Function at 0x1001b885
Capabilities:
Create directory
Resume thread

Disassembly:
mov eax, 0x100834e5
call fcn.10082c18
sub esp, 0xb4
mov dword [ebp - 0x30], edx
push ebx
mov dword [ebp - 0x10], 0xb13e
xor ebx, ebx
push edi
mov dword [ebp - 0x28], 8
mov edi, ecx
mov dword [ebp - 0x24], ebx
jmp 0x1001b8c2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc0], 0xb50bf34f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001b8b1
cmp dword [ebp - 0x10], ebx
je 0x1001b909
mov dword [ebp - 0x10], ebx
jmp 0x1001b901
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001b8e5
push 0x26ae
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001b8fe
push 0xe86
push 0x26fb
push ebx
call dword [sym.imp.USER32.dll_EnableMenuItem]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x1001b8d2
jmp 0x1001b913
mov dword [ebp - 0x20], 0x836b16b
dec dword [ebp - 0x20]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001b922
push ebx
call dword [sym.imp.GDI32.dll_CreatePalette]
cmp dword [edi + 0x10], ebx
jne 0x1001b92e
xor al, al
jmp 0x1001bf77
xor eax, eax
lea ecx, [ebp - 0x8c]
inc eax
push esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], 0xfffffffd
push eax
call fcn.1001831b
push ebx
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], ebx
push eax
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x28], 0xf0415773
mov dword [ebp - 0x60], 0x514f
push eax
call fcn.1001e4b9
mov eax, dword [ebp - 0x10]
add esp, 0xc
cmp dword [ebp - 0x10], ebx
je 0x1001b97f
xor esi, esi
lea edx, [esi + 1]
jmp 0x1001b981
mov edx, ebx
mov eax, dword [ebp - 0x10]
push 0xfffffffffffffff6
pop ecx
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x10]
cmp edx, ecx
push 0x3991
setle al
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x8c]
push 0x6040
mov dword [eax], ecx
lea eax, [ebp - 0x60]
push eax
push ebx
call fcn.1001db66
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c]
add esp, 0x10
call fcn.10018bdb
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], ebx
jmp 0x1001b9e6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa8], 0xf9b3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001b9d5
mov dword [ebp - 0x10], ebx
jmp 0x1001ba00
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xa8], ebx
jne 0x1001ba05
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x1001b9f1
lea eax, [ebp - 0x30]
push ebx
push eax
call fcn.1001d7ee
xor esi, esi
inc esi
mov dword [ebp - 0x28], esi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
pop ecx
pop ecx
je 0x1001ba27
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001ba38
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x10], 0xf199314e
mov dword [ebp - 0x2c], 0x9e63a5be
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001ba68
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x2c], eax
jb 0x1001baad
mov ecx, dword [edi]
jmp 0x1001baaf
mov ecx, edi
cmp dword [edi + 0x14], 0x10
jb 0x1001bab9
mov edx, dword [edi]
jmp 0x1001babb
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x1001bbcc
mov al, byte [ecx]
cmp al, 0x30
jl 0x1001bbc0
cmp al, 0x39
jg 0x1001bbc0
mov dword [ebp - 0x14], 0xf5540d7f
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x28], 0x54e7
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0xf6f4846e
push 3
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], 0xbe776e9f
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x28], 0xd38c4615
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x28], 0x86e89be3
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x28], 0xd7279364
mov dword [ebp - 0x14], ebx
jmp 0x1001bba4
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], 0x13735ca7
mov dword [ebp - 0x10], ebx
jmp 0x1001bb6b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], 0xf47073e7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001bb5d
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
je 0x1001bb85
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ebx
jmp 0x1001bb9b
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x68], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x1001bb8a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x14
jne 0x1001bb4a
mov esi, dword [ebp - 0x30]
movsx eax, byte [ecx]
imul edx, dword [esi], 0xa
add edx, 0xffffffd0
add eax, edx
inc ecx
mov dword [esi], eax
jmp 0x1001baaf
mov eax, dword [ebp - 0x30]
mov dword [eax], ebx
xor al, al
jmp 0x1001bf76
mov dword [ebp - 0x1c], ebx
mov eax, 0xb948214d
