Function at 0x411550
Capabilities:
Check if file exists
Create directory
Get file attributes

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x57c1b7
push eax
mov dword fs:[0], esp
sub esp, 0x174
lea eax, [esp + 0x74]
lea ecx, [esp + 0x24]
push ebx
push ebp
mov ebp, dword [esp + 0x18c]
push esi
push edi
push 0
push 0
push 0
push 0
push 0x100
push eax
push ecx
push ebp
call fcn.0053d2d0
add esp, 0x20
test eax, eax
jne 0x4119aa
mov edx, dword [0x639ad4]
mov dword [esp + 0x18], edx
mov ecx, dword [0x63e500]
mov dword [esp + 0x18c], eax
lea eax, [esp + 0x84]
lea edx, [esp + 0x18]
push eax
push str.idmmzcc3
push ecx
push 0x617b40
push edx
call fcn.00562ecb
add esp, 0x14
lea ecx, [esp + 0x18]
push 0x617168
push 0x617b3c
call fcn.005628ee
mov eax, dword [0x639ad4]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push ecx
push 0x615e9c
push edx
mov byte [esp + 0x198], 1
call fcn.00562ecb
mov eax, dword [esp + 0x20]
push 0x5c
push eax
call fcn.0054dff0
add esp, 0x14
test eax, eax
je 0x4116c2
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov byte [eax + 1], 0
mov ecx, dword [esp + 0x14]
push ecx
call edi
cmp eax, 0xffffffff
jne 0x4116c2
push 3
push 0x5c
lea ecx, [esp + 0x1c]
call fcn.0056a56f
mov esi, eax
cmp esi, 0xffffffff
je 0x4116c2
mov ebp, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [esp + 0x2c]
push esi
push edx
lea ecx, [esp + 0x1c]
call fcn.00562acd
mov eax, dword [eax]
push eax
call edi
cmp eax, 0xffffffff
lea ecx, [esp + 0x2c]
sete bl
call fcn.0056a100
test bl, bl
je 0x4116a7
lea eax, [esp + 0x28]
push esi
push eax
lea ecx, [esp + 0x1c]
call fcn.00562acd
mov eax, dword [eax]
push 0
push eax
call ebp
test eax, eax
lea ecx, [esp + 0x28]
sete bl
call fcn.0056a100
test bl, bl
jne 0x4116bb
inc esi
lea ecx, [esp + 0x14]
push esi
push 0x5c
call fcn.0056a56f
mov esi, eax
cmp esi, 0xffffffff
jne 0x411658
mov ebp, dword [esp + 0x194]
push 0x2000
call fcn.0054e8f0
mov edi, eax
add esp, 4
test edi, edi
mov dword [esp + 0x30], edi
jne 0x411707
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], al
call fcn.0056a100
lea ecx, [esp + 0x18]
mov dword [esp + 0x18c], 0xffffffff
call fcn.0056a100
mov eax, 0xffffff98
jmp 0x4119aa
mov ecx, dword [0x639ad4]
mov byte [esp + 0x13], 0
mov dword [esp + 0x20], ecx
push ebp
mov byte [esp + 0x190], 2
call fcn.0053d780
mov ebx, eax
add esp, 4
test ebx, ebx
jne 0x411963
mov edx, dword [esp + 0x18]
push 0x617b38
push edx
call fcn.0054f48f
mov esi, eax
add esp, 8
test esi, esi
jne 0x41177e
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x20]
push eax
push str._s
push ecx
call fcn.00562ecb
mov edx, dword [esp + 0x2c]
push 0x617b38
push edx
call fcn.0054f48f
mov esi, eax
add esp, 0x14
test esi, esi
je 0x411963
mov byte [esp + 0x13], 1
push 0x2000
push edi
push ebp
call fcn.0053dac0
add esp, 0xc
mov dword [esp + 0x24], eax
test eax, eax
jl 0x4117d2
jmp 0x41179b
mov eax, dword [esp + 0x24]
test eax, eax
jle 0x4117d2
push esi
push 1
push eax
push edi
call fcn.0054f325
add esp, 0x10
cmp eax, 1
jne 0x4117ca
push 0x2000
push edi
push ebp
call fcn.0053dac0
add esp, 0xc
mov dword [esp + 0x24], eax
test eax, eax
jge 0x411797
jmp 0x4117d2
mov dword [esp + 0x24], 0xffffffff
push esi
call fcn.0054f2a8
mov eax, dword [esp + 0x19c]
add esp, 4
test eax, eax
je 0x411945
lea eax, [esp + 0x84]
push str.idmmzcc.dll
push eax
call fcn.0054e0f0
add esp, 8
test eax, eax
je 0x411945
mov al, byte [esp + 0x13]
test al, al
lea eax, [esp + 0x20]
jne 0x411817
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.00569e75
mov ecx, dword [0x639ad4]
mov dword [esp + 0x1c], ecx
mov edx, dword [0x63e500]
lea eax, [esp + 0x1c]
push edx
push 0x615e9c
push eax
mov byte [esp + 0x198], 4
call fcn.00562ecb
mov ecx, dword [esp + 0x28]
push str.IDM_
push ecx
call fcn.0054e0f0
add esp, 0x14
test eax, eax
je 0x411863
mov byte [eax + 1], 0
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.004112e0
mov ebx, dword [esp + 0x1a4]
add esp, 8
mov dword [esp + 0x2c], 0
mov eax, dword [ebx + 0x28]
test eax, eax
jle 0x411923
xor esi, esi
mov eax, dword [ebx + 0x24]
xor ebp, ebp
mov ecx, dword [esi + eax]
mov edx, dword [ecx + 0x1c]
test edx, edx
jle 0x411905
xor edi, edi
mov edx, dword [esi + eax]
mov ecx, dword [edx + 0x18]
mov edx, dword [ecx + edi + 8]
test edx, edx
je 0x4118f2
mov edx, dword [esi + eax]
mov eax, dword [edx + 0x18]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + edi]
push ecx
push 0x615e9c
push edx
call fcn.00562ecb
mov eax, dword [esp + 0x28]
push 0x5c
push eax
call fcn.0054dff0
add esp, 0x14
test eax, eax
je 0x4118e0
mov byte [eax + 1], 0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
push ecx
push edx
call fcn.004112e0
add esp, 8
mov eax, dword [ebx + 0x24]
inc ebp
add edi, 0x24
mov ecx, dword [esi + eax]
cmp ebp, dword [ecx + 0x1c]
jl 0x4118a2
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x28]
inc eax
add esi, 4
cmp eax, ecx
mov dword [esp + 0x2c], eax
jl 0x411891
mov ebp, dword [esp + 0x194]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x18c], 3
call fcn.0056a100
lea ecx, [esp + 0x28]
mov byte [esp + 0x18c], 2
call fcn.0056a100
mov al, byte [esp + 0x13]
test al, al
je 0x41195f
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
push edx
push eax
call fcn.00411070
add esp, 8
mov ebx, dword [esp + 0x24]
push ebp
call fcn.0053dcb0
push edi
call fcn.0054e170
add esp, 8
lea ecx, [esp + 0x20]
mov byte [esp + 0x18c], 1
call fcn.0056a100
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.0056a100
lea ecx, [esp + 0x18]
mov dword [esp + 0x18c], 0xffffffff
call fcn.0056a100
mov eax, ebx
mov ecx, dword [esp + 0x184]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x180
ret