Function at 0x457c10
Capabilities:
Accept command line arguments
Check os version
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x4acca0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [0x4b0090], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
rol ax, 8
movzx eax, ax
mov dword [0x4b0288], eax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0x118], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x457c7f
cmp dword [ebp - 0x108], 2
jne 0x457c7f
cmp dword [ebp - 0x114], 5
ja 0x457c75
jne 0x457c7f
cmp dword [ebp - 0x110], 0
je 0x457c7f
mov dword [0x4b0284], 1
push esi
call fcn.004436f0
mov dword [0x4b01c4], 0x43dab0
mov dword [0x4b01b4], 0x4252a0
mov dword [0x4b01b8], 0x4252f0
mov dword [0x4b01bc], 0x425e30
mov dword [0x4b01c0], 0x425ee0
mov dword [0x4b01c8], 0x425740
mov dword [0x4b01fc], 0x425720
mov dword [0x4b01cc], 0x425830
mov dword [0x4b0200], 0x4257d0
mov dword [0x4b01d0], 0x425460
mov dword [0x4b0204], 0x425440
mov dword [0x4b01d4], 0x425550
mov dword [0x4b01e0], 0x4258c0
mov dword [0x4b01e4], 0x425aa0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
movzx ecx, word [esi]
lea edx, [esi + 2]
cmp ecx, 0x22
je 0x457d26
mov edx, esi
xor eax, eax
cmp ecx, 0x22
sete al
lea eax, [eax*2 + 0x20]
push eax
push edx
call fcn.004719d8
add esp, 8
test eax, eax
je 0x457d46
lea esi, [eax + 2]
mov ecx, esi
call fcn.00443c20
push 2
push 0x104
call fcn.00474169
push 2
push 0x104
mov dword [0x4afe74], eax
call fcn.00474169
mov ecx, dword [0x4afe74]
add esp, 0x10
mov dword [0x4afe68], eax
test ecx, ecx
je 0x458185
test eax, eax
je 0x458185
push edi
push 0x104
push ecx
push dword [0x4b0090]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edi, dword [0x4afe68]
push 2
push 0x104
call fcn.00474169
mov esi, eax
add esp, 8
test esi, esi
je 0x457dda
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push edi
push 0
push 0x49d360
push esi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push esi
call fcn.0047417f
add esp, 4
mov eax, dword [0x4afe68]
cmp word [eax], 0
je 0x458184
push eax
call fcn.0047536a
add esp, 4
push 0
push dword [0x4afe68]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x458184
mov ecx, dword [0x4afe68]
call fcn.004269b0
call fcn.00408150
test eax, eax
jne 0x458184
mov ecx, dword [0x4afe68]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457e30
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 1]
push eax
call fcn.00474169
mov edx, dword [0x4afe68]
add esp, 8
mov dword [0x4b0088], eax
nop dword [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax], cx
lea eax, [eax + 2]
test cx, cx
jne 0x457e60
mov edx, dword [0x4b0088]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457e80
sub ecx, esi
sar ecx, 1
cmp ecx, 3
jle 0x457ea3
cmp word [edx + ecx*2 - 2], 0x5c
jne 0x457ea3
xor eax, eax
mov word [edx + ecx*2 - 2], ax
mov dword [0x4b0254], 0
call dword [sym.imp.MMFS2.dll_Ordinal_1055]
push dword [0x4b0088]
call fcn.00477e38
mov ecx, eax
add esp, 4
mov dword [0x4b024c], ecx
test ecx, ecx
je 0x4580ba
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457ed4
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 0xc]
push eax
call fcn.00474169
mov edx, dword [0x4b024c]
add esp, 8
mov esi, eax
sub eax, edx
nop dword [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x457f00
cmp word [esi], cx
je 0x457f53
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457f20
sub ecx, edx
sar ecx, 1
cmp word [esi + ecx*2 - 2], 0x5c
je 0x457f53
lea edi, [esi - 2]
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x457f40
mov eax, dword [0x49d3f4]
mov dword [edi], eax
lea ecx, [esi - 2]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x457f56
mov eax, dword [str.stdrtd.txt]
