Function at 0x41fad0
Capabilities:
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffde4
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
mov ebx, dword [ebp + 0x18]
cmp byte [ebp + 0x10], 0
jne 0x41faf8
cmp byte [ebp + 0x14], 0
je 0x41fdff
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], ebx
cmp word [ebp + 0xc], 0x28
jbe 0x41fdf2
jmp 0x41fdd4
lea eax, [ebx + 0x50]
mov al, byte [eax]
mov byte [ebp - 0x16], al
cmp byte [ebp - 0x16], 0
je 0x41fdff
mov dl, byte [ebp - 0x16]
dec edx
test dl, dl
jb 0x41fb4e
inc edx
mov al, 0
lea esi, [ebp - 0x116]
lea ecx, [ebx + 0x52]
mov edi, eax
and edi, 0xff
add edi, edi
add ecx, edi
mov cl, byte [ecx]
mov byte [esi], cl
inc eax
inc esi
dec dl
jne 0x41fb35
xor eax, eax
mov al, byte [ebp - 0x16]
mov byte [ebp + eax - 0x116], 0
mov esi, dword [ebx]
cmp byte [ebp - 0x16], 0
jbe 0x41fdc4
cmp byte [ebp - 0x116], 0
je 0x41fdc4
cmp esi, 5
je 0x41fdc4
test esi, esi
jne 0x41fb9d
mov eax, dword [0x48daf0]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x116]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
jne 0x41fdc4
cmp dword [ebp + 0x1c], 0
je 0x41fbbf
mov eax, dword [ebp + 0x1c]
push eax
lea eax, [ebp - 0x116]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
jne 0x41fbbf
mov dword [ebp - 0x10], esi
jmp 0x41fdff
lea eax, [ebx + 0x51]
cmp byte [eax], 2
je 0x41fdc4
cmp dword [ebp + 0x1c], 0
jne 0x41fdc4
push 0x41fe0c
lea eax, [ebp - 0x116]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
je 0x41fdc4
lea eax, [ebx + 0x48]
mov edi, eax
mov dl, byte [edi]
add eax, 3
or dl, byte [eax]
and dl, 0x10
cmp dl, 0x10
sete al
cmp byte [ebp + 0x10], 0
jne 0x41fc50
lea edx, [ebx + 0x40]
push dword [edx + 4]
push dword [edx]
lea edx, [ebx + 0x18]
push edx
lea edx, [ebx + 0x20]
push edx
lea edx, [ebx + 0x30]
push edx
mov dx, word [edi]
lea ecx, [ebx + 0x4b]
movzx ecx, byte [ecx]
or dx, cx
movzx edx, dx
push edx
push eax
push 1
push esi
push 0
push 0
mov esi, dword [0x48d400]
mov esi, dword [esi]
lea edx, [ebp - 0x116]
mov cl, byte [ebp - 5]
mov eax, dword [ebp - 4]
call esi
jmp 0x41fdc4
test al, al
je 0x41fdad
mov eax, dword [0x48d550]
cmp byte [eax + 0x1831], 0
je 0x41fdc4
lea eax, [ebp - 0x216]
mov edx, dword [ebp + 8]
call fcn.00405c48
lea eax, [ebp - 0x216]
call fcn.0040fb40
lea eax, [ebp - 0x116]
push eax
lea eax, [ebp - 0x216]
push eax
call sub.kernel32.dll_lstrcatA
mov byte [ebp - 0x15], 0
jmp 0x41fd06
lea eax, [ebp - 0x216]
mov edx, dword [ebp + 8]
call fcn.00405c48
lea eax, [ebp - 0x216]
call fcn.0040fb40
xor eax, eax
mov al, byte [ebp - 0x15]
mov dword [ebp - 0x21c], eax
fild dword [ebp - 0x21c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
push eax
lea eax, [ebp - 0x216]
push eax
call sub.kernel32.dll_lstrcatA
push 0x41fe10
lea eax, [ebp - 0x216]
push eax
call sub.kernel32.dll_lstrcatA
lea eax, [ebp - 0x116]
push eax
lea eax, [ebp - 0x216]
push eax
call sub.kernel32.dll_lstrcatA
inc byte [ebp - 0x15]
lea eax, [ebp - 0x216]
call fcn.004125bc
test al, al
jne 0x41fc9c
mov eax, dword [0x48d550]
cmp byte [eax + 0x187b], 0
je 0x41fd52
lea eax, [ebp - 0x216]
call fcn.0040ca8c
test al, al
jne 0x41fd46
lea edx, [ebp - 0x216]
mov ax, 3
call fcn.0040de10
jmp 0x41fdff
lea eax, [ebp - 0x216]
push eax
call sub.kernel32.dll_DeleteFileA_1
push 0
lea eax, [ebp - 0x216]
push eax
call sub.kernel32.dll_CreateDirectoryA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x41fd7e
lea edx, [ebp - 0x216]
mov ax, 3
call fcn.0040de10
jmp 0x41fdff
inc dword [0x49a5e8]
push esi
mov eax, dword [ebp - 0xc]
push eax
mov al, byte [ebp + 0x14]
push eax
mov al, byte [ebp + 0x10]
push eax
push 0
lea eax, [ebp - 0x216]
push eax
or ecx, 0xffffffff
mov edx, dword [ebp - 4]
mov al, byte [ebp - 5]
call fcn.0041fe18
mov dword [ebp - 0x10], eax
jmp 0x41fdc4
mov eax, dword [ebp + 8]
push eax
push esi
push 0x40d
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_SendMessageA
test eax, eax
je 0x41fdff
lea eax, [ebx + 8]
mov ax, word [eax]
test ax, ax
je 0x41fdf2
movzx eax, ax
add ebx, eax
fild qword [ebx]
fcomp dword [0x41fe14]
fnstsw ax
sahf
je 0x41fdf2
mov eax, ebx
sub eax, dword [ebp - 0x14]
movzx edx, word [ebp + 0xc]
cmp eax, edx
jl 0x41fb12
cmp dword [ebp + 0x1c], 0
jne 0x41fdff
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18