Function at 0x46fc62
Capabilities:
Create directory

Disassembly:
push ebp
sub esp, 0x6c
mov eax, 0x672f99
call fcn.0062921c
sub esp, 0x238
push ebx
mov byte [ebp + 0x4f], 1
call fcn.00472fb7
xor ebx, ebx
mov byte [0x76c81c], 1
mov dword [ebp - 4], ebx
cmp byte [0x76c7f1], bl
je 0x470349
push esi
push edi
call fcn.0048ee48
push 0x14
call fcn.006291e1
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x46fcbd
mov ecx, eax
call fcn.00425163
mov esi, eax
jmp 0x46fcbf
mov esi, ebx
mov dword [ebp + 0x58], esi
mov byte [ebp - 4], bl
mov dword [ebp + 0x54], esi
test esi, esi
je 0x46fcd2
mov eax, dword [esi]
push esi
call dword [eax + 4]
cmp word [0x76c5e8], 0
mov byte [ebp - 4], 3
jne 0x46fd3f
push 0x104
lea eax, [ebp - 0x244]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
test eax, eax
je 0x46fd24
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0045bbf5
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x46fd13
lea eax, [ebp + 0x30]
push eax
call fcn.0046f026
push ebx
push 1
lea ecx, [ebp + 0x30]
call fcn.0042386b
cmp word [0x76c5e8], 0
jne 0x46fd3f
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x77114c], eax
mov dword [0], ebx
push 0x68fc34
lea eax, [ebp - 0x24]
push eax
call fcn.0046dfa2
cmp dword [ebp - 0x10], 8
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 4
jae 0x46fd5d
lea eax, [ebp - 0x24]
push esi
push 0x458d5f
push eax
call fcn.00468ceb
cmp eax, 1
jg 0x46fd85
cmp byte [esi + 0x10], 5
je 0x46fdb6
push 0x14
call fcn.006291e1
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 5
jmp 0x46fd94
push 0x14
call fcn.006291e1
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x46fda1
mov ecx, eax
call fcn.00425163
jmp 0x46fda3
mov eax, ebx
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 4
call fcn.00501c45
mov esi, dword [ebp + 0x54]
mov dword [ebp + 0x58], esi
mov eax, dword [esi + 8]
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x60], ebx
jmp 0x46fdd2
inc ebx
cmp ebx, 1
jbe 0x46fdd2
cmp ebx, 2
jne 0x46fdcf
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [eax + 4]
mov ecx, esi
push str.file_guard
call fcn.00458fef
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jne 0x46fdc1
xor ebx, ebx
jmp 0x46fdfe
inc ebx
cmp ebx, 1
jbe 0x46fdfe
cmp ebx, 2
jne 0x46fdfb
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [eax + 4]
mov ecx, esi
push str..fileguard
call fcn.00458fef
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jne 0x46fded
cmp dword [0x773988], 0
je 0x46fe28
push 0x773978
call fcn.0047a59c
push dword [0x76d720]
call fcn.004cad3d
mov ebx, eax
xor edi, edi
mov ecx, dword [ebx]
xor edx, edx
sub ecx, dword [edi + 0x76d2d0]
sbb edx, dword [edi + 0x76d2d4]
add dword [edi + 0x76d280], ecx
adc dword [edi + 0x76d284], edx
xor ecx, ecx
mov eax, dword [ebx + 0x14]
sub eax, dword [edi + 0x76d2a8]
sbb ecx, dword [edi + 0x76d2ac]
add dword [edi + 0x76d258], eax
adc dword [edi + 0x76d25c], ecx
mov eax, dword [ebx]
lea ebx, [ebx + 4]
and dword [edi + 0x76d2d4], 0
mov dword [edi + 0x76d2d0], eax
mov eax, dword [ebx + 0x10]
and dword [edi + 0x76d2ac], 0
mov dword [edi + 0x76d2a8], eax
add edi, 8
cmp edi, 0x28
jb 0x46fe37
xor ebx, ebx
mov dword [ebp + 0x48], ebx
call fcn.00470a3d
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
test ecx, ecx
je 0x4701e9
call fcn.00470a3d
mov eax, dword [eax]
mov eax, dword [eax + ebx*4]
