Function at 0x40dfa3
Capabilities:
Create directory

Disassembly:
dec ecx
jne 0x413df8
mov eax, dword [ebp - 4]
mov ebx, dword [esp]
add esp, 4
push dword [esp + 8]
push dword [esp + 8]
push 0x40032b
push 0x404420
call fcn.00403a9a
sub esp, 0x10
push esi
push esi
push 0
push 0
push edx
push eax
call dword [ecx + 0x48]
mov esi, eax
push esi
xchg dword [esp], edx
push 0x400d8d
push 0x42
push dword [esp + 0xc]
push 0x3ff713
call fcn.00403a9a
mov ebx, dword [esp + 0x10]
push edi
mov edi, dword [esp + 0x18]
push edi
push ebx
push eax
call dword [ecx + 0x2c]
mov esi, eax
movzx ecx, ah
mov edx, eax
push ecx
and edx, 0x41a7c5
cmp eax, dword [ebx + 0x50]
jae 0x404c7c
add esi, eax
push 0x400589
push 0x40098e
push dword [esp + 8]
push 0x3f6c74
call fcn.00403091
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [ebp - 0x14]
push eax
push dword [esp + 0x7e]
push eax
push dword [esp + 8]
push ebp
push esi
call 0x40e02f
push esi
lea eax, [esp + 8]
lea esp, [esp + 0x18]
mov eax, dword [esp + 8]
push 0x45
push dword [esp - 0xa2]
push dword [esp - 0x67]
push dword [esp - 0xab]
push 0x403638
call 0x40e068
call dword [sym.imp.WININET.dll_InternetSetStatusCallbackA]
mov esi, dword [0x41b077]
lea eax, [esp + 4]
lea esp, [esp + 0x18]
add dword [esp + 4], eax
push 0x4033d0
push dword [esp - 0xe1]
push 0xffffffffffffff9a
push dword [esp - 5]
push dword [esp - 0x6e]
call 0x40e0a8
add byte [eax], al
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x41b26f
mov eax, dword [0x41a19f]
mov dword [esp + 0x110], eax
lea esp, [esp + 0x18]
pop eax
ret 0xc
add byte [eax - 0x6b], ch
push ss
add byte [eax], al
push esi
push 0x41a66d
push 0xffffffffffffffc5
push 0x15f8
push 0x1a3b
call fcn.004050a8
push 0x1095
push esi
push 0x41a5c0
push 0x41acc1
push esi
call fcn.00406cfc
call fcn.0040ff4e
push dword [esp + 0xc]
push dword [esp + 8]
push 0x28
push 0x3fd737
call fcn.004034ec
cmp ecx, dword [esi - 4]
jne 0x413df8
push 0x10
push 0x41
push 0xffffffffffffffe6
push 0x27
push 0x16ff
push eax
call fcn.0040eadc
push 0xf
call fcn.0040e8b4
call esi
mov edi, dword [0x41ab45]
add esp, 4
mov dword [esp + 0x28], eax
push 0x1ca7
call fcn.0040eac8
push 0xffffffffffffffc3
push 0x400b40
push ecx
push 0x3fa15a
call fcn.00402f20
mov dword [esp], eax
mov dword [esp + 4], eax
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 4]
push edx
lea edx, [esp + 4]
push esi
push 0x79
push ebx
push esi
push esi
push 0x1611
push esp
call fcn.004102b4
push edx
push ebp
push 0xd
call fcn.00406126
mov dword [esp], eax
lea eax, [esp]
push eax
push 0x41a77f
push ecx
push edx
push edx
push 0x1f7b
call fcn.0040de97
push 0x6c
push esi
push 0x400535
push 0x3f155f
call fcn.00403091
push 0xc
push 0x41ac1d
call fcn.004053fd
and dword [ebp - 0x1c], 0
mov esi, dword [ebp + 0xc]
mov eax, esi
imul eax, dword [ebp + 0x10]
add dword [ebp + 8], eax
and dword [ebp - 4], 0
push 0x1fd5
push sym.imp.KERNEL32.dll_EnterCriticalSection
push 0x83c
push 0xffffffffffffffca
call fcn.00410da6
push dword [esp + 0xc]
push dword [esp + 8]
push 0x400fb1
push 0x3fb015
call fcn.00403650
push esi
push edi
mov edi, dword [esp + 0xc]
push edi
push 0x41a3c4
mov esi, ecx
call fcn.0040eaaa
push ebp
push 0xffffffffffffff96
call fcn.0040e497
push sym.imp.GDI32.dll_GetTextExtentPoint32W
push 0x17
push 4
call fcn.0040ba4c
mov dword [esi + 0x18], eax
push esi
push 4
push 0x41a3af
push edx
push 0x1c91
call fcn.00407783
push esi
push ecx
push 0x41a378
push eax
push 0x1543
push 0x165
push 0x87f
call fcn.004082b8
push 0x13
call fcn.00409d56
pop esi
mov ecx, dword [esp + 0x20c]
call fcn.0040f119
add esp, 0x41a859
push 0xf5c
push ecx
call fcn.00404fb2
push 0x41aac2
push 0x142
call fcn.0040ddbc
push 0xffffffffffffffed
push ebp
call fcn.0040f82d
push sym.imp.KERNEL32.dll_LoadLibraryExA
push 0x1888
call fcn.00403f45
push edx
push 0x1ad3
push 0x22
push 0x1ffb
push 0x13ad
push 0x8e4
call fcn.00405b97
push sym.imp.KERNEL32.dll_VirtualQuery
push 0xffffffffffffffb3
push 0x41a4dc
push 0x70
push ebp
push ecx
call fcn.00410635
push 0xffffffffffffffe9
push 0xa
call fcn.004096c2
add esp, 8
cmp eax, 0xffffffff
jne 0x413fb3
xor eax, eax
push edx
push sym.imp.USER32.dll_ShowWindow
push 0x5ad
push 0xac7
push sym.imp.WININET.dll_HttpEndRequestA
call fcn.0040f0d5
push dword [esp + 4]
push dword [esp + 8]
push dword [esp + 0xc]
push 0x3fc1a4
call fcn.00403091
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esi + 0xb0], edi
xor ebp, ebp
xor eax, eax
lea edi, [esi + 0xa4]
mov ecx, edi
add cl, byte [eax + 0x68530251]
clc
cmp al, byte [eax]
push 0xc0402148
je 0x41400c
mov ecx, dword [esp + 8]
mov dword [esp + 0x5f], 0xc48312ff
adc byte [eax - 0x33], ch
push es
inc eax
push edi
push 0x10023660
mov esi, ecx
call 0x41ebf1
mov esp, dword [ecx*4 + 0x68502404]
or al, 0x38
add edx, dword [eax]
push esi
push dword [esp + ebx - 0x77d0000]
call dword [ecx + 0x51]
push 0x4049d0
je 0x413376
push 2
push 0x13
push 0x50240450
push 0x10024e58
push ecx
call dword [0xff9e18e8]
dec dword [ebx - 0x137cebbf]
or byte [ebp - 0x39b08a40], al
pop esi
mov ecx, dword [esp + 4]
mov dword fs:[0x8b100000], ecx
invalid