mov dword [ebp - 0x14], ebx
xor esi, esi
mov dword [ebp - 0x20], 0xfffffff6
inc esi
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x69a4575f
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0x88a3
push 2
mov dword [ebp - 0x2c], 0xa6c9
mov dword [ebp - 0x10], ebx
pop edi
jmp 0x1001bc31
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001bc23
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setle dl
sub edx, 0x8af16de6
neg edx
sbb edx, edx
inc edx
cmp edx, 0x3ae5
je 0x1001bc62
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
test eax, eax
mov eax, dword [ebp - 0x14]
sets cl
cmp ecx, 0xb5009892
sbb edx, edx
xor ecx, ecx
add edx, 0xffff
cmp edx, eax
setne cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xffffffff
mov dword [ebp - 0x40], eax
sete cl
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
je 0x1001bd35
mov dword [ebp - 0x10], 0xdf607dbc
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x20], 0xf643d9d7
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x14]
test eax, eax
jne 0x1001bd21
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
add edx, 0xffff664c
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov edx, ebx
setle cl
cmp ecx, dword [ebp - 0x28]
je 0x1001bd23
mov edx, esi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x20]
jmp 0x1001bd70
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x74]
push edi
call fcn.1001831b
mov dword [ebp - 0x10], ebx
jmp 0x1001bd57
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x74]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001bd4a
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov dword [eax], 7
call fcn.10018bdb
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x20], 0x1355fff
mov dword [ebp - 0x1c], 0x11f3813b
mov dword [ebp - 0x24], 0xfffb
mov dword [ebp - 0x14], 0xc8f94914
mov dword [ebp - 0x14], ebx
jmp 0x1001bda6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001bd98
mov dword [ebp - 0x14], ebx
jmp 0x1001bdbf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001bdb1
mov dword [ebp - 0x14], ebx
jmp 0x1001bdd7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x44], 0x4060a3b7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001bdc9
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x10]
test eax, eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x48]
sete cl
xor edx, edx
cmp ecx, 0xffffffff
setne dl
sub edx, 0x11ff
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x1c]
jg 0x1001be18
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
xor ecx, ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
je 0x1001be4e
cmp dword [ebp - 0x1c], ebx
je 0x1001be4e
xor esi, esi
inc esi
mov edx, esi
jmp 0x1001be53
xor esi, esi
mov edx, ebx
inc esi
dec dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
imul ecx, ecx, 0xf2c9
cmp eax, ecx
setg dl
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x10], ebx
jmp 0x1001beb9
mov dword [ebp - 0x1c], ebx
jmp 0x1001beb0
mov dword [ebp - 0x24], ebx
jmp 0x1001bea7
push ebx
push 0x6c35
call fcn.1001e6d2
pop ecx
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x1001be9e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001be94
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x30
jle 0x1001be82
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
jl 0x1001be7d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x10
jne 0x1001be78
push esi
lea ecx, [ebp - 0xb4]
call fcn.1001831b
mov dword [ebp - 4], 3
mov dword [ebp - 0x1c], ebx
jmp 0x1001beea
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0x5b57fd54
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001bed7
mov dword [ebp - 0x1c], ebx
jmp 0x1001bf03
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x38], 0x4c506d44
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001bef5
mov dword [ebp - 0x34], ebx
jmp 0x1001bf64
push 4
lea ecx, [ebp - 0x80]
call fcn.1001831b
mov dword [ebp - 0x10], ebx
jmp 0x1001bf2c
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001bf1c
mov esi, dword [ebp - 0x80]
mov dword [esi + 0xc], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001bf54
push ebx
push 0x11ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
dec dword [esi + 0xc]
jns 0x1001bf38
lea ecx, [ebp - 0x80]
call fcn.10018bdb
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x1001bf0d
lea ecx, [ebp - 0xb4]
call fcn.10018bdb
mov al, 1
pop esi
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret