Function at 0x486993
Capabilities:
Create directory

Disassembly:
push ebp
sub esp, 0x60
mov eax, 0x6d3c9b
call fcn.006899cc
sub esp, 0x250
push ebx
mov byte [ebp + 0x1f], 1
call fcn.00489fdc
xor ebx, ebx
mov byte [0x7e67a8], 1
mov dword [ebp - 4], ebx
cmp byte [0x7e5611], bl
je 0x48714b
push esi
call fcn.004a72a1
push 0x18
call fcn.0068973d
pop ecx
mov dword [ebp + 0x3c], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x4869ed
mov ecx, eax
call fcn.00449d20
mov esi, eax
jmp 0x4869ef
mov esi, ebx
mov dword [ebp + 0x4c], esi
mov byte [ebp - 4], bl
mov dword [ebp + 0x20], esi
test esi, esi
je 0x486a02
mov eax, dword [esi]
push esi
call dword [eax + 4]
cmp word [0x7e5618], 0
mov byte [ebp - 4], 3
jne 0x486a6c
push 0x104
lea eax, [ebp - 0x25c]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
test eax, eax
je 0x486a51
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.0046fa9a
cmp dword [ebp + 0x38], 8
lea eax, [ebp + 0x24]
jb 0x486a43
mov eax, dword [ebp + 0x24]
push eax
call fcn.00485ae7
lea ecx, [ebp + 0x24]
call fcn.0044823e
cmp word [0x7e5618], 0
jne 0x486a6c
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ea0c0], eax
mov dword [0], ebx
push 0x6f717c
lea eax, [ebp - 0x24]
push eax
call fcn.004848ce
cmp dword [ebp - 0x10], 8
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 4
jb 0x486a8a
mov eax, dword [ebp - 0x24]
push esi
push 0x46ca7e
push eax
call fcn.0047ea71
cmp eax, 1
jg 0x486ab2
cmp byte [esi + 0x10], 5
je 0x486ae3
push 0x18
call fcn.0068973d
pop ecx
mov dword [ebp + 0x3c], eax
mov byte [ebp - 4], 5
jmp 0x486ac1
push 0x18
call fcn.0068973d
pop ecx
mov dword [ebp + 0x3c], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x486ace
mov ecx, eax
call fcn.00449d20
jmp 0x486ad0
mov eax, ebx
push eax
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 4
call fcn.00487a57
mov esi, dword [ebp + 0x20]
mov dword [ebp + 0x4c], esi
mov eax, dword [esi + 8]
mov ecx, esi
push edi
push str.file_guard
mov dword [ebp + 0x48], ebx
mov edi, dword [eax + 4]
mov dword [ebp + 0x44], ebx
mov dword [ebp + 0x40], ebx
call fcn.0046cd02
mov eax, dword [esi + 8]
mov ecx, dword [eax + 4]
cmp edi, ecx
je 0x486b34
inc ebx
cmp ebx, 1
jbe 0x486b1a
cmp ebx, 2
jne 0x486b17
inc dword [ebp + 0x48]
inc dword [ebp + 0x44]
mov edi, ecx
mov ecx, esi
push str.file_guard
call fcn.0046cd02
mov eax, dword [esi + 8]
mov ecx, dword [eax + 4]
cmp edi, ecx
jne 0x486b09
xor ebx, ebx
mov edi, dword [eax + 4]
mov ecx, esi
push str..fileguard
mov dword [ebp + 0x40], ebx
call fcn.0046cd02
mov eax, dword [esi + 8]
mov eax, dword [eax + 4]
cmp edi, eax
je 0x486b7b
inc ebx
cmp ebx, 1
jbe 0x486b61
cmp ebx, 2
jne 0x486b5e
inc dword [ebp + 0x48]
inc dword [ebp + 0x44]
push str..fileguard
mov ecx, esi
mov edi, eax
call fcn.0046cd02
mov eax, dword [esi + 8]
mov eax, dword [eax + 4]
cmp edi, eax
jne 0x486b50
xor ebx, ebx
cmp dword [0x7ecbb0], 0
je 0x486b8e
push 0x7ecba0
call fcn.00494fb8
push dword [0x7e67d0]
call fcn.004e6504
mov esi, eax
mov edi, ebx
mov ecx, dword [esi]
xor edx, edx
sub ecx, dword [edi + 0x7e6360]
sbb edx, dword [edi + 0x7e6364]
add dword [edi + 0x7e6310], ecx
adc dword [edi + 0x7e6314], edx
xor ecx, ecx
mov eax, dword [esi + 0x14]
sub eax, dword [edi + 0x7e6338]
sbb ecx, dword [edi + 0x7e633c]
add dword [edi + 0x7e62e8], eax
adc dword [edi + 0x7e62ec], ecx
mov eax, dword [esi]
lea esi, [esi + 4]
mov dword [edi + 0x7e6360], eax
mov dword [edi + 0x7e6364], ebx
mov eax, dword [esi + 0x10]
mov dword [edi + 0x7e6338], eax
mov dword [edi + 0x7e633c], ebx
add edi, 8
cmp edi, 0x28
jb 0x486b9d
mov edi, ebx
mov dword [ebp + 0x40], ebx
call fcn.0048788e
mov esi, dword [ebp + 0x4c]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
test ecx, ecx
je 0x486ffb
call fcn.0048788e
mov eax, dword [eax]
mov eax, dword [eax + edi*4]
mov dword [ebp + 0x3c], eax
mov ecx, dword [eax + 8]
mov dword [ebp + 0x18], ecx
mov ecx, dword [ecx]
mov dword [ebp + 0x5c], ecx
test ecx, ecx
je 0x486fe2
mov eax, dword [esi + 8]
push ecx
mov ecx, esi
mov dword [ebp + 0x60], ebx
mov edi, dword [eax + 4]
call fcn.0046cd02
mov eax, dword [esi + 8]
mov ecx, dword [eax + 4]
cmp edi, ecx
je 0x486c86
mov ebx, dword [ebp + 0x5c]
mov eax, dword [ebp + 0x60]
inc eax
mov dword [ebp + 0x60], eax
cmp eax, 1
jbe 0x486c70
cmp eax, 2
jne 0x486c6d
inc dword [ebp + 0x48]
inc dword [ebp + 0x44]
mov edi, ecx
mov ecx, esi
push ebx
call fcn.0046cd02
mov eax, dword [esi + 8]
mov ecx, dword [eax + 4]
cmp edi, ecx
jne case.default.0x486c9b
xor ebx, ebx
mov eax, dword [ebp + 0x3c]
mov ecx, dword [ebp + 0x18]
mov edi, dword [eax]
add edi, dword [ecx + 4]
movzx eax, word [ecx + 8]
mov dword [ebp + 0x54], edi
and eax, 0xf
jmp dword [eax*4 + 0x487167]
cmp dword [ecx + 0x10], 0
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 7
je 0x486cc5
push dword [ecx + 0x10]
lea ecx, [ebp + 0x24]
mov dword [ebp + 0x24], ebx
call fcn.004482e2
mov eax, dword [ebp + 0x24]
jmp 0x486cca
mov eax, ebx
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x60], eax
mov ecx, edi
lea eax, [ebp + 0x24]
push eax
call fcn.004570f7
mov ecx, dword [ebp + 0x38]
mov byte [ebp + 0x5b], al
cmp ecx, 8
jb 0x486d1a
mov eax, dword [ebp + 0x60]
lea ecx, [ecx*2 + 2]
mov dword [ebp + 0x54], ecx
mov dword [ebp + 0x60], eax
cmp ecx, 0x1000
jb 0x486d0e
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044810a
mov ecx, dword [ebp + 0x54]
mov eax, dword [ebp + 0x60]
push ecx
push eax
call fcn.0068976d
mov al, byte [ebp + 0x5b]
pop ecx
pop ecx
mov ecx, esi
test al, al
jne 0x486e7e
push edi
push dword [ebp + 0x5c]
call fcn.0046d91d
jmp case.0x486c9b.11
mov edx, dword [ecx + 0x10]
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0xf
test edx, edx
je 0x486d67
mov ecx, edx
mov dword [ebp + 0x24], ebx
lea eax, [ecx + 1]
mov dword [ebp + 0x54], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x486d4e
sub ecx, dword [ebp + 0x54]
push ecx
push edx
lea ecx, [ebp + 0x24]
call fcn.00414b60
mov eax, dword [ebp + 0x24]
jmp 0x486d6c
mov eax, ebx
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x54], eax
mov ecx, edi
lea eax, [ebp + 0x24]
push eax
call fcn.00410b90
mov ecx, dword [ebp + 0x38]
