Function at 0x4b0010
Capabilities:
Create directory
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x539125
mov eax, dword fs:[0]
push eax
sub esp, 0x1f8
mov eax, dword [0x56d940]
xor eax, ebp
mov dword [ebp - 0x48], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x190], ecx
mov eax, dword [ebp - 0x190]
cmp dword [eax + 0x20], 0
je 0x4b006b
mov ecx, dword [ebp - 0x190]
cmp dword [ecx + 0x1c], 1
jne 0x4b006b
mov edx, dword [ebp - 0x190]
mov dword [edx], 0
jmp 0x4b067b
mov dword [ebp - 0x10], 0
jmp 0x4b007d
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x190]
add ecx, 4
call fcn.004b14b0
cmp dword [ebp - 0x10], eax
jge 0x4b066f
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0x190]
add ecx, 4
call fcn.004b14d0
push eax
lea ecx, [ebp - 0x40]
call fcn.004b06a0
mov dword [ebp - 4], 0
cmp dword [ebp - 0x1c], 0
je 0x4b0178
cmp dword [ebp - 0x24], 0
je 0x4b00e6
push ecx
mov ecx, esp
mov dword [ebp - 0x150], esp
lea edx, [ebp - 0x40]
push edx
call fcn.00402c30
mov dword [ebp - 0x194], eax
call fcn.004be590
add esp, 4
cmp dword [ebp - 0x28], 0
je 0x4b0173
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x154], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.00402c30
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], ecx
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x158], esp
lea edx, [ebp - 0x34]
push edx
call fcn.00402c30
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x15c], esp
lea edx, [ebp - 0x40]
push edx
call fcn.00402c30
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x190]
call fcn.004b07e0
jmp 0x4b0627
lea esi, [ebp - 0x160]
call fcn.004c1590
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 3
push str._boxinstall
mov ecx, dword [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.004031b0
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x160]
call fcn.00402cd0
push ecx
mov ecx, esp
mov dword [ebp - 0x164], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00402c30
mov dword [ebp - 0x1b4], eax
call fcn.004be100
add esp, 4
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jne 0x4b0200
push 0
lea ecx, [ebp - 0x44]
call fcn.00420f50
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea ecx, [ebp - 0x12c]
call fcn.00402c10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
call fcn.00408de0
mov esi, eax
push 0x2e
lea ecx, [ebp - 0x40]
call fcn.00402ed0
sub esi, eax
push esi
lea ecx, [ebp - 0x128]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00402fb0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40]
call fcn.00408de0
mov esi, eax
push 0x2f
lea ecx, [ebp - 0x40]
call fcn.00402ed0
sub esi, eax
sub esi, 1
push esi
lea edx, [ebp - 0x168]
push edx
lea ecx, [ebp - 0x40]
call fcn.00402fb0
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 8
push 0x549098
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x16c]
push edx
call fcn.004031b0
add esp, 0xc
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1c0]
push ecx
mov edx, dword [ebp - 0x1c8]
push edx
lea eax, [ebp - 0x170]
push eax
call fcn.00403100
add esp, 0xc
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x1d0]
push edx
lea ecx, [ebp - 0x12c]
call fcn.00402cf0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x170]
call fcn.00402cd0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x16c]
call fcn.00402cd0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x168]
call fcn.00402cd0
xor eax, eax
lea esi, [ebp - 0x124]
call fcn.004c1b10
mov byte [ebp - 4], 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x174], esp
push 0x54909c
call fcn.00401500
mov dword [ebp - 0x1d4], eax
lea ecx, [ebp - 0x40]
call fcn.00420f50
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004c2bd0
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
je 0x4b0500
lea eax, [ebp - 0x124]
call fcn.004c33d0
push eax
lea ecx, [ebp - 0x13c]
call fcn.00420f80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.00421060
test eax, eax
je 0x4b04f1
lea ecx, [ebp - 0x14c]
call fcn.004e4bd7
mov byte [ebp - 4], 0xd
push 0
push 0x9001
lea ecx, [ebp - 0x12c]
call fcn.00420f50
push eax
lea ecx, [ebp - 0x14c]
call fcn.004e4fbe
test eax, eax
je 0x4b04e2
lea ecx, [ebp - 0x13c]
call fcn.00421060
push eax
lea ecx, [ebp - 0x13c]
call fcn.004b14b0
push eax
lea ecx, [ebp - 0x14c]
call fcn.004e490d
lea ecx, [ebp - 0x14c]
call fcn.004e4b71
push 0x5490a0
lea ecx, [ebp - 0x128]
push ecx
call fcn.00408cf0
add esp, 8
movzx edx, al
test edx, edx
jne 0x4b0437
push str..rar
lea eax, [ebp - 0x128]
push eax
call fcn.00408cf0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4b04e2
lea ecx, [ebp - 0x44]
call fcn.00420f50
push eax
lea ecx, [ebp - 0x12c]
call fcn.00420f50
push eax
call fcn.004b5d20
add esp, 8
push 0x5490b8
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x178]
push eax
call fcn.004031b0
add esp, 0xc
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e0], ecx
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x1e0]
push eax
lea ecx, [ebp - 0x17c]
push ecx
call fcn.00403100
add esp, 0xc
mov dword [ebp - 0x1e4], eax
mov edx, dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x12c]
call fcn.00402cf0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x17c]
call fcn.00402cd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402cd0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14c]
call fcn.004e4cb2
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x13c]
call fcn.00421020
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
lea edx, [ebp - 0x12c]
push edx
call fcn.00402c30
mov dword [ebp - 0x1ec], eax
call fcn.004be100
add esp, 4
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
je 0x4b055e
cmp dword [ebp - 0x24], 0
je 0x4b055e
push 1
push 0
lea ecx, [ebp - 0x20]
call fcn.00420f50
push eax
lea ecx, [ebp - 0x12c]
call fcn.00420f50
push eax
push 0x5490bc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp - 0x28], 0
je 0x4b05ee
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.00402c30
mov dword [ebp - 0x1f4], eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], ecx
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
lea edx, [ebp - 0x34]
push edx
call fcn.00402c30
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x200], eax
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
lea edx, [ebp - 0x12c]
push edx
call fcn.00402c30
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x190]
call fcn.004b07e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x124]
call fcn.004c1bd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x128]
call fcn.00402cd0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x12c]
call fcn.00402cd0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402cd0
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x190]
call fcn.004b13c0
mov eax, dword [ebp - 0x190]
cmp dword [eax], 0
jne 0x4b065b
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004b07a0
jmp 0x4b066f
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004b07a0
jmp 0x4b0074
mov ecx, dword [ebp - 0x190]
mov dword [ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x48]
xor ecx, ebp
call fcn.005007b7
mov esp, ebp
pop ebp
ret