Function at 0x409170
Capabilities:
Create directory
Delete file
Get common file path
Move file
Query or enumerate registry value
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x114c
call fcn.0040d060
mov eax, dword [0x410d58]
push ebx
mov ebx, ecx
mov dword [ebp - 0x1c], eax
mov ecx, dword [str..log]
mov al, byte [0x439068]
push esi
mov dl, byte [0x410d54]
push edi
mov dword [ebp - 0x18], ecx
mov byte [ebp - 0x114c], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x114b]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 4]
mov esi, 1
mov byte [ebp - 0x14], dl
mov edx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
push ecx
push esi
stosw word es:[edi], ax
push 0
push edx
push 0x80000001
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], 0
stosb byte es:[edi], al
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409260
mov al, byte [0x439068]
mov ecx, 0x3f
mov byte [ebp - 0x148], al
xor eax, eax
lea edi, [ebp - 0x147]
lea edx, [ebp - 0x148]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x10]
xor esi, esi
stosb byte es:[edi], al
push ecx
mov ecx, dword [str.NumberOfLogFiles]
lea eax, [ebp - 8]
push edx
mov edx, dword [ebp - 4]
push eax
push esi
push ecx
push edx
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], esi
push ecx
call dword [sym.imp.PNCRT.dll_atoi]
mov esi, eax
add esp, 4
cmp esi, 1
jb 0x40925b
cmp esi, 0x2710
jbe 0x409260
mov esi, 1
mov dl, byte [0x439068]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x547]
mov byte [ebp - 0x548], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, 0x439068
mov eax, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x4092a9
test cl, cl
je 0x4092a5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x4092a9
add eax, 2
add edi, 2
test cl, cl
jne 0x409285
xor eax, eax
jmp 0x4092ae
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4092c7
push 0x400
lea eax, [ebp - 0x548]
push ebx
push eax
call fcn.00405870
add esp, 0xc
mov edi, 0x439068
lea eax, [ebp - 0x548]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x4092f6
test cl, cl
je 0x4092f2
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x4092f6
add eax, 2
add edi, 2
test cl, cl
jne 0x4092d2
xor eax, eax
jmp 0x4092fb
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x409350
mov ecx, dword [str.SoftwareRealNetworksPreferencesUserDataPath]
lea eax, [ebp - 4]
push eax
push 1
push edi
push ecx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409350
lea edx, [ebp - 8]
lea eax, [ebp - 0x548]
push edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x10]
push eax
push ecx
push edi
push edi
push edx
mov dword [ebp - 0x10], edi
mov dword [ebp - 8], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], edi
mov edi, 0x439068
lea eax, [ebp - 0x548]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x40937f
test cl, cl
je 0x40937b
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x40937f
add eax, 2
add edi, 2
test cl, cl
jne 0x40935b
xor eax, eax
jmp 0x409384
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4093b6
lea eax, [ebp - 0x548]
push 0x400
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x548]
push 0x5c
push ecx
call dword [sym.imp.PNCRT.dll_strrchr]
add esp, 8
test eax, eax
je 0x4093b6
mov byte [eax + 1], 0
lea edx, [ebp - 0x114c]
push edx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0xd4b]
mov byte [ebp - 0xd4c], 0
rep stosd dword es:[edi], eax
mov al, byte [ebx + 0x800]
lea edi, [ebx + 0x800]
test al, al
je 0x409424
lea eax, [ebp - 0x548]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0x400
lea edx, [ebp - 0xd4c]
push edi
push edx
call fcn.00405870
add esp, 0xc
jmp 0x4094f2
push 0x400
lea eax, [ebp - 0x548]
push str.ErrorLogs
push eax
call fcn.004058b0
add esp, 0xc
lea ecx, [ebp - 0x548]
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [ebp - 0x548]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov al, byte [0x439068]
xor ecx, ecx
mov dword [ebp - 0x47], ecx
mov edi, dword [sym.imp.PNCRT.dll_sprintf]
mov dword [ebp - 0x43], ecx
lea edx, [ebp - 0x18]
mov dword [ebp - 0x3f], ecx
mov byte [ebp - 0x48], al
mov dword [ebp - 0x3b], ecx
push edx
lea eax, [ebp - 0x1c]
