Function at 0x457b60
Capabilities:
Accept command line arguments
Check os version
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x4acca0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [0x4b0080], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
rol ax, 8
movzx eax, ax
mov dword [0x4b0278], eax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0x118], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x457bcf
cmp dword [ebp - 0x108], 2
jne 0x457bcf
cmp dword [ebp - 0x114], 5
ja 0x457bc5
jne 0x457bcf
cmp dword [ebp - 0x110], 0
je 0x457bcf
mov dword [0x4b0274], 1
push esi
call fcn.004435f0
mov dword [0x4b01b4], 0x43d9b0
mov dword [0x4b01a4], 0x425440
mov dword [0x4b01a8], 0x425490
mov dword [0x4b01ac], 0x425fd0
mov dword [0x4b01b0], 0x426080
mov dword [0x4b01b8], 0x4258e0
mov dword [0x4b01ec], 0x4258c0
mov dword [0x4b01bc], 0x4259d0
mov dword [0x4b01f0], 0x425970
mov dword [0x4b01c0], 0x425600
mov dword [0x4b01f4], 0x4255e0
mov dword [0x4b01c4], 0x4256f0
mov dword [0x4b01d0], 0x425a60
mov dword [0x4b01d4], 0x425c40
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
movzx ecx, word [esi]
lea edx, [esi + 2]
cmp ecx, 0x22
je 0x457c76
mov edx, esi
xor eax, eax
cmp ecx, 0x22
sete al
lea eax, [eax*2 + 0x20]
push eax
push edx
call fcn.00471908
add esp, 8
test eax, eax
je 0x457c96
lea esi, [eax + 2]
mov ecx, esi
call fcn.00443b20
push 2
push 0x104
call fcn.00474099
push 2
push 0x104
mov dword [0x4afe64], eax
call fcn.00474099
mov ecx, dword [0x4afe64]
add esp, 0x10
mov dword [0x4afe58], eax
test ecx, ecx
je 0x4580d5
test eax, eax
je 0x4580d5
push edi
push 0x104
push ecx
push dword [0x4b0080]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edi, dword [0x4afe58]
push 2
push 0x104
call fcn.00474099
mov esi, eax
add esp, 8
test esi, esi
je 0x457d2a
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push edi
push 0
push 0x49d360
push esi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push esi
call fcn.004740af
add esp, 4
mov eax, dword [0x4afe58]
cmp word [eax], 0
je 0x4580d4
push eax
call fcn.0047529a
add esp, 4
push 0
push dword [0x4afe58]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x4580d4
mov ecx, dword [0x4afe58]
call fcn.00426b50
call fcn.004082b0
test eax, eax
jne 0x4580d4
mov ecx, dword [0x4afe58]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457d80
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 1]
push eax
call fcn.00474099
mov edx, dword [0x4afe58]
add esp, 8
mov dword [0x4b0078], eax
nop dword [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax], cx
lea eax, [eax + 2]
test cx, cx
jne 0x457db0
mov edx, dword [0x4b0078]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457dd0
sub ecx, esi
sar ecx, 1
cmp ecx, 3
jle 0x457df3
cmp word [edx + ecx*2 - 2], 0x5c
jne 0x457df3
xor eax, eax
mov word [edx + ecx*2 - 2], ax
mov dword [0x4b0244], 0
call dword [sym.imp.MMFS2.dll_Ordinal_1055]
push dword [0x4b0078]
call fcn.00477d68
mov ecx, eax
add esp, 4
mov dword [0x4b023c], ecx
test ecx, ecx
je 0x45800a
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457e24
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 0xc]
push eax
call fcn.00474099
mov edx, dword [0x4b023c]
add esp, 8
mov esi, eax
sub eax, edx
nop dword [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x457e50
cmp word [esi], cx
je 0x457ea3
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457e70
sub ecx, edx
sar ecx, 1
cmp word [esi + ecx*2 - 2], 0x5c
je 0x457ea3
lea edi, [esi - 2]
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x457e90
mov eax, dword [0x49d3f4]
mov dword [edi], eax
lea ecx, [esi - 2]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x457ea6
mov eax, dword [str.stdrtd.txt]
mov dword [ecx], eax
mov eax, dword [0x49d734]
mov dword [ecx + 4], eax
mov eax, dword [0x49d738]
mov dword [ecx + 8], eax
mov eax, dword [0x49d73c]
mov dword [ecx + 0xc], eax
mov eax, dword [0x49d740]
mov dword [ecx + 0x10], eax
mov ax, word [0x49d744]
push 0
mov word [ecx + 0x14], ax
mov ecx, 0x4b0398
push esi
push dword [0x4b0080]
call fcn.00465390
push esi
call fcn.004740af
add esp, 4
cmp dword [0x4b023c], 0
je 0x45800a
push str.mmfs2.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
mov dword [ebp - 0x11c], edi
test edi, edi
je 0x45800a
mov ecx, dword [0x4b023c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457f30
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 0xb]
push eax
call fcn.00474099
mov edx, dword [0x4b023c]
add esp, 8
mov esi, eax
sub eax, edx
nop word [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x457f60
cmp word [esi], cx
je 0x457fb9
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457f80
sub ecx, edx
sar ecx, 1
cmp word [esi + ecx*2 - 2], 0x5c
je 0x457fb9
lea edi, [esi - 2]
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x457fa0
mov eax, dword [0x49d3f4]
mov dword [edi], eax
mov edi, dword [ebp - 0x11c]
lea edx, [esi - 2]
nop dword [eax]
mov ax, word [edx + 2]
lea edx, [edx + 2]
test ax, ax
jne 0x457fc0
mov eax, dword [str.mmfs2.txt]
mov ecx, 0x4b0398
mov dword [edx], eax
mov eax, dword [0x49d760]
mov dword [edx + 4], eax
mov eax, dword [0x49d764]
mov dword [edx + 8], eax
mov eax, dword [0x49d768]
push 0
mov dword [edx + 0xc], eax
mov eax, dword [0x49d76c]
push esi
push edi
mov dword [edx + 0x10], eax
call fcn.00465390
push esi
call fcn.004740af
add esp, 4
xor esi, esi
cmp dword [0x4aea24], esi
jne 0x458022
mov esi, dword [0x4b021c]
test esi, esi
je 0x4580d4
call fcn.004436d0
test eax, eax
jne 0x4580b8
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
cmp dword [0x4b0284], eax
jne 0x45806a
push str.krdp
call edi
movzx eax, ax
push str.kprc
mov dword [0x4b0284], eax
call edi
movzx eax, ax
push str.kspc
mov dword [0x4b0280], eax
call edi
movzx eax, ax
mov dword [0x4b028c], eax
push str.knum
call edi
movzx eax, ax
mov dword [0x4b0288], eax
call fcn.00424fb0
test eax, eax
je 0x4580d4
push 0
push dword [0x4b0080]
call dword [sym.imp.MMFS2.dll_Ordinal_2]
mov ecx, eax
mov dword [0x4b007c], ecx
cmp ecx, 0x20
ja 0x4580f2
xor eax, eax
mov dword [0x4b007c], 0
cmp ecx, 1
setne al
lea eax, [eax*8 + 0xf]
test eax, eax
jle 0x4580d4
test byte [0x4b022e], 1
je 0x4580d4
push ecx
mov ecx, dword [0x4b0090]
mov edx, eax
call fcn.00444970
add esp, 4
pop edi
call fcn.00444e60
call fcn.00408a00
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
pop esi
call fcn.004705b7
mov esp, ebp
pop ebp
ret 0x10
push 4
push 0x42000000
push 0
push 0
xor edx, edx
mov ecx, esi
call fcn.004031c0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x4580d4
call dword [sym.imp.MMFS2.dll_Ordinal_794]
push 3
push dword [0x4b0078]
mov ecx, eax
mov dword [0x4b00a8], eax
call dword [sym.imp.MMFS2.dll_Ordinal_1053]
mov esi, dword [0x4b0078]
call dword [sym.imp.MMFS2.dll_Ordinal_795]
push 3
push esi
mov ecx, eax
mov dword [0x4b00ac], eax
call dword [sym.imp.MMFS2.dll_Ordinal_1054]
cmp dword [0x4b00b0], 0
jne 0x458177
mov ecx, dword [0x4b00ac]
test ecx, ecx
je 0x458177
push dword [0x4b0090]
call dword [sym.imp.MMFS2.dll_Ordinal_389]
mov dword [0x4b00b0], eax
test eax, eax
je 0x458177
mov edx, dword [eax]
mov ecx, eax
push 0
call dword [edx + 4]
mov ecx, edi
call fcn.00406380
test eax, eax
je 0x458196
xor edx, edx
mov ecx, edi
call fcn.00406580
test eax, eax
jne 0x458182
mov ecx, edi
call fcn.004067e0
mov ecx, edi
call fcn.00405370
jmp 0x4580d4