Function at 0x10004000
Capabilities:
Create directory
Delete file

Disassembly:
push ebp
sub esp, 0x6e4
lea ebp, [esp - 4]
mov eax, dword [0x1004fa70]
xor eax, ebp
mov dword [ebp + 0x6e4], eax
push 8
mov eax, 0x1003ec1c
call fcn.1002b89f
mov edi, dword [ebp + 0x6f0]
mov esi, ecx
lea ecx, [esi + 8]
mov dword [ebp - 0x10], esi
mov dword [esi], vtable.CMyHttpFile.0
call fcn.1000a480
xor ebx, ebx
cmp dword [0x10052e7c], ebx
mov dword [ebp - 4], ebx
jne 0x10004236
push edi
mov dword [esi + 4], ebx
call fcn.1002ae60
inc eax
push eax
call fcn.1002b1c7
mov esi, eax
push edi
push esi
mov dword [ebp - 0x14], esi
call fcn.1002b3e0
push 0x7c
push esi
call fcn.1002c259
add esp, 0x18
cmp eax, ebx
je 0x10004236
push 0x7c
push esi
mov edi, eax
mov byte [eax], 0x20
call fcn.1002c259
cmp eax, ebx
pop ecx
pop ecx
mov byte [edi], 0x7c
je 0x10004236
mov byte [eax], bl
inc eax
push eax
push esi
lea ecx, [ebp]
call fcn.1001ff40
test eax, eax
jne 0x10004236
mov edi, dword [ebp - 0x10]
add edi, 8
push esi
mov ecx, edi
call fcn.1000a5e8
mov esi, 0x104
push esi
lea eax, [ebp + 0x4d4]
push eax
mov ecx, edi
call fcn.1000a4d8
mov ecx, dword [ebp - 0x10]
push eax
call fcn.10003fb4
cmp byte [ebp + 0x4d4], bl
je 0x10004236
lea eax, [ebp + 0x4d4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionA]
push str..bmp
push eax
call fcn.1002c5b5
test eax, eax
pop ecx
pop ecx
jne 0x10004236
lea eax, [ebp + 0x5dc]
push esi
push eax
call fcn.1001f440
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
pop ecx
pop ecx
push str.ClientKeeper
lea eax, [ebp + 0x5dc]
push eax
call edi
push ebx
lea eax, [ebp + 0x5dc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push str.KeyPro
lea eax, [ebp + 0x5dc]
push eax
call edi
push ebx
lea eax, [ebp + 0x5dc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov edi, dword [ebp - 0x10]
push 0x105
add edi, 0x50
push ebx
push edi
call fcn.1002aa10
push esi
lea eax, [ebp + 0x5dc]
push eax
push edi
call fcn.1002bcbe
push 0x1004172c
push edi
call fcn.1002b3f0
push edi
call fcn.1002ae60
sub esi, eax
push esi
lea eax, [ebp + 0x4d4]
push eax
push edi
call fcn.1002c182
mov ecx, dword [ebp - 0x10]
add esp, 0x30
push dword [ebp - 0x14]
call fcn.10003f6c
mov esi, dword [sym.imp.USER32.dll_LoadImageA]
push 0x2050
push ebx
push ebx
push ebx
push edi
push ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x14], eax
je 0x100041d8
push edi
lea ecx, [ebp]
call fcn.1001f840
test eax, eax
push dword [ebp - 0x14]
jne 0x100041d2
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x10004236
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call fcn.1001f720
test eax, eax
pop ecx
jne 0x1000422f
push 0x3ff
lea eax, [ebp + 0xd5]
push ebx
push eax
mov byte [ebp + 0xd4], bl
call fcn.1002aa10
push 0x400
lea eax, [ebp + 0xd4]
push eax
push edi
call fcn.1001f650
add esp, 0x18
push 0x2050
push ebx
push ebx
push ebx
lea eax, [ebp + 0xd4]
push eax
push ebx
call esi
test eax, eax
jne 0x10004236
lea eax, [ebp + 0xd4]
push eax
jmp 0x10004230
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x6e4]
xor ecx, ebp
call fcn.1002ae45
add ebp, 0x6e8
leave
ret 4