Function at 0x1004aa46
Capabilities:
Create directory
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a1e70
mov eax, dword fs:[0]
push eax
mov eax, 0xa138
mov dword fs:[0], esp
call fcn.1009d950
push ebx
push esi
push edi
xor eax, eax
mov esi, ecx
push 0xffe
push eax
mov word [ebp - 0x60f8], ax
lea eax, [ebp - 0x60f6]
push eax
mov dword [ebp - 0x10], esi
call fcn.1007cff0
add esp, 0xc
push dword [0x100c7608]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov dword [ebp - 0x40], ebx
test ebx, ebx
jne 0x1004a271
lea eax, [ebx + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [sym.imp.USER32.dll_CharNextW]
mov ecx, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebx + 0x60d8], 0
mov dword [ebx + 0x60dc], 0
test byte [esi + 0x14], 4
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
jne 0x1004a324
cmp dword [ebx + 0x2c], 0
jne 0x1004a324
cmp dword [ebx + 0x34], 0
jne 0x1004a324
mov eax, dword [esi + 0x10]
lea esi, [ebp - 0x60f8]
test eax, eax
je 0x1004a2fb
xor edi, edi
cmp word [eax], di
je 0x1004a2f3
mov ebx, dword [ebp - 0x18]
cmp edi, 0x800
jge 0x1004a2ed
movzx ecx, word [eax]
cmp ecx, 0x22
je 0x1004a2e4
mov word [esi], cx
add eax, 2
add esi, 2
inc edi
jmp 0x1004a2e7
push eax
call ebx
cmp word [eax], 0
jne 0x1004a2c8
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x2c]
xor eax, eax
mov word [esi], ax
lea eax, [ebp - 0x60f8]
push eax
call ecx
test eax, eax
jle 0x1004a313
cmp word [ebp + eax*2 - 0x60fa], 0x5c
je 0x1004a321
push 0x100b0dec
lea eax, [ebp - 0x60f8]
push eax
call edi
mov esi, dword [ebp - 0x10]
cmp dword [ebx + 0x88], 0
mov edi, 0x2f
jne 0x1004a345
lea eax, [ebp - 0xa140]
mov dword [esi + 0x88], eax
cmp dword [ebx + 0x88], 0
mov eax, dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0x30], eax
mov eax, dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
mov dword [ebp - 0x44], eax
mov eax, dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
mov dword [ebp - 0x1c], eax
jne 0x1004a4d8
push dword [0x100c7608]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
test esi, esi
je 0x1004b5c3
mov eax, dword [ebp - 0x10]
lea ecx, [esi + 0x90]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x88]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x20], eax
test eax, eax
je 0x1004b5c3
call fcn.1004b630
test eax, eax
jne 0x1004b5c3
mov eax, dword [esi + 0x18368]
test eax, eax
je 0x1004a3c3
push eax
call fcn.10086818
add esp, 4
mov dword [esi + 0x18368], 0
mov eax, dword [esi + 0x1a3f8]
test eax, eax
je 0x1004a3e0
push eax
call fcn.10086818
add esp, 4
mov dword [esi + 0x1a3f8], 0
xor ecx, ecx
call fcn.1004b840
mov dword [esi + 0x60f4], eax
lea ecx, [esi + 0x60f4]
mov dword [ebp - 0x38], ecx
test eax, eax
je 0x1004a427
mov ecx, dword [ebp - 0x10]
mov edx, 2
mov eax, dword [ecx + 0x14]
lea ecx, [edx + 0x70]
shr eax, 1
and eax, 1
push eax
call fcn.1004f5b0
mov esi, dword [ebp - 0x38]
mov edx, eax
mov ecx, dword [esi]
call fcn.10044c90
add esp, 4
jmp 0x1004a4cf
cmp dword [esi + 0x8224], 0
jne 0x1004a453
mov dword [esi + 0x60e8], 0
mov dword [esi + 0x60ec], 0
call fcn.10046ec0
mov edx, eax
lea ecx, [esi + 0x60f4]
jmp 0x1004a455
xor edx, edx
mov dword [ecx], edx
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
js 0x1004a7e6
mov eax, dword [esi + 0x81f2]
dec eax
cmp ecx, eax
jg 0x1004a7e6
test edx, edx
jne 0x1004a3fa
mov eax, ecx
cdq
mov dword [esi + 0x60e8], eax
mov dword [esi + 0x60ec], edx
call fcn.10046ec0
mov dword [esi + 0x60f4], eax
test eax, eax
je 0x1004a630
mov ecx, dword [ebp - 0x10]
mov edx, 2
mov eax, dword [ecx + 0x14]
lea ecx, [edx + 0x70]
shr eax, 1
and eax, 1
push eax
call fcn.1004f5b0
mov ecx, dword [esi + 0x60f4]
mov edx, eax
call fcn.10044c90
xor eax, eax
add esp, 4
mov word [esi + 0x18384], ax
add esi, 0x60f4
cmp dword [esi], 0
jne 0x1004b5c3
mov edi, dword [ebp - 0x30]
lea eax, [ebp - 0x60f8]
push 0x800
push eax
lea eax, [ebx + 0x40d2]
push eax
call edi
mov esi, dword [ebp - 0x10]
xor eax, eax
mov word [ebx + 0x50d0], ax
mov eax, dword [esi + 0x88]
add eax, 0x42
movzx ecx, word [eax]
test cx, cx
je 0x1004a533
mov ebx, dword [ebp - 0x18]
mov edx, ecx
mov edi, 0x5c
cmp dx, 0x2f
jne 0x1004a520
mov word [eax], di
push eax
call ebx
movzx ecx, word [eax]
mov edx, ecx
test cx, cx
jne 0x1004a517
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x30]
mov eax, dword [esi + 0x88]
push 0x800
add eax, 0x42
push eax
lea eax, [ebp - 0x10d4]
push eax
call edi
xor eax, eax
test byte [esi + 0x14], 8
mov word [ebp - 0xd6], ax
je 0x1004a595
mov edx, dword [esi + 0x88]
lea ecx, [ebp - 0x90f8]
add edx, 0x42
call fcn.100469c0
push 0x800
lea eax, [ebp - 0x90f8]
push eax
mov eax, dword [esi + 0x88]
add eax, 0x42
push eax
call edi
mov eax, dword [esi + 0x88]
xor ecx, ecx
mov word [eax + 0x1040], cx
mov edi, dword [esi + 0x88]
lea eax, [ebx + 0x40d2]
push eax
call dword [ebp - 0x14]
lea ecx, [ebx + 0x40d2]
mov esi, eax
push ecx
call dword [ebp - 0x14]
mov ecx, 0x800
add esi, 0x2069
sub ecx, eax
push ecx
lea ecx, [edi + 0x42]
lea eax, [ebx + esi*2]
mov esi, dword [ebp - 0x30]
push ecx
push eax
call esi
xor eax, eax
mov word [ebx + 0x50d0], ax
cmp word [ebx + 0x1fc10], 0xa
jne 0x1004a813
mov eax, dword [ebx + 0x1fc2c]
mov ecx, dword [ebx + 0x1fc30]
mov dword [ebp - 0x20f8], eax
mov dword [ebp - 0x20f4], ecx
mov eax, dword [ebx + 0x1fc1c]
mov ecx, dword [ebx + 0x1fc20]
mov dword [ebp - 0x20f0], eax
mov dword [ebp - 0x20ec], ecx
mov eax, dword [ebx + 0x1fc24]
mov ecx, dword [ebx + 0x1fc28]
mov dword [ebp - 0x20e8], eax
mov dword [ebp - 0x20e4], ecx
jmp 0x1004a85c
mov edi, dword [ebp - 0x20]
lea eax, [esi + 0x1a404]
push 0x800
push eax
lea eax, [edi + 0x42]
push eax
call dword [ebp - 0x30]
mov eax, dword [esi + 0x8240]
mov ecx, edi
cmp eax, 0xffffffff
je 0x1004a657
xor edx, edx
jmp 0x1004a663
mov eax, dword [esi + 0x825a]
mov edx, dword [esi + 0x825e]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov eax, dword [esi + 0x823c]
cmp eax, 0xffffffff
je 0x1004a678
xor ecx, ecx
jmp 0x1004a69b
cmp dword [esi + 0x8240], 0xffffffff
je 0x1004a68f
mov eax, dword [esi + 0x825a]
mov ecx, dword [esi + 0x825e]
jmp 0x1004a69b
mov eax, dword [esi + 0x8262]
mov ecx, dword [esi + 0x8266]
mov dword [edi + 0xc], eax
lea eax, [esi + 0x1a404]
mov dword [edi + 0x10], ecx
test eax, eax
je 0x1004a6d2
movzx ecx, word [eax]
test cx, cx
je 0x1004a6d2
cmp cx, 0x5c
je 0x1004a726
cmp cx, 0x2f
je 0x1004a726
add eax, 2
mov dword [ebp - 0x20], eax
movzx eax, word [eax]
mov ecx, eax
test ax, ax
mov eax, dword [ebp - 0x20]
jne 0x1004a6b3
lea ecx, [edi + 0x20]
xor eax, eax
mov edx, dword [ebp - 0x3c]
mov word [ecx], ax
movzx eax, word [esi + 0x8232]
mov word [edi + 0x1c], ax
movzx eax, word [esi + 0x8230]
mov word [edi + 0x1e], ax
mov eax, dword [esi + 0x8238]
mov dword [edi + 0x18], eax
mov dword [edi], edx
mov eax, dword [esi + 0x824e]
and eax, 0x7fff
mov dword [edi + 0x14], eax
test byte [esi + 0x8230], 1
je 0x1004a734
or eax, 0x8000
mov ecx, esi
mov dword [edi + 0x14], eax
call fcn.100479a0
jmp 0x1004a736
lea ecx, [edi + 0x20]
test eax, eax
je 0x1004a6d5
mov eax, 1
jmp 0x1004a6d7
xor eax, eax
mov ecx, edi
mov edx, 0x3e
mov dword [ecx + edx], eax
movzx ecx, word [esi + 0x822e]
movzx eax, word [esi + 0x822c]
shl ecx, 0x10
add ecx, eax
mov dword [edi + 0x3a], ecx
cmp word [esi + 0x1fc10], 0xa
jne 0x1004a7a4
mov eax, dword [esi + 0x1fc2c]
mov ecx, dword [esi + 0x1fc30]
mov dword [edi + 0x22], eax
mov dword [edi + 0x26], ecx
mov eax, dword [esi + 0x1fc1c]
mov ecx, dword [esi + 0x1fc20]
mov dword [edi + 0x2a], eax
mov dword [edi + 0x2e], ecx
mov eax, dword [esi + 0x1fc28]
mov ecx, dword [esi + 0x1fc24]
mov dword [edi + 0x32], ecx
mov dword [edi + 0x36], eax
xor eax, eax
mov word [esi + 0x18384], ax
jmp 0x1004a4d8
lea eax, [ebp - 0x24]
push eax
movzx eax, word [esi + 0x8234]
push eax
movzx eax, word [esi + 0x8236]
push eax
call dword [ebp - 0x44]
lea eax, [edi + 0x22]
push eax
lea eax, [ebp - 0x24]
push eax
call dword [ebp - 0x1c]
mov eax, dword [edi + 0x26]
mov ecx, dword [edi + 0x22]
mov dword [edi + 0x2e], eax
mov dword [edi + 0x2a], ecx
mov dword [edi + 0x32], ecx
mov dword [edi + 0x36], eax
xor eax, eax
mov word [esi + 0x18384], ax
jmp 0x1004a4d8
mov ecx, dword [ebp - 0x10]
mov edx, 2
mov eax, dword [ecx + 0x14]
lea ecx, [edx + 0x71]
shr eax, 1
and eax, 1
push eax
call fcn.1004f5b0
mov edx, eax
mov ecx, 0x19
call fcn.10044c90
add esp, 4
jmp 0x1004b5c3
lea eax, [ebp - 0x24]
push eax
movzx eax, word [ebx + 0x8234]
push eax
movzx eax, word [ebx + 0x8236]
push eax
call dword [ebp - 0x44]
lea eax, [ebp - 0x20f8]
push eax
lea eax, [ebp - 0x24]
push eax
call dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20f8]
mov eax, dword [ebp - 0x20f4]
mov dword [ebp - 0x20f0], ecx
mov dword [ebp - 0x20ec], eax
mov dword [ebp - 0x20e8], ecx
mov dword [ebp - 0x20e4], eax
mov edi, dword [ebp - 0x10]
push 0x800
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x20e0], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x20dc], eax
lea eax, [ebx + 0x40d2]
push eax
lea eax, [ebp - 0x20d4]
mov dword [ebp - 0x20d8], ecx
push eax
call esi
xor eax, eax
test byte [edi + 0x14], 4
mov word [ebp - 0x10d6], ax
jne 0x1004aed7
cmp dword [ebx + 0x2c], eax
jne 0x1004aed7
cmp dword [ebx + 0x34], eax
jne 0x1004aed7
mov eax, dword [ebx + 0x7140]
test eax, eax
je 0x1004a925
push dword [ebx + 0x7144]
lea ecx, [ebp - 0x20f8]
push ecx
call eax
cmp eax, 0xffffffff
jne 0x1004a8f8
mov dword [edi + 0x88], 0
mov eax, 0x31
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x800
lea eax, [ebp - 0x20d4]
push eax
lea eax, [ebx + 0x40d2]
push eax
call esi
xor eax, eax
mov word [ebx + 0x50d0], ax
mov ecx, dword [edi + 0x88]
mov eax, dword [ebp - 0x20e0]
mov dword [ecx + 0x14], eax
xor eax, eax
lea esi, [ebx + 0x40d2]
push 0x3a
push esi
mov word [ebp - 0x70f8], ax
mov word [ebp - 0x40f8], ax
call fcn.1007c926
mov edx, eax
add esp, 8
test edx, edx
je 0x1004a978
lea ecx, [ebp - 0x70f8]
cmp esi, edx
ja 0x1004a966
mov ax, word [esi]
add esi, 2
mov word [ecx], ax
add ecx, 2
cmp esi, edx
jbe 0x1004a956
mov edi, dword [ebp - 0x18]
xor eax, eax
push edx
mov word [ecx], ax
call edi
mov esi, eax
jmp 0x1004a9f8
cmp word [esi], 0x5c
jne 0x1004a9f5
cmp word [esi + 2], 0x5c
jne 0x1004a9f5
lea eax, [esi + 4]
push 0x5c
push eax
call fcn.1007c926
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x1004a9c0
lea edi, [ebp - 0x70f8]
cmp esi, ecx
ja 0x1004a9b3
mov ax, word [esi]
add esi, 2
mov word [edi], ax
add edi, 2
cmp esi, ecx
jbe 0x1004a9a3
xor eax, eax
push ecx
mov word [edi], ax
call dword [ebp - 0x18]
mov esi, eax
jmp 0x1004a9c3
mov edi, dword [ebp - 0x20]
push 0x5c
push esi
call fcn.1007c926
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x1004a9f5
cmp esi, ecx
jae 0x1004a9f0
jmp 0x1004a9e0
mov ax, word [esi]
add esi, 2
mov word [edi], ax
add edi, 2
cmp esi, ecx
jb 0x1004a9e0
xor eax, eax
mov word [edi], ax
mov edi, dword [ebp - 0x18]
push 0x5c
push esi
call fcn.1007ccce
mov edx, eax
add esp, 8
test edx, edx
jne 0x1004aa1a
push 0x2f
push esi
call fcn.1007ccce
mov edx, eax
add esp, 8
test edx, edx
je 0x1004aa3e
lea ecx, [ebp - 0x40f8]
cmp esi, edx
ja 0x1004aa34
mov ax, word [esi]
add esi, 2
mov word [ecx], ax
add ecx, 2
cmp esi, edx
jbe 0x1004aa24
xor eax, eax
push edx
mov word [ecx], ax
call edi
mov esi, eax
push 0x2e
push esi
call fcn.1007ccce
xor eax, eax
add esp, 8
mov word [ebp - 0x30f8], ax
mov ax, word [ebp - 0x70f8]
test ax, ax
je 0x1004aa9c
cmp ax, 0x5c
jne 0x1004aa83
cmp word [ebp - 0x70f6], ax
jne 0x1004aa83
lea eax, [ebp - 0x70f8]
push eax
lea eax, [ebp - 0x30f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1004aa9c
movzx eax, ax
push eax
lea eax, [ebp - 0x30f8]
push str._c:_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp word [ebp - 0x40f8], 0
mov esi, dword [ebp - 0x14]
je 0x1004aae2
lea eax, [ebp - 0x30f8]
push eax
call esi
test eax, eax
jle 0x1004aad1
cmp word [ebp + eax*2 - 0x30fa], 0x5c
jne 0x1004aad1
cmp word [ebp - 0x40f8], 0x5c
lea eax, [ebp - 0x40f6]
je 0x1004aad7
lea eax, [ebp - 0x40f8]
push eax
lea eax, [ebp - 0x30f8]
push eax
call dword [ebp - 0x2c]
lea eax, [ebp - 0x30f8]
push eax
lea eax, [ebp - 0x40f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x30f8]
push eax
call esi
lea ecx, [ebp - 0x30f8]
lea eax, [ebp + eax*2 - 0x30fa]
cmp eax, ecx
jb 0x1004ab41
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x1004ab2c
cmp ecx, 0x2f
je 0x1004ab2c
sub eax, 2
lea ecx, [ebp - 0x30f8]
cmp eax, ecx
jae 0x1004ab10
jmp 0x1004ab41
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebp - 0x30f8]
