Function at 0x10019d20
Capabilities:
Create directory
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10038410
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor bl, bl
call fcn.10019850
test al, al
je 0x1001a5af
mov ecx, dword [0x100467f8]
cmp byte [ecx + 0x20c], bl
je 0x1001a5af
mov eax, dword [0x100467fc]
cmp byte [eax + 0x64], bl
je 0x1001a5af
mov byte [0x10046800], bl
cmp byte [ecx + 0x20d], 1
jne 0x10019d94
mov ecx, 0x1004639c
call fcn.100206a0
jmp 0x10019dfa
push 0x1004639c
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov ecx, 0x1004639c
add ecx, 0xfffffffe
lea esp, [esp]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x10019db0
mov eax, dword [str.bSyaeDump_]
mov dword [ecx], eax
mov eax, dword [0x1003febc]
mov dword [ecx + 4], eax
mov eax, dword [0x1003fec0]
mov dword [ecx + 8], eax
mov eax, dword [0x1003fec4]
mov dword [ecx + 0xc], eax
mov eax, dword [0x1003fec8]
mov dword [ecx + 0x10], eax
mov ax, word [0x1003fecc]
push 0
push 0x1004639c
mov word [ecx + 0x14], ax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x1004630c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [0x100462e1], 1
call fcn.1001ba70
mov byte [0x100462e1], 0
call fcn.1001bba0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.acecore.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x10019e6e
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.acees.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 1
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x10019ebf
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.acewstr.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 2
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x10019f10
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imetip.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 3
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x10019f61
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imjkapi.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 4
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x10019fb2
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imkrapi.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 5
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a003
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imkrtip.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 6
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a054
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
push 7
push str.mso.dll
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x38], 0
call fcn.100020f0
mov byte [ebp - 0x20], 1
mov dword [ebp - 4], 7
movzx eax, byte [0x10046c22]
push eax
lea eax, [ebp - 0x38]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a0b3
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msointl.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 8
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a104
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msonsext.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 9
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a155
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msores.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0xa
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a1a6
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
push 0xd
push str.sqlcese40.dll
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x38], 0
call fcn.100020f0
mov byte [ebp - 0x20], 1
mov dword [ebp - 4], 0xb
movzx eax, byte [0x10046c22]
push eax
lea eax, [ebp - 0x38]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a205
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.winmm.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0xc
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a256
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msmpeg2adec.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0xd
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a2a7
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msmpeg2vdec.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0xe
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a2f8
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.mfc80u.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0xf
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a349
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.mfc80kor.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0x10
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a39a
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.mfc90u.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0x11
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a3eb
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.gdi32.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov edx, eax
mov dword [ebp - 4], 0x12
movzx eax, byte [0x10046c22]
push eax
push edx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x100462fc
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a43c
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.nt0_dll.dll
lea ecx, [ebp - 0x38]
call fcn.1001f200
mov ecx, eax
mov dword [ebp - 4], 0x13
movzx eax, byte [0x10046c22]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x10046324
push eax
call fcn.1001f3e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 0x10
jb 0x1001a48d
push dword [ebp - 0x38]
call fcn.100269d8
add esp, 4
call fcn.1001a5e0
call fcn.1001b4b0
call fcn.1001b9d0
mov eax, dword [0x100467fc]
cmp byte [eax + 0x6a], 1
jne 0x1001a53f
mov eax, dword [0x100467f8]
cmp byte [eax + 0x20d], 1
jne 0x1001a4e7
push 0x800
call fcn.100267e4
add esp, 4
mov esi, eax
mov dword [0x100454a8], esi
push 0x800
push 0
push esi
call fcn.10029700
add esp, 0xc
test esi, esi
je 0x1001a53f
lea eax, [ebp - 0x14]
jmp 0x1001a500
push 0x10046398
call fcn.10020c40
add esp, 4
mov dword [0x100454a8], eax
test eax, eax
je 0x1001a51d
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push 0x1001bcc0
push 0
push 0
call fcn.10026f6b
add esp, 0x18
mov dword [0x100454b0], eax
jmp 0x1001a53f
push 0x1003fe68
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x1001a536
mov eax, dword [eax + 0x32]
mov dword [0x100454a8], eax
jmp 0x1001a53b
mov eax, dword [0x100454a8]
test eax, eax
je 0x1001a5af
mov eax, dword [0x100467fc]
test byte [eax + 0x6b], 1
je 0x1001a562
call dword [sym.imp.KERNEL32.dll_GetSystemDEPPolicy]
test eax, eax
je 0x1001a562
mov esi, dword [sym.imp.KERNEL32.dll_SetProcessDEPPolicy]
push 0
call esi
push 1
call esi
mov eax, dword [0x100467fc]
test byte [eax + 0x6c], 1
je 0x1001a572
call fcn.10024fd0
mov eax, dword [0x100467fc]
cmp byte [eax + 0x65], 1
jne 0x1001a598
push dword [0x100462dc]
push dword [0x100462d8]
push ecx
mov ecx, 0x10046344
call fcn.100222f0
test eax, eax
je 0x1001a5af
mov byte [0x100462e1], 1
mov bl, 1
mov byte [0x10046800], 1
push str._bSyae_____Protect__n
jmp 0x1001a5b4
push str._bSyae______Protect__n
call fcn.10002410
mov al, bl
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10025f80
mov esp, ebp
pop ebp
ret