Function at 0x4b6e10
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f24e3
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x578
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x53c], ecx
mov eax, dword [ebx + 8]
lea esi, [ecx + 0x14a8]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x558], esi
call fcn.0043e530
test al, al
jne 0x4b6e7c
xor eax, eax
jmp 0x4b7b38
mov edi, dword [ecx + 0x14e4]
lea eax, [ebp - 0x2e8]
push 0x270
push 0
push eax
call fcn.00420090
add esp, 8
mov ecx, edi
push 0
call fcn.005c5730
push eax
push 0xffffffffffffffff
push SysReAllocString
push 0
push 0
push 0x163
push 0x190
push 0x62439c
push str.QUM_MsgBox
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005c6220
push 0
push str.Arial
push 1
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2e8]
movsd xmm1, qword [0x6edaf8]
push 0x190
call fcn.005c42b0
push 0
lea ecx, [ebp - 0x2e8]
call fcn.005c5730
mov esi, eax
mov eax, dword [ebp - 0x53c]
push 4
push 6
mov ecx, dword [eax + 0x54]
or ecx, 0xff000000
push ecx
push ecx
mov ecx, dword [eax + 0x60]
or ecx, 0xff000000
push ecx
push 0x163
push 0x190
lea ecx, [ebp - 0x2e8]
call fcn.005b9530
push 0
push 0
mov ecx, edi
call fcn.005c5730
mov edx, eax
mov ecx, esi
call fcn.005d3010
push esi
mov ecx, edi
call fcn.005c6150
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x5c]
movq qword [ebp - 0x5c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x50]
movq qword [ebp - 0x50], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
movq qword [ebp - 0x2c], xmm0
lea ecx, [ebp - 0x2c]
call fcn.005dc5e0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.0059ceb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Default_Pictures
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.user.bmp
lea ecx, [ebp - 0x2c]
call fcn.005da780
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4b70ad
sub esp, 8
mov dword [ebp - 0x18], eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x20], xmm0
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str..bmp
call fcn.005dc190
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc520
lea eax, [ebp - 0x538]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x4b70a1
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x50c]
push eax
push 0x624284
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc200
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.005dc430
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x5c]
call fcn.005db9a0
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Shell32.dll
lea ecx, [ebp - 0x5c]
call fcn.005da780
sub esp, 0x1c
lea ecx, [ebp - 0x5c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2e8]
call fcn.005c0bf0
push 0xffffffffffffffff
push 0x10000001
push 0x19
push 0x138
push 0x14
push 0x44
push str.Create_user_account
lea ecx, [ebp - 0x2e8]
call fcn.005c0890
movsd xmm0, qword [0x6edb38]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x320
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
call fcn.005beb10
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xa0
push 0x48
push 0x14
push str.Account_name:
lea ecx, [ebp - 0x2e8]
call fcn.005c0890
push 0
push 0x10800080
push 0x14
push 0xc3
push 0x46
push 0xb9
push 0
lea ecx, [ebp - 0x2e8]
call fcn.005c0a40
push 0
push 0x28
push 0xc5
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x560], eax
call fcn.005befd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xa0
push 0x67
push 0x14
push str.Account_type:
lea ecx, [ebp - 0x2e8]
call fcn.005c0890
sub esp, 8
push 0x10000003
push 0x14
push 0xc3
push 0x64
push 0xb9
push str.Guest_nStandard_user_nAdministrator
lea ecx, [ebp - 0x2e8]
call fcn.005c1650
push 0
push 1
push 0x14e
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x55c], eax
call fcn.005befd0
mov ecx, dword [ebp - 0x53c]
movsd xmm0, qword [ecx + 8]
comisd xmm0, xmmword [0x6edb10]
jbe 0x4b7231
push 0x800
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
call fcn.005bda80
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xa0
push 0x8e
push 0x14
push str.Password__optional_:
lea ecx, [ebp - 0x2e8]
call fcn.005c0890
push 0
push 0x108000a0
push 0x14
push 0xc3
push 0x8c
push 0xb9
push 0
lea ecx, [ebp - 0x2e8]
call fcn.005c0a40
push 0
push 0x28
push 0xc5
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x580], eax
call fcn.005befd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xa0
push 0xac
push 0x14
push str.Password_again__optional_:
lea ecx, [ebp - 0x2e8]
call fcn.005c0890
push 0
push 0x108000a0
push 0x14
push 0xc3
push 0xaa
push 0xb9
push 0
lea ecx, [ebp - 0x2e8]
call fcn.005c0a40
push 0
push 0x28
push 0xc5
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x584], eax
call fcn.005befd0
push 0x10
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov esi, eax
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x568], esi
mov byte [ebp - 4], 6
test esi, esi
je 0x4b734f
xorps xmm0, xmm0
lea ecx, [ebp - 0x2c]
movups xmmword [esi], xmm0
call fcn.005dc190
lea ecx, [ebp - 0x53c]
mov dword [esi], vtable.Gdiplus::Bitmap.0
push ecx
push eax
mov dword [ebp - 0x53c], 0
call dword [sym.imp.gdiplus.dll_GdipCreateBitmapFromFile]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x53c]
mov dword [esi + 4], eax
jmp 0x4b7357
xor esi, esi
mov dword [ebp - 0x554], esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x6e
push 0xe6
push 0x14
push str.User_picture:
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 4
xor edi, edi
call fcn.005c0890
push ecx
push 0x10800040
push 0x30
push 0x30
push 0xd2
push 0x7d
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x16
push 0x50
push 0xd2
push 0xc3
push str.Browse...
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x53c], eax
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x16
push 0x46
push 0xd2
push 0x12c
push str.Default
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x570], eax
call fcn.005c1a50
sub esp, 8
mov dword [ebp - 0x574], eax
lea ecx, [ebp - 0x2e8]
push 0x12
push 0x46
push 0xf2
push 0xb9
push str.Center
call fcn.005bfec0
sub esp, 8
mov dword [ebp - 0x578], eax
lea ecx, [ebp - 0x2e8]
push 0x12
push 0x41
push 0xf2
push 0xff
push str.Crop
call fcn.005bfec0
push 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x54c], eax
call fcn.005bd3f0
sub esp, 8
lea ecx, [ebp - 0x2e8]
push 0x12
push 0x46
push 0xf2
push 0x140
push str.Stretch
call fcn.005bfec0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x168
push 0x11d
push 0x14
push edi
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x550], eax
call fcn.005c0890
push ecx
push 0x10000001
push 0x19
push 0x78
push 0x13e
push 0x37
mov esi, eax
lea ecx, [ebp - 0x2e8]
push str.Create_account
mov dword [ebp - 0x544], esi
call fcn.005c1a50
push 0x186a0
push ecx
push str.Create_the_user_account_now.
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x57c], eax
call fcn.005bcaf0
push ecx
push 0xffffffffffffffff
push 0x19
push 0x50
push 0x13e
push 0xff
push str.Cancel
lea ecx, [ebp - 0x2e8]
call fcn.005c1a50
push 0x186a0
push ecx
push str.Cancel_this_operation.
push 0xffffffffffffffff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x56c], eax
call fcn.005bcaf0
push 1
push 5
lea ecx, [ebp - 0x2e8]
call fcn.005c3f80
push 0x80
push dword [ebp - 0x560]
lea ecx, [ebp - 0x2e8]
call fcn.005bd3f0
xorps xmm0, xmm0
mov dword [ebp - 0x564], 3
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x30], edi
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x60], edi
lea ecx, [ebp - 0x68]
movq qword [ebp - 0x68], xmm0
call fcn.005dc5e0
mov ecx, dword [ebp - 0x558]
xor dl, dl
mov byte [ebp - 4], 8
call fcn.005c8820
test eax, eax
je 0x4b7ae7
mov edx, dword [ebp - 0x558]
mov eax, dword [edx]
cmp eax, 0xfffffffa
je 0x4b7adb
lea ecx, [ebp - 0x2e8]
cmp dword [edx + 0x30], ecx
jne 0x4b7a56
cmp eax, dword [ebp - 0x56c]
je 0x4b7adb
cmp eax, dword [ebp - 0x570]
jne 0x4b775b
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x20]
movq qword [ebp - 0x20], xmm0
call fcn.005dc5e0
push 0
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 9
call fcn.005c5730
push eax
push 0x628668
push 0
push 0x801008
push 0x6991d0
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
mov edx, str.Select_user_picture_file
lea ecx, [ebp - 0x20]
call fcn.005e1e60
test al, al
jne 0x4b7620
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x4b7a56
test edi, edi
je 0x4b762c
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax]
push 0x10
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov edi, eax
mov dword [ebp - 0x588], edi
mov byte [ebp - 4], 0xa
test edi, edi
je 0x4b767e
xorps xmm0, xmm0
lea ecx, [ebp - 0x20]
movups xmmword [edi], xmm0
call fcn.005dc190
lea ecx, [ebp - 0x540]
mov dword [edi], vtable.Gdiplus::Bitmap.0
push ecx
push eax
mov dword [ebp - 0x540], 0
call dword [sym.imp.gdiplus.dll_GdipCreateBitmapFromFile]
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x540]
mov dword [edi + 4], eax
jmp 0x4b7680
xor edi, edi
mov esi, 4
mov byte [ebp - 4], 9
push esi
push dword [ebp - 0x54c]
lea ecx, [ebp - 0x2e8]
call fcn.005bc500
test eax, eax
je 0x4b76a6
mov esi, 8
jmp 0x4b76c0
push 4
push dword [ebp - 0x550]
lea ecx, [ebp - 0x2e8]
call fcn.005bc500
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov eax, dword [edi + 8]
mov dword [edi + 8], 0
test eax, eax
jne 0x4b7720
push 0xffffffffffffffff
push esi
push 0x30
lea edx, [eax + 0x30]
mov ecx, edi
call fcn.005d2bc0
mov esi, eax
test esi, esi
je 0x4b7720
push 0
push 0
push esi
push 0
push dword [ebp - 0x53c]
lea ecx, [ebp - 0x2e8]
call fcn.005be310
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x50]
call fcn.005dc4e0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x4b7a50
mov esi, dword [ebp - 0x544]
lea ecx, [ebp - 0x2e8]
push 0
push str.The_picture_file_you_selected_is_not_valid.
push esi
call fcn.005bcd30
push 0xff
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005bec70
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x4b7a56
cmp eax, dword [ebp - 0x574]
jne 0x4b7795
push 0x30
push 0x30
push dword [ebp - 0x554]
lea ecx, [ebp - 0x2e8]
push 0
push dword [ebp - 0x53c]
call fcn.005be310
test al, al
je 0x4b7a56
lea ecx, [ebp - 0x50]
call fcn.005dc400
jmp 0x4b7a56
mov edx, dword [ebp - 0x54c]
cmp eax, dword [ebp - 0x578]
je 0x4b79d2
cmp eax, edx
je 0x4b79d2
cmp eax, dword [ebp - 0x550]
je 0x4b79d2
cmp eax, dword [ebp - 0x57c]
jne 0x4b7a56
push 0
push str.Creating_the_user_account__please_wait...
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005bcd30
push 0x9000
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005bec70
push dword [ebp - 0x560]
lea ecx, [ebp - 0x2e8]
call fcn.005bc230
mov ecx, dword [ebp - 0x548]
push eax
call fcn.005dc1c0
mov ecx, dword [ebp - 0x548]
call fcn.005dc3a0
mov dword [ebp - 0x540], eax
test eax, eax
jne 0x4b7828
push eax
push str.The__Account_name__field_is_empty.
