Function at 0x402fd0
Capabilities:
Create directory
Get hostname

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x100
mov dword [0x421938], eax
push ebx
push ebp
push esi
push edi
call fcn.00403300
test eax, eax
jne 0x402ff7
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100
ret
xor eax, eax
push 0x41bd18
mov dword [0x421ce0], eax
mov dword [0x421cf4], eax
mov dword [0x421cec], eax
call fcn.00402c30
add esp, 4
call fcn.0040d310
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x118]
test eax, eax
je 0x403089
mov esi, ebp
mov eax, 0x421b40
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x403057
test cl, cl
je 0x403053
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x403057
add eax, 2
add esi, 2
test cl, cl
jne 0x403033
xor eax, eax
jmp 0x40305c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x403084
cmp ebx, dword [0x41bbfc]
jne 0x403084
mov eax, dword [esp + 0x120]
pop edi
pop esi
mov dword [0x41bc04], eax
pop ebp
mov eax, 1
pop ebx
add esp, 0x100
ret
call fcn.00403720
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
push 0x41bd00
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x421b40
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [0x41bbfc], ebx
call fcn.00404f20
push 0x41bcdc
call fcn.00404f70
push ebx
push ebp
call fcn.0040d3f0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x41bc00], eax
jne 0x403160
push 0x41bcc0
call fcn.00404f70
push ebx
push ebp
call fcn.004035c0
add esp, 0xc
test eax, eax
jne 0x40310f
push 0x41bca4
call fcn.00402c30
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100
ret
push 0x41bd00
call fcn.00404f20
push 0x41bcdc
call fcn.00404f70
push ebx
push ebp
call fcn.0040d3f0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x41bc00], eax
jne 0x403160
push 0x41bcc0
call fcn.00404f70
call fcn.00404d00
push 0x41bca4
call fcn.00402c30
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100
ret
push 0x41bc90
call fcn.00404f70
call fcn.00404d00
push 0x42193c
call fcn.0040d120
mov edi, 0x41bc80
or ecx, 0xffffffff
xor eax, eax
push 0x42193c
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42193c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0040d010
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
add esp, 0xc
test eax, eax
jne 0x4031e4
push 0
push 0x42193c
call ebx
test eax, eax
jne 0x4031e4
push 0x41bc68
call fcn.00402c30
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100
ret
lea eax, [esp + 0x10]
push 0x80
push eax
call sub.WSOCK32.dll_gethostname
mov edi, 0x41bc64
or ecx, 0xffffffff
xor eax, eax
push 0x42193c
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42193c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x14]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42193c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0040d010
add esp, 4
test eax, eax
jne 0x403281
push eax
push 0x42193c
call ebx
test eax, eax
jne 0x403281
push 0x41bc68
call fcn.00402c30
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100
ret
mov eax, dword [0x41bbfc]
push eax
push 0x421b40
call fcn.0040a960
push 0x42193c
call fcn.0040a8f0
mov eax, dword [0x421cf0]
mov ecx, dword [esp + 0x12c]
xor esi, esi
add esp, 0xc
cmp eax, esi
mov dword [0x41bc04], ecx
mov dword [0x421cf4], 1
je 0x4032e4
call fcn.00409530
push 0x456430
call fcn.0040c7b0
mov edx, dword [0x45643c]
push edx
call fcn.0040c170
add esp, 8
mov dword [0x45643c], esi
mov dword [0x421cf0], esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x100
ret