Function at 0x10001170
Capabilities:
Create directory
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov eax, dword [section..vmxle]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0
push 0x1001b7c8
mov esi, edx
mov ebx, ecx
call dword [sym.imp.kErNEL32.dLL_CreateDirectoryA]
push 0
push 0x80
push 1
push 0
push 0
push 0xc0000000
push 0x1001bda8
call dword [sym.imp.kErNEL32.dLL_CreateFileA]
push eax
call dword [sym.imp.kErNEL32.dLL_CloseHandle]
cmp dword [ebp + 8], 1
jne 0x10001300
lea edi, [esi*2 + 5]
lea ecx, [esi + esi*4]
cmp ecx, edi
jge 0x10001484
lea eax, [esi + 1]
mov dword [ebp - 0x94], eax
lea eax, [ebx + 1]
mov dword [ebp - 0x90], eax
lea eax, [ecx + 1]
mov dword [ebp - 0x98], eax
lea eax, [ebx*8]
sub eax, ebx
mov ebx, dword [ebp - 0x98]
lea esi, [ecx + eax*2]
shl esi, 2
sub edi, ecx
lea esp, [esp]
push 0
push 0
push 0x147
push dword [esi + 0x1001b440]
call dword [sym.imp.User32.DlL_SendMessageA]
push eax
push 0x10015ee0
lea eax, [ebp - 0xc]
push 8
push eax
call fcn.100057e8
push ebx
push dword [ebp - 0x94]
lea eax, [ebp - 0x8c]
push dword [ebp - 0x90]
push 0x10015ee4
push 0x80
push eax
call fcn.100057e8
add esp, 0x28
lea eax, [ebp - 0xc]
push 0x1001bda8
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x1001a0cc
call dword [sym.imp.kErNEL32.dLL_WritePrivateProfileStringA]
push 8
lea eax, [ebp - 0xc]
push eax
push dword [esi + 0x1001b170]
call dword [sym.imp.User32.DlL_GetWindowTextA]
lea eax, [ebp - 0xc]
push eax
call fcn.10005804
push eax
push 0x10015f10
lea eax, [ebp - 0xc]
push 8
push eax
call fcn.100057e8
push ebx
push dword [ebp - 0x94]
lea eax, [ebp - 0x8c]
push dword [ebp - 0x90]
push 0x10015f14
push 0x80
push eax
call fcn.100057e8
add esp, 0x2c
lea eax, [ebp - 0xc]
push 0x1001bda8
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x1001a0cc
call dword [sym.imp.kErNEL32.dLL_WritePrivateProfileStringA]
inc ebx
lea esi, [esi + 4]
dec edi
jne 0x10001210
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100057d9
mov esp, ebp
pop ebp
ret
lea eax, [esi + 1]
push eax
lea ecx, [ebx + 1]
mov dword [ebp - 0x90], eax
push ecx
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x94], ecx
push 0x10015f48
push eax
call fcn.10005780
imul eax, esi, 0x23
add esp, 0x10
add eax, ebx
push dword [eax*4 + 0x1001bc00]
push dword [0x1001b2e8]
call dword [sym.imp.User32.DlL_IsDlgButtonChecked]
push eax
lea eax, [ebp - 0xc]
push 0x10015f68
push eax
call fcn.100057a0
add esp, 0xc
lea eax, [ebp - 0xc]
push 0x1001bda8
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x1001a0cc
call dword [sym.imp.kErNEL32.dLL_WritePrivateProfileStringA]
lea ecx, [esi*4 + 7]
lea eax, [esi*2 + 0xc]
add ecx, esi
mov dword [ebp - 0x98], eax
cmp ecx, eax
jge 0x10001484
lea eax, [ebx*8]
sub eax, ebx
lea edi, [ecx - 6]
mov ebx, dword [ebp - 0x98]
lea esi, [ecx + eax*2]
shl esi, 2
sub ebx, ecx
push 0
push 0
push 0x147
push dword [esi + 0x1001b440]
call dword [sym.imp.User32.DlL_SendMessageA]
push eax
push 0x10015f6c
lea eax, [ebp - 0xc]
push 8
push eax
call fcn.100057e8
push edi
push dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
push dword [ebp - 0x94]
push 0x10015f70
push 0x80
push eax
call fcn.100057e8
add esp, 0x28
lea eax, [ebp - 0xc]
push 0x1001bda8
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x1001a0cc
call dword [sym.imp.kErNEL32.dLL_WritePrivateProfileStringA]
push 8
lea eax, [ebp - 0xc]
push eax
push dword [esi + 0x1001b170]
call dword [sym.imp.User32.DlL_GetWindowTextA]
lea eax, [ebp - 0xc]
push eax
call fcn.10005804
push eax
push 0x10015f9c
lea eax, [ebp - 0xc]
push 8
push eax
call fcn.100057e8
push edi
push dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
push dword [ebp - 0x94]
push 0x10015fa0
push 0x80
push eax
call fcn.100057e8
add esp, 0x2c
lea eax, [ebp - 0xc]
push 0x1001bda8
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x1001a0cc
call dword [sym.imp.kErNEL32.dLL_WritePrivateProfileStringA]
inc edi
lea esi, [esi + 4]
dec ebx
jne 0x100013a5
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100057d9
mov esp, ebp
pop ebp
ret