Function at 0x422a2b
Capabilities:
Create directory
Get common file path
Read .ini file

Disassembly:
mov eax, 0x484726
call fcn.00466fdc
sub esp, 0x3f8
push ebx
push esi
xor ebx, ebx
push edi
lea eax, [ebp - 0x1e]
mov edi, 0x48b6a8
mov esi, 0x48b6a0
push ebx
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xac], esi
call fcn.00403cd9
lea eax, [ebp - 0x1d]
push ebx
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 4], ebx
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0x84], esi
call fcn.00403cd9
lea eax, [ebp - 0x16]
push ebx
push eax
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 1
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xe0], esi
call fcn.00403cd9
mov ebx, 0x104
lea eax, [ebp - 0x2c]
push ebx
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 2
call fcn.00402f01
mov dword [ebp - 0x1c], eax
mov ecx, dword [eax]
mov byte [ebp - 4], 3
call fcn.004042dd
mov ecx, dword [ebp - 0x1c]
push eax
push ebx
mov dword [ecx + 8], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00403013
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
lea eax, [ebp - 0x144]
push 1
push eax
lea ecx, [ebp - 0x7c]
call fcn.00423b7c
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 4
call fcn.0040fc1f
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 5
call fcn.004024b2
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.00402438
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.00402438
push 0
lea ecx, [ebp - 0xcc]
call fcn.004042dd
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x1a4]
push eax
call fcn.0042303e
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 6
call fcn.004042dd
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0043269e
mov eax, 0x4a3274
mov byte [ebp - 4], 7
mov ecx, eax
mov dword [ebp - 0x16c], edi
test ecx, ecx
mov dword [ebp - 0x14c], esi
jne 0x422b9e
mov eax, 0x4a9e50
lea ecx, [ebp - 0x15]
push 0
push ecx
push eax
lea ecx, [ebp - 0x16c]
call fcn.00404d89
lea eax, [ebp - 0x16c]
lea ecx, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 8
call fcn.0040fc1f
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0xa
call fcn.00402438
mov eax, 0x4a3274
mov dword [ebp - 0x7c], edi
mov ecx, eax
mov dword [ebp - 0x5c], esi
test ecx, ecx
jne 0x422bf2
mov eax, 0x4a9e50
xor edi, edi
lea ecx, [ebp - 0xe]
push edi
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.00404d89
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
call fcn.004042dd
push edi
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004042dd
push eax
push esi
lea ecx, [ebp - 0x2d4]
call fcn.0043345c
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call fcn.00402438
push 0xc
lea eax, [ebp - 0x128]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x14], esp
push 1
push eax
call fcn.00407ae3
call fcn.004384ce
add esp, 0x2c
test al, al
je 0x422f4e
lea eax, [ebp - 0x128]
lea ecx, [ebp - 0x1a4]
push eax
call fcn.00423103
lea eax, [ebp - 0x134]
push ebx
push eax
lea ecx, [ebp - 0x100]
call fcn.00402f01
mov esi, eax
mov ecx, dword [esi]
mov byte [ebp - 4], 0xc
call fcn.004042dd
mov dword [ebp - 0x1c], eax
mov dword [esi + 8], eax
mov eax, 0x4a3258
mov edi, 0x48b660
mov ecx, eax
mov esi, 0x48b658
test ecx, ecx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x34], esi
jne 0x422cb5
mov eax, 0x4a9e50
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.004011a9
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xd
call fcn.00401a14
mov dword [ebp - 0x24], eax
mov eax, 0x4a323c
mov ecx, eax
mov dword [ebp - 0x7c], edi
test ecx, ecx
mov dword [ebp - 0x5c], esi
jne 0x422ce9
mov eax, 0x4a9e50
lea ecx, [ebp - 0xd]
push 0
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.004011a9
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xe
call fcn.00401a14
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x14], eax
call fcn.004042dd
push eax
push ebx
push dword [ebp - 0x1c]
push 0x4a9e54
push dword [ebp - 0x24]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xd
call fcn.00401093
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xc
call fcn.00401093
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0xa
call fcn.00403013
xor ebx, ebx
cmp dword [ebp - 0xf4], ebx
jne 0x422dd6
cmp byte [0x4a997c], bl
jne 0x422d6d
cmp byte [0x4ac4f8], bl
je 0x422fd1
lea eax, [ebp + 0xb]
push 1
push eax
push 0x4a165c
lea ecx, [ebp - 0x7c]
call fcn.00401884
mov eax, 0x4a31b4
mov byte [ebp - 4], 0xf
mov ecx, eax
mov dword [ebp - 0x54], edi
test ecx, ecx
mov dword [ebp - 0x34], esi
jne 0x422d9a
mov eax, 0x4a9e50
lea ecx, [ebp - 0xd]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.004011a9
lea eax, [ebp - 0x7c]
push 0xca3
push eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x10
call fcn.00477a40
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf
call fcn.00401093
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7c]
jmp 0x422fcc
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 7
call fcn.00402438
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 6
call fcn.00432cde
lea eax, [ebp - 0x100]
lea ecx, [ebp - 0xa4]
push eax
call fcn.00423ccc
push ebx
lea ecx, [ebp - 0xa4]
call fcn.004042dd
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0xd8]
call fcn.004020ad
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x13
call fcn.004042dd
push eax
lea ecx, [ebp - 0xd8]
call fcn.004025e1
lea ecx, [ebp - 0xa4]
call fcn.004042dd
cmp dword [ebp - 0x9c], ebx
mov ecx, 0x48b6d0
mov dword [ebp - 0x14], eax
mov ebx, ecx
je 0x422e62
mov ebx, dword [ebp - 0x9c]
mov edi, dword [ebp + 8]
mov esi, ecx
mov eax, dword [edi + 8]
test eax, eax
je 0x422e70
mov esi, eax
lea eax, [ebp + 0xb]
push 1
push eax
push 0x4a165c
lea ecx, [ebp - 0x54]
call fcn.00401884
mov eax, dword [eax + 8]
mov byte [ebp - 4], 0x14
test eax, eax
jne 0x422e93
mov eax, 0x48b67c
mov dword [ebp - 0x28], eax
push ebx
push esi
lea eax, [ebp - 0x28]
push 0x4a3168
push eax
mov dword [ebp - 0x24], 0xcb6
call fcn.0040a552
add esp, 0x10
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x13
call fcn.00401093
mov ecx, edi
call fcn.004042dd
push eax
lea ecx, [ebp - 0x404]
call fcn.0043269e
push 0
lea ecx, [ebp - 0x404]
push dword [ebp - 0x14]
mov byte [ebp - 4], 0x15
push 0x423112
call fcn.00433873
test eax, eax
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x13
setne bl
call fcn.00432cde
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 6
call fcn.004020da
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 2
call fcn.0042309c
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 1
call fcn.00402438
and byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.00402438
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00402438
mov al, bl
jmp 0x42302d
cmp byte [0x4a997c], 0
jne 0x422f60
cmp byte [0x4ac4f8], 0
je 0x422fd1
lea eax, [ebp + 0xb]
push 1
push eax
push 0x4a165c
lea ecx, [ebp - 0x7c]
call fcn.00401884
mov eax, 0x4a30f8
mov byte [ebp - 4], 0x11
mov ecx, eax
mov dword [ebp - 0x54], 0x48b660
test ecx, ecx
mov dword [ebp - 0x34], 0x48b658
jne 0x422f95
mov eax, 0x4a9e50
lea ecx, [ebp - 0xd]
push edi
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.004011a9
lea eax, [ebp - 0x7c]
push 0xca9
push eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x12
call fcn.00477a40
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x11
call fcn.00401093
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7c]
call fcn.00401093
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 7
call fcn.00402438
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 6
call fcn.00432cde
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 2
call fcn.0042309c
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 1
call fcn.00402438
and byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.00402438
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00402438
xor al, al
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4