Function at 0x4091b0
Capabilities:
Create directory
Delete file
Get common file path
Move file
Query or enumerate registry value
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x114c
call fcn.0040d0a0
mov eax, dword [0x410d58]
push ebx
mov ebx, ecx
mov dword [ebp - 0x1c], eax
mov ecx, dword [str..log]
mov al, byte [0x439068]
push esi
mov dl, byte [0x410d54]
push edi
mov dword [ebp - 0x18], ecx
mov byte [ebp - 0x114c], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x114b]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 4]
mov esi, 1
mov byte [ebp - 0x14], dl
mov edx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
push ecx
push esi
stosw word es:[edi], ax
push 0
push edx
push 0x80000001
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], 0
stosb byte es:[edi], al
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4092a0
mov al, byte [0x439068]
mov ecx, 0x3f
mov byte [ebp - 0x148], al
xor eax, eax
lea edi, [ebp - 0x147]
lea edx, [ebp - 0x148]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x10]
xor esi, esi
stosb byte es:[edi], al
push ecx
mov ecx, dword [str.NumberOfLogFiles]
lea eax, [ebp - 8]
push edx
mov edx, dword [ebp - 4]
push eax
push esi
push ecx
push edx
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], esi
push ecx
call dword [sym.imp.PNCRT.dll_atoi]
mov esi, eax
add esp, 4
cmp esi, 1
jb 0x40929b
cmp esi, 0x2710
jbe 0x4092a0
mov esi, 1
mov dl, byte [0x439068]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x547]
mov byte [ebp - 0x548], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, 0x439068
mov eax, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x4092e9
test cl, cl
je 0x4092e5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x4092e9
add eax, 2
add edi, 2
test cl, cl
jne 0x4092c5
xor eax, eax
jmp 0x4092ee
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x409307
push 0x400
lea eax, [ebp - 0x548]
push ebx
push eax
call fcn.004058b0
add esp, 0xc
mov edi, 0x439068
lea eax, [ebp - 0x548]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x409336
test cl, cl
je 0x409332
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x409336
add eax, 2
add edi, 2
test cl, cl
jne 0x409312
xor eax, eax
jmp 0x40933b
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x409390
mov ecx, dword [str.SoftwareRealNetworksPreferencesUserDataPath]
lea eax, [ebp - 4]
push eax
push 1
push edi
push ecx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409390
lea edx, [ebp - 8]
lea eax, [ebp - 0x548]
push edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x10]
push eax
push ecx
push edi
push edi
push edx
mov dword [ebp - 0x10], edi
mov dword [ebp - 8], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], edi
mov edi, 0x439068
lea eax, [ebp - 0x548]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x4093bf
test cl, cl
je 0x4093bb
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x4093bf
add eax, 2
add edi, 2
test cl, cl
jne 0x40939b
xor eax, eax
jmp 0x4093c4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4093f6
lea eax, [ebp - 0x548]
push 0x400
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x548]
push 0x5c
push ecx
call dword [sym.imp.PNCRT.dll_strrchr]
add esp, 8
test eax, eax
je 0x4093f6
mov byte [eax + 1], 0
lea edx, [ebp - 0x114c]
push edx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0xd4b]
mov byte [ebp - 0xd4c], 0
rep stosd dword es:[edi], eax
mov al, byte [ebx + 0x800]
lea edi, [ebx + 0x800]
test al, al
je 0x409464
lea eax, [ebp - 0x548]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0x400
lea edx, [ebp - 0xd4c]
push edi
push edx
call fcn.004058b0
add esp, 0xc
jmp 0x409532
push 0x400
lea eax, [ebp - 0x548]
push str.ErrorLogs
push eax
call fcn.004058f0
add esp, 0xc
lea ecx, [ebp - 0x548]
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [ebp - 0x548]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov al, byte [0x439068]
xor ecx, ecx
mov dword [ebp - 0x47], ecx
mov edi, dword [sym.imp.PNCRT.dll_sprintf]
mov dword [ebp - 0x43], ecx
lea edx, [ebp - 0x18]
mov dword [ebp - 0x3f], ecx
mov byte [ebp - 0x48], al
mov dword [ebp - 0x3b], ecx
push edx
lea eax, [ebp - 0x1c]
mov word [ebp - 0x37], cx
push esi
push eax
lea ecx, [ebp - 0xd4c]
push str._s_lu_s
push ecx
call edi
add esp, 0x14
lea edx, [ebp - 0xd4c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, 1
jbe 0x409532
mov ebx, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push eax
push esi
push ecx
lea edx, [ebp - 0x48]
push str._s_lu_s
push edx
call edi
add esp, 0x14
lea eax, [ebp - 0x18]
dec esi
lea ecx, [ebp - 0x1c]
push eax
push esi
push ecx
lea edx, [ebp - 0xd4c]
push str._s_lu_s
push edx
call edi
add esp, 0x14
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0xd4c]
push eax
push ecx
call ebx
cmp esi, 1
ja 0x4094eb
mov ebx, dword [ebp - 0xc]
mov dl, byte [0x439068]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x947]
mov byte [ebp - 0x948], dl
mov esi, 0x439068
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edi, [ebx + 0x400]
mov eax, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x409585
test cl, cl
je 0x409581
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x409585
add eax, 2
add esi, 2
test cl, cl
jne 0x40955d
xor eax, eax
jmp 0x40958a
sbb eax, eax
sbb eax, 0xffffffff
xor ebx, ebx
cmp eax, ebx
je 0x4095a5
push 0x400
lea eax, [ebp - 0x948]
push edi
push eax
call fcn.004058b0
add esp, 0xc
mov esi, 0x439068
lea eax, [ebp - 0x948]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4095d4
test cl, cl
je 0x4095d0
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4095d4
add eax, 2
add esi, 2
test cl, cl
jne 0x4095b0
xor eax, eax
jmp 0x4095d9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x409635
mov ecx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
lea eax, [ebp - 4]
push eax
push 0x20019
push ebx
push ecx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409635
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x948]
push edx
mov edx, dword [str.SymbolPath]
lea ecx, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push ecx
push ebx
push edx
push eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], ebx
mov esi, 0x439068
lea eax, [ebp - 0x948]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x409664
test cl, cl
je 0x409660
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x409664
add eax, 2
add esi, 2
test cl, cl
jne 0x409640
xor eax, eax
jmp 0x409669
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x409699
lea eax, [ebp - 0x948]
push 0x400
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x948]
push 0x5c
push ecx
call dword [sym.imp.PNCRT.dll_strrchr]
add esp, 8
cmp eax, ebx
je 0x409699
mov byte [eax], 0
lea ecx, [ebp - 0x34]
call fcn.00403c30
lea edx, [ebp - 0x948]
lea ecx, [ebp - 0x34]
push edx
call fcn.00409a10
lea eax, [ebp - 0xd4c]
lea ecx, [ebp - 0x34]
push eax
call fcn.00409930
lea ecx, [ebp - 0x34]
call fcn.0040b070
lea ecx, [ebp - 0x34]
call fcn.0040ad30
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push edi
push ebx
lea ecx, [ebp - 0x34]
call fcn.0040ac50
lea ecx, [ebp - 0x34]
call fcn.0040aae0
lea ecx, [ebp - 0x34]
call fcn.0040ab40
lea ecx, [ebp - 0x34]
call fcn.0040ac30
mov edx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
lea ecx, [ebp - 4]
xor esi, esi
push ecx
push 1
push esi
push edx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409759
lea ecx, [ebp + 8]
lea edx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xc]
push edx
mov edx, dword [str.MiniDumpOptions]
push ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], eax
push eax
mov eax, dword [ebp - 4]
push edx
push eax
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x409748
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0
push edi
push ebx
push esi
push str.log1.dmp
lea ecx, [ebp - 0x34]
call fcn.0040b230
lea esi, [ebp - 0x114c]
mov eax, 0x439068
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x40979c
test cl, cl
je 0x409798
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x40979c
add eax, 2
add esi, 2
test cl, cl
jne 0x409774
xor eax, eax
jmp 0x4097a1
sbb eax, eax
sbb eax, 0xffffffff
pop edi
pop esi
test eax, eax
pop ebx
je 0x4097b5
lea eax, [ebp - 0x114c]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea ecx, [ebp - 0x34]
call fcn.00409910
mov esp, ebp
pop ebp
ret 8