Function at 0x410bc0
Capabilities:
Access peb ldr_data
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x4456e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push esi
push edi
lea ecx, [esp + 0x20]
mov esi, 1
call fcn.0042ba73
mov edi, dword [esp + 0x4c]
lea ecx, [esp + 0x10]
push edi
mov dword [esp + 0x48], 0
call fcn.0043bf90
mov ebx, dword [esp + 0x50]
lea ecx, [esp + 0xc]
push ebx
mov byte [esp + 0x48], 1
call fcn.0043bf90
push ebx
push edi
mov byte [esp + 0x4c], 2
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x410c64
lea ecx, [esp + 0xc]
mov byte [esp + 0x44], 1
call fcn.0043bf22
lea ecx, [esp + 0x10]
mov byte [esp + 0x44], 0
call fcn.0043bf22
lea ecx, [esp + 0x20]
mov dword [esp + 0x44], 0xffffffff
call fcn.0042bab0
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret
mov eax, dword [esp + 0xc]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x410c85
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x410c85
xor esi, esi
lea ecx, [esp + 0x10]
push ecx
call fcn.00410ac0
lea edx, [esp + 0x10]
push edx
call fcn.00410ac0
add esp, 8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x4c]
push 0x452290
push eax
push ecx
call fcn.0043c16b
mov eax, dword [eax]
push 0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x4c], 3
call fcn.0042bb36
lea ecx, [esp + 0x4c]
mov edi, eax
mov byte [esp + 0x44], 2
call fcn.0043bf22
test edi, edi
je 0x410e2e
mov bl, 4
test esi, esi
je 0x410e2e
mov edx, dword [0x453250]
mov dword [esp + 0x4c], edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x44], bl
call fcn.0042bd56
lea ecx, [esp + 0x20]
mov edi, eax
call fcn.0042bd1d
test eax, eax
jne 0x410e18
lea eax, [esp + 0x50]
lea ecx, [esp + 0x20]
push eax
call fcn.0042be25
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 5
call fcn.0043c00f
lea ecx, [esp + 0x50]
mov byte [esp + 0x44], bl
call fcn.0043bf22
mov edx, dword [esp + 0x20]
push 0x10
lea ecx, [esp + 0x24]
call dword [edx + 0x38]
test eax, eax
je 0x410dbe
lea eax, [esp + 0x4c]
push eax
call fcn.00410ac0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x50]
push ecx
push edx
call fcn.0042cd86
add esp, 0xc
test eax, eax
je 0x410e18
lea eax, [esp + 0x14]
lea ecx, [esp + 0x20]
push eax
call fcn.0042bf4e
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x58]
push ecx
push edx
mov byte [esp + 0x50], 6
call fcn.0043c105
mov eax, dword [eax]
push 1
push eax
mov eax, dword [esp + 0x54]
push eax
mov byte [esp + 0x50], 7
call fcn.00410bc0
add esp, 0xc
lea ecx, [esp + 0x54]
mov esi, eax
mov byte [esp + 0x44], 6
call fcn.0043bf22
lea ecx, [esp + 0x14]
jmp 0x410e0f
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x24]
call fcn.0042bf4e
push eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
mov byte [esp + 0x50], 8
call fcn.0043c105
mov eax, dword [eax]
mov ecx, dword [esp + 0x4c]
push 0x80
push eax
push ecx
mov byte [esp + 0x50], 9
call fcn.00410e80
add esp, 0xc
lea ecx, [esp + 0x18]
mov esi, eax
mov byte [esp + 0x44], 8
call fcn.0043bf22
lea ecx, [esp + 0x1c]
mov byte [esp + 0x44], bl
call fcn.0043bf22
lea ecx, [esp + 0x4c]
mov byte [esp + 0x44], 2
call fcn.0043bf22
test edi, edi
jne 0x410cdd
lea ecx, [esp + 0x20]
call fcn.0042baec
lea ecx, [esp + 0xc]
mov byte [esp + 0x44], 1
call fcn.0043bf22
lea ecx, [esp + 0x10]
mov byte [esp + 0x44], 0
call fcn.0043bf22
lea ecx, [esp + 0x20]
mov dword [esp + 0x44], 0xffffffff
call fcn.0042bab0
mov ecx, dword [esp + 0x3c]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret