Function at 0x472048
Capabilities:
Create directory

Disassembly:
push ebp
sub esp, 0x6c
mov eax, 0x6afeac
call fcn.00651da4
sub esp, 0x238
push ebx
mov byte [ebp + 0x4f], 1
call fcn.00475363
xor ebx, ebx
mov byte [0x7c1a8c], 1
mov dword [ebp - 4], ebx
cmp byte [0x7c1a49], bl
je 0x47272f
push esi
push edi
call fcn.00491b99
push 0x14
call fcn.00651ae6
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x4720a3
mov ecx, eax
call fcn.00429d3a
mov esi, eax
jmp 0x4720a5
mov esi, ebx
mov dword [ebp + 0x58], esi
mov byte [ebp - 4], bl
mov dword [ebp + 0x54], esi
test esi, esi
je 0x4720b8
mov eax, dword [esi]
push esi
call dword [eax + 4]
cmp word [0x7c1840], 0
mov byte [ebp - 4], 3
jne 0x472125
push 0x104
lea eax, [ebp - 0x244]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
test eax, eax
je 0x47210a
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0045cc34
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x4720f9
lea eax, [ebp + 0x30]
push eax
call fcn.00471372
push ebx
push 1
lea ecx, [ebp + 0x30]
call fcn.004284eb
cmp word [0x7c1840], 0
jne 0x472125
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7c62a0], eax
mov dword [0], ebx
push 0x6d31cc
lea eax, [ebp - 0x24]
push eax
call fcn.0047014f
cmp dword [ebp - 0x10], 8
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 4
jae 0x472143
lea eax, [ebp - 0x24]
push esi
push 0x459de4
push eax
call fcn.0046aeef
cmp eax, 1
jg 0x47216b
cmp byte [esi + 0x10], 5
je 0x47219c
push 0x14
call fcn.00651ae6
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 5
jmp 0x47217a
push 0x14
call fcn.00651ae6
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x472187
mov ecx, eax
call fcn.00429d3a
jmp 0x472189
mov eax, ebx
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 4
call fcn.00472f07
mov esi, dword [ebp + 0x54]
mov dword [ebp + 0x58], esi
mov eax, dword [esi + 8]
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x60], ebx
jmp 0x4721b8
inc ebx
cmp ebx, 1
jbe 0x4721b8
cmp ebx, 2
jne 0x4721b5
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [eax + 4]
mov ecx, esi
push str.file_guard
call fcn.0045a074
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jne 0x4721a7
xor ebx, ebx
jmp 0x4721e4
inc ebx
cmp ebx, 1
jbe 0x4721e4
cmp ebx, 2
jne 0x4721e1
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [eax + 4]
mov ecx, esi
push str..fileguard
call fcn.0045a074
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jne 0x4721d3
cmp dword [0x7c8d40], 0
je 0x47220e
push 0x7c8d30
call fcn.0047ccb7
push dword [0x7c5a04]
call fcn.004cf335
mov ebx, eax
xor edi, edi
mov ecx, dword [ebx]
xor edx, edx
sub ecx, dword [edi + 0x7c2574]
sbb edx, dword [edi + 0x7c2578]
add dword [edi + 0x7c2524], ecx
adc dword [edi + 0x7c2528], edx
xor ecx, ecx
mov eax, dword [ebx + 0x14]
sub eax, dword [edi + 0x7c254c]
sbb ecx, dword [edi + 0x7c2550]
add dword [edi + 0x7c24fc], eax
adc dword [edi + 0x7c2500], ecx
mov eax, dword [ebx]
lea ebx, [ebx + 4]
and dword [edi + 0x7c2578], 0
mov dword [edi + 0x7c2574], eax
mov eax, dword [ebx + 0x10]
and dword [edi + 0x7c2550], 0
mov dword [edi + 0x7c254c], eax
add edi, 8
cmp edi, 0x28
jb 0x47221d
xor ebx, ebx
mov dword [ebp + 0x48], ebx
call fcn.00472dc3
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
test ecx, ecx
je 0x4725cf
call fcn.00472dc3
mov eax, dword [eax]
mov eax, dword [eax + ebx*4]