mov dword [ebp + 0x5c], eax
mov eax, dword [eax + 8]
jmp 0x4701bd
mov eax, dword [esi + 8]
and dword [ebp + 0x68], 0
mov edi, dword [eax + 4]
jmp 0x46feef
mov eax, dword [ebp + 0x68]
inc eax
mov dword [ebp + 0x68], eax
cmp eax, 1
jbe 0x46feec
cmp eax, 2
jne 0x46fee9
inc dword [ebp + 0x64]
inc dword [ebp + 0x60]
mov edi, dword [ecx + 4]
push ebx
mov ecx, esi
call fcn.00458fef
mov ecx, dword [esi + 8]
cmp edi, dword [ecx + 4]
jne 0x46fed5
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x50]
mov ebx, dword [eax]
movzx eax, word [ecx + 8]
add ebx, dword [ecx + 4]
and eax, 0xf
cmp eax, 7
ja 0x470043
je 0x47000d
test eax, eax
je 0x46ffd7
cmp eax, 3
jbe 0x46ff89
cmp eax, 4
je 0x46ff76
cmp eax, 5
je 0x46ff54
cmp eax, 6
jne 0x4701b7
push dword [ebx + 4]
mov ecx, esi
push dword [ebx]
push dword [ebp + 0x6c]
call fcn.004599ac
jmp 0x4701b7
test ebx, ebx
je 0x4701b7
cmp dword [ebx], 0
je 0x4701b7
cmp dword [ebx + 4], 0
je 0x4701b7
push dword [ebx + 4]
push dword [ebx]
jmp 0x46ff7a
push dword [ecx + 0xc]
push ebx
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.00459ae1
jmp 0x4701b7
cmp eax, 2
je 0x46ff93
cmp eax, 3
jne 0x46ff98
movzx edi, byte [ebx]
jmp 0x46ff9a
mov edi, dword [ebx]
cmp dword [ecx + 4], 0x1af
je 0x46ffc7
push ecx
call fcn.0046da16
mov ecx, eax
mov ebx, edx
mov eax, edi
cdq
cmp eax, ecx
jne 0x46ffc7
cmp edx, ebx
jne 0x46ffc7
mov ecx, esi
push dword [ebp + 0x6c]
call fcn.00458fef
jmp 0x4701b7
push edi
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.00459a1c
jmp 0x4701b7
push dword [ecx + 0x10]
lea eax, [ebp]
push eax
call fcn.004249d0
push eax
mov ecx, ebx
call fcn.00434271
push 0
push 1
lea ecx, [ebp]
mov edi, eax
call fcn.0042386b
mov ecx, esi
test edi, edi
je 0x46ffba
push ebx
push dword [ebp + 0x6c]
call fcn.00459b63
jmp 0x4701b7
push dword [ecx + 0x10]
lea eax, [ebp]
push eax
call fcn.004619ba
push eax
mov ecx, ebx
call fcn.0040b594
push 0
push 1
lea ecx, [ebp]
mov edi, eax
call fcn.0040abbf
mov ecx, esi
test edi, edi
je 0x46ffba
push ebx
push dword [ebp + 0x6c]
call fcn.00459b46
jmp 0x4701b7
sub eax, 8
je 0x47014f
sub eax, 1
je 0x470108
sub eax, 1
je 0x47007e
sub eax, 5
jne 0x4701b7
push 1
push ebx
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.00459954
push eax
mov eax, dword [ebp + 0x50]
call dword [eax + 0x18]
jmp 0x4701b7
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.00459954
mov ecx, dword [ebx]
mov dword [ebp + 0x6c], eax
mov edx, dword [ecx]
mov dword [ebp + 0x68], edx
cmp edx, ecx
je 0x4701b7
mov esi, eax
lea edi, [edx + 0x10]
push edi
lea eax, [ebp + 0x30]
push eax
call fcn.0046d9e0
lea eax, [edi + 0x18]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp]
push eax
call fcn.0046d9e0
cmp dword [ebp + 0x44], 0x10
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 0xa
jae 0x4700cc
lea eax, [ebp + 0x30]
lea ecx, [ebp]
push ecx
push eax
mov ecx, esi
call fcn.00459b46
push 0
push 1
lea ecx, [ebp]
call fcn.0040abbf
push 0
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 4
call fcn.0040abbf
lea ecx, [ebp + 0x68]
call fcn.00497d99
mov edx, dword [ebp + 0x68]
cmp edx, dword [ebx]
jne 0x47009e
jmp 0x4701b4
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.00459954
mov ecx, dword [ebx]
mov edi, eax
mov edx, dword [ecx]
mov dword [ebp + 0x68], edx
cmp edx, ecx
je 0x4701b7
cmp dword [edx + 0x24], 0x10
jb 0x470130
