Function at 0x56fe4c
Capabilities:
Create directory
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x43
push 0
push 0
dec ecx
jne 0x56fe55
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
xor eax, eax
push ebp
push 0x570653
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1a4]
mov eax, 0x570664
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov eax, dword [ebp - 0x1a4]
lea edx, [ebp - 0x10]
call fcn.004a615c
lea ecx, [ebp - 0x1a8]
mov eax, 0x570664
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov eax, dword [ebp - 0x1a8]
lea edx, [ebp - 0x14]
call fcn.004a5f78
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.004a6340
mov edx, dword [0x56c444]
mov eax, 0x28
call fcn.00406414
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x4d8], eax
lea ecx, [ebp - 0x1ac]
mov eax, 0x570670
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 4
call fcn.00405338
lea ecx, [ebp - 0x1b0]
mov eax, 0x570678
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 8
call fcn.00405338
call fcn.0040d0ac
fstp qword [ebp - 0x40]
wait
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea eax, [ebp - 0x1c]
mov edx, 0x570688
call fcn.0040dcac
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0xc
mov edx, dword [ebp - 0x1c]
call fcn.00405338
lea ecx, [ebp - 0x1b4]
mov eax, 0x570694
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0x10
call fcn.00405338
lea ecx, [ebp - 0x1b8]
mov eax, 0x570698
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0x14
call fcn.00405338
lea ecx, [ebp - 0x1bc]
mov eax, 0x5706a4
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0x18
call fcn.00405338
lea ecx, [ebp - 0x1c4]
mov eax, 0x570664
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov eax, dword [ebp - 0x1c4]
lea edx, [ebp - 0x1c0]
call fcn.00409fb0
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0x20
call fcn.00405338
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0x1c
mov edx, dword [ebp - 4]
call fcn.00405338
lea eax, [ebp - 0x18]
call fcn.004a5aa4
lea ecx, [ebp - 0x1d0]
mov eax, 0x570664
mov edx, dword [ebp - 0x2c]
call fcn.0056d660
mov eax, dword [ebp - 0x1d0]
lea edx, [ebp - 0x1cc]
call fcn.00409fb0
mov eax, dword [ebp - 0x1cc]
lea edx, [ebp - 0x1c8]
call fcn.004a615c
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov edx, dword [ebp - 0x18]
call fcn.004055fc
push 0
mov eax, dword [ebp - 0x18]
call fcn.00405774
mov esi, eax
push esi
call sub.kernel32.dll_CreateDirectoryA
mov dl, 1
mov eax, dword [0x41a74c]
call fcn.00404350
mov ebx, eax
lea edx, [ebp - 0x1d4]
mov eax, dword [ebp - 0x2c]
call fcn.0040a45c
mov edx, dword [ebp - 0x1d4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 1
push 1
push ebx
push esi
push 0
call sub.eb_efs.dll_FX_Outputall
mov eax, ebx
call fcn.00404380
mov eax, dword [0x587e50]
mov eax, dword [eax]
mov edx, 0x5706b4
call fcn.0040570c
jne 0x570173
mov eax, dword [0x5878a8]
mov eax, dword [eax]
mov edx, 0x5706b4
call fcn.0040570c
jne 0x570173
push 0x24
lea eax, [ebp - 0x1d8]
push eax
mov eax, dword [0x587700]
mov eax, dword [eax]
mov ecx, 0x5706c0
mov edx, 0x5706e0
call fcn.004a42ac
mov eax, dword [ebp - 0x1d8]
call fcn.00405774
push eax
lea eax, [ebp - 0x1dc]
push eax
mov eax, dword [0x587700]
mov eax, dword [eax]
mov ecx, 0x5706fc
mov edx, 0x5706e0
call fcn.004a42ac
mov eax, dword [ebp - 0x1dc]
call fcn.00405774
push eax
mov eax, dword [ebp - 0x28]
call fcn.00465324
push eax
call sub.user32.dll_MessageBoxA_1
cmp eax, 7
jne 0x570173
mov eax, dword [0x5878a8]
mov edx, 0x57071c
call fcn.00405338
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4ec]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x190]
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov eax, dword [eax]
call fcn.00405774
push eax
call sub.kernel32.dll_FindFirstFileA_1
cmp eax, 0xffffffff
je 0x57022c
push eax
call sub.kernel32.dll_FindClose_1
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x17c]
push eax
call sub.kernel32.dll_FileTimeToLocalFileTime
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x38]
push eax
call sub.kernel32.dll_FileTimeToSystemTime
xor eax, eax
push ebp
push 0x570222
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a0]
call fcn.0040cfe8
fstp qword [ebp - 0x48]
wait
push dword [ebp - 0x44]
push dword [ebp - 0x48]
lea eax, [ebp - 0x20]
mov edx, 0x570728
call fcn.0040dcac
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
add eax, 0x24
mov edx, dword [ebp - 0x20]
call fcn.00405338
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57022c
call fcn.0040d0ac
fstp qword [ebp - 0x50]
wait
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
lea eax, [ebp - 0x24]
mov edx, 0x570688
call fcn.0040dcac
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x24]