mov dword [ecx], eax
mov eax, dword [0x49d734]
mov dword [ecx + 4], eax
mov eax, dword [0x49d738]
mov dword [ecx + 8], eax
mov eax, dword [0x49d73c]
mov dword [ecx + 0xc], eax
mov eax, dword [0x49d740]
mov dword [ecx + 0x10], eax
mov ax, word [0x49d744]
push 0
mov word [ecx + 0x14], ax
mov ecx, 0x4b03a8
push esi
push dword [0x4b0090]
call fcn.00465450
push esi
call fcn.0047417f
add esp, 4
cmp dword [0x4b024c], 0
je 0x4580ba
push str.mmfs2.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
mov dword [ebp - 0x11c], edi
test edi, edi
je 0x4580ba
mov ecx, dword [0x4b024c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457fe0
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 0xb]
push eax
call fcn.00474169
mov edx, dword [0x4b024c]
add esp, 8
mov esi, eax
sub eax, edx
nop word [eax + eax]
movzx ecx, word [edx]
lea edx, [edx + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x458010
cmp word [esi], cx
je 0x458069
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x458030
sub ecx, edx
sar ecx, 1
cmp word [esi + ecx*2 - 2], 0x5c
je 0x458069
lea edi, [esi - 2]
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x458050
mov eax, dword [0x49d3f4]
mov dword [edi], eax
mov edi, dword [ebp - 0x11c]
lea edx, [esi - 2]
nop dword [eax]
mov ax, word [edx + 2]
lea edx, [edx + 2]
test ax, ax
jne 0x458070
mov eax, dword [str.mmfs2.txt]
mov ecx, 0x4b03a8
mov dword [edx], eax
mov eax, dword [0x49d760]
mov dword [edx + 4], eax
mov eax, dword [0x49d764]
mov dword [edx + 8], eax
mov eax, dword [0x49d768]
push 0
mov dword [edx + 0xc], eax
mov eax, dword [0x49d76c]
push esi
push edi
mov dword [edx + 0x10], eax
call fcn.00465450
push esi
call fcn.0047417f
add esp, 4
xor esi, esi
cmp dword [0x4aea24], esi
jne 0x4580d2
mov esi, dword [0x4b022c]
test esi, esi
je 0x458184
call fcn.004437d0
test eax, eax
jne 0x458168
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
cmp dword [0x4b0294], eax
jne 0x45811a
push str.krdp
call edi
movzx eax, ax
push str.kprc
mov dword [0x4b0294], eax
call edi
movzx eax, ax
push str.kspc
mov dword [0x4b0290], eax
call edi
movzx eax, ax
mov dword [0x4b029c], eax
push str.knum
call edi
movzx eax, ax
mov dword [0x4b0298], eax
call fcn.00424e10
test eax, eax
je 0x458184
push 0
push dword [0x4b0090]
call dword [sym.imp.MMFS2.dll_Ordinal_2]
mov ecx, eax
mov dword [0x4b008c], ecx
cmp ecx, 0x20
ja 0x4581a2
xor eax, eax
mov dword [0x4b008c], 0
cmp ecx, 1
setne al
lea eax, [eax*8 + 0xf]
test eax, eax
jle 0x458184
test byte [0x4b023e], 1
je 0x458184
push ecx
mov ecx, dword [0x4b00a0]
mov edx, eax
call fcn.00444a70
add esp, 4
pop edi
call fcn.00444f60
call fcn.00408890
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
pop esi
call fcn.0047068b
mov esp, ebp
pop ebp
ret 0x10
push 4
push 0x42000000
push 0
push 0
xor edx, edx
mov ecx, esi
call fcn.004031b0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x458184
call dword [sym.imp.MMFS2.dll_Ordinal_794]
push 3
push dword [0x4b0088]
mov ecx, eax
mov dword [0x4b00b8], eax
call dword [sym.imp.MMFS2.dll_Ordinal_1053]
mov esi, dword [0x4b0088]
call dword [sym.imp.MMFS2.dll_Ordinal_795]
push 3
push esi
mov ecx, eax
mov dword [0x4b00bc], eax
call dword [sym.imp.MMFS2.dll_Ordinal_1054]
cmp dword [0x4b00c0], 0
jne 0x458227
mov ecx, dword [0x4b00bc]
test ecx, ecx
je 0x458227
push dword [0x4b00a0]
call dword [sym.imp.MMFS2.dll_Ordinal_389]
mov dword [0x4b00c0], eax
test eax, eax
je 0x458227
mov edx, dword [eax]
mov ecx, eax
push 0
call dword [edx + 4]
mov ecx, edi
call fcn.004061c0
test eax, eax
je 0x458246
xor edx, edx
mov ecx, edi
call fcn.004063c0
test eax, eax
jne 0x458232
mov ecx, edi
call fcn.00406620
mov ecx, edi
call fcn.004051b0
jmp 0x458184