mov word [ebp - 0x37], cx
push esi
push eax
lea ecx, [ebp - 0xd4c]
push str._s_lu_s
push ecx
call edi
add esp, 0x14
lea edx, [ebp - 0xd4c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, 1
jbe 0x4094f2
mov ebx, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push eax
push esi
push ecx
lea edx, [ebp - 0x48]
push str._s_lu_s
push edx
call edi
add esp, 0x14
lea eax, [ebp - 0x18]
dec esi
lea ecx, [ebp - 0x1c]
push eax
push esi
push ecx
lea edx, [ebp - 0xd4c]
push str._s_lu_s
push edx
call edi
add esp, 0x14
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0xd4c]
push eax
push ecx
call ebx
cmp esi, 1
ja 0x4094ab
mov ebx, dword [ebp - 0xc]
mov dl, byte [0x439068]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x947]
mov byte [ebp - 0x948], dl
mov esi, 0x439068
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edi, [ebx + 0x400]
mov eax, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x409545
test cl, cl
je 0x409541
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x409545
add eax, 2
add esi, 2
test cl, cl
jne 0x40951d
xor eax, eax
jmp 0x40954a
sbb eax, eax
sbb eax, 0xffffffff
xor ebx, ebx
cmp eax, ebx
je 0x409565
push 0x400
lea eax, [ebp - 0x948]
push edi
push eax
call fcn.00405870
add esp, 0xc
mov esi, 0x439068
lea eax, [ebp - 0x948]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x409594
test cl, cl
je 0x409590
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x409594
add eax, 2
add esi, 2
test cl, cl
jne 0x409570
xor eax, eax
jmp 0x409599
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4095f5
mov ecx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
lea eax, [ebp - 4]
push eax
push 0x20019
push ebx
push ecx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4095f5
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x948]
push edx
mov edx, dword [str.SymbolPath]
lea ecx, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push ecx
push ebx
push edx
push eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], ebx
mov esi, 0x439068
lea eax, [ebp - 0x948]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x409624
test cl, cl
je 0x409620
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x409624
add eax, 2
add esi, 2
test cl, cl
jne 0x409600
xor eax, eax
jmp 0x409629
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x409659
lea eax, [ebp - 0x948]
push 0x400
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x948]
push 0x5c
push ecx
call dword [sym.imp.PNCRT.dll_strrchr]
add esp, 8
cmp eax, ebx
je 0x409659
mov byte [eax], 0
lea ecx, [ebp - 0x34]
call fcn.00403c10
lea edx, [ebp - 0x948]
lea ecx, [ebp - 0x34]
push edx
call fcn.004099d0
lea eax, [ebp - 0xd4c]
lea ecx, [ebp - 0x34]
push eax
call fcn.004098f0
lea ecx, [ebp - 0x34]
call fcn.0040b030
lea ecx, [ebp - 0x34]
call fcn.0040acf0
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push edi
push ebx
lea ecx, [ebp - 0x34]
call fcn.0040ac10
lea ecx, [ebp - 0x34]
call fcn.0040aaa0
lea ecx, [ebp - 0x34]
call fcn.0040ab00
lea ecx, [ebp - 0x34]
call fcn.0040abf0
mov edx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
lea ecx, [ebp - 4]
xor esi, esi
push ecx
push 1
push esi
push edx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409719
lea ecx, [ebp + 8]
lea edx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xc]
push edx
mov edx, dword [str.MiniDumpOptions]
push ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], eax
push eax
mov eax, dword [ebp - 4]
push edx
push eax
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x409708
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0
push edi
push ebx
push esi
push str.log1.dmp
lea ecx, [ebp - 0x34]
call fcn.0040b1f0
lea esi, [ebp - 0x114c]
mov eax, 0x439068
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x40975c
test cl, cl
je 0x409758
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x40975c
add eax, 2
add esi, 2
test cl, cl
jne 0x409734
xor eax, eax
jmp 0x409761
sbb eax, eax
sbb eax, 0xffffffff
pop edi
pop esi
test eax, eax
pop ebx
je 0x409775
lea eax, [ebp - 0x114c]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea ecx, [ebp - 0x34]
call fcn.004098d0
mov esp, ebp
pop ebp
ret 8