jmp 0x4b79b0
mov ecx, dword [ebp - 0x548]
call fcn.005dc190
mov ecx, eax
xor esi, esi
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x568], ecx
test eax, eax
jle 0x4b78f4
nop dword [eax + eax]
movzx edx, word [ecx + esi*2]
mov ecx, str.____:____
nop dword [eax]
cmp dx, word [ecx]
je 0x4b787d
add ecx, 2
cmp ecx, 0x699aec
jl 0x4b7860
inc esi
cmp esi, eax
jge 0x4b78f4
mov ecx, dword [ebp - 0x568]
jmp 0x4b7850
sub esp, 8
mov dword [ebp - 0x6c], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x74]
movq qword [ebp - 0x74], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.____:____
push str.The_user_name_can_not_have_these_characters:
call fcn.005dc520
push 0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xb
call fcn.005dc190
mov esi, dword [ebp - 0x544]
lea ecx, [ebp - 0x2e8]
push eax
push esi
call fcn.005bcd30
push 0xa0
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005bec70
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x4b7a56
push dword [ebp - 0x580]
lea ecx, [ebp - 0x2e8]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
push dword [ebp - 0x584]
lea ecx, [ebp - 0x2e8]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x68]
call fcn.005dc1c0
lea ecx, [ebp - 0x68]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc4c0
lea ecx, [ebp - 0x2e8]
push 0
test al, al
jne 0x4b7952
mov esi, dword [ebp - 0x544]
push str.The_passwords_you_specified_are_not_equal.
jmp 0x4b79b6
push 0
push 0x147
push dword [ebp - 0x55c]
call fcn.005befd0
mov esi, eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x564], esi
call fcn.005dc3a0
test eax, eax
je 0x4b7982
lea ecx, [ebp - 0x38]
call fcn.005dc190
jmp 0x4b7984
xor eax, eax
push ecx
mov ecx, dword [ebp - 0x548]
push eax
push esi
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.0059e5c0
test al, al
jne 0x4b7a6d
mov esi, dword [ebp - 0x544]
push 0
push str.Sorry__the_user_account_could_not_be_created.
lea ecx, [ebp - 0x2e8]
push esi
call fcn.005bcd30
push 0xa0
push esi
lea ecx, [ebp - 0x2e8]
call fcn.005bec70
jmp 0x4b7a56
lea ecx, [ebp - 0x50]
call fcn.005dbeb0
test al, al
jne 0x4b7a56
test edi, edi
je 0x4b7a56
mov esi, 4
lea ecx, [ebp - 0x2e8]
push esi
push edx
call fcn.005bc500
test eax, eax
je 0x4b79ff
mov esi, 8
jmp 0x4b7a19
push 4
push dword [ebp - 0x550]
lea ecx, [ebp - 0x2e8]
call fcn.005bc500
xor ecx, ecx
test eax, eax
cmovne esi, ecx
push 0xffffffffffffffff
push esi
push 0x30
mov edx, 0x30
mov ecx, edi
call fcn.005d2bc0
push 0
push 0
mov esi, eax
lea ecx, [ebp - 0x2e8]
push esi
push 0
push dword [ebp - 0x53c]
call fcn.005be310
test esi, esi
je 0x4b7a50
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov esi, dword [ebp - 0x544]
mov ecx, dword [ebp - 0x558]
xor dl, dl
call fcn.005c8820
test eax, eax
jne 0x4b7583
jmp 0x4b7adb
lea ecx, [ebp - 0x50]
call fcn.005dbeb0
test al, al
mov ecx, edi
mov esi, 4
cmovne ecx, dword [ebp - 0x554]
push esi
push dword [ebp - 0x54c]
mov dword [ebp - 0x55c], ecx
lea ecx, [ebp - 0x2e8]
call fcn.005bc500
test eax, eax
je 0x4b7aa8
mov esi, 8
jmp 0x4b7ac2
push 4
push dword [ebp - 0x550]
lea ecx, [ebp - 0x2e8]
call fcn.005bc500
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov ecx, dword [ebp - 0x548]
push esi
call fcn.005dc190
mov edx, dword [ebp - 0x55c]
mov ecx, eax
call fcn.0059ac30
test edi, edi
je 0x4b7ae7
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax]
mov ecx, dword [ebp - 0x554]
test ecx, ecx
je 0x4b7af7
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [ebp - 0x68]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x44]
call fcn.005dc430
lea ecx, [ebp - 0x50]
call fcn.005dc430
lea ecx, [ebp - 0x5c]
call fcn.005dc430
lea ecx, [ebp - 0x2e8]
call fcn.005c1c60
mov eax, dword [ebp - 0x564]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4