Function at 0x517d8b
Capabilities:
Create directory

Disassembly:
mov eax, 0x6bd76b
call fcn.0066bd6c
sub esp, 0x630
cmp byte [0x79ef2c], 0
je 0x518170
push ebx
push esi
push edi
mov ecx, 0xf3
lea edi, [ebp - 0x63c]
mov esi, 0x6f9980
lea eax, [ebp - 0x60]
rep movsd dword es:[edi], dword [esi]
push str.trusted
xor ebx, ebx
push eax
mov byte [0x79ef2c], bl
movsw word es:[edi], word [esi]
call fcn.0047353d
cmp dword [ebp - 0x4c], 8
lea esi, [ebp - 0x60]
mov dword [ebp - 4], ebx
jb 0x517de4
mov esi, dword [ebp - 0x60]
push 0x105
push esi
lea eax, [ebp - 0x26c]
push eax
call fcn.00428912
mov edi, esi
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
cmp ax, bx
jne 0x517dfb
sub edi, ecx
push 0x5c
sar edi, 1
pop eax
push esi
mov word [ebp + edi*2 - 0x26c], ax
call fcn.0045f5d9
test al, al
jne 0x517eb3
push ebx
push esi
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
mov eax, 0x104
sub eax, edi
push eax
lea eax, [ebp - 0x26a]
push str.bittorrent.crt
lea eax, [eax + edi*2]
push eax
call fcn.00428912
push 0x80
push 7
lea eax, [ebp - 0x26c]
push eax
call fcn.0045fd28
mov dword [ebp - 0x14], eax
mov edi, 0x3ce
cmp eax, 0xffffffff
je 0x517e7e
push edi
lea ecx, [ebp - 0x63c]
push ecx
push eax
call fcn.0046024d
lea eax, [ebp - 0x14]
push eax
call fcn.0045fcba
push edi
lea eax, [ebp - 0x63c]
push eax
lea ecx, [ebp - 0x20]
call fcn.00517b20
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.0051881e
test al, al
je 0x517ea6
lea ecx, [ebp - 0x20]
call fcn.0051887a
lea ecx, [ebp - 0x20]
call fcn.00517bf7
jmp 0x518165
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
push ebx
push esi
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
push eax
call fcn.0045f6c8
mov ebx, dword [ebp - 0x28]
mov eax, ebx
mov esi, dword [ebp - 0x2c]
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
test eax, eax
je 0x518116
push 0x8000
call fcn.0045e2af
mov ecx, dword [ebp - 0x2c]
mov ebx, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x3c], eax
cmp ecx, eax
je 0x518105
mov edx, 0x104
lea esi, [ebp - 0x26a]
sub edx, edi
lea esi, [esi + edi*2]
mov dword [ebp - 0x40], edx
mov edi, 0x3ce
mov dword [ebp - 0x18], esi
cmp dword [ecx + 0x14], 8
mov eax, ecx
jb 0x517f28
mov eax, dword [ecx]
push edx
push eax
push esi
call fcn.00428912
push 0x80
push 4
lea eax, [ebp - 0x26c]
push eax
call fcn.0045fd28
mov dword [ebp - 0x30], eax
cmp eax, 0xffffffff
je 0x5180f0
lea ecx, [ebp - 0x34]
push ecx
push 0
push 0
push 0x8000
push ebx
push eax
call fcn.0045ff9f
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.0045fcba
test esi, esi
jne 0x5180ed
mov esi, dword [ebp - 0x34]
test esi, esi
je 0x5180ed
cmp esi, 0x1b
jb 0x517fff
push 0x1b
push str._____BEGIN_CERTIFICATE_____
push ebx
call fcn.0066e15e
add esp, 0xc
test eax, eax
jne 0x517fff
push 0x1b
pop edx
xor ecx, ecx
cmp esi, edx
jbe 0x517fe5
mov al, byte [edx + ebx]
cmp al, 0x2f
jb 0x517fae
cmp al, 0x39
jbe 0x517fdc
cmp al, 0x41
jb 0x517fb6
cmp al, 0x5a
jbe 0x517fdc
cmp al, 0x61
jb 0x517fbe
cmp al, 0x7a
jbe 0x517fdc
cmp al, 0x2b
je 0x517fdc
cmp al, 0x3d
je 0x517fdc
cmp al, 0xa
je 0x517fe0
cmp al, 0xd
je 0x517fe0
cmp al, 9
je 0x517fe0
cmp al, 0xb
je 0x517fe0
cmp al, 0x20
jne 0x517fe5
jmp 0x517fe0
mov byte [ecx + ebx], al
inc ecx
inc edx
cmp edx, esi
jb 0x517fa3
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ecx
push eax
push ebx
push ecx
push ebx
call fcn.00589029
test eax, eax
jne 0x5180ed
mov esi, dword [ebp - 0x10]
test ebx, ebx
je 0x5180ed
push esi
push ebx
lea ecx, [ebp - 0x20]
call fcn.00517b20
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call fcn.0051881e
test al, al
je 0x5180e1
mov eax, dword [ebp - 0x20]
mov edx, 0x6f9964
add eax, 0xc3
xor ecx, ecx
mov dword [ebp - 0x10], eax
movzx eax, byte [eax + ecx]
cmp al, byte [edx + ecx]
jne 0x5180ca
mov eax, dword [ebp - 0x10]
inc ecx
cmp ecx, 0xf
jne 0x518037
cmp esi, edi
jne 0x518066
push edi
lea eax, [ebp - 0x63c]
push ebx
push eax
call fcn.0066e15e
add esp, 0xc
test eax, eax
je 0x5180ca
push 0x80
push 7
lea eax, [ebp - 0x26c]
push eax
call fcn.0045fd28
mov dword [ebp - 0x38], eax
cmp eax, 0xffffffff
je 0x518098
push edi
lea ecx, [ebp - 0x63c]
push ecx
push eax
call fcn.0046024d
lea eax, [ebp - 0x38]
push eax
call fcn.0045fcba
push edi
lea eax, [ebp - 0x63c]
push eax
lea ecx, [ebp - 0x48]
call fcn.00517b20
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.0051881e
test al, al
je 0x5180c0
lea ecx, [ebp - 0x48]
call fcn.0051887a
lea ecx, [ebp - 0x48]
call fcn.00517bf7
jmp 0x5180e1
lea ecx, [ebp - 0x20]
call fcn.0051887a
push dword [ebp - 0x10]
push str._s_trusted_n
call fcn.0040f4c1
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00517bf7
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x40]
add ecx, 0x18
mov dword [ebp - 0x14], ecx
cmp ecx, dword [ebp - 0x3c]
jne 0x517f1e
push 1
push ebx
call fcn.0045e2a2
mov ebx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x2c]
push 0x18
pop ecx
test esi, esi
je 0x518165
cmp esi, ebx
je 0x518131
mov ecx, esi
call fcn.0042756c
push 0x18
pop ecx
add esi, ecx
cmp esi, ebx
jne 0x51811e
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
sub eax, esi
mov dword [ebp - 0x10], esi
cdq
idiv ecx
imul eax, eax, 0x18
mov dword [ebp - 0x14], eax
cmp eax, 0x1000
jb 0x51815c
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0042741e
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
push eax
push esi
call fcn.0066bb0a
pop ecx
pop ecx
lea ecx, [ebp - 0x60]
call fcn.0042756c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret