_GetLocalTime]
mov ecx, dword [esp + 0x38]
and ecx, 0xffff
push ecx
push 0x48ee74
mov ecx, ebp
call fcn.00445f00
mov edx, dword [esp + 0x3a]
mov ecx, ebp
and edx, 0xffff
push edx
push 0x48ee6c
call fcn.00445f00
push 0x42
mov ecx, edi
call fcn.004198f0
push 1
mov ecx, edi
call fcn.00417de0
lea edi, [esi + 0x37ce70]
push esi
mov ecx, edi
call fcn.00430370
push 4
mov ecx, edi
call fcn.00430770
push 0x48d218
mov ecx, edi
call fcn.00430740
push esi
lea ecx, [esi + 0x7380b4]
call fcn.00403f40
push esi
lea ecx, [esi + 0x73832c]
call fcn.004113d0
lea edi, [esi + 0x738888]
push esi
mov ecx, edi
call fcn.0043af10
push 0x42c80000
push 0x42c80000
mov ecx, edi
call fcn.00432730
push ebx
mov ecx, edi
call fcn.00432760
push esi
lea ecx, [esi + 0x738adc]
call fcn.00420c90
push esi
lea ecx, [esi + 0x18f53c]
call fcn.004017a0
push esi
lea ecx, [esi + 0x74ee64]
call fcn.0040bb50
push esi
lea ecx, [esi + 0x18f2f0]
call fcn.00404840
mov ecx, esi
call fcn.00434920
lea ecx, [esi + 0x7491d8]
call fcn.00414110
push eax
mov ecx, esi
call fcn.00435420
lea edi, [esi + 0x7507c0]
push esi
mov ecx, edi
call fcn.00414480
mov ecx, edi
call fcn.00415390
mov eax, dword [esi + 0x74fb48]
lea ecx, [esi + 0x1e3d94]
push eax
call fcn.0043ef40
push 0x20
lea ecx, [esi + 0x209878]
call fcn.00449510
mov ecx, ebp
call fcn.00445d00
push 0x48b29c
mov ecx, ebp
call fcn.00445d20
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x58
ret 8