call fcn.1004db50
cmp eax, 0xffffffff
je 0x1004aaf6
lea eax, [ebp - 0x30f8]
push eax
lea eax, [ebp - 0x50f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x100b0dec
lea eax, [ebp - 0x50f8]
push eax
call dword [ebp - 0x2c]
lea eax, [ebp - 0x40f8]
push eax
lea eax, [ebp - 0x30f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x50f8]
push eax
call esi
mov esi, eax
lea eax, [ebp - 0x30f8]
push eax
call dword [ebp - 0x14]
cmp esi, eax
jge 0x1004ac83
lea eax, [ebp - 0x50f8]
push eax
call dword [ebp - 0x14]
lea esi, [ebp - 0x50f8]
lea esi, [esi + eax*2]
lea eax, [ebp - 0x50f8]
push eax
call dword [ebp - 0x14]
lea edx, [ebp - 0x30f8]
lea edx, [edx + eax*2]
movzx eax, word [edx]
test ax, ax
je 0x1004abde
cmp ax, 0x5c
je 0x1004abde
mov word [esi], ax
add esi, 2
push edx
call edi
mov edx, eax
movzx ecx, word [edx]
mov eax, ecx
test cx, cx
jne 0x1004abc3
xor eax, eax
lea ecx, [ebp - 0x28]
mov word [esi], ax
lea eax, [ebp - 0x50f8]
push 0xf8
push eax
call fcn.1004d280
cmp byte [ebp - 0x1e], 0
mov esi, dword [ebp - 0x24]
je 0x1004ac14
test esi, esi
je 0x1004ac1a
push esi
call fcn.10086818
add esp, 4
xor esi, esi
mov dword [ebp - 0x24], esi
jmp 0x1004ac1a
mov eax, esi
test esi, esi
jne 0x1004ac1d
mov eax, dword [ebp - 0x28]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov edi, eax
mov dword [ebp - 4], 0
test esi, esi
je 0x1004ac43
push esi
call fcn.10086818
add esp, 4
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x1004ace3
push 0x100b0dec
lea eax, [ebp - 0x50f8]
push eax
call dword [ebp - 0x2c]
mov edi, dword [ebp - 0x14]
lea eax, [ebp - 0x50f8]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x30f8]
push eax
call edi
mov edi, dword [ebp - 0x18]
cmp esi, eax
jl 0x1004ab95
lea eax, [ebx + 0x40d2]
push eax
lea eax, [ebx + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1004ad06
mov ebx, dword [ebp - 0x10]
mov edx, 2
mov eax, dword [ebx + 0x14]
lea ecx, [edx + 0x7c]
shr eax, 1
and eax, 1
push eax
call fcn.1004f5b0
mov edx, eax
mov ecx, 0x31
call fcn.10044c90
add esp, 4
mov dword [ebx + 0x88], 0
mov eax, 0x31
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x10]
mov eax, 0x1c
mov dword [ecx + 0x88], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebx + 0x40d2]
push eax
lea eax, [ebx + 0x50d2]
push eax
call esi
cmp dword [ebx + 0xc], 0
jne 0x1004aed4
lea ecx, [ebx + 0x40d2]
call fcn.1004db50
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
cmp eax, 0xffffffff
je 0x1004aed7
test byte [edi + 0x14], 2
jne 0x1004a8d8
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
test al, 0x10
jne 0x1004aecb
lea ecx, [ebx + 0x40d2]
test al, 1
push ecx
lea eax, [ebp - 0x20d4]
push eax
je 0x1004adfa
call esi
lea eax, [ebp - 0x20d4]
xor edx, edx
push eax
mov ecx, 0x80
call fcn.1004f5b0
push eax
lea eax, [ebp - 0x80f8]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x80f8]
mov edx, 0xf
push eax
push ecx
push 1
lea ecx, [edx - 7]
call fcn.1004be00
mov esi, eax
add esp, 0xc
cmp esi, 0x64
je 0x1004addb
cmp esi, 5
je 0x1004addb
cmp esi, 6
jne 0x1004ae50
jmp 0x1004ade7
mov dword [ebx + 0xc], 1
mov esi, 6
mov edx, dword [ebp - 0x1c]
lea ecx, [ebx + 0x40d2]
and edx, 0xfffffffe
call fcn.1004dc10
jmp 0x1004ae50
call esi
xor edx, edx
lea eax, [ebp - 0x20d4]
push eax
lea ecx, [edx + 0x44]
call fcn.1004f5b0
push eax
lea eax, [ebp - 0x80f8]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x80f8]
mov edx, 0xf
push eax
push ecx
push 0
lea ecx, [edx - 7]
call fcn.1004be00
mov esi, eax
add esp, 0xc
cmp esi, 0x64
je 0x1004ae44
cmp esi, 5
jne 0x1004ae50
mov dword [ebx + 0xc], 1
mov esi, 6
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_SetCursor]
cmp esi, 2
jne 0x1004ae7c
mov dword [edi + 0x88], 0
lea eax, [esi + 0x2e]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 7
je 0x1004a8d8
cmp esi, 0x65
jne 0x1004aed7
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebx + 0x40d2]
push eax
lea eax, [ebp - 0x20d4]
push eax
call esi
xor edx, edx
mov ecx, 0x8e
call fcn.1004f5b0
mov edx, eax
lea ecx, [ebp - 0x20d4]
call fcn.1004c3d0
lea eax, [ebp - 0x20d4]
push eax
lea eax, [ebx + 0x50d2]
push eax
call esi
jmp 0x1004aed7
push ecx
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x1004aed7
mov edi, dword [ebp - 0x10]
lea ecx, [ebx + 0x90]
call fcn.1004b630
test eax, eax
je 0x1004af01
mov dword [edi + 0x88], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 0x14]
xor edi, edi
shr eax, 2
and eax, 1
mov dword [ebx + 0x6108], eax
call fcn.10045e20
cmp eax, 0xffffffff
jne 0x1004af30
lea eax, [edi + 0x1d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x88], edi
jne 0x1004afb6
xor ecx, ecx
call fcn.1004b840
mov ecx, eax
mov dword [ebx + 0x60f4], ecx
test ecx, ecx
je 0x1004af51
mov edi, ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x81f2]
dec eax
cmp dword [edx + 0xc], eax
jle 0x1004af67
mov edi, 0x19
jmp 0x1004afb0
test edi, edi
jne 0x1004afb0
cmp dword [ebx + 0x8224], edi
jne 0x1004af8f
mov dword [ebx + 0x60e8], edi
mov dword [ebx + 0x60ec], edi
call fcn.10046ec0
mov edx, dword [ebp - 0x10]
mov ecx, eax
mov dword [ebx + 0x60f4], ecx
test ecx, ecx
jne 0x1004afb0
mov eax, dword [edx + 0xc]
cdq
mov dword [ebx + 0x60e8], eax
mov dword [ebx + 0x60ec], edx
call fcn.10046ec0
mov ecx, eax
mov dword [ebx + 0x60f4], ecx
cmp ecx, edi
jle 0x1004afb6
mov edi, ecx
test byte [ebx + 0x8230], 1
mov dword [ebx + 0x82b0], 0
je 0x1004afd3
mov dword [ebx + 0x82b0], 1
cmp word [ebx + 0x8232], 0x13
jbe 0x1004afe7
mov edi, 0x2a
jmp 0x1004b5c3
test edi, edi
jne 0x1004b5c3
cmp dword [ebx + 0x24], edi
jne 0x1004b005
mov dword [ebx + 0x82ac], 0xffffffff
mov dword [ebx + 0x24], 1
cmp dword [ebx + 0x82a8], 0
je 0x1004b1ce
movzx eax, word [ebx + 0x824a]
cmp eax, dword [ebx + 0x82ac]
je 0x1004b1ce
call fcn.10045da0
mov edx, dword [ebx + 0x81e2]
movzx ecx, word [ebx + 0x824a]
push ebx
lea eax, [edx + 1]
inc edx
neg edx
sbb edx, edx
inc ecx
and edx, eax
call fcn.1004cb30
add esp, 4
cmp eax, 1
je 0x1004b05f
mov edi, 0x30
call fcn.10045da0
jmp 0x1004b5c3
call fcn.10045e20
cmp eax, 0xffffffff
je 0x1004b1c4
mov ecx, ebx
call fcn.1004cc70
push 0
lea eax, [ebp - 0x34]
push eax
push 0x1e
lea esi, [ebx + 0x7158]
push esi
push dword [ebx + 0x18380]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 1
jne 0x1004b1c4
cmp dword [ebp - 0x34], 0x1e
jne 0x1004b1c4
cmp dword [esi], 0x4034b50
jne 0x1004b1c4
mov ecx, dword [ebp - 0x10]
mov edx, eax
mov ecx, dword [ecx + 0xc]
call fcn.10046000
test eax, eax
je 0x1004b13c
lea esi, [ebx + 0x1a404]
push esi
lea eax, [ebp - 0x40f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
call fcn.10045ad0
lea eax, [ebp - 0x40f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1004b141
movzx eax, word [ebx + 0x824a]
mov ecx, ebx
movzx edx, word [ebx + 0x7174]
mov dword [ebx + 0x82ac], eax
call fcn.10045c10
test eax, eax
je 0x1004b13c
cmp word [ebx + 0x7160], 0x63
jne 0x1004b133
mov eax, 0x9901
cmp word [ebx + 0x7196], ax
jne 0x1004b133
mov ax, word [ebx + 0x719f]
mov word [ebx + 0x7160], ax
xor edi, edi
call fcn.10045da0
jmp 0x1004b14e
mov edi, 3
call fcn.10045da0
test edi, edi
jne 0x1004b5c3
call fcn.10045e20
cmp eax, 0xffffffff
jne 0x1004b265
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x60f4], 9
mov dword [eax + 0x88], 0
mov eax, dword [ebx + 0x18368]
test eax, eax
je 0x1004b190
push eax
call fcn.10086818
add esp, 4
mov dword [ebx + 0x18368], 0
mov eax, dword [ebx + 0x1a3f8]
test eax, eax
je 0x1004b1ad
push eax
call fcn.10086818
add esp, 4
mov dword [ebx + 0x1a3f8], 0
mov eax, dword [ebx + 0x60f4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, 0x1d
jmp 0x1004b141
mov ecx, ebx
call fcn.1004cc70
push 0
lea eax, [ebp - 0x34]
push eax
push 0x1e
lea esi, [ebx + 0x7158]
push esi
push dword [ebx + 0x18380]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1004b1fa
cmp dword [ebp - 0x34], 0
jne 0x1004b1ff
mov edi, 3
cmp dword [esi], 0x4034b50
je 0x1004b216
mov edi, 3
call fcn.10045da0
jmp 0x1004b5c3
test edi, edi
jne 0x1004b141
call fcn.10045ad0
movzx edx, word [ebx + 0x7174]
mov ecx, ebx
call fcn.10045c10
test eax, eax
je 0x1004b207
cmp word [ebx + 0x7160], 0x63
jne 0x1004b25b
mov eax, 0x9901
cmp word [ebx + 0x7196], ax
jne 0x1004b25b
mov ax, word [ebx + 0x719f]
mov word [ebx + 0x7160], ax
call fcn.10045da0
jmp 0x1004b14e
cmp dword [ebx + 0x6108], 0
jne 0x1004b2a2
cmp dword [ebx + 0x2c], 0
je 0x1004b281
lea eax, [ebx + 0x40d2]
mov ecx, 0x84
jmp 0x1004b2c1
cmp dword [ebx + 0x34], 0
jne 0x1004b2da
lea eax, [ebx + 0x40d2]
push eax
lea eax, [ebp - 0x20d4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, 0x48
jmp 0x1004b2bb
lea eax, [ebx + 0x40d2]
push eax
lea eax, [ebp - 0x20d4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, 0x49
lea eax, [ebp - 0x20d4]
push eax
xor edx, edx
call fcn.1004f5b0
push eax
lea eax, [ebx + 0x6124]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov esi, dword [ebp - 0x10]
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 0x14]
and eax, 0x27
cmp dword [ebx + 0x7140], 0
mov dword [ebx + 0x60d4], eax
je 0x1004b379
mov eax, 0xa
mov word [ebx + 0x1fc10], ax
mov eax, dword [ebp - 0x20f8]
mov ecx, dword [ebp - 0x20f4]
mov dword [ebx + 0x1fc2c], eax
mov dword [ebx + 0x1fc30], ecx
mov eax, dword [ebp - 0x20f0]
mov ecx, dword [ebp - 0x20ec]
mov dword [ebx + 0x1fc1c], eax
mov dword [ebx + 0x1fc20], ecx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [ebp - 0x20e4]