mov byte [ebp + 0x5b], al
cmp ecx, 0x10
jb 0x486db6
mov eax, dword [ebp + 0x54]
inc ecx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x54], eax
cmp ecx, 0x1000
jb 0x486daa
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x54]
push eax
call fcn.0044810a
mov ecx, dword [ebp + 0x60]
mov eax, dword [ebp + 0x54]
push ecx
push eax
call fcn.0068976d
mov al, byte [ebp + 0x5b]
pop ecx
pop ecx
mov ecx, esi
test al, al
jne 0x486e7e
push edi
push dword [ebp + 0x5c]
call fcn.0046d8ff
jmp case.0x486c9b.11
push 0xffffffffffffffff
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.0046d846
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x54], ebx
cmp dword [edi + 0x10], ebx
je case.0x486c9b.11
mov esi, ebx
mov ebx, eax
lea ecx, [ebp + 0x24]
call fcn.0046c332
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 8]
mov dword [ebp + 0x54], eax
dec ecx
add eax, esi
mov byte [ebp - 4], 7
and ecx, eax
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4]
cmp dword [eax + 0x14], 8
jb 0x486e15
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x24]
call fcn.0046e24e
lea eax, [ebp + 0x24]
mov ecx, ebx
push eax
call fcn.0046c73d
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 8
mov dword [ebp + 0x24], 0x6f6108
call fcn.0046d04d
inc esi
mov byte [ebp - 4], 4
cmp esi, dword [edi + 0x10]
jne 0x486ded
jmp 0x486fc4
cmp eax, 2
je 0x486e55
cmp eax, 3
jne 0x486e5a
movzx edi, byte [edi]
jmp 0x486e5c
mov edi, dword [edi]
cmp dword [ecx + 4], 0x1bf
je 0x486e8b
push ecx
call fcn.0048428c
mov ecx, eax
mov dword [ebp + 0x54], edx
mov eax, edi
cdq
cmp eax, ecx
jne 0x486e8b
cmp edx, dword [ebp + 0x54]
jne 0x486e8b
mov ecx, esi
push dword [ebp + 0x5c]
call fcn.0046cd02
jmp case.0x486c9b.11
push edi
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.0046d7db
jmp case.0x486c9b.11
push dword [edi + 4]
mov ecx, esi
push dword [edi]
push dword [ebp + 0x5c]
call fcn.0046d76d
jmp case.0x486c9b.11
push dword [ecx + 0xc]
push edi
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.0046d89c
jmp case.0x486c9b.11
test edi, edi
je case.0x486c9b.11
cmp dword [edi], 0
je case.0x486c9b.11
cmp dword [edi + 4], 0
je case.0x486c9b.11
push dword [edi + 4]
push dword [edi]
jmp 0x486eb3
mov edi, dword [ecx + 0x18]
mov ecx, esi
push 1
push dword [ebp + 0x54]
push 0xffffffffffffffff
push dword [ebp + 0x5c]
call fcn.0046d717
push eax
call edi
jmp case.0x486c9b.11
push 0xffffffffffffffff
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.0046d717
mov edx, dword [edi]
mov dword [ebp + 0x60], eax
mov ecx, dword [edx]
mov dword [ebp + 0x54], ecx
cmp ecx, edx
je case.0x486c9b.11
mov esi, eax
mov eax, dword [ecx + 0x28]
add ecx, 0x10
cmp dword [ecx + 0x14], 0x10
jb 0x486f2e
mov ecx, dword [ecx]
push eax
push ecx
mov ecx, esi
call fcn.0046d7db
lea ecx, [ebp + 0x54]
call fcn.0045c164
mov ecx, dword [ebp + 0x54]
cmp ecx, dword [edi]
jne 0x486f20
jmp 0x486fc6
push 0xffffffffffffffff
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.0046d717
mov edx, dword [edi]
mov dword [ebp + 0x5c], eax
mov ecx, dword [edx]
mov dword [ebp + 0x60], ecx
cmp ecx, edx
je case.0x486c9b.11
mov ebx, dword [ebp + 0x54]
mov esi, eax
lea edi, [ecx + 0x10]
push edi
lea eax, [ebp + 0x24]
push eax
call fcn.00483fc1
lea eax, [edi + 0x18]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00483fc1
cmp dword [ebp + 0x38], 0x10
lea eax, [ebp + 0x24]
mov byte [ebp - 4], 0xa
jb 0x486f95
mov eax, dword [ebp + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push eax
mov ecx, esi
call fcn.0046d8ff
lea ecx, [ebp - 0x3c]
call fcn.0040fad0
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 4
call fcn.0040fad0
lea ecx, [ebp + 0x60]
call fcn.0045c164
mov ecx, dword [ebp + 0x60]
cmp ecx, dword [ebx]
jne 0x486f67
xor ebx, ebx
mov esi, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x18]
add ecx, 0x1c
mov dword [ebp + 0x18], ecx
mov ecx, dword [ecx]
mov dword [ebp + 0x5c], ecx
test ecx, ecx
jne 0x486c3b
mov edi, dword [ebp + 0x40]
inc edi
mov dword [ebp + 0x40], edi
call fcn.0048788e
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
cmp edi, ecx
jb 0x486c1b
push 0xffffffffffffffff
push str.peakrate
mov ecx, esi
call fcn.0046d717
push eax
call fcn.004a3de2
push esi
call fcn.004a3e68
push esi
call fcn.004e6b5e
push 0xffffffffffffffff
push str.apps
mov ecx, esi
call fcn.0046d717
push eax
call fcn.004a3d55
push 0xffffffffffffffff
push str.installs
mov ecx, esi
call fcn.0046d846
push eax
call fcn.0049984e
lea eax, [ebp - 0x54]
mov ecx, esi
push eax
call fcn.0046df33
push esi
mov byte [ebp - 4], 0xb
call fcn.004c39d6
cmp byte [0x7e67c0], 0
pop edi
jne 0x487080
xor eax, eax
cmp ax, word [0x7e5618]
je 0x487080
push ebx
push 0x7e5618
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
mov byte [0x7e67c0], 1
push 0x6f717c
lea eax, [ebp]
push eax
call fcn.004848ce
mov byte [ebp - 4], 0xc
call fcn.00471fe8
push 0x18
mov dword [0x7e5850], eax
mov dword [0x7e5854], edx
call fcn.0068973d
pop ecx
mov dword [ebp + 0x3c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x4870be
mov ecx, eax
call fcn.00449d20
mov ebx, eax
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x3c], ebx
test ebx, ebx
je 0x4870cf
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
cmp dword [ebp + 0x14], 8
lea eax, [ebp]
mov byte [ebp - 4], 0xe
jb 0x4870df
mov eax, dword [ebp]
push ebx
push 0x46ca7e
lea ecx, [ebp - 0x54]
push ecx
push eax
call fcn.0047f0b3
or byte [0x7e5610], al
mov ecx, dword [ebp + 0x48]
test ecx, ecx
je 0x48711a
cmp dword [ebp + 0x14], 8
lea eax, [ebp]
jb 0x487108
mov eax, dword [ebp]
push eax
push dword [ebp + 0x44]
push ecx
push str.Settings_integrity_check_failed__duplicate_keys:__d_count:__d___repaired:__s
call fcn.0048e961
add esp, 0x10
mov byte [ebp - 4], 0xf
test ebx, ebx
je 0x487128
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
lea ecx, [ebp]
call fcn.0044823e
lea ecx, [ebp - 0x54]
call fcn.0040fad0
lea ecx, [ebp - 0x24]
call fcn.0044823e
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 0x10
call dword [eax + 8]
pop esi
mov dword [ebp - 4], 0x11
call fcn.0048a01d
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
add ebp, 0x64
leave
ret