Function at 0x4103b0
Capabilities:
Create directory
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x45812e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a0
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2c0]
xor ebx, ebx
mov ebp, ecx
cmp esi, ebx
push edi
mov dword [esp + 0x1c], ebp
je 0x41079e
cmp byte [esi], bl
je 0x41079e
mov edi, dword [esp + 0x2c8]
cmp edi, ebx
je 0x41079e
cmp byte [edi], bl
je 0x41079e
cmp dword [0x479e28], ebx
jne 0x41079e
lea ecx, [esp + 0x28]
mov dword [0x479e28], 1
call fcn.0041aa63
push ebx
push edi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c0], ebx
call fcn.0041ab26
test eax, eax
je 0x41046d
mov eax, dword [esp + 0x2cc]
mov ecx, ebp
push eax
push edi
call fcn.004107c0
lea ecx, [esp + 0x28]
mov esi, eax
mov dword [0x479e28], ebx
mov dword [esp + 0x2b8], 0xffffffff
call fcn.0041aaa0
mov eax, esi
jmp 0x4107a0
push esi
lea ecx, [esp + 0x18]
call fcn.0043ba1d
mov ecx, dword [0x475730]
mov dword [esp + 0x18], ecx
push 0x2c
lea ecx, [esp + 0x18]
mov byte [esp + 0x2bc], 2
call fcn.0043be76
mov esi, eax
cmp esi, ebx
jle 0x410513
lea edx, [esi + 1]
lea eax, [esp + 0x10]
push edx
push eax
lea ecx, [esp + 0x1c]
call fcn.00434c44
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2bc], 3
call fcn.0043bae8
lea ecx, [esp + 0x10]
mov byte [esp + 0x2b8], 2
call fcn.0043b9af
lea ecx, [esp + 0x10]
push esi
push ecx
lea ecx, [esp + 0x1c]
call fcn.00434d79
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2bc], 4
call fcn.0043bae8
lea ecx, [esp + 0x10]
mov byte [esp + 0x2b8], 2
call fcn.0043b9af
lea ecx, [esp + 0x18]
call fcn.0043527d
lea ecx, [esp + 0x18]
call fcn.004351ee
mov esi, dword [esp + 0x2c0]
push esi
call fcn.00437f18
push eax
lea ecx, [esp + 0xa8]
call fcn.004034d0
push 5
lea ecx, [esp + 0xa8]
mov byte [esp + 0x2bc], 5
call fcn.0043b061
mov ebp, dword [esp + 0xc0]
lea eax, [esp + 0xa4]
neg eax
sbb eax, eax
lea ecx, [esp + 0x44]
and eax, ebp
push eax
call fcn.0040a470
lea ecx, [esp + 0x68]
mov byte [esp + 0x2b8], 6
call fcn.00406b90
mov edx, dword [esp + 0x14]
push 1
push ebx
push ebx
push ebx
push 1
lea eax, [esp + 0x58]
push edx
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x2d4], 7
call fcn.00406d30
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4105a8
push ebx
call fcn.004238bd
mov eax, dword [esp + 0x98]
mov ebp, dword [esp + 0x94]
cmp eax, ebx
mov dword [esp + 0x24], eax
jle 0x41072d
cmp ebp, ebx
je 0x41072d
push edi
lea ecx, [esp + 0x14]
call fcn.0043ba1d
push 0x5c
lea ecx, [esp + 0x14]
mov byte [esp + 0x2bc], 8
call fcn.00434df1
lea ecx, [esp + 0x20]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00434d79
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2bc], 9
call fcn.0043bae8
lea ecx, [esp + 0x20]
mov byte [esp + 0x2b8], 8
call fcn.0043b9af
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x170]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x41063d
test byte [esp + 0x170], 0x10
jne 0x410649
mov ecx, dword [esp + 0x10]
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x470d88
push edi
call fcn.00423064
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x41071c
mov edx, dword [esp + 0x24]
push esi
push 1
push edx
push ebp
call fcn.00423757
push esi
call fcn.00422e3f
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x30]
add esp, 0x14
push eax
push edi
call fcn.004107c0
lea ecx, [esp + 0x10]
mov esi, eax
mov dword [0x479e28], ebx
mov byte [esp + 0x2b8], 7
call fcn.0043b9af
lea ecx, [esp + 0x68]
mov byte [esp + 0x2b8], 6
call fcn.00406c30
lea ecx, [esp + 0x44]
mov byte [esp + 0x2b8], 5
call fcn.0040a4c0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x2b8], 2
call fcn.00403590
lea ecx, [esp + 0x18]
mov byte [esp + 0x2b8], 1
call fcn.0043b9af
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b8], bl
call fcn.0043b9af
lea ecx, [esp + 0x28]
mov dword [esp + 0x2b8], 0xffffffff
call fcn.0041aaa0
mov eax, esi
jmp 0x4107a0
lea ecx, [esp + 0x10]
mov byte [esp + 0x2b8], 7
call fcn.0043b9af
lea ecx, [esp + 0x68]
mov dword [0x479e28], ebx
mov byte [esp + 0x2b8], 6
call fcn.00406c30
lea ecx, [esp + 0x44]
mov byte [esp + 0x2b8], 5
call fcn.0040a4c0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x2b8], 2
call fcn.00403590
lea ecx, [esp + 0x18]
mov byte [esp + 0x2b8], 1
call fcn.0043b9af
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b8], bl
call fcn.0043b9af
lea ecx, [esp + 0x28]
mov dword [esp + 0x2b8], 0xffffffff
call fcn.0041aaa0
xor eax, eax
mov ecx, dword [esp + 0x2b0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2ac
ret 0x10