mov dword [ebx + 0x1fc24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20f0]
mov dword [ebx + 0x1fc28], ecx
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea eax, [ebx + 0x7162]
push eax
lea eax, [ebx + 0x7164]
push eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToDosDateTime]
lea ecx, [ebx + 0x40d2]
call fcn.10050740
test eax, eax
jne 0x1004b58e
lea ecx, [ebx + 0x50d2]
mov dword [ebp - 0x1c], 1
call fcn.10048b10
mov edi, eax
mov dword [ebx + 0x60f4], edi
test edi, edi
je 0x1004b439
lea ecx, [ebx + 0x40d2]
jmp 0x1004b3c0
cmp dword [ebx + 0x82b0], 0
je 0x1004b5c3
cmp edi, 0x2c
jne 0x1004b5c3
mov eax, dword [ebx + 0x1fc04]
test eax, eax
je 0x1004b4a6
push dword [ebx + 0x1fc08]
lea edx, [ebp - 0xd0]
push dword [ebp - 0x1c]
push 0x81
push edx
push ecx
call eax
cmp eax, 1
jne 0x1004b44e
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebx + 0x82b4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebx + 0x50d2]
mov dword [ebp - 0x1c], 0
call fcn.10048b10
mov edi, eax
lea ecx, [ebx + 0x40d2]
mov dword [ebx + 0x60f4], edi
test edi, edi
jne 0x1004b3c0
mov dword [esi + 0x88], 0
mov edi, dword [ebx + 0x60f4]
jmp 0x1004b5c3
cmp eax, 2
jne 0x1004b465
mov dword [esi + 0x88], 0
lea edi, [eax + 0x2a]
jmp 0x1004b5c3
cmp eax, 0x67
jne 0x1004b47e
mov dword [ebx + 0x1fc04], 0
mov dword [ebx + 0x1fc0c], 1
mov edi, 0x31
mov dword [esi + 0x88], 0
push 0x100ab578
push ecx
push edi
xor edx, edx
lea ecx, [edi - 0x26]
call fcn.1004be00
add esp, 0xc
jmp 0x1004b5c3
cmp dword [ebx + 0x1fc0c], 0
je 0x1004b4d7
mov edi, 0x31
mov dword [esi + 0x88], 0
push 0x100ab578
push ecx
push edi
xor edx, edx
lea ecx, [edi - 0x26]
call fcn.1004be00
add esp, 0xc
jmp 0x1004b5c3
mov eax, esi
test byte [eax + 0x14], 2
jne 0x1004b569
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
lea ecx, [ebx + 0x40d2]
mov edi, eax
push ecx
lea eax, [ebp - 0x20d4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor edx, edx
lea eax, [ebp - 0x20d4]
push eax
lea ecx, [edx + 0x46]
call fcn.1004f5b0
push eax
lea eax, [ebp - 0x80f8]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x80f8]
mov edx, 1
push eax
push ecx
push 0
lea ecx, [edx + 8]
call fcn.1004be00
add esp, 0xc
mov esi, eax
push edi
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x88], 0
cmp esi, 2
jne 0x1004b573
lea edi, [esi + 0x2a]
jmp 0x1004b5c3
mov dword [eax + 0x88], 0
mov edi, 0x31
xor edx, edx
push 0x100ab578
push ecx
push edi
lea ecx, [edi - 0x26]
call fcn.1004be00
add esp, 0xc
jmp 0x1004b5c3
or dword [ebx + 0x60d4], 0x10
lea eax, [ebx + 0x40d2]
mov esi, dword [ebp - 0x14]
push eax
call esi
cmp eax, 1
jle 0x1004b5c3
lea eax, [ebx + 0x40d2]
push eax
call esi
xor ecx, ecx
mov word [ebx + eax*2 + 0x40d0], cx
mov ecx, 1
call fcn.100505d0
call fcn.10045da0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x88], 0
mov eax, dword [ebx + 0x18368]
test eax, eax
je 0x1004b5f2
push eax
call fcn.10086818
add esp, 4
mov dword [ebx + 0x18368], 0
mov eax, dword [ebx + 0x1a3f8]
test eax, eax
je 0x1004b60f
push eax
call fcn.10086818
add esp, 4
mov dword [ebx + 0x1a3f8], 0
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret