Function at 0x407510
Capabilities:
Create directory
Get hostname
Get session user name

Disassembly:
push 0xffffffffffffffff
push 0x4594de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x12c
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x18], esi
call fcn.00407a90
lea edi, [esi + 4]
xor ebx, ebx
mov ecx, edi
mov dword [esp + 0x144], ebx
mov dword [esi], 0x45e8ac
call fcn.00406ea0
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x14c]
mov dword [esi + 0x10], ebx
mov byte [esi + 0x1c], bl
mov byte [esi + 0x1d], bl
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebp
mov eax, 0xf
mov dword [esi + 0x50], eax
mov dword [esi + 0x4c], ebx
mov byte [esi + 0x3c], bl
mov dword [esi + 0x6c], eax
mov dword [esi + 0x68], ebx
mov byte [esi + 0x58], bl
lea edi, [esi + 0x78]
mov dword [esi + 0x70], 0x800
mov dword [edi + 0x18], eax
mov dword [edi + 0x14], ebx
mov byte [edi + 4], bl
push 0x400
push str.LogMaxSize
push 0x45e870
mov byte [esp + 0x150], 4
call fcn.0042be60
add esp, 0xc
cmp ebp, ebx
mov dword [esi + 0x70], eax
mov eax, str.Sys_Logger_Lock
je 0x4075c9
mov eax, str.App_Logger_Lock
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [esi + 0x74], eax
push 0x104
lea eax, [esp + 0x3c]
push eax
push ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x38]
lea ebp, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4075f3
sub eax, ebp
push eax
lea ecx, [esp + 0x3c]
push ecx
mov ecx, edi
call fcn.00401800
push 1
push 0xffffffffffffffff
lea edx, [esp + 0x18]
push edx
mov ecx, edi
mov byte [esp + 0x1c], 0x5c
call fcn.00406dc0
push eax
push ebx
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.00401980
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [esp + 0x150], 5
call fcn.00401710
mov eax, dword [esp + 0x34]
mov ebp, 0x10
cmp eax, ebp
mov byte [esp + 0x144], 4
jb 0x407661
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00440afe
add esp, 4
push 5
push str.logs
mov ecx, edi
call fcn.004015d0
push edi
call fcn.00404c10
add esp, 4
test al, al
jne 0x407691
cmp dword [edi + 0x18], ebp
jb 0x407686
mov eax, dword [edi + 4]
jmp 0x407689
lea eax, [edi + 4]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [esi + 0x24]
sub eax, ebx
je 0x4076a4
dec eax
jne 0x4076b2
push 0xd
push str.AppEvent.log
jmp 0x4076ab
push 0xd
push str.SysEvent.log
mov ecx, edi
call fcn.004015d0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x3c]
mov edi, 0x104
push eax
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [esp + 0x38]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4076d2
sub eax, edx
push eax
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esi + 0x38]
call fcn.00401800
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x1c], edi
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [esp + 0x38]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x407704
sub eax, edx
push eax
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esi + 0x54]
call fcn.00401800
mov ecx, esi
call fcn.00407300
mov ecx, dword [esp + 0x13c]
mov dword [esi + 0x10], eax
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x138
ret 4