Function at 0x463600
Capabilities:
Accept command line arguments
Check os version
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x4efca4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [0x4f3bb0], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
rol ax, 8
movzx eax, ax
mov dword [0x4f3da8], eax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0x118], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x46366f
cmp dword [ebp - 0x108], 2
jne 0x46366f
cmp dword [ebp - 0x114], 5
ja 0x463665
jne 0x46366f
cmp dword [ebp - 0x110], 0
je 0x46366f
mov dword [0x4f3da4], 1
push esi
call fcn.0044bc70
mov dword [0x4f3ce4], 0x445700
mov dword [0x4f3cd4], 0x429ca0
mov dword [0x4f3cd8], 0x429cf0
mov dword [0x4f3cdc], 0x42a880
mov dword [0x4f3ce0], 0x42a950
mov dword [0x4f3ce8], 0x42a140
mov dword [0x4f3d1c], 0x42a120
mov dword [0x4f3cec], 0x42a280
mov dword [0x4f3d20], 0x42a220
mov dword [0x4f3cf0], 0x429e60
mov dword [0x4f3d24], 0x429e40
mov dword [0x4f3cf4], 0x429f50
mov dword [0x4f3d00], 0x42a310
mov dword [0x4f3d04], 0x42a4f0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
movzx ecx, word [esi]
lea edx, [esi + 2]
cmp ecx, 0x22
je 0x463716
mov edx, esi
xor eax, eax
cmp ecx, 0x22
sete al
lea eax, [eax*2 + 0x20]
push eax
push edx
call fcn.00489b42
add esp, 8
test eax, eax
je 0x463736
lea esi, [eax + 2]
mov ecx, esi
call fcn.0044c530
push 2
push 0x104
call fcn.0049277a
push 2
push 0x104
mov dword [0x4f3994], eax
call fcn.0049277a
mov ecx, dword [0x4f3994]
add esp, 0x10
mov dword [0x4f3988], eax
test ecx, ecx
je 0x463b75
test eax, eax
je 0x463b75
push edi
push 0x104
push ecx
push dword [0x4f3bb0]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edi, dword [0x4f3988]
push 2
push 0x104
call fcn.0049277a
mov esi, eax
add esp, 8
test esi, esi
je 0x4637ca
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push edi
push 0
push 0x4df41c
push esi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push esi
call fcn.00492790
add esp, 4
mov eax, dword [0x4f3988]
cmp word [eax], 0
je 0x463b74
push eax
call fcn.00494089
add esp, 4
push 0
push dword [0x4f3988]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x463b74
mov ecx, dword [0x4f3988]
call fcn.0042b110
call fcn.00409fb0
test eax, eax
jne 0x463b74
mov ecx, dword [0x4f3988]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x463820
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 1]
push eax
call fcn.0049277a
mov edx, dword [0x4f3988]
add esp, 8
mov dword [0x4f3ba8], eax
nop dword [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax], cx
lea eax, [eax + 2]
test cx, cx
jne 0x463850
mov edx, dword [0x4f3ba8]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x463870
sub ecx, esi
sar ecx, 1
cmp ecx, 3
jle 0x463893
cmp word [edx + ecx*2 - 2], 0x5c
jne 0x463893
xor eax, eax
mov word [edx + ecx*2 - 2], ax
mov dword [0x4f3d74], 0
call dword [sym.imp.MMFS2.dll_Ordinal_1055]
push dword [0x4f3ba8]
call fcn.004a6a45
mov ecx, eax
add esp, 4
mov dword [0x4f3d6c], ecx
test ecx, ecx
je 0x463aaa
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4638c4
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 0xc]
push eax
call fcn.0049277a
mov edx, dword [0x4f3d6c]
add esp, 8
mov esi, eax
sub eax, edx
nop dword [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x4638f0
cmp word [esi], cx
je 0x463943
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x463910
sub ecx, edx
sar ecx, 1
cmp word [esi + ecx*2 - 2], 0x5c
je 0x463943
lea edi, [esi - 2]
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x463930
mov eax, dword [0x4df4b0]
mov dword [edi], eax
lea ecx, [esi - 2]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x463946
