Function at 0x527a1a
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61faa5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbf8
push esi
push edi
and dword [ebp - 0xb58], 0
and dword [ebp - 0x14], 0
mov dword [ebp - 0x2b0], 0x6bffb0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xb5c], eax
push dword [ebp - 0xb5c]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 4], 1
xor eax, eax
je 0x527a77
jmp 0x527bf6
call fcn.00527566
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x73c]
push eax
mov ecx, dword [0x6bffac]
call fcn.00529404
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x6bffac]
mov eax, dword [eax + 4]
mov dword [ebp - 0xb80], eax
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x740]
neg eax
sbb eax, eax
inc eax
movzx eax, al
test eax, eax
je 0x527be3
push 0x208
push 0
lea eax, [ebp - 0xb54]
push eax
call fcn.005f7e70
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x94c], eax
lea edi, [ebp - 0x948]
mov ecx, 0x82
lea esi, [ebp - 0xb54]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [0x6bffac]
call fcn.0052921e
movzx eax, byte [ebp - 0x2b4]
test eax, eax
jne 0x527bd2
mov dword [ebp - 0x2c4], 0x6575cc
mov dword [ebp - 0x2c0], 0x6575cc
mov dword [ebp - 0x2bc], 0x6575cc
mov byte [ebp - 4], 2
mov eax, dword [ebp + 8]
mov dword [eax], 0x6575cc
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0x6575cc
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0x6575cc
push dword [ebp - 0x2c0]
push dword [ebp - 0x2c4]
mov ecx, dword [ebp + 8]
call fcn.00403670
mov eax, dword [ebp - 0xb58]
or eax, 1
mov dword [ebp - 0xb58], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2c4], 0x6575cc
je 0x527bae
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0xb8c], eax
push dword [ebp - 0xb8c]
call fcn.005f7371
pop ecx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xb90], eax
push dword [ebp - 0xb90]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp + 8]
jmp 0x528538
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
and word [eax + 0x10], 0
mov esi, dword [ebp - 0x14]
add esi, 0x10
mov ecx, 0x82
lea edi, [ebp - 0x24c]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xb94], eax
push dword [ebp - 0xb94]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
and dword [ebp - 0x2ac], 0
push 0x54
push 0
lea eax, [ebp - 0x2a8]
push eax
call fcn.005f7e70
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0x800000ff
xor ecx, ecx
cmp eax, 5
setge cl
mov byte [ebp - 0x25], cl
movzx eax, byte [ebp - 0x25]
neg eax
sbb eax, eax
and eax, 0xc
add eax, 0x4c
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2a8], eax
and dword [ebp - 0x29c], 0
and dword [ebp - 0x294], 0
and dword [ebp - 0x288], 0
and dword [ebp - 0x280], 0
mov dword [ebp - 0x278], 0x880806
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x527c9e
mov eax, dword [ebp - 0x278]
or eax, 2
mov dword [ebp - 0x278], eax
jmp 0x527caf
mov eax, dword [ebp - 0x278]
or eax, 0x1000
mov dword [ebp - 0x278], eax
lea ecx, [ebp - 0x40]
call fcn.00527150
mov dword [ebp - 4], 3
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x2c], eax
or dword [ebp - 0x250], 0xffffffff
or dword [ebp - 0x10], 0xffffffff
cmp dword [ebp + 0x24], 0
je 0x527fef
and dword [ebp - 0x2c8], 0
and dword [ebp - 0x2cc], 0
jmp 0x527cfc
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
imul eax, eax, 0x14
mov ecx, dword [ebp + 0x24]
cmp dword [ecx + eax], 0
je 0x527fa1
mov eax, dword [ebp - 0x2cc]
imul eax, eax, 0x14
add eax, dword [ebp + 0x24]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2cc]
shl eax, 4
add eax, 0x3e8
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d4], 0
je 0x527db1
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0xbc8]
add eax, 2
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xbc8]
mov ax, word [eax]
mov word [ebp - 0xbce], ax
add dword [ebp - 0xbc8], 2
cmp word [ebp - 0xbce], 0
jne 0x527d6b
mov eax, dword [ebp - 0xbc8]
sub eax, dword [ebp - 0xbcc]
sar eax, 1
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0xbd4]
shl eax, 2
mov dword [ebp - 0xbd8], eax
jmp 0x527db8
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2cc]
imul eax, eax, 0x14
mov ecx, dword [ebp + 0x24]
mov eax, dword [ecx + eax]
mov dword [ebp - 0xbdc], eax
cmp dword [ebp - 0xbdc], 1
je 0x527e24
cmp dword [ebp - 0xbdc], 2
je 0x527e60
cmp dword [ebp - 0xbdc], 3
je 0x527eb6
cmp dword [ebp - 0xbdc], 4
je 0x527f1a
cmp dword [ebp - 0xbdc], 5
je 0x527f58
