Function at 0x475e15
Capabilities:
Create directory

Disassembly:
push ebp
sub esp, 0x6c
mov eax, 0x6a3756
call fcn.006426c4
sub esp, 0x238
push ebx
mov byte [ebp + 0x4f], 1
call fcn.00479151
xor ebx, ebx
mov byte [0x7b15d4], 1
mov dword [ebp - 4], ebx
cmp byte [0x7b0461], bl
je 0x4764fc
push esi
push edi
call fcn.00495676
push 0x14
call fcn.00642424
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x475e70
mov ecx, eax
call fcn.00429ee9
mov esi, eax
jmp 0x475e72
mov esi, ebx
mov dword [ebp + 0x58], esi
mov byte [ebp - 4], bl
mov dword [ebp + 0x54], esi
test esi, esi
je 0x475e85
mov eax, dword [esi]
push esi
call dword [eax + 4]
cmp word [0x7b0490], 0
mov byte [ebp - 4], 3
jne 0x475ef2
push 0x104
lea eax, [ebp - 0x244]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
test eax, eax
je 0x475ed7
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.004610ba
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x475ec6
lea eax, [ebp + 0x30]
push eax
call fcn.0047513f
push ebx
push 1
lea ecx, [ebp + 0x30]
call fcn.004285f6
cmp word [0x7b0490], 0
jne 0x475ef2
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7b4ee0], eax
mov dword [0], ebx
push 0x6c5254
lea eax, [ebp - 0x24]
push eax
call fcn.00473f1c
cmp dword [ebp - 0x10], 8
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 4
jae 0x475f10
lea eax, [ebp - 0x24]
push esi
push 0x45de16
push eax
call fcn.0046ec08
cmp eax, 1
jg 0x475f38
cmp byte [esi + 0x10], 5
je 0x475f69
push 0x14
call fcn.00642424
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 5
jmp 0x475f47
push 0x14
call fcn.00642424
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x475f54
mov ecx, eax
call fcn.00429ee9
jmp 0x475f56
mov eax, ebx
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 4
call fcn.005577de
mov esi, dword [ebp + 0x54]
mov dword [ebp + 0x58], esi
mov eax, dword [esi + 8]
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x60], ebx
jmp 0x475f85
inc ebx
cmp ebx, 1
jbe 0x475f85
cmp ebx, 2
jne 0x475f82
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [eax + 4]
mov ecx, esi
push str.file_guard
call fcn.0045e0a6
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jne 0x475f74
xor ebx, ebx
jmp 0x475fb1
inc ebx
cmp ebx, 1
jbe 0x475fb1
cmp ebx, 2
jne 0x475fae
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [eax + 4]
mov ecx, esi
push str..fileguard
call fcn.0045e0a6
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jne 0x475fa0
cmp dword [0x7b7970], 0
je 0x475fdb
push 0x7b7960
call fcn.0048093a
push dword [0x7b4644]
call fcn.004d2f53
mov ebx, eax
xor edi, edi
mov ecx, dword [ebx]
xor edx, edx
sub ecx, dword [edi + 0x7b11ac]
sbb edx, dword [edi + 0x7b11b0]
add dword [edi + 0x7b115c], ecx
adc dword [edi + 0x7b1160], edx
xor ecx, ecx
mov eax, dword [ebx + 0x14]
sub eax, dword [edi + 0x7b1184]
sbb ecx, dword [edi + 0x7b1188]
add dword [edi + 0x7b1134], eax
adc dword [edi + 0x7b1138], ecx
mov eax, dword [ebx]
lea ebx, [ebx + 4]
and dword [edi + 0x7b11b0], 0
mov dword [edi + 0x7b11ac], eax
mov eax, dword [ebx + 0x10]
and dword [edi + 0x7b1188], 0
mov dword [edi + 0x7b1184], eax
add edi, 8
cmp edi, 0x28
jb 0x475fea
xor ebx, ebx
mov dword [ebp + 0x48], ebx
call fcn.00476b8c
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
test ecx, ecx
je 0x47639c
call fcn.00476b8c
mov eax, dword [eax]
mov eax, dword [eax + ebx*4]
