Function at 0x10047e10
Capabilities:
Create process on windows
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x490
mov eax, dword [0x10086ba0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x200
push 0
lea eax, [ebp - 0x288]
push eax
call fcn.100139b0
add esp, 0xc
push 0x200
push 0
push 0x1008b458
call fcn.100139b0
add esp, 0xc
push 0x80
push 0
lea ecx, [ebp - 0x88]
push ecx
call fcn.100139b0
add esp, 0xc
push 0x100
push 0
lea edx, [ebp - 0x398]
push edx
call fcn.100139b0
add esp, 0xc
mov byte [ebp - 0x291], 0
push 0
push str.net_share_Realtek_Media_Share__delete__y
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp + 8]
push eax
push str.net_share_Realtek_Media_Share__s___cache:no__grant:everyone_FULL
lea ecx, [ebp - 0x288]
push ecx
call fcn.10016875
add esp, 0xc
push 0
lea edx, [ebp - 0x288]
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp + 8]
push eax
push 0x1008b458
call fcn.10016b40
add esp, 8
call fcn.100418b0
push 0x10079104
push 0x10079114
push 0x10079120
call fcn.100172aa
add esp, 4
push eax
push 0x10079130
lea ecx, [ebp - 0x88]
push ecx
call fcn.10016875
add esp, 0x14
lea edx, [ebp - 0x460]
push edx
call sym.RtlLib.dll_RT_Media_Server_Factory
add esp, 4
mov ecx, dword [eax]
mov dword [ebp - 0x448], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x444], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x440], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x43c], edx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x438], ecx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x434], edx
push 0x10079138
lea eax, [ebp - 0x88]
push eax
call fcn.10015838
add esp, 8
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
jne 0x10047fba
mov dword [ebp - 0x28c], 0
jmp 0x10047f78
mov ecx, dword [ebp - 0x28c]
add ecx, 1
mov dword [ebp - 0x28c], ecx
cmp dword [ebp - 0x28c], 0xa
jge 0x10047fb5
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1007913c
lea edx, [ebp - 0x88]
push edx
call fcn.10015838
add esp, 8
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x10047fb3
jmp 0x10047fba
jmp 0x10047f69
jmp 0x10048273
push 0x80
push 0
lea eax, [ebp - 0x428]
push eax
call fcn.100139b0
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
push 0x10079140
lea edx, [ebp - 0x428]
push edx
call fcn.10016875
add esp, 0xc
push 2
push 0
mov eax, dword [ebp - 0x290]
push eax
call fcn.100173b7
add esp, 0xc
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.100175d9
add esp, 4
mov dword [ebp - 0x3a0], eax
push 0
push 0
mov edx, dword [ebp - 0x290]
push edx
call fcn.100173b7
add esp, 0xc
mov eax, dword [ebp - 0x3a0]
add eax, 0x80
push eax
call fcn.100165a5
add esp, 4
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x3a0]
add edx, 0x80
push edx
push 0
mov eax, dword [ebp - 0x3a4]
push eax
call fcn.100139b0
add esp, 0xc
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.1001584f
add esp, 4
test eax, eax
jne 0x100481a5
mov edx, dword [ebp - 0x290]
push edx
push 0x100
lea eax, [ebp - 0x398]
push eax
call fcn.10015883
add esp, 0xc
push 2
push 0x10079144
lea ecx, [ebp - 0x398]
push ecx
call fcn.100167b5
add esp, 0xc
test eax, eax
je 0x10048149
push 1
push 0x10079148
lea edx, [ebp - 0x398]
push edx
call fcn.100167b5
add esp, 0xc
test eax, eax
je 0x10048149
push 1
push 0x1007914c
lea eax, [ebp - 0x398]
push eax
call fcn.100167b5
add esp, 0xc
test eax, eax
je 0x10048149
lea ecx, [ebp - 0x398]
push ecx
call fcn.10013a30
add esp, 4
cmp eax, 1
jbe 0x10048149
mov byte [ebp - 0x291], 1
lea edx, [ebp - 0x428]
push edx
call fcn.10013a30
add esp, 4
push eax
lea eax, [ebp - 0x428]
push eax
mov ecx, dword [ebp - 0x3a4]
push ecx
call fcn.10013640
add esp, 0xc
lea edx, [ebp - 0x428]
push edx
call fcn.10013a30
add esp, 4
add eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a4], eax
jmp 0x1004818a
lea eax, [ebp - 0x398]
push eax
call fcn.10013a30
add esp, 4
push eax
lea ecx, [ebp - 0x398]
push ecx
mov edx, dword [ebp - 0x3a4]
push edx
call fcn.10013640
add esp, 0xc
lea eax, [ebp - 0x398]
push eax
call fcn.10013a30
add esp, 4
add eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a4], eax
push 0x100
push 0
lea ecx, [ebp - 0x398]
push ecx
call fcn.100139b0
add esp, 0xc
jmp 0x10048067
push 0
push 0
mov edx, dword [ebp - 0x290]
push edx
call fcn.100173b7
add esp, 0xc
mov eax, dword [ebp - 0x290]
push eax
call fcn.10015a42
add esp, 4
movzx ecx, byte [ebp - 0x291]
test ecx, ecx
jne 0x10048213
push 0x10079150
lea edx, [ebp - 0x88]
push edx
call fcn.10015838
add esp, 8
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x428]
push ecx
call fcn.10017647
add esp, 8
mov edx, dword [ebp - 0x42c]
push edx
call fcn.10015a42
add esp, 4
jmp 0x10048264
push 0x10079154
lea eax, [ebp - 0x88]
push eax
call fcn.10015838
add esp, 8
mov dword [ebp - 0x430], eax
mov ecx, dword [ebp - 0x430]
push ecx
push 1
mov edx, dword [ebp - 0x39c]
push edx
call fcn.10013a30
add esp, 4
push eax
mov eax, dword [ebp - 0x39c]
push eax
call fcn.100178b8
add esp, 0x10
mov ecx, dword [ebp - 0x430]
push ecx
call fcn.10015a42
add esp, 4
mov edx, dword [ebp - 0x39c]
push edx
call fcn.10016931
add esp, 4
lea eax, [ebp - 0x490]
push eax
call sym.RtlLib.dll_RT_Media_Server_Factory
add esp, 4
mov ecx, dword [eax]
mov dword [ebp - 0x478], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x474], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x470], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x46c], edx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x468], ecx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x464], edx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001362b
mov esp, ebp
pop ebp
ret