Function at 0x4051e0
Capabilities:
Create directory
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x650
mov eax, dword [0x42603c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x22e]
push ecx
mov word [ebp - 0x230], ax
call fcn.00414930
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x436]
push eax
mov word [ebp - 0x438], dx
call fcn.00414930
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x63e]
push edx
mov word [ebp - 0x640], cx
call fcn.00414930
add esp, 0xc
xor eax, eax
mov word [ebp - 0x24], ax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0x1e], eax
mov dword [ebp - 0x1a], eax
mov dword [ebp - 0x16], eax
mov dword [ebp - 0x12], eax
mov dword [ebp - 0xe], eax
mov dword [ebp - 0xa], eax
mov word [ebp - 6], ax
mov edi, edi
movzx ecx, word [eax + 0x429938]
mov word [ebp + eax - 0x438], cx
add eax, 2
test cx, cx
jne 0x405270
push 0x104
lea ecx, [ebp - 0x640]
push ecx
push str._TEMP_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x640]
add eax, 0xfffffffe
jmp 0x4052b0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4052b0
mov edx, dword [str.SMRCV7]
mov ecx, dword [0x41d07c]
mov dword [eax], edx
mov edx, dword [0x41d080]
mov dword [eax + 4], ecx
mov ecx, dword [0x41d084]
mov dword [eax + 8], edx
lea edx, [ebp - 0x640]
push 0
push edx
mov dword [eax + 0xc], ecx
call fcn.0040e7ad
add esp, 8
cmp eax, 0xffffffff
jne 0x405304
push 0
lea eax, [ebp - 0x640]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea ecx, [ebp - 0x650]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x644]
movzx eax, word [ebp - 0x646]
movzx ecx, word [ebp - 0x648]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
movzx edx, word [ebp - 0x64a]
push eax
movzx eax, word [ebp - 0x64e]
push ecx
push edx
push eax
lea ecx, [ebp - 0x24]
push str._02u_02u_02u_02u_02u
push ecx
call esi
add esp, 0x1c
lea edx, [ebp - 0x230]
push str._c_net_stop_wm7f
push edx
call esi
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x230]
push str._c_ren___swmcHook.dll__wmcHook._s
push edx
call esi
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x230]
push str._c_ren___swmcHook64.dll__wmcHook64._s
push edx
call esi
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
add esp, 0x40
shl edx, 0x10
or eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x230]
push str._c_ren___swmcHook7.dll__wmcHook7._s
push edx
call esi
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x230]
push str._c_ren___swmcHook764.dll__wmcHook764._s
push edx
call esi
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x230]
push str._c_ren___swmcMemmgr.dll__wmcMemmgr._s
push edx
call esi
add esp, 0x40
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x230]
push str._c_ren___swmcMemmgr64.dll__wmcMemmgr64._s
push edx
call esi
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
xor eax, eax
movzx edx, ax
mov eax, edx
mov ecx, 0x82
lea edi, [ebp - 0x230]
shl edx, 0x10
or eax, edx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x438]
push edx
lea eax, [ebp - 0x230]
push str._c_move___s._s____s_
push eax
call esi
add esp, 0x34
push 0xa
push str.cmd.exe
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x230]
call fcn.0040d1f0
mov ecx, dword [ebp - 4]
add esp, 8
pop edi
xor ecx, ebp
mov eax, 1
pop esi
call fcn.0040d7f6
mov esp, ebp
pop ebp
ret