Function at 0x445089
Capabilities:
Check if file exists
Create directory
Delete file
Get common file path
Move file
Resolve function by parsing pe exports
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x44e386
mov eax, dword fs:[0]
push eax
sub esp, 0x890
mov eax, dword [0x463060]
xor eax, esp
mov dword [esp + 0x888], eax
push ebx
push esi
push edi
mov eax, dword [0x463060]
xor eax, esp
push eax
lea eax, [esp + 0x8a0]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x20], eax
cmp eax, ebx
je 0x4450df
mov dword [eax], ebx
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
push 0xc
push dword [ebp + 0xc]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x3c]
push 3
push dword [ebp + 0xc]
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
cmp word [esp + 0x2c], bx
jne 0x445124
xor eax, eax
inc eax
jmp 0x4456c1
push dword [esp + 0x34]
lea eax, [esp + 0x78]
push 0x104
push eax
call fcn.0042c2c6
add esp, 0xc
lea eax, [esp + 0x74]
cmp dword [esi + 0x14], ebx
je 0x4451a8
push 0x45a6e4
push eax
call fcn.0042d093
pop ecx
test eax, eax
pop ecx
lea eax, [esp + 0x74]
je 0x445167
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x44515b
jmp 0x4451ca
push 0x45a6f0
push eax
call fcn.0042d093
pop ecx
pop ecx
test eax, eax
jne 0x44511c
push 4
lea eax, [esp + 0x78]
mov edx, str.ubundle.exe
pop edi
mov cx, word [edx]
cmp cx, word [eax]
jne 0x4451f4
cmp cx, bx
je 0x4451a4
mov cx, word [edx + 2]
cmp cx, word [eax + 2]
jne 0x4451f4
add edx, edi
add eax, edi
cmp cx, bx
jne 0x445184
xor eax, eax
jmp 0x4451f9
push str.x86_
push eax
call fcn.0042d093
pop ecx
test eax, eax
pop ecx
lea eax, [esp + 0x74]
je 0x4451ea
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x4451c0
sub eax, edx
sar eax, 1
lea eax, [eax + eax - 6]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.0042c4c0
add esp, 0xc
jmp 0x445178
push str.x64_
jmp 0x44516c
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x445249
lea eax, [esp + 0x74]
mov ecx, str.AiBoosterSetup.exe
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x44522a
cmp dx, bx
je 0x445226
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x44522a
add ecx, edi
add eax, edi
cmp dx, bx
jne 0x445206
xor eax, eax
jmp 0x44522f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x445249
lea eax, [esp + 0x27c]
push eax
call fcn.00445b79
test al, al
jne 0x44525c
jmp 0x44511c
lea eax, [esp + 0x27c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.DLL_GetTempPathW]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
push 9
push dword [ebp + 0xc]
push eax
call dword [ecx + 0x1c]
cmp word [esp + 0x2c], bx
je 0x44511c
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
test al, 0x10
lea eax, [esp + 0x74]
je 0x445352
mov ecx, 0x45a754
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4452b7
cmp dx, bx
je 0x4452b3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4452b7
add eax, edi
add ecx, edi
cmp dx, bx
jne 0x445293
xor eax, eax
jmp 0x4452bc
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x44511c
mov ecx, 0x45a75c
lea eax, [esp + 0x74]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4452f1
cmp dx, bx
je 0x4452ed
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4452f1
add eax, edi
add ecx, edi
cmp dx, bx
jne 0x4452cd
xor eax, eax
jmp 0x4452f6
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x44511c
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x280]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push ebx
lea eax, [esp + 0x280]
push eax
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
test eax, eax
je 0x4456bf
lea eax, [esp + 0x74]
push eax
lea esi, [esp + 0x40]
call fcn.0040216b
mov eax, esi
push eax
mov dword [esp + 0x8ac], ebx
call fcn.0040592f
push ebx
push 1
call fcn.004026e6
jmp 0x4456bf
push eax
lea eax, [esp + 0x280]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [esp + 0x74]
push eax
lea esi, [esp + 0x40]
call fcn.0040216b
xor edi, edi
mov eax, esi
inc edi
push eax
mov dword [esp + 0x8ac], edi
call fcn.0040592f
or dword [esp + 0x8a8], 0xffffffff
push 0
push edi
call fcn.004026e6
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [esp + 0x27c]
push eax
call ebx
mov dword [esp + 0x18], eax
test eax, eax
je 0x445488