call fcn.00405774
push eax
push 0x57073c
call sub.eb_efs.dll_FX_Directory_Setitem_String
cmp dword [ebp - 0x30], 1
jne 0x5702af
push 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov ecx, dword [eax]
lea eax, [ebp - 0x1e0]
mov edx, 0x57074c
call fcn.004055fc
mov eax, dword [ebp - 0x1e0]
mov cx, 1
xor edx, edx
call fcn.004a491c
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x4d8]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d4]
call fcn.0041ca34
jmp 0x570628
cmp dword [ebp - 0x30], 0
jne 0x570628
lea edx, [ebp - 0x1e8]
mov eax, dword [ebp - 4]
call fcn.00409fb0
mov eax, dword [ebp - 0x1e8]
lea edx, [ebp - 0x1e4]
call fcn.00409c98
mov eax, dword [ebp - 0x1e4]
mov edx, 0x57077c
call fcn.004058c0
test eax, eax
jle 0x57034f
push 1
lea edx, [ebp - 0x1ec]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov eax, dword [eax]
call fcn.0040ac0c
mov eax, dword [ebp - 0x1ec]
call fcn.00405774
push eax
push 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov eax, dword [eax]
call fcn.00405774
push eax
push 0x57079c
mov eax, dword [ebp - 0x28]
call fcn.00465324
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov edx, dword [0x56c444]
call fcn.00406428
jmp 0x570628
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 4]
call fcn.00409fb0
mov eax, dword [ebp - 0x1f4]
lea edx, [ebp - 0x1f0]
call fcn.00409c98
mov eax, dword [ebp - 0x1f0]
mov edx, 0x5707ac
call fcn.0040570c
jne 0x5703d1
push 9
push 0x5707bc
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
push dword [eax]
push 0x5707bc
lea eax, [ebp - 0x1f8]
mov edx, 3
call fcn.00405678
mov eax, dword [ebp - 0x1f8]
call fcn.00405774
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov edx, dword [0x56c444]
call fcn.00406428
jmp 0x570628
lea edx, [ebp - 0x200]
mov eax, dword [ebp - 4]
call fcn.00409fb0
mov eax, dword [ebp - 0x200]
lea edx, [ebp - 0x1fc]
call fcn.00409c98
mov eax, dword [ebp - 0x1fc]
mov edx, 0x5707c8
call fcn.0040570c
jne 0x570465
push 1
lea edx, [ebp - 0x204]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov eax, dword [eax]
call fcn.0040ac0c
mov eax, dword [ebp - 0x204]
call fcn.00405774
push eax
push 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov eax, dword [eax]
call fcn.00405774
push eax
push 0x57079c
mov eax, dword [ebp - 0x28]
call fcn.00465324
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov edx, dword [0x56c444]
call fcn.00406428
jmp 0x570628
lea eax, [ebp - 8]
call fcn.004052e4
lea edx, [ebp - 0x208]
mov eax, dword [ebp - 4]
call fcn.00409fb0
cmp dword [ebp - 0x208], 0
je 0x57053d
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.004a615c
lea edx, [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a448c
lea eax, [ebp - 0x20c]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004057dc
mov eax, dword [ebp - 0x20c]
mov edx, 0x5707bc
call fcn.0040570c
jne 0x5704e8
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x5704d5
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 8]
push eax
mov ecx, ebx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.004057dc
mov esi, dword [ebp - 8]
mov ebx, esi
test ebx, ebx
je 0x5704f6
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x210]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 8]
call fcn.004057dc
mov eax, dword [ebp - 0x210]
mov edx, 0x5707bc
call fcn.0040570c
jne 0x57053d
mov ebx, esi
test ebx, ebx
je 0x570529
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 8]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004057dc
lea edx, [ebp - 0x214]
mov eax, dword [ebp - 8]
call fcn.00409fb0
cmp dword [ebp - 0x214], 0
jne 0x57059e
push 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
mov ecx, dword [eax]
lea eax, [ebp - 0x218]
mov edx, 0x57074c
call fcn.004055fc
mov eax, dword [ebp - 0x218]
mov cx, 1
xor edx, edx
call fcn.004a491c
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x4d8]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d4]
call fcn.0041ca34
jmp 0x570628
xor eax, eax
push ebp
push 0x57061e
push dword fs:[eax]
mov dword fs:[eax], esp
push 5
push 0
push 0x5707bc
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d8]
push dword [eax]
push 0x5707bc
lea eax, [ebp - 0x21c]
mov edx, 3
call fcn.00405678
mov eax, dword [ebp - 0x21c]
call fcn.00405774
push eax
mov eax, dword [ebp - 8]
call fcn.00405774
push eax
push 0x57079c
mov eax, dword [ebp - 0x28]
call fcn.00465324
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x4d8]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x4d4]
call fcn.0041ca34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x570628
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x57065a
lea eax, [ebp - 0x21c]
mov edx, 0x1f
call fcn.00405308
lea eax, [ebp - 0x24]
mov edx, 9
call fcn.00405308
ret