mov eax, dword [edx + 0x10]
jmp 0x470133
lea eax, [edx + 0x10]
push dword [edx + 0x28]
mov ecx, edi
push eax
call fcn.00459a1c
lea ecx, [ebp + 0x68]
call fcn.00497d99
mov edx, dword [ebp + 0x68]
cmp edx, dword [ebx]
jne 0x470125
jmp 0x4701b7
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.00459a89
xor edi, edi
mov dword [ebp + 0x68], eax
cmp dword [ebx + 0x10], edi
je 0x4701b7
mov esi, eax
lea ecx, [ebp + 0x34]
call fcn.00458556
push edi
mov ecx, ebx
mov byte [ebp - 4], 7
call fcn.004f2484
cmp dword [eax + 0x14], 8
jb 0x470183
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x34]
call fcn.0045a472
lea eax, [ebp + 0x34]
mov ecx, esi
push eax
call fcn.00458a12
lea ecx, [ebp + 0x34]
mov byte [ebp - 4], 8
mov dword [ebp + 0x34], 0x699c10
call fcn.0045932d
inc edi
mov byte [ebp - 4], 4
cmp edi, dword [ebx + 0x10]
jne 0x470167
mov esi, dword [ebp + 0x58]
mov eax, dword [ebp + 0x50]
add eax, 0x1c
mov ebx, dword [eax]
mov dword [ebp + 0x6c], ebx
mov dword [ebp + 0x50], eax
test ebx, ebx
jne 0x46fec9
mov ebx, dword [ebp + 0x48]
inc ebx
mov dword [ebp + 0x48], ebx
call fcn.00470a3d
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
cmp ebx, ecx
jb 0x46feb4
push 0xffffffffffffffff
push str.peakrate
mov ecx, esi
call fcn.00459954
push eax
call fcn.0048a9bd
push esi
call fcn.0048aa4f
push esi
call fcn.004cb399
push 0xffffffffffffffff
push str.apps
mov ecx, esi
call fcn.00459954
push eax
call fcn.0048a949
push 0xffffffffffffffff
push str.installs
mov ecx, esi
call fcn.00459a89
push eax
call fcn.0047f806
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.0045a170
push esi
mov byte [ebp - 4], 0xb
call fcn.004a78f5
cmp byte [0x76d70c], 0
jne 0x47026d
xor eax, eax
cmp ax, word [0x76c5e8]
je 0x47026d
push eax
push 0x76c5e8
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
mov byte [0x76d70c], 1
push 0x68fc34
lea eax, [ebp + 0x18]
push eax
call fcn.0046dfa2
mov byte [ebp - 4], 0xc
call fcn.0045d84e
push 0x14
mov dword [0x76c820], eax
mov dword [0x76c824], edx
call fcn.006291e1
pop ecx
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x4702ad
mov ecx, eax
call fcn.00425163
mov edi, eax
jmp 0x4702af
xor edi, edi
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x5c], edi
test edi, edi
je 0x4702c0
mov eax, dword [edi]
push edi
call dword [eax + 4]
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
mov byte [ebp - 4], 0xe
jae 0x4702d0
lea eax, [ebp + 0x18]
push edi
push 0x458d5f
lea ecx, [ebp - 0x3c]
push ecx
push eax
call fcn.00469263
or byte [0x76c7f0], al
mov ecx, dword [ebp + 0x64]
test ecx, ecx
je 0x47030b
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
jae 0x4702f9
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x60]
push ecx
push str.Settings_integrity_check_failed__duplicate_keys:__d_count:__d___repaired:__s
call fcn.00477256
add esp, 0x10
mov byte [ebp - 4], 0xf
test edi, edi
je 0x470319
mov eax, dword [edi]
push edi
call dword [eax + 8]
push 0
push 1
lea ecx, [ebp + 0x18]
call fcn.0042386b
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.0040abbf
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.0042386b
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 0x10
call dword [eax + 8]
pop edi
pop esi
mov dword [ebp - 4], 0x11
call fcn.00472ff8
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
lea esp, [ebp + 0x70]
pop ebp
ret