cmp dword [ebp - 0xbdc], 6
je 0x527f7b
jmp 0x527f9c
push dword [ebp - 0x2d4]
push 0xc
mov eax, dword [ebp - 0x2dc]
add eax, 0xa
push eax
push dword [ebp - 0x2c8]
push 5
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x40]
call fcn.00527424
mov eax, dword [ebp - 0x2c8]
add eax, 0xc
mov dword [ebp - 0x2c8], eax
jmp 0x527f9c
push dword [ebp - 0x2d4]
push 0xc
push dword [ebp - 0x2dc]
push dword [ebp - 0x2c8]
push 5
push 0
lea ecx, [ebp - 0x40]
call fcn.00527357
push 0xc
push 0x32
push dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x2dc]
add eax, 9
push eax
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x40]
call fcn.005274f1
mov eax, dword [ebp - 0x2c8]
add eax, 0xc
mov dword [ebp - 0x2c8], eax
jmp 0x527f9c
push dword [ebp - 0x2d4]
push 0xc
mov eax, dword [ebp - 0x2dc]
add eax, 0xa
push eax
mov eax, dword [ebp - 0x2c8]
inc eax
push eax
push 5
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x40]
call fcn.00527424
push 0xc
push 0x32
mov eax, dword [ebp - 0x2c8]
inc eax
push eax
mov eax, dword [ebp - 0x2dc]
add eax, 0x13
push eax
mov eax, dword [ebp - 0x2d0]
inc eax
push eax
lea ecx, [ebp - 0x40]
call fcn.005274f1
mov eax, dword [ebp - 0x2c8]
add eax, 0xe
mov dword [ebp - 0x2c8], eax
jmp 0x527f9c
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x278]
and eax, 0xfffffffb
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp + 0x28]
cmp dword [ecx + eax*4], 0
je 0x527f56
mov eax, dword [ebp - 0x278]
or eax, 1
mov dword [ebp - 0x278], eax
jmp 0x527f9c
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax + 4]
mov ecx, dword [ebp + 0x28]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x294], eax
jmp 0x527f9c
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax + 4]
mov ecx, dword [ebp + 0x28]
cmp dword [ecx + eax*4], 0
jne 0x527f9c
mov eax, dword [ebp - 0x278]
and eax, 0xfffffffd
mov dword [ebp - 0x278], eax
jmp 0x527cef
cmp dword [ebp - 0x2c8], 0
jle 0x527fef
mov eax, dword [ebp - 0x278]
or eax, 0xa0
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xb9c], eax
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x268], 0x528546
lea eax, [ebp - 0x30]
mov dword [ebp - 0x26c], eax
mov byte [ebp - 0x15], 0
movzx eax, word [ebp - 0x24c]
test eax, eax
je 0x528083
lea eax, [ebp - 0x24c]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0xbe0]
add eax, 2
mov dword [ebp - 0xbe4], eax
mov eax, dword [ebp - 0xbe0]
mov ax, word [eax]
mov word [ebp - 0xbe6], ax
add dword [ebp - 0xbe0], 2
cmp word [ebp - 0xbe6], 0
jne 0x52801d
mov eax, dword [ebp - 0xbe0]
sub eax, dword [ebp - 0xbe4]
sar eax, 1
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0xbec]
mov ax, word [ebp + eax*2 - 0x24e]
mov word [ebp - 0x2e0], ax
movzx eax, word [ebp - 0x2e0]
cmp eax, 0x5c
je 0x528083
movzx eax, word [ebp - 0x2e0]
cmp eax, 0x3a
je 0x528083
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x24], 0x6575cc
mov dword [ebp - 0x20], 0x6575cc
mov dword [ebp - 0x1c], 0x6575cc
mov byte [ebp - 4], 4
mov byte [ebp - 0x26], 0
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
jge 0x5282ae
push dword [ebp + 0x1c]
call fcn.00527108
pop ecx
push eax
push dword [ebp + 0x1c]
lea eax, [ebp - 0x3f8]
push eax
call fcn.0051b523
add esp, 0xc
mov byte [ebp - 4], 5
push 0xffffffffffffffff
push dword [ebp + 0x20]
lea eax, [ebp - 0x404]
push eax
call fcn.0051b523
add esp, 0xc
mov byte [ebp - 4], 6
push 0xffffffffffffffff
push dword [ebp + 0x18]
lea eax, [ebp - 0x418]
push eax
call fcn.0051b523
add esp, 0xc
mov byte [ebp - 4], 7
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x528125
push 0xffffffffffffffff
lea eax, [ebp - 0x24c]
push eax
push 0x104
lea eax, [ebp - 0x524]
push eax
call fcn.0051b424
add esp, 0x10
jmp 0x528149
mov byte [ebp - 0x524], 0
push 0xffffffffffffffff
lea eax, [ebp - 0x24c]
push eax
push 0x104
lea eax, [ebp - 0x3ec]
push eax
call fcn.0051b424
add esp, 0x10
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x524]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], 0x104
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x270], eax
movzx eax, byte [ebp - 0x15]
neg eax
sbb eax, eax
not eax
lea ecx, [ebp - 0x3ec]
and eax, ecx
mov dword [ebp - 0x280], eax
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x5281b0
mov eax, dword [sym.imp.comdlg32.dll_GetSaveFileNameA]
mov dword [ebp - 0xbf0], eax
jmp 0x5281bb
mov eax, dword [sym.imp.comdlg32.dll_GetOpenFileNameA]
mov dword [ebp - 0xbf0], eax
mov eax, dword [ebp - 0xbf0]
