Function at 0x41de10
Capabilities:
Create directory
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov dword [ebp - 0x4c], 0xeeea
mov dword [ebp - 0x20], 0x60e8
mov dword [ebp - 0x3c], 0x8da0
mov dword [ebp - 0x50], 0xf82e
mov dword [ebp - 0x28], 0x18ea
mov dword [ebp - 0x40], 0xa171
mov dword [ebp - 0x2c], 0x19f5
mov dword [ebp - 0x18], 0xa8ac
mov dword [ebp - 0x24], 0x11bbe
mov dword [ebp - 0x48], 0x143c4
mov dword [ebp - 0x30], 0x1383c
mov dword [ebp - 0xc], 0x10166
mov dword [ebp - 0x88], 0x4f8c
mov dword [ebp - 0x38], 0x11eda
mov dword [ebp - 8], 0x1410c
mov dword [ebp - 0x1c], 0x178fb
mov dword [ebp - 0x14], 0x154da
mov dword [ebp - 0x44], 0x3d54
mov dword [ebp - 4], 0x1046c
mov dword [ebp - 0x34], 0x4716
mov dword [ebp - 0x54], 0x8465
mov dword [ebp - 0x10], 0x8da2
mov eax, dword [ebp - 4]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x90]
jge 0x41dee8
mov dword [ebp - 0x5c], 1
jmp 0x41deef
mov dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x44]
jge 0x41df09
mov dword [ebp - 0x60], 1
jmp 0x41df10
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
xor ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x40]
imul edx, dword [ebp - 8]
and edx, dword [ebp - 0x60]
or ecx, edx
je 0x41e2eb
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x24]
jge 0x41df42
mov dword [ebp - 0x64], 1
jmp 0x41df49
mov dword [ebp - 0x64], 0
mov ecx, dword [ebp - 4]
and ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0xc]
and ecx, edx
je 0x41e2eb
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x18]
jne 0x41e2eb
mov ecx, dword [ebp - 0x88]
cmp ecx, dword [ebp - 0x34]
jne 0x41e2eb
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 0x50]
jne 0x41e2eb
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x20]
jne 0x41e2eb
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x34]
jne 0x41e2eb
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
and eax, dword [ebp - 0x18]
or edx, eax
je 0x41e2c9
mov ecx, dword [ebp - 0x34]
cmp ecx, dword [ebp - 0x24]
jne 0x41e2c9
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x24]
jne 0x41e2c9
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x10]
jne 0x41e2c9
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
jne 0x41e2c9
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 8]
jne 0x41e2c9
push 0xf72c
push 0xff7e
push 0x174c5
push 0x1256e
push 0x11418
push 0x1710c
push 0x51e8
push 0xf669
call dword [sym.imp.KERNEL32.dll_SleepEx]
add esp, 0x20
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x18]
jge 0x41e2c9
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 4]
jne 0x41e2c9
mov edx, dword [ebp - 0x54]
cmp edx, dword [ebp - 0x30]
jne 0x41e2c9
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x18]
jne 0x41e2c9
push 0x14517
push 0x5d79
push 0xaf1c
call dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
add esp, 0xc
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x94]
cmp edx, dword [ebp - 0x98]
jge 0x41e0a8
mov dword [ebp - 0x70], 1
jmp 0x41e0af
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x38]
jge 0x41e0c0
mov dword [ebp - 0x68], 1
jmp 0x41e0c7
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0x48]
sub eax, 1
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [ebp - 0xa0]
jge 0x41e0f9
mov dword [ebp - 0x6c], 1
jmp 0x41e100
mov dword [ebp - 0x6c], 0
mov edx, dword [ebp - 0x68]
and edx, dword [ebp - 0x6c]
or edx, dword [ebp - 0x70]
je 0x41e298
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xc]
jne 0x41e298
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x34]
jne 0x41e298
mov edx, dword [ebp - 0x28]
or edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x3c]
jge 0x41e298
mov eax, dword [ebp - 0x38]
xor eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x30]
jge 0x41e298
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0xc]
jne 0x41e298
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 4]
jne 0x41e298
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x50]
jge 0x41e16e
mov dword [ebp - 0x78], 1
jmp 0x41e175
mov dword [ebp - 0x78], 0
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x3c]
jge 0x41e189
mov dword [ebp - 0x74], 1
jmp 0x41e190
mov dword [ebp - 0x74], 0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc]
and edx, dword [ebp - 0x74]
or edx, dword [ebp - 0x78]
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xa4], 0
je 0x41e298
push 0x58e3
push 0x7ee0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryTransactedA]
add esp, 8
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 4]
jge 0x41e1dc
mov dword [ebp - 0x7c], 1
jmp 0x41e1e3
mov dword [ebp - 0x7c], 0
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x10]
jge 0x41e1f4
mov dword [ebp - 0x80], 1
jmp 0x41e1fb
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0x14]
sub edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xac]
jge 0x41e230
mov dword [ebp - 0x84], 1
jmp 0x41e23a
mov dword [ebp - 0x84], 0
mov ecx, dword [ebp - 0x7c]
and ecx, dword [ebp - 0x80]
and ecx, dword [ebp - 0x84]
je 0x41e271
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x28]
jne 0x41e271
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 8]
jne 0x41e271
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x28]
jne 0x41e271
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x40]
jne 0x41e271
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
push 0x1f1a
push 0xf0e0
push 0x12157
push 0x9c38
push 0x94ee
push 0x705a
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
add esp, 0x18
push 0xd014
push 0x11c0e
push 0x6200
push 0x16d3e
push 0xe35c
push 0x4f8f
push 0x476a
push 0x4a51
call dword [sym.imp.KERNEL32.dll_ResetWriteWatch]
add esp, 0x20
push 0x8898
push 0x4ea1
push 0x12bf1
push 0x166f
push 0x14ca5
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsA]
add esp, 0x14
mov dword [ebp - 0x58], 0
jmp 0x41e2fd
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x8da2
cmp dword [ebp - 0x58], edx
jge 0x41e350
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x28]
jge 0x41e34e
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x44]
jne 0x41e34e
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x30]
jne 0x41e34e
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x88]
jne 0x41e34e
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
push 0x1180d
push 0x10b14
push 0x12265
call sub.KERNEL32.dll_VerLanguageNameW
add esp, 0xc
jmp 0x41e2f4
mov esp, ebp
pop ebp
ret