mov dword [ebp + 0x5c], eax
mov eax, dword [eax + 8]
jmp 0x476370
mov eax, dword [esi + 8]
and dword [ebp + 0x68], 0
mov edi, dword [eax + 4]
jmp 0x4760a2
mov eax, dword [ebp + 0x68]
inc eax
mov dword [ebp + 0x68], eax
cmp eax, 1
jbe 0x47609f
cmp eax, 2
jne 0x47609c
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [ecx + 4]
push ebx
mov ecx, esi
call fcn.0045e0a6
mov ecx, dword [esi + 8]
cmp edi, dword [ecx + 4]
jne 0x476088
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x50]
mov ebx, dword [eax]
movzx eax, word [ecx + 8]
add ebx, dword [ecx + 4]
and eax, 0xf
cmp eax, 7
ja 0x4761f6
je 0x4761c0
test eax, eax
je 0x47618a
cmp eax, 3
jbe 0x47613c
cmp eax, 4
je 0x476129
cmp eax, 5
je 0x476107
cmp eax, 6
jne 0x47636a
push dword [ebx + 4]
mov ecx, esi
push dword [ebx]
push dword [ebp + 0x6c]
call fcn.0045ea63
jmp 0x47636a
test ebx, ebx
je 0x47636a
cmp dword [ebx], 0
je 0x47636a
cmp dword [ebx + 4], 0
je 0x47636a
push dword [ebx + 4]
push dword [ebx]
jmp 0x47612d
push dword [ecx + 0xc]
push ebx
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045eb98
jmp 0x47636a
cmp eax, 2
je 0x476146
cmp eax, 3
jne 0x47614b
movzx edi, byte [ebx]
jmp 0x47614d
mov edi, dword [ebx]
cmp dword [ecx + 4], 0x1b7
je 0x47617a
push ecx
call fcn.00473990
mov ecx, eax
mov ebx, edx
mov eax, edi
cdq
cmp eax, ecx
jne 0x47617a
cmp edx, ebx
jne 0x47617a
mov ecx, esi
push dword [ebp + 0x6c]
call fcn.0045e0a6
jmp 0x47636a
push edi
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045ead3
jmp 0x47636a
push dword [ecx + 0x10]
lea eax, [ebp]
push eax
call fcn.00429756
push eax
mov ecx, ebx
call fcn.004392c2
push 0
push 1
lea ecx, [ebp]
mov edi, eax
call fcn.004285f6
mov ecx, esi
test edi, edi
je 0x47616d
push ebx
push dword [ebp + 0x6c]
call fcn.0045ec1a
jmp 0x47636a
push dword [ecx + 0x10]
lea eax, [ebp]
push eax
call fcn.00466f19
push eax
mov ecx, ebx
call fcn.00410334
push 0
push 1
lea ecx, [ebp]
mov edi, eax
call fcn.0040f95f
mov ecx, esi
test edi, edi
je 0x47616d
push ebx
push dword [ebp + 0x6c]
call fcn.0045ebfd
jmp 0x47636a
sub eax, 8
je 0x476302
sub eax, 1
je 0x4762bb
sub eax, 1
je 0x476231
sub eax, 5
jne 0x47636a
push 1
push ebx
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045ea0b
push eax
mov eax, dword [ebp + 0x50]
call dword [eax + 0x18]
jmp 0x47636a
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045ea0b
mov ecx, dword [ebx]
mov dword [ebp + 0x6c], eax
mov edx, dword [ecx]
mov dword [ebp + 0x68], edx
cmp edx, ecx
je 0x47636a
mov esi, eax
lea edi, [edx + 0x10]
push edi
lea eax, [ebp + 0x30]
push eax
call fcn.0047377c
lea eax, [edi + 0x18]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp]
push eax
call fcn.0047377c
cmp dword [ebp + 0x44], 0x10
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 0xa
jae 0x47627f
lea eax, [ebp + 0x30]
lea ecx, [ebp]
push ecx
push eax
mov ecx, esi
call fcn.0045ebfd
push 0
push 1
lea ecx, [ebp]
call fcn.0040f95f
push 0
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 4
call fcn.0040f95f
lea ecx, [ebp + 0x68]
call fcn.005ad870
mov edx, dword [ebp + 0x68]
cmp edx, dword [ebx]
jne 0x476251
jmp 0x476367
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045ea0b
mov ecx, dword [ebx]
mov edi, eax
mov edx, dword [ecx]
mov dword [ebp + 0x68], edx
cmp edx, ecx
je 0x47636a
cmp dword [edx + 0x24], 0x10
jb 0x4762e3
mov eax, dword [edx + 0x10]
jmp 0x4762e6
lea eax, [edx + 0x10]
push dword [edx + 0x28]
mov ecx, edi
push eax
call fcn.0045ead3
lea ecx, [ebp + 0x68]
call fcn.005ad870
mov edx, dword [ebp + 0x68]
cmp edx, dword [ebx]
jne 0x4762d8
jmp 0x47636a
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.0045eb40
xor edi, edi
mov dword [ebp + 0x68], eax
cmp dword [ebx + 0x10], edi
je 0x47636a
mov esi, eax
lea ecx, [ebp + 0x34]
call fcn.0045d6dc
push edi
mov ecx, ebx
mov byte [ebp - 4], 7
call fcn.0053d231
cmp dword [eax + 0x14], 8
jb 0x476336
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x34]
call fcn.0045f529
lea eax, [ebp + 0x34]
mov ecx, esi
push eax
call fcn.0045dac9
lea ecx, [ebp + 0x34]
mov byte [ebp - 4], 8
mov dword [ebp + 0x34], 0x6c40a0
call fcn.0045e3e4
inc edi
mov byte [ebp - 4], 4
cmp edi, dword [ebx + 0x10]
jne 0x47631a
mov esi, dword [ebp + 0x58]
mov eax, dword [ebp + 0x50]
add eax, 0x1c
mov ebx, dword [eax]
mov dword [ebp + 0x6c], ebx
mov dword [ebp + 0x50], eax
test ebx, ebx
jne 0x47607c
mov ebx, dword [ebp + 0x48]
inc ebx
mov dword [ebp + 0x48], ebx
call fcn.00476b8c
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
cmp ebx, ecx
jb 0x476067
push 0xffffffffffffffff
push str.peakrate
mov ecx, esi
call fcn.0045ea0b
push eax
call fcn.00491261
push esi
call fcn.004912f3
push esi
call fcn.004d35af
push 0xffffffffffffffff
push str.apps
mov ecx, esi
call fcn.0045ea0b
push eax
call fcn.004911ed
push 0xffffffffffffffff
push str.installs
mov ecx, esi
call fcn.0045eb40
push eax
call fcn.00485f1d
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.0045f227
push esi
mov byte [ebp - 4], 0xb
call fcn.004afa67
cmp byte [0x7b15ec], 0
jne 0x476420
xor eax, eax
cmp ax, word [0x7b0490]
je 0x476420
push eax
push 0x7b0490
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
mov byte [0x7b15ec], 1
push 0x6c5254
lea eax, [ebp + 0x18]
push eax
call fcn.00473f1c
mov byte [ebp - 4], 0xc
call fcn.00462d8a
push 0x14
mov dword [0x7b06c8], eax
mov dword [0x7b06cc], edx
call fcn.00642424
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x476460
mov ecx, eax
call fcn.00429ee9
mov edi, eax
jmp 0x476462
xor edi, edi
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x5c], edi
test edi, edi
je 0x476473
mov eax, dword [edi]
push edi
call dword [eax + 4]
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
mov byte [ebp - 4], 0xe
jae 0x476483
lea eax, [ebp + 0x18]
push edi
push 0x45de16
lea ecx, [ebp - 0x3c]
push ecx
push eax
call fcn.0046f180
or byte [0x7b0460], al
mov ecx, dword [ebp + 0x64]
test ecx, ecx
je 0x4764be
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
jae 0x4764ac
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x60]
push ecx
push str.Settings_integrity_check_failed__duplicate_keys:__d_count:__d___repaired:__s
call fcn.0047d5f0
add esp, 0x10
mov byte [ebp - 4], 0xf
test edi, edi
je 0x4764cc
mov eax, dword [edi]
push edi
call dword [eax + 8]
push 0
push 1
lea ecx, [ebp + 0x18]
call fcn.004285f6
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.0040f95f
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.004285f6
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 0x10
call dword [eax + 8]
pop edi
pop esi
mov dword [ebp - 4], 0x11
call fcn.00479192
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
lea esp, [ebp + 0x70]
pop ebp
ret