mov eax, dword [str.stdrtd.txt]
mov dword [ecx], eax
mov eax, dword [0x4df824]
mov dword [ecx + 4], eax
mov eax, dword [0x4df828]
mov dword [ecx + 8], eax
mov eax, dword [0x4df82c]
mov dword [ecx + 0xc], eax
mov eax, dword [0x4df830]
mov dword [ecx + 0x10], eax
mov ax, word [0x4df834]
push 0
mov word [ecx + 0x14], ax
mov ecx, 0x4f3ec8
push esi
push dword [0x4f3bb0]
call fcn.004759e0
push esi
call fcn.00492790
add esp, 4
cmp dword [0x4f3d6c], 0
je 0x463aaa
push str.mmfs2.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
mov dword [ebp - 0x11c], edi
test edi, edi
je 0x463aaa
mov ecx, dword [0x4f3d6c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4639d0
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 0xb]
push eax
call fcn.0049277a
mov edx, dword [0x4f3d6c]
add esp, 8
mov esi, eax
sub eax, edx
nop word [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x463a00
cmp word [esi], cx
je 0x463a59
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x463a20
sub ecx, edx
sar ecx, 1
cmp word [esi + ecx*2 - 2], 0x5c
je 0x463a59
lea edi, [esi - 2]
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x463a40
mov eax, dword [0x4df4b0]
mov dword [edi], eax
mov edi, dword [ebp - 0x11c]
lea edx, [esi - 2]
nop dword [eax]
mov ax, word [edx + 2]
lea edx, [edx + 2]
test ax, ax
jne 0x463a60
mov eax, dword [str.mmfs2.txt]
mov ecx, 0x4f3ec8
mov dword [edx], eax
mov eax, dword [0x4df850]
mov dword [edx + 4], eax
mov eax, dword [0x4df854]
mov dword [edx + 8], eax
mov eax, dword [0x4df858]
push 0
mov dword [edx + 0xc], eax
mov eax, dword [0x4df85c]
push esi
push edi
mov dword [edx + 0x10], eax
call fcn.004759e0
push esi
call fcn.00492790
add esp, 4
xor esi, esi
cmp dword [0x4f1b54], esi
jne 0x463ac2
mov esi, dword [0x4f3d4c]
test esi, esi
je 0x463b74
call fcn.0044bf80
test eax, eax
jne 0x463b58
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
cmp dword [0x4f3db4], eax
jne 0x463b0a
push str.krdp
call edi
movzx eax, ax
push str.kprc
mov dword [0x4f3db4], eax
call edi
movzx eax, ax
push str.kspc
mov dword [0x4f3db0], eax
call edi
movzx eax, ax
mov dword [0x4f3dbc], eax
push str.knum
call edi
movzx eax, ax
mov dword [0x4f3db8], eax
call fcn.00429710
test eax, eax
je 0x463b74
push 0
push dword [0x4f3bb0]
call dword [sym.imp.MMFS2.dll_Ordinal_2]
mov ecx, eax
mov dword [0x4f3bac], ecx
cmp ecx, 0x20
ja 0x463b92
xor eax, eax
mov dword [0x4f3bac], 0
cmp ecx, 1
setne al
lea eax, [eax*8 + 0xf]
test eax, eax
jle 0x463b74
test byte [0x4f3d5e], 1
je 0x463b74
push ecx
mov ecx, dword [0x4f3bc0]
mov edx, eax
call fcn.0044d4a0
add esp, 4
pop edi
call fcn.0044d9c0
call fcn.0040a8b0
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
pop esi
call fcn.00488295
mov esp, ebp
pop ebp
ret 0x10
push 4
push 0x42000000
push 0
push 0
xor edx, edx
mov ecx, esi
call fcn.00403f50
mov edi, eax
add esp, 0x10
test edi, edi
je 0x463b74
call dword [sym.imp.MMFS2.dll_Ordinal_794]
push 3
push dword [0x4f3ba8]
mov ecx, eax
mov dword [0x4f3bd8], eax
call dword [sym.imp.MMFS2.dll_Ordinal_1053]
mov esi, dword [0x4f3ba8]
call dword [sym.imp.MMFS2.dll_Ordinal_795]
push 3
push esi
mov ecx, eax
mov dword [0x4f3bdc], eax
call dword [sym.imp.MMFS2.dll_Ordinal_1054]
cmp dword [0x4f3be0], 0
jne 0x463c17
mov ecx, dword [0x4f3bdc]
test ecx, ecx
je 0x463c17
push dword [0x4f3bc0]
call dword [sym.imp.MMFS2.dll_Ordinal_389]
mov dword [0x4f3be0], eax
test eax, eax
je 0x463c17
mov edx, dword [eax]
mov ecx, eax
push 0
call dword [edx + 4]
mov ecx, edi
call fcn.00407400
test eax, eax
je 0x463c36
xor edx, edx
mov ecx, edi
call fcn.00407600
test eax, eax
jne 0x463c22
mov ecx, edi
call fcn.004078d0
mov ecx, edi
call fcn.00406250
jmp 0x463b74