Function at 0x4110a3
Capabilities:
Create directory
Set current directory

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x11c
mov eax, dword [0x42a4c0]
mov dl, byte [eax]
test dl, dl
je 0x4110c5
cmp dl, 0x2f
jne 0x4110c2
mov byte [eax], 0x5c
inc eax
jmp 0x4110b4
sub eax, dword [0x42a4c0]
dec eax
jg 0x4110d8
mov dword [0x42a4c0], str.cgi_bin_
mov eax, dword [0x46597c]
test eax, eax
je 0x4110f2
mov dl, byte [eax]
test dl, dl
je 0x4110f2
cmp dl, 0x2f
jne 0x4110ef
mov byte [eax], 0x5c
inc eax
jmp 0x4110e1
mov ebx, dword [0x465aec]
push esi
push esi
push 0x5c
push ebx
call fcn.00403472
add esp, 0x10
test eax, eax
mov esi, eax
je 0x41115b
xor eax, eax
cmp byte [ebx], 0x22
mov byte [esi], 0
sete al
sub esp, 0xc
add ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
add esp, 0xc
cmp dword [0x465ae4], 0
jne 0x411156
mov eax, esi
sub esp, 0xc
sub eax, ebx
add eax, 5
push eax
call fcn.00428e70
add esp, 0xc
mov dword [0x465ae4], eax
push ebx
push str._swww
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov byte [esi], 0x5c
jmp 0x41116e
cmp dword [0x465ae4], 0
jne 0x41116e
mov dword [0x465ae4], 0x43b2c9
sub esp, 0xc
push dword [0x465ae4]
call fcn.00428f74
pop edi
mov dword [0x42a4a8], eax
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
pop eax
push 0x42a458
push dword [0x465ae4]
call ebx
mov eax, dword [0x42a594]
pop edx
pop ecx
test eax, eax
jne 0x4111b0
cmp dword [0x42a470], 0
je 0x411239
jmp 0x411202
push edx
push edx
push 0x42a458
push eax
call ebx
test byte [0x46579d], 4
pop ecx
pop esi
je 0x4111a1
mov edx, dword [sym.imp.USER32.dll_wsprintfA]
lea edi, [ebp - 0x118]
xor esi, esi
push esi
mov dword [ebp - 0x11c], edx
inc esi
push dword [0x42a594]
push str._.234s_2.2X
push edi
call edx
pop eax
pop edx
push 0x42a458
push edi
call ebx
cmp esi, 0x40
mov edx, dword [ebp - 0x11c]
pop ecx
pop eax
jne 0x4111d3
jmp 0x4111a1
push eax
push eax
push 0x42a458
push dword [0x42a670]
call ebx
mov eax, dword [0x42a668]
pop edx
pop ecx
test eax, eax
je 0x411228
push esi
push esi
push 0x42a458
push eax
call ebx
pop edi
pop eax
push edx
push edx
push 0x42a458
push dword [0x42a66c]
call ebx
pop ecx
pop ebx
mov eax, dword [0x42a464]
test eax, eax
je 0x411251
cmp eax, 0xb
jg 0x411251
mov dword [0x42a464], 0xc
mov eax, dword [0x42a468]
test eax, eax
je 0x411269
cmp eax, 0xb
jg 0x411269
mov dword [0x42a468], 0xc
xor ebx, ebx
mov eax, dword [ebx*4 + 0x465880]
cmp eax, section..rsrc
jbe 0x411285
sub esp, 0xc
push eax
call fcn.00428e54
add esp, 0x10
sub esp, 0xc
push ebx
call fcn.00410ddc
mov dword [esp], ebx
mov dword [ebx*4 + 0x465880], eax
call fcn.00410ee0
mov dword [ebx*4 + 0x465820], eax
inc ebx
add esp, 0x10
cmp ebx, 0x12
jne 0x41126b
push eax
push eax
push 0xa
push dword [0x42a598]
call fcn.00403472
add esp, 0x10
test eax, eax
je 0x4112cf
cmp byte [eax + 1], 0
jne 0x4112cf
mov byte [eax - 1], 0
jmp 0x4112ad
mov eax, dword [0x46579c]
test al, 2
jne 0x4112df
and dword [0x465794], 0xffffffef
test eax, 0x30000
je 0x4112f4
cmp dword [0x472c48], 0
jne 0x4112f4
call fcn.004227eb
cmp dword [0x4652fc], 0
jne 0x411307
mov dword [0x4652fc], str.Message_detected_as_SPAM
cmp dword [0x472c8c], 0
je 0x411315
call fcn.0042380a
call fcn.00412a57
call fcn.00403968
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret