Function at 0x401000
Capabilities:
Create directory

Disassembly:
sub esp, 0x110
mov eax, dword [0x4afa68]
xor eax, esp
mov dword [esp + 0x10c], eax
push ebx
push 0x103
lea eax, [esp + 9]
push 0
push eax
mov byte [esp + 0x10], 0
call fcn.00457ee0
add esp, 0xc
lea ecx, [esp + 4]
call fcn.0041e150
lea ecx, [esp + 4]
push ecx
call fcn.00421d10
add esp, 4
cmp eax, 1
je 0x401056
push 0
lea edx, [esp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 1
push str.APPDATA
push 0x517
mov ebx, str.LngCHS.ini
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push str.APPDATA
push 0x518
mov ebx, str.LngCHT.ini
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push str.APPDATA
push 0x519
mov ebx, str.LngENU.ini
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push str.APPDATA
push 0x51a
mov ebx, 0x49a770
lea ecx, [esp + 0x10]
call fcn.00401840
push 0
push str.APPDATA
push 0x51b
mov ebx, str.Options.ini
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push str.APPDATA
push 0x51c
mov ebx, 0x49a78c
lea ecx, [esp + 0x10]
call fcn.00401840
push 0
push str.APPDATA
push 0x51d
mov ebx, str.ver.TXT
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push str.APPDATA
push 0x51e
mov ebx, str.AntVrsl.dat
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x54a
mov ebx, 0x49a7ac
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x549
mov ebx, 0x49a7c0
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x542
mov ebx, 0x49a7d4
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x543
mov ebx, 0x49a7ec
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x544
mov ebx, 0x49a804
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x545
mov ebx, 0x49a820
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x546
mov ebx, 0x49a838
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x567
mov ebx, 0x49a854
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x547
mov ebx, 0x49a86c
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x548
mov ebx, 0x49a87c
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x54e
mov ebx, 0x49a890
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x568
mov ebx, 0x49a8a0
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x55e
mov ebx, 0x49a8ac
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x55f
mov ebx, 0x49a8d4
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x562
mov ebx, 0x49a8f0
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x54c
mov ebx, 0x49a904
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x551
mov ebx, 0x49a910
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x550
mov ebx, 0x49a930
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x54f
mov ebx, 0x49a94c
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x55d
mov ebx, 0x49a964
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x555
mov ebx, str.NewKeyCsp_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x556
mov ebx, str.NewKeyFun_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x557
mov ebx, str.NjaCrypt_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x558
mov ebx, str.raApi_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x559
mov ebx, str.raKeyCSPx86_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x55a
mov ebx, str.rakpcos100_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x55b
mov ebx, str.rakphid_ZJRCU.dll
lea ecx, [esp + 0x10]
call fcn.00401840
push 1
push 0x49a7bc
push 0x55c
mov ebx, str.raeay32.dll
lea ecx, [esp + 0x10]
call fcn.00401840
mov ecx, dword [esp + 0x110]
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004512da
add esp, 0x110
ret