Function at 0x10004e5d
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov eax, dword [0x1007b940]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x10]
mov ebx, str.SetInstance
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x14]
push ebx
mov edi, str.CMars
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x60], eax
call fcn.10024db6
push esi
lea ecx, [ebp - 0x70]
call fcn.1000146b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x68]
call fcn.1000146b
lea eax, [ebp - 0x68]
push eax
call fcn.1002c7fe
pop ecx
call fcn.10023c2a
test eax, eax
je 0x10004eeb
mov esi, 0x281
push esi
call fcn.10023c32
pop ecx
test eax, eax
je 0x10004eeb
push dword [ebp - 0x6c]
push esi
call fcn.100248d5
pop ecx
pop ecx
cmp eax, 2
jne 0x10004eeb
push ebx
push edi
push esi
call fcn.10023c3b
add esp, 0xc
call fcn.10023c2a
test eax, eax
je 0x10004f1f
mov esi, 0x282
push esi
call fcn.10023c32
pop ecx
test eax, eax
je 0x10004f1f
push dword [ebp - 0x64]
push esi
call fcn.100248d5
pop ecx
pop ecx
cmp eax, 2
jne 0x10004f1f
push ebx
push edi
push esi
call fcn.10023c3b
add esp, 0xc
lea ecx, [ebp - 0x70]
call fcn.1000113a
cmp al, 1
jne 0x10004f37
mov dword [ebp - 0x44], 0x80004005
jmp 0x100050d5
mov ecx, 0x1007cd48
call fcn.1001bf4a
call fcn.10028553
test eax, eax
je 0x10004f95
lea ecx, [ebp - 0x7c]
call fcn.10002e2d
lea eax, [ebp - 0x50]
push eax
call fcn.100284d5
pop ecx
lea ecx, [ebp - 0x7c]
push ecx
push dword [eax + 4]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x50]
call fcn.10001636
lea eax, [ebp - 0x50]
push eax
call fcn.10028514
push dword [eax + 4]
call fcn.1002837b
pop ecx
pop ecx
lea ecx, [ebp - 0x50]
call fcn.10001636
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x58]
call fcn.100013fb
push 0x1006154c
lea ecx, [ebp - 0x50]
call fcn.10001432
push 0x10061558
lea ecx, [ebp - 0x50]
call fcn.10001c79
push 0x10061574
lea ecx, [ebp - 0x48]
call fcn.10001432
push 0x100615c4
lea ecx, [ebp - 0x48]
call fcn.10001c79
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x44]
call fcn.10028f61
add esp, 0xc
test eax, eax
je 0x1000505d
push 0x10061860
lea ecx, [ebp - 0x58]
call fcn.10001242
test eax, eax
jne 0x10005031
lea eax, [ebp - 0x78]
push eax
call fcn.1002c679
mov esi, dword [eax + 4]
mov dword [esp], str.hpqusg.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push esi
push 0x10061850
push str._optout
push 0x65
call fcn.1002c363
add esp, 0x14
lea ecx, [ebp - 0x78]
call fcn.10001636
jmp 0x1000505d
push 0x10061844
lea ecx, [ebp - 0x58]
call fcn.10001242
test eax, eax
jne 0x1000505d
push str.hpqusg.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 0x10061850
push 0x65
call fcn.1002c16b
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.10001636
lea ecx, [ebp - 0x50]
call fcn.10001636
lea ecx, [ebp - 0x58]
call fcn.10001636
push dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
push ecx
add esi, 0x38
mov eax, dword [esi]
push ecx
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x68]
mov ecx, esp
mov dword [ebp - 0x54], esp
push eax
call fcn.10001413
push ecx
push ecx
lea eax, [ebp - 0x70]
mov ecx, esp
mov dword [ebp - 0x54], esp
push eax
call fcn.10001413
mov eax, dword [ebp - 0x44]
mov ecx, esi
call dword [eax + 0x24]
mov dword [ebp - 0x44], eax
test eax, eax
jl 0x100050cb
cmp dword [ebp - 0x60], 0
je 0x100050cb
mov esi, dword [ebp - 0x5c]
add esi, 0xfffffff8
mov eax, dword [esi]
push esi
call dword [eax + 0x10]
mov ecx, esi
call fcn.10004a7a
mov ecx, 0x1007cd48
call fcn.1001bfed
call fcn.10023c2a
test eax, eax
je 0x10005109
mov esi, 0x287
push esi
call fcn.10023c32
pop ecx
test eax, eax
je 0x10005109
push dword [ebp - 0x44]
push esi
call fcn.10024822
pop ecx
pop ecx
cmp eax, 2
jne 0x10005109
push ebx
push edi
push esi
call fcn.10023c3b
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.10001636
lea ecx, [ebp - 0x70]
call fcn.10001636
lea ecx, [ebp - 0x40]
call fcn.10024a7a
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x44]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100302c9
leave
ret 0x10