Function at 0x1001b46c
Capabilities:
Create directory
Encode data using xor

Disassembly:
mov eax, 0x10058dbe
call fcn.100580f4
sub esp, 0xc8
cmp byte [ebp + 0x14], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, edx
mov dword [ebp - 0x48], ecx
je 0x1001ba03
mov eax, dword [ebp + 8]
push ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x50], esi
call fcn.1001e684
xor ebx, ebx
mov dword [ebp - 0x7c], 7
xor eax, eax
mov dword [ebp - 0x80], ebx
pop ecx
mov word [ebp - 0x90], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1001b4cf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001b4be
call fcn.1001c1eb
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x9c], eax
cmp esi, dword [ebp + 8]
ja 0x1001b678
mov dword [ebp - 0x18], 0x11e5
cmp dword [ebp - 0x18], 0x13b5
jle 0x1001b53a
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x24], 0x7d0c
mov dword [ebp - 0x1c], ebx
mov eax, edi
mov ecx, 0x10071a98
xor eax, ebx
cdq
push edx
push eax
call fcn.100046a4
inc ebx
cmp ebx, 0x7692
jl 0x1001b50d
add edi, esi
dec dword [ebp - 0x24]
push 0
pop ebx
jne 0x1001b50a
inc esi
cmp esi, 0x7c49
jl 0x1001b501
mov dword [ebp - 0x34], 0x399841b3
push 3
mov dword [ebp - 0x6c], 0x749efede
mov dword [ebp - 0x34], 4
pop esi
jmp 0x1001b603
push dword [ebp - 0x4c]
movdqa xmm0, xmmword [0x100658a0]
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x3c], 5
push eax
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], ebx
movdqu xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
call fcn.10007538
mov byte [ebp - 4], 1
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x3c], ebx
jmp 0x1001b5ef
mov dword [ebp - 0x28], 0x6b9dd952
mov dword [ebp - 0x28], ebx
jmp 0x1001b5d5
lea eax, [ebp - 0x64]
push eax
push ecx
push 0x3ca0
push ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x28]
push eax
sub esp, 0xc
lea ecx, [ebp - 0x3c]
call fcn.1001df62
add esp, 0x28
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x1001b5ad
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x28]
call fcn.1001d6e6
inc dword [ebp - 0x3c]
pop ecx
pop ecx
cmp dword [ebp - 0x3c], 2
jg 0x1001b5a1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
call fcn.10004951
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jg 0x1001b557
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10a6
jge 0x1001b646
mov edx, str.oqmf_ppocflo_ztpn_sgklxoe_hhp_nbck
mov ecx, 0x10071a98
call fcn.10006c80
jmp 0x1001b646
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x90]
mov dword [ebp - 4], ebx
cmp ecx, eax
je 0x1001b665
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x90]
push eax
call fcn.10005ba6
push ebx
push 1
lea ecx, [ebp - 0x90]
call fcn.10004f21
jmp 0x1001ba1d
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x18], 0xdf3d37a5
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x18], 0xfd43ddca
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1001b6a6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001b698
call fcn.1001d597
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], 0x72d9ee1c
cmp dword [ebp - 0x18], ebx
jne 0x1001b6e3
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x40]
jle 0x1001b6e3
mov ecx, ebx
jmp 0x1001b6e6
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
je 0x1001b705
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov edx, 0x2bce
push ecx
push ecx
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1c], 1
push eax
push ecx
lea eax, [ebp - 0x44]
push eax
push ecx
push ecx
lea eax, [ebp - 0x50]
xor cl, cl
push eax
call fcn.1001e0cf
add esp, 0x20
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x50]
jae 0x1001b897
mov dword [ebp - 0x1c], 5
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 3
push 2
call fcn.100048ce
mov byte [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x1c], 0xe65251c6
inc ecx
mov dword [ebp - 0x1c], 0x25062d7b
mov dword [ebp - 0x4c], 0x415fb57a
mov dword [ebp - 0x30], ebx
jmp 0x1001b78e
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xa0], 0xfe01bd97
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x1001b77d
push ecx
push ecx
push 0x3f72
lea eax, [ebp - 0xac]
xor cl, cl
push 0x7bee
push eax
lea edx, [ebp - 0x30]
call fcn.1001c245
mov byte [ebp - 0x29], bl
add esp, 0x14
cmp byte [ebp - 0x29], 0
je 0x1001b7c3
push ecx
call fcn.1001edd9
pop ecx
push ecx
lea ecx, [ebp - 0x4c]
call fcn.1001db7c
pop ecx
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], bl
call fcn.10004951
push 0x12b9
push ebx
lea eax, [ebp - 0x90]
mov edx, 0x6c8
push eax
push 0x1e33
lea ecx, [ebp - 0x44]
call fcn.1001c3b8
mov dword [ebp - 0x1c], 0x7c32
add esp, 0x10
cmp dword [ebp - 0x1c], 0x7ea4
jle 0x1001b87b
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x40], 0x2b27
mov esi, dword [ebp - 0x24]
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0xd4]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b83e
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xd4]
call fcn.10004e55
inc edi
cmp edi, 0x6492
jl 0x1001b81f
mov esi, dword [ebp - 0x18]
add dword [ebp - 0x24], esi
dec dword [ebp - 0x40]
jne 0x1001b81a
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x1c73
jl 0x1001b810
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp dword [ebp - 0x1c], 0x7b77
jge 0x1001b88f
push str.rqxgq_mio_neofki_raquzhb_sjudgs_nxeacyadl_ckufwsj_flumbcu_lovqnrldi
call fcn.1003fffd
pop ecx
mov dword [ebp - 4], ebx
jmp 0x1001b732
mov dword [ebp - 0x18], 5
lea ecx, [ebp - 0x78]
push 4
call fcn.100048ce
mov edi, dword [ebp - 0x48]
mov byte [ebp - 4], 7
mov dword [ebp - 0x1c], 0x68d2
mov dword [ebp - 0x38], ebx
jmp 0x1001b8c9
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x20], 0x188e17b8
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 1
jl 0x1001b8bb
lea eax, [ebp - 0x78]
push eax
push ecx
push 1
push ecx
lea ecx, [ebp - 0x38]
call fcn.1001ec70
add esp, 0x10
cmp dword [ebp - 0x18], ebx
jne 0x1001b8ea
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x18]
test eax, eax
je 0x1001b8fa
cmp dword [ebp - 0x18], ebx
jne 0x1001b8fd
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1001b9da
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x1c], 0xd1b4b1c2
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x20], ebx
jne 0x1001b9e3
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x20], 0x3a6d7d04
jl 0x1001b956
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x20], 0xffffffff
jl 0x1001b97e
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x20], ebx
je 0x1001b97e
xor ecx, ecx
inc ecx
jmp 0x1001b980
mov ecx, ebx
xor eax, eax
test ecx, ecx
setg al
cmp eax, 0xb10079d6
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x20]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x78]
setl dl
imul edx, dword [eax + esi*4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x1c], edx
xor edx, edx
cmp dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x78]
setle dl
xor ecx, ecx
cmp edx, dword [eax + 4]
setne cl
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1001b920
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], bl
call fcn.10004951
lea eax, [ebp - 0x90]
cmp edi, eax
je 0x1001b665
mov ecx, edi
jmp 0x1001b656
push 0x22a8
push 0xebb
push 0x78c
push 0x25a1
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret