Function at 0x409180
Capabilities:
Create directory
Delete file
Get common file path
Move file
Query or enumerate registry value
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x114c
call fcn.0040d060
mov eax, dword [0x410d58]
push ebx
mov ebx, ecx
mov dword [ebp - 0x1c], eax
mov ecx, dword [str..log]
mov al, byte [0x439068]
push esi
mov dl, byte [0x410d54]
push edi
mov dword [ebp - 0x18], ecx
mov byte [ebp - 0x114c], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x114b]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 4]
mov esi, 1
mov byte [ebp - 0x14], dl
mov edx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
push ecx
push esi
stosw word es:[edi], ax
push 0
push edx
push 0x80000001
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], 0
stosb byte es:[edi], al
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409270
mov al, byte [0x439068]
mov ecx, 0x3f
mov byte [ebp - 0x148], al
xor eax, eax
lea edi, [ebp - 0x147]
lea edx, [ebp - 0x148]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x10]
xor esi, esi
stosb byte es:[edi], al
push ecx
mov ecx, dword [str.NumberOfLogFiles]
lea eax, [ebp - 8]
push edx
mov edx, dword [ebp - 4]
push eax
push esi
push ecx
push edx
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], esi
push ecx
call dword [sym.imp.PNCRT.dll_atoi]
mov esi, eax
add esp, 4
cmp esi, 1
jb 0x40926b
cmp esi, 0x2710
jbe 0x409270
mov esi, 1
mov dl, byte [0x439068]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x547]
mov byte [ebp - 0x548], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, 0x439068
mov eax, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x4092b9
test cl, cl
je 0x4092b5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x4092b9
add eax, 2
add edi, 2
test cl, cl
jne 0x409295
xor eax, eax
jmp 0x4092be
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4092d7
push 0x400
lea eax, [ebp - 0x548]
push ebx
push eax
call fcn.00405890
add esp, 0xc
mov edi, 0x439068
lea eax, [ebp - 0x548]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x409306
test cl, cl
je 0x409302
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x409306
add eax, 2
add edi, 2
test cl, cl
jne 0x4092e2
xor eax, eax
jmp 0x40930b
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x409360
mov ecx, dword [str.SoftwareRealNetworksPreferencesUserDataPath]
lea eax, [ebp - 4]
push eax
push 1
push edi
push ecx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409360
lea edx, [ebp - 8]
lea eax, [ebp - 0x548]
push edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x10]
push eax
push ecx
push edi
push edi
push edx
mov dword [ebp - 0x10], edi
mov dword [ebp - 8], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], edi
mov edi, 0x439068
lea eax, [ebp - 0x548]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x40938f
test cl, cl
je 0x40938b
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x40938f
add eax, 2
add edi, 2
test cl, cl
jne 0x40936b
xor eax, eax
jmp 0x409394
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4093c6
lea eax, [ebp - 0x548]
push 0x400
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x548]
push 0x5c
push ecx
call dword [sym.imp.PNCRT.dll_strrchr]
add esp, 8
test eax, eax
je 0x4093c6
mov byte [eax + 1], 0
lea edx, [ebp - 0x114c]
push edx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0xd4b]
mov byte [ebp - 0xd4c], 0
rep stosd dword es:[edi], eax
mov al, byte [ebx + 0x800]
lea edi, [ebx + 0x800]
test al, al
je 0x409434
lea eax, [ebp - 0x548]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0x400
lea edx, [ebp - 0xd4c]
push edi
push edx
call fcn.00405890
add esp, 0xc
jmp 0x409502
push 0x400
lea eax, [ebp - 0x548]
push str.ErrorLogs
push eax
call fcn.004058d0
add esp, 0xc
lea ecx, [ebp - 0x548]
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [ebp - 0x548]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov al, byte [0x439068]
xor ecx, ecx
mov dword [ebp - 0x47], ecx
mov edi, dword [sym.imp.PNCRT.dll_sprintf]
mov dword [ebp - 0x43], ecx
lea edx, [ebp - 0x18]
mov dword [ebp - 0x3f], ecx
mov byte [ebp - 0x48], al
mov dword [ebp - 0x3b], ecx
push edx
lea eax, [ebp - 0x1c]