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x2ac]
push eax
call dword [ebp - 0x40c]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
jne 0x528207
call dword [sym.imp.comdlg32.dll_CommDlgExtendedError]
test eax, eax
je 0x528207
mov byte [ebp - 0x524], 0
lea eax, [ebp - 0x2ac]
push eax
call dword [ebp - 0x40c]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
je 0x528231
push 0xffffffffffffffff
lea eax, [ebp - 0x524]
push eax
push 0x104
lea eax, [ebp - 0x24c]
push eax
call fcn.0051b450
add esp, 0x10
mov byte [ebp - 0x26], 1
mov byte [ebp - 4], 6
cmp dword [ebp - 0x418], 0x6575c8
je 0x528259
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0xba0], eax
push dword [ebp - 0xba0]
call fcn.005f7371
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x404], 0x6575c8
je 0x528281
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0xba4], eax
push dword [ebp - 0xba4]
call fcn.005f7371
pop ecx
mov byte [ebp - 4], 4
cmp dword [ebp - 0x3f8], 0x6575c8
je 0x5282a9
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xba8], eax
push dword [ebp - 0xba8]
call fcn.005f7371
pop ecx
jmp 0x5283c0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x5282d3
push 0x104
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x72c]
push eax
call fcn.0052469e
add esp, 0xc
jmp 0x5282db
and word [ebp - 0x72c], 0
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x72c]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], 0x104
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x270], eax
movzx eax, byte [ebp - 0x15]
neg eax
sbb eax, eax
not eax
lea ecx, [ebp - 0x24c]
and eax, ecx
mov dword [ebp - 0x280], eax
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x528339
mov eax, dword [sym.imp.comdlg32.dll_GetSaveFileNameW]
mov dword [ebp - 0xbf4], eax
jmp 0x528344
mov eax, dword [sym.imp.comdlg32.dll_GetOpenFileNameW]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0x734], eax
lea eax, [ebp - 0x2ac]
push eax
call dword [ebp - 0x734]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
jne 0x528398
call dword [sym.imp.comdlg32.dll_CommDlgExtendedError]
test eax, eax
je 0x528398
and word [ebp - 0x72c], 0
and dword [ebp - 0x280], 0
lea eax, [ebp - 0x2ac]
push eax
call dword [ebp - 0x734]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
je 0x5283c0
push 0x104
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.0052469e
add esp, 0xc
mov byte [ebp - 0x26], 1
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x528472
cmp dword [ebp - 0x250], 0
jl 0x5283f0
mov eax, dword [ebp - 0x278]
and eax, 1
neg eax
sbb eax, eax
neg eax
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp + 0x28]
mov dword [edx + ecx*4], eax
cmp dword [ebp - 0x10], 0
jl 0x528405
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp - 0x294]
mov dword [ecx + eax*4], edx
lea eax, [ebp - 0x24c]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0xbf8]
add eax, 2
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0xbf8]
mov ax, word [eax]
mov word [ebp - 0xbfe], ax
add dword [ebp - 0xbf8], 2
cmp word [ebp - 0xbfe], 0
jne 0x528420
mov eax, dword [ebp - 0xbf8]
sub eax, dword [ebp - 0xbfc]
sar eax, 1
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0xc04]
lea eax, [ebp + eax*2 - 0x24c]
push eax
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x24]
call fcn.00403670
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x5284cd
mov dword [ebp - 0x738], 0x6bffb0
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0xbb4], eax
push dword [ebp - 0xbb4]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
je 0x5284a2
jmp 0x5284b5
mov edi, dword [ebp - 0x14]
add edi, 0x10
mov ecx, 0x82
lea esi, [ebp - 0x24c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0xbb8], eax
push dword [ebp - 0xbb8]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp + 8]
mov dword [eax], 0x6575cc
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0x6575cc
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0x6575cc
push dword [ebp - 0x20]
push dword [ebp - 0x24]
mov ecx, dword [ebp + 8]
call fcn.00403670
mov eax, dword [ebp - 0xb58]
or eax, 1
mov dword [ebp - 0xb58], eax
mov byte [ebp - 4], 3
cmp dword [ebp - 0x24], 0x6575cc
je 0x528529
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xbc4], eax
push dword [ebp - 0xbc4]
call fcn.005f7371
pop ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.0052720d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
leave
ret