mov dword [ebp + 0x5c], eax
mov eax, dword [eax + 8]
jmp 0x4725a3
mov eax, dword [esi + 8]
and dword [ebp + 0x68], 0
mov edi, dword [eax + 4]
jmp 0x4722d5
mov eax, dword [ebp + 0x68]
inc eax
mov dword [ebp + 0x68], eax
cmp eax, 1
jbe 0x4722d2
cmp eax, 2
jne 0x4722cf
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [ecx + 4]
push ebx
mov ecx, esi
call fcn.0045a074
mov ecx, dword [esi + 8]
cmp edi, dword [ecx + 4]
jne 0x4722bb
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x50]
mov ebx, dword [eax]
movzx eax, word [ecx + 8]
add ebx, dword [ecx + 4]
and eax, 0xf
cmp eax, 7
ja 0x472429
je 0x4723f3
test eax, eax
je 0x4723bd
cmp eax, 3
jbe 0x47236f
cmp eax, 4
je 0x47235c
cmp eax, 5
je 0x47233a
cmp eax, 6
jne 0x47259d
push dword [ebx + 4]
mov ecx, esi
push dword [ebx]
push dword [ebp + 0x6c]
call fcn.0045aa31
jmp 0x47259d
test ebx, ebx
je 0x47259d
cmp dword [ebx], 0
je 0x47259d
cmp dword [ebx + 4], 0
je 0x47259d
push dword [ebx + 4]
push dword [ebx]
jmp 0x472360
push dword [ecx + 0xc]
push ebx
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045ab66
jmp 0x47259d
cmp eax, 2
je 0x472379
cmp eax, 3
jne 0x47237e
movzx edi, byte [ebx]
jmp 0x472380
mov edi, dword [ebx]
cmp dword [ecx + 4], 0x1b7
je 0x4723ad
push ecx
call fcn.0046fbc3
mov ecx, eax
mov ebx, edx
mov eax, edi
cdq
cmp eax, ecx
jne 0x4723ad
cmp edx, ebx
jne 0x4723ad
mov ecx, esi
push dword [ebp + 0x6c]
call fcn.0045a074
jmp 0x47259d
push edi
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045aaa1
jmp 0x47259d
push dword [ecx + 0x10]
lea eax, [ebp]
push eax
call fcn.004295d6
push eax
mov ecx, ebx
call fcn.00436351
push 0
push 1
lea ecx, [ebp]
mov edi, eax
call fcn.004284eb
mov ecx, esi
test edi, edi
je 0x4723a0
push ebx
push dword [ebp + 0x6c]
call fcn.0045abe8
jmp 0x47259d
push dword [ecx + 0x10]
lea eax, [ebp]
push eax
call fcn.00463651
push eax
mov ecx, ebx
call fcn.004104a4
push 0
push 1
lea ecx, [ebp]
mov edi, eax
call fcn.0040facf
mov ecx, esi
test edi, edi
je 0x4723a0
push ebx
push dword [ebp + 0x6c]
call fcn.0045abcb
jmp 0x47259d
sub eax, 8
je 0x472535
sub eax, 1
je 0x4724ee
sub eax, 1
je 0x472464
sub eax, 5
jne 0x47259d
push 1
push ebx
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045a9d9
push eax
mov eax, dword [ebp + 0x50]
call dword [eax + 0x18]
jmp 0x47259d
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045a9d9
mov ecx, dword [ebx]
mov dword [ebp + 0x6c], eax
mov edx, dword [ecx]
mov dword [ebp + 0x68], edx
cmp edx, ecx
je 0x47259d
mov esi, eax
lea edi, [edx + 0x10]
push edi
lea eax, [ebp + 0x30]
push eax
call fcn.0046f9af
lea eax, [edi + 0x18]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp]
push eax
call fcn.0046f9af
cmp dword [ebp + 0x44], 0x10
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 0xa
jae 0x4724b2
lea eax, [ebp + 0x30]
lea ecx, [ebp]
push ecx
push eax
mov ecx, esi
call fcn.0045abcb
push 0
push 1
lea ecx, [ebp]
call fcn.0040facf
push 0
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 4
call fcn.0040facf
lea ecx, [ebp + 0x68]
call fcn.0043c2d7
mov edx, dword [ebp + 0x68]
cmp edx, dword [ebx]
jne 0x472484
jmp 0x47259a
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045a9d9
mov ecx, dword [ebx]
mov edi, eax
mov edx, dword [ecx]
mov dword [ebp + 0x68], edx
cmp edx, ecx
je 0x47259d
cmp dword [edx + 0x24], 0x10
jb 0x472516
mov eax, dword [edx + 0x10]
jmp 0x472519
lea eax, [edx + 0x10]
push dword [edx + 0x28]
mov ecx, edi
push eax
call fcn.0045aaa1
lea ecx, [ebp + 0x68]
call fcn.0043c2d7
mov edx, dword [ebp + 0x68]
cmp edx, dword [ebx]
jne 0x47250b
jmp 0x47259d
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045ab0e
xor edi, edi
mov dword [ebp + 0x68], eax
cmp dword [ebx + 0x10], edi
je 0x47259d
mov esi, eax
lea ecx, [ebp + 0x34]
call fcn.004596be
push edi
mov ecx, ebx
mov byte [ebp - 4], 7
call fcn.004733af
cmp dword [eax + 0x14], 8
jb 0x472569
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x34]
call fcn.0045b4f7
lea eax, [ebp + 0x34]
mov ecx, esi
push eax
call fcn.00459a97
lea ecx, [ebp + 0x34]
mov byte [ebp - 4], 8
mov dword [ebp + 0x34], 0x6d2030
call fcn.0045a3b2
inc edi
mov byte [ebp - 4], 4
cmp edi, dword [ebx + 0x10]
jne 0x47254d
mov esi, dword [ebp + 0x58]
mov eax, dword [ebp + 0x50]
add eax, 0x1c
mov ebx, dword [eax]
mov dword [ebp + 0x6c], ebx
mov dword [ebp + 0x50], eax
test ebx, ebx
jne 0x4722af
mov ebx, dword [ebp + 0x48]
inc ebx
mov dword [ebp + 0x48], ebx
call fcn.00472dc3
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
cmp ebx, ecx
jb 0x47229a
push 0xffffffffffffffff
push str.peakrate
mov ecx, esi
call fcn.0045a9d9
push eax
call fcn.0048d9bc
push esi
call fcn.0048da4e
push esi
call fcn.004cf991
push 0xffffffffffffffff
push str.apps
mov ecx, esi
call fcn.0045a9d9
push eax
call fcn.0048d948
push 0xffffffffffffffff
push str.installs
mov ecx, esi
call fcn.0045ab0e
push eax
call fcn.00482480
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.0045b1f5
push esi
mov byte [ebp - 4], 0xb
call fcn.004abb0a
cmp byte [0x7c29b0], 0
jne 0x472653
xor eax, eax
cmp ax, word [0x7c1840]
je 0x472653
push eax
push 0x7c1840
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
mov byte [0x7c29b0], 1
push 0x6d31cc
lea eax, [ebp + 0x18]
push eax
call fcn.0047014f
mov byte [ebp - 4], 0xc
call fcn.0045edef
push 0x14
mov dword [0x7c1a90], eax
mov dword [0x7c1a94], edx
call fcn.00651ae6
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x472693
mov ecx, eax
call fcn.00429d3a
mov edi, eax
jmp 0x472695
xor edi, edi
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x5c], edi
test edi, edi
je 0x4726a6
mov eax, dword [edi]
push edi
call dword [eax + 4]
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
mov byte [ebp - 4], 0xe
jae 0x4726b6
lea eax, [ebp + 0x18]
push edi
push 0x459de4
lea ecx, [ebp - 0x3c]
push ecx
push eax
call fcn.0046b467
or byte [0x7c1a48], al
mov ecx, dword [ebp + 0x64]
test ecx, ecx
je 0x4726f1
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
jae 0x4726df
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x60]
push ecx
push str.Settings_integrity_check_failed__duplicate_keys:__d_count:__d___repaired:__s
call fcn.0047995d
add esp, 0x10
mov byte [ebp - 4], 0xf
test edi, edi
je 0x4726ff
mov eax, dword [edi]
push edi
call dword [eax + 8]
push 0
push 1
lea ecx, [ebp + 0x18]
call fcn.004284eb
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.0040facf
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.004284eb
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 0x10
call dword [eax + 8]
pop edi
pop esi
mov dword [ebp - 4], 0x11
call fcn.004753a4
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
lea esp, [ebp + 0x70]
pop ebp
ret