mov word [ebp - 0x37], cx
push esi
push eax
lea ecx, [ebp - 0xd4c]
push str._s_lu_s
push ecx
call edi
add esp, 0x14
lea edx, [ebp - 0xd4c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, 1
jbe 0x409502
mov ebx, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push eax
push esi
push ecx
lea edx, [ebp - 0x48]
push str._s_lu_s
push edx
call edi
add esp, 0x14
lea eax, [ebp - 0x18]
dec esi
lea ecx, [ebp - 0x1c]
push eax
push esi
push ecx
lea edx, [ebp - 0xd4c]
push str._s_lu_s
push edx
call edi
add esp, 0x14
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0xd4c]
push eax
push ecx
call ebx
cmp esi, 1
ja 0x4094bb
mov ebx, dword [ebp - 0xc]
mov dl, byte [0x439068]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x947]
mov byte [ebp - 0x948], dl
mov esi, 0x439068
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edi, [ebx + 0x400]
mov eax, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x409555
test cl, cl
je 0x409551
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x409555
add eax, 2
add esi, 2
test cl, cl
jne 0x40952d
xor eax, eax
jmp 0x40955a
sbb eax, eax
sbb eax, 0xffffffff
xor ebx, ebx
cmp eax, ebx
je 0x409575
push 0x400
lea eax, [ebp - 0x948]
push edi
push eax
call fcn.00405890
add esp, 0xc
mov esi, 0x439068
lea eax, [ebp - 0x948]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4095a4
test cl, cl
je 0x4095a0
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4095a4
add eax, 2
add esi, 2
test cl, cl
jne 0x409580
xor eax, eax
jmp 0x4095a9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x409605
mov ecx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
lea eax, [ebp - 4]
push eax
push 0x20019
push ebx
push ecx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409605
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x948]
push edx
mov edx, dword [str.SymbolPath]
lea ecx, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push ecx
push ebx
push edx
push eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], ebx
mov esi, 0x439068
lea eax, [ebp - 0x948]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x409634
test cl, cl
je 0x409630
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x409634
add eax, 2
add esi, 2
test cl, cl
jne 0x409610
xor eax, eax
jmp 0x409639
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x409669
lea eax, [ebp - 0x948]
push 0x400
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x948]
push 0x5c
push ecx
call dword [sym.imp.PNCRT.dll_strrchr]
add esp, 8
cmp eax, ebx
je 0x409669
mov byte [eax], 0
lea ecx, [ebp - 0x34]
call fcn.00403c30
lea edx, [ebp - 0x948]
lea ecx, [ebp - 0x34]
push edx
call fcn.004099e0
lea eax, [ebp - 0xd4c]
lea ecx, [ebp - 0x34]
push eax
call fcn.00409900
lea ecx, [ebp - 0x34]
call fcn.0040b040
lea ecx, [ebp - 0x34]
call fcn.0040ad00
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push edi
push ebx
lea ecx, [ebp - 0x34]
call fcn.0040ac20
lea ecx, [ebp - 0x34]
call fcn.0040aab0
lea ecx, [ebp - 0x34]
call fcn.0040ab10
lea ecx, [ebp - 0x34]
call fcn.0040ac00
mov edx, dword [str.SoftwareRealNetworksPreferencesCrashLogOptions]
lea ecx, [ebp - 4]
xor esi, esi
push ecx
push 1
push esi
push edx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x409729
lea ecx, [ebp + 8]
lea edx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xc]
push edx
mov edx, dword [str.MiniDumpOptions]
push ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], eax
push eax
mov eax, dword [ebp - 4]
push edx
push eax
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x409718
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0
push edi
push ebx
push esi
push str.log1.dmp
lea ecx, [ebp - 0x34]
call fcn.0040b200
lea esi, [ebp - 0x114c]
mov eax, 0x439068
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x40976c
test cl, cl
je 0x409768
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x40976c
add eax, 2
add esi, 2
test cl, cl
jne 0x409744
xor eax, eax
jmp 0x409771
sbb eax, eax
sbb eax, 0xffffffff
pop edi
pop esi
test eax, eax
pop ebx
je 0x409785
lea eax, [ebp - 0x114c]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea ecx, [ebp - 0x34]
call fcn.004098e0
mov esp, ebp
pop ebp
ret 8