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
push 0x13
push dword [ebp + 0xc]
push eax
call dword [ecx + 0x1c]
lea eax, [esp + 0x27c]
push eax
call fcn.0044c0f0
pop ecx
cmp eax, dword [esp + 0x34]
jne 0x4453df
mov eax, edi
jmp 0x4456c1
lea eax, [esp + 0x27c]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
test eax, eax
jne 0x445488
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
push eax
lea eax, [esp + 0x280]
push eax
lea eax, [esp + 0x48c]
push 0x45a764
push eax
call esi
add esp, 0x10
lea eax, [esp + 0x484]
push eax
call ebx
test eax, eax
lea eax, [esp + 0x484]
push eax
je 0x445459
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
test eax, eax
jne 0x445488
push edi
lea eax, [esp + 0x280]
push eax
lea eax, [esp + 0x48c]
push str._ws.del_d
push eax
call esi
add esp, 0x10
inc edi
cmp edi, 0x64
jl 0x445416
jmp 0x445488
lea eax, [esp + 0x280]
push eax
call fcn.0042d2cb
pop ecx
pop ecx
xor ecx, ecx
test eax, eax
setle cl
mov dword [esp + 0x18], ecx
test ecx, ecx
jne 0x445488
push 4
push ecx
lea eax, [esp + 0x48c]
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
mov edi, dword [sym.imp.KERNEL32.DLL_CreateFileW]
xor esi, esi
push esi
mov ebx, 0x80
push ebx
push 2
push esi
push 1
push 0xc0000000
lea eax, [esp + 0x294]
push eax
call edi
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
jne 0x44566c
cmp dword [esp + 0x18], esi
je 0x44511c
lea eax, [esp + 0x484]
push eax
call fcn.00445b79
test al, al
je 0x44511c
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x45a78c
lea eax, [esp + 0x488]
push eax
call esi
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x488]
push eax
call esi
lea eax, [esp + 0x484]
push eax
call fcn.00445018
pop ecx
test eax, eax
je 0x44511c
push 0x45a794
lea esi, [esp + 0x5c]
call fcn.0040216b
mov eax, esi
push eax
mov dword [esp + 0x8ac], 2
call fcn.0040592f
or dword [esp + 0x8a8], 0xffffffff
push 0
push 1
call fcn.004026e6
push 0
push ebx
push 2
push 0
push 1
push 0x40000000
lea eax, [esp + 0x49c]
push eax
call edi
mov edi, eax
cmp edi, 0xffffffff
je 0x44511c
push dword [esp + 0x1c]
lea eax, [esp + 0x488]
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
push 0x20
call fcn.0042be1e
xor ebx, ebx
pop ecx
cmp eax, ebx
je 0x44559d
mov dword [eax + 4], ebx
or dword [eax + 8], 0xffffffff
mov dword [eax], vtable.CExtractOutFile.0
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov esi, eax
jmp 0x44559f
xor esi, esi
mov dword [esp + 0x14], esi
cmp esi, ebx
je 0x4455ad
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov dword [esp + 0x8a8], 3
cmp esi, ebx
jne 0x4455c8
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x44511c
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x24]
mov dword [esi + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x18], eax
lea eax, [esp + 0x27c]
push eax
lea eax, [esp + 0x690]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
lea eax, [esp + 0x68c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
xor ecx, ecx
mov word [eax], cx
lea eax, [esp + 0x68c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x445629
push 1
push ebx
lea eax, [esp + 0x694]
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
push 1
lea eax, [esp + 0x690]
push eax
lea eax, [esp + 0x284]
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
push 4
push ebx
lea eax, [esp + 0x694]
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
lea eax, [esp + 0x27c]
push eax
lea eax, [esp + 0x488]
push eax
mov dword [esi + 8], edi
call fcn.00444ecb
jmp 0x4456b9
push 0x20
call fcn.0042be1e
pop ecx
cmp eax, esi
je 0x445691
xor ecx, ecx
mov dword [eax + 4], ecx
or dword [eax + 8], 0xffffffff
mov dword [eax], vtable.CExtractOutFile.0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov esi, eax
jmp 0x445693
xor esi, esi
test esi, esi
je 0x4456e7
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x24]
mov dword [esi + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x18], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x20]
mov dword [eax], esi
xor eax, eax
mov ecx, dword [esp + 0x8a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x888]
xor ecx, esp
call fcn.0042bd77
mov esp, ebp
pop ebp
ret 0x10
push dword [esp + 0x14]
jmp 0x4455bd