Function at 0x4275a4
Capabilities:
Create directory
Query environment variable

Disassembly:
mov eax, 0x4789f2
call fcn.004785ac
sub esp, 0x36c
mov eax, dword [0x4e88d8]
push ebx
push esi
push edi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x378]
push 0x104
push eax
push str.UserProfile
mov dword [ebp - 0x2c], ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x8c]
call fcn.00433e29
xor edi, edi
lea edx, [ebp - 0x8c]
push str.DocumentsCounter_Strike_Online_2_
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], edi
call fcn.00438206
pop ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 2
call fcn.004360ff
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmovae eax, dword [ebp - 0x28]
push edi
push eax
call ebx
test eax, eax
je 0x42765d
mov esi, str.launcher_
push esi
call fcn.0045ea6a
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.004361c3
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push edi
cmovae eax, dword [ebp - 0x28]
push eax
call ebx
test eax, eax
jne 0x4276a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x427698
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0xb7
jne 0x427682
mov esi, str.launcher_
push esi
call fcn.0045ea6a
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.004361c3
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 0
cmovae eax, dword [ebp - 0x28]
push eax
call ebx
test eax, eax
jne 0x4276a3
call edi
cmp eax, 0xb7
jne 0x4278bf
mov esi, str.launcher.ini
push esi
call fcn.0045ea6a
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.004361c3
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xa4]
call fcn.0043422b
lea edx, [ebp - 0xa4]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x74]
call fcn.004272de
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.004362ae
push dword [ebp - 0x10]
lea ecx, [ebp - 0xbc]
call fcn.0043422b
lea edx, [ebp - 0xbc]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.004272de
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 8
call fcn.004362ae
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x44]
call fcn.004272de
sub esp, 0xc
mov byte [ebp - 4], 9
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x170]
push eax
call fcn.004335d6
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x120], 0
je 0x42789c
mov edx, 0x48e658
lea ecx, [ebp - 0x170]
call fcn.0043823f
mov ebx, dword [ebp + 8]
test bl, bl
je 0x42777a
cmp dword [ebp - 0x60], 8
lea edx, [ebp - 0x74]
push dword [ebp - 0x64]
cmovae edx, dword [ebp - 0x74]
lea ecx, [ebp - 0x170]
call fcn.0043ab0c
pop ecx
lea ecx, [ebp - 0x170]
call fcn.004383f2
lea ecx, [ebp - 0x170]
call fcn.00438596
test bl, bl
je 0x4277ae
cmp dword [ebp - 0x48], 8
lea edx, [ebp - 0x5c]
push dword [ebp - 0x4c]
cmovae edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x170]
call fcn.0043ab0c
pop ecx
lea ecx, [ebp - 0x170]
call fcn.004383f2
push ebx
push ecx
mov edx, 0x48e67c
lea ecx, [ebp - 0x170]
call fcn.0043823f
pop ecx
mov ecx, eax
call fcn.00433613
mov ecx, eax
call fcn.004383f2
push dword [ebp + 0xc]
mov edx, 0x48e694
push ecx
lea ecx, [ebp - 0x170]
call fcn.0043823f
pop ecx
mov ecx, eax
call fcn.00433613
mov ecx, eax
call fcn.004383f2
push dword [ebp + 0x10]
mov edx, 0x48e6a8
push ecx
lea ecx, [ebp - 0x170]
call fcn.0043823f
pop ecx
mov ecx, eax
call fcn.00433613
mov ecx, eax
call fcn.004383f2
mov edx, 0x48e6b8
lea ecx, [ebp - 0x170]
call fcn.0043823f
cmp byte [ebp + 0x14], 1
jne 0x427846
mov edx, 0x48e6d4
lea ecx, [ebp - 0x170]
call fcn.0043823f
lea ecx, [ebp - 0x170]
call fcn.004383f2
mov edx, 0x48e6e8
lea ecx, [ebp - 0x170]
call fcn.0043823f
cmp dword [ebp - 0x30], 8
lea edx, [ebp - 0x44]
push dword [ebp - 0x34]
cmovae edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x170]
call fcn.0043ab0c
pop ecx
lea ecx, [ebp - 0x170]
call fcn.004383f2
lea ecx, [ebp - 0x170]
call fcn.00431ea9
lea ecx, [ebp - 0x170]
call fcn.0043355b
lea ecx, [ebp - 0x170]
call fcn.004278d6
lea ecx, [ebp - 0x44]
call fcn.004360ff
lea ecx, [ebp - 0x5c]
call fcn.004360ff
lea ecx, [ebp - 0x74]
call fcn.004360ff
lea ecx, [ebp - 0x28]
call fcn.004360ff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret