Function at 0x10001e10
Capabilities:
Create directory
Create process on windows
Delete directory
Get graphical window text

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x15c
push edi
push 0x3d
push eax
or edi, 0xffffffff
call sub.MSVCRT.dll_strchr
add esp, 8
test eax, eax
jne 0x10001e3b
mov cl, byte [1]
test cl, cl
je 0x1000201e
push ebx
push ebp
push esi
lea esi, [eax + 1]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x105
push eax
call sub.MSVCRT.dll_malloc
add esp, 4
mov ebp, eax
mov dword [esp + 0x10], ebp
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ebx, dword [esp + 0x178]
mov esi, ebp
push 0x3d
push esi
call sub.MSVCRT.dll_strchr
mov esi, eax
add esp, 8
test esi, esi
je 0x10002012
mov al, byte [esi + 1]
cmp al, 0x7c
jne 0x10001e8e
add esi, 2
jmp 0x10001e98
test al, al
je 0x10002012
inc esi
inc edi
cmp edi, ebx
jne 0x10001e6d
push 0x7c
push esi
call sub.MSVCRT.dll_strchr
add esp, 8
test eax, eax
je 0x10001eae
mov byte [eax], 0
push esi
call fcn.10001d80
mov eax, dword [esp + 0x180]
add esp, 4
test eax, eax
je 0x10001f38
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x24]
lea edx, [esp + 0x14]
rep stosd dword es:[edi], eax
xor ecx, ecx
lea eax, [esp + 0x24]
mov dword [esp + 0x14], ecx
push edx
mov dword [esp + 0x1c], ecx
push eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x2c], 0x44
push ecx
push ecx
push 0x20
push ecx
push ecx
push ecx
push esi
push ecx
mov dword [esp + 0x48], ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x10002012
mov ecx, dword [esp + 0x170]
push 0x40
push str.Error
push str.Cant_run_you_select_application__Please_check_path.
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
push ebp
call sub.MSVCRT.dll_free
add esp, 4
pop esi
pop ebp
pop ebx
pop edi
add esp, 0x15c
ret
mov ebx, dword [0x10003354]
test ebx, ebx
jne 0x10001f50
mov ebx, dword [0x10003358]
test ebx, ebx
je 0x10002012
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x10001fb9
push esi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x36
push eax
call sub.MSVCRT.dll_malloc
mov edi, eax
push esi
push str.Directory:___s__not_exist__nDo_you_want_to_create_it_
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [esp + 0x180]
add esp, 0x10
push 0x44
push str.Note
push edi
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
push edi
mov ebp, eax
call sub.MSVCRT.dll_free
add esp, 4
cmp ebp, 6
jne 0x1000200e
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ebp, dword [esp + 0x10]
lea eax, [esp + 0x68]
push 0x104
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
push esi
mov esi, dword [sym.imp.USER32.dll_SetWindowTextA]
push ebx
call esi
push ebx
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [esp + 0x170]
push 0
push 1
push 0x111
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [esp + 0x68]
push edx
push ebx
call esi
push ebp
call sub.MSVCRT.dll_free
add esp, 4
pop esi
pop ebp
pop ebx
pop edi
add esp, 0x15c
ret
mov ebp, dword [esp + 0x10]
push ebp
call sub.MSVCRT.dll_free
add esp, 4
pop esi
pop ebp
pop ebx
pop edi
add esp, 0x15c
ret