Function at 0x404500
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
lea ecx, [edx + 8]
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
lea ebx, [edx + 0x10]
sub esp, 0x4fc
mov dword [ebp - 0x4bc], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 8], ecx
lea ecx, [edx + 0x18]
mov dword [ebp - 0x4c0], edx
mov dword [ebp - 0x4c4], ebx
mov dword [edx + 0x14], ebx
mov dword [edx + 0x10], ebx
mov dword [ebp - 0x4c8], ecx
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x18], ecx
mov dword [esp], 0
call sym._CoInitialize_4
sub esp, 4
test byte [section..data], 8
jne 0x404930
mov eax, dword [ebp - 0x4c0]
xor edi, edi
call dbg.create_temp_directory
mov dword [ebp - 0x4cc], eax
test eax, eax
je 0x404662
mov edx, eax
mov eax, esi
call dbg.extract_cabinet
test eax, eax
jne 0x404670
test byte [section..data], 2
jne 0x4049a0
xor edi, edi
mov eax, dword [ebp - 0x4c0]
mov ebx, dword [sym.imp.ucrtbase.dll_free]
mov esi, dword [eax + 8]
mov edx, dword [esi]
cmp dword [ebp - 0x4bc], esi
je 0x4045f1
mov dword [ebp - 0x4cc], edi
mov edi, esi
mov esi, edx
lea esi, [esi]
nop
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov ecx, dword [edi]
mov dword [eax], ecx
mov eax, dword [edi + 8]
call sym._delete_directory.isra.0
mov eax, dword [edi + 8]
mov dword [esp], eax
call ebx
mov dword [esp], edi
mov edi, esi
call ebx
mov esi, dword [esi]
cmp dword [ebp - 0x4bc], edi
jne 0x4045c0
mov edi, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4c0]
mov ebx, dword [ebp - 0x4c4]
mov eax, dword [eax + 0x10]
mov esi, dword [eax]
cmp dword [ebp - 0x4c4], eax
je 0x40462a
lea esi, [esi]
mov edx, dword [eax + 4]
mov dword [esi + 4], edx
mov ecx, dword [eax]
mov dword [edx], ecx
mov dword [esp], eax
call dbg.free_assembly
mov eax, esi
mov esi, dword [esi]
cmp ebx, eax
jne 0x404610
mov eax, dword [ebp - 0x4c0]
mov ebx, dword [ebp - 0x4c8]
mov eax, dword [eax + 0x18]
mov esi, dword [eax]
cmp dword [ebp - 0x4c8], eax
je 0x404662
lea esi, [esi]
nop
mov edx, dword [eax + 4]
mov dword [esi + 4], edx
mov ecx, dword [eax]
mov dword [edx], ecx
mov dword [esp], eax
call sym._free_dependency
mov eax, esi
mov esi, dword [esi]
cmp ebx, eax
jne 0x404648
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x4cc]
mov edx, str..cab
call dbg.path_combine
mov ebx, eax
test eax, eax
je 0x404596
lea eax, [ebp - 0x4b8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov eax, dword [sym.imp.kernel32.dll_FindFirstFileW]
mov dword [ebp - 0x4dc], eax
call eax
sub esp, 8
mov edi, eax
mov dword [ebp - 0x4e0], eax
mov dword [esp], ebx
mov ebx, dword [sym.imp.ucrtbase.dll_free]
call ebx
cmp edi, 0xffffffff
je 0x4047a2
mov dword [ebp - 0x4d4], ebx
mov esi, dword [sym.imp.kernel32.dll_FindNextFileW]
nop
test byte [ebp - 0x4b8], 0x10
jne 0x404770
lea eax, [ebp - 0x48c]
mov dword [esp + 4], str.WSUSSCAN.cab
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll__wcsicmp]
test eax, eax
je 0x404770
mov eax, dword [ebp - 0x4cc]
lea edx, [ebp - 0x48c]
call dbg.path_combine
mov dword [ebp - 0x4d0], eax
test eax, eax
je 0x404770
test byte [section..data], 8
jne 0x404cc0
mov eax, dword [ebp - 0x4c0]
call dbg.create_temp_directory
mov dword [ebp - 0x4d8], eax
test eax, eax
je 0x404c40
mov edx, eax
mov eax, dword [ebp - 0x4d0]
call dbg.extract_cabinet
test eax, eax
jne 0x404a28
test byte [section..data], 2
jne 0x404bcf
mov eax, dword [ebp - 0x4d0]
mov dword [esp], eax
mov eax, dword [ebp - 0x4d4]
call eax
lea esi, [esi]
lea eax, [ebp - 0x4b8]
mov dword [esp], edi
mov dword [esp + 4], eax
call esi
sub esp, 8
test eax, eax
jne 0x4046d0
mov eax, dword [ebp - 0x4e0]
mov ebx, dword [ebp - 0x4d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindClose]
sub esp, 4
mov eax, dword [ebp - 0x4cc]
mov edx, str..xml
call dbg.path_combine
mov esi, eax
test eax, eax
je 0x404596
lea eax, [ebp - 0x4b8]
mov dword [esp], esi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4dc]
call eax
sub esp, 8
mov edi, eax
mov dword [ebp - 0x4d4], eax
mov dword [esp], esi
call ebx
cmp edi, 0xffffffff
je 0x404876
mov dword [ebp - 0x4d0], ebx
mov esi, dword [sym.imp.kernel32.dll_FindNextFileW]
lea esi, [esi]
lea esi, [esi]
test byte [ebp - 0x4b8], 0x10
jne 0x40484e
mov eax, dword [ebp - 0x4cc]
lea edx, [ebp - 0x48c]
call dbg.path_combine
mov ebx, eax
test eax, eax
je 0x40484e
mov eax, dword [ebp - 0x4c8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dbg.load_update
test eax, eax
jne 0x404843
test byte [section..data], 2
jne 0x404e55
mov dword [esp], ebx
mov eax, dword [ebp - 0x4d0]
call eax
lea eax, [ebp - 0x4b8]
mov dword [esp], edi
mov dword [esp + 4], eax
call esi
sub esp, 8
test eax, eax
jne 0x404800
mov eax, dword [ebp - 0x4d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindClose]
sub esp, 4
test byte [section..data], 8
jne 0x404d31
mov eax, dword [ebp - 0x4c0]
mov ebx, dword [ebp - 0x4c8]
cmp ebx, dword [eax + 0x18]
je 0x404f39
mov eax, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x4c4]
mov eax, dword [eax + 0x10]
cmp dword [ebp - 0x4c4], eax
je 0x4048bd
nop
mov dword [eax + 8], 0
mov eax, dword [eax]
cmp edx, eax
jne 0x4048b0
mov eax, dword [ebp - 0x4c0]
mov edx, 1
call dbg.install_updates
test eax, eax
je 0x404eb8
mov eax, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x4c4]
mov eax, dword [eax + 0x10]
cmp dword [ebp - 0x4c4], eax
je 0x4048fd
lea esi, [esi]
mov dword [eax + 8], 0
mov eax, dword [eax]
cmp edx, eax
jne 0x4048f0
mov eax, dword [ebp - 0x4c0]
xor edx, edx
call dbg.install_updates
test eax, eax
je 0x404f03
test byte [section..data], 8
jne 0x404e2c
mov edi, 1
jmp 0x404598
test esi, esi
je 0x404d27
mov eax, esi
shr eax, 0x10
je 0x404a10
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x40496e
mov edx, 0xffffffff
mov eax, esi
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Processing_msu_file__s_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x40455d
test esi, esi
je 0x40510a
mov eax, esi
shr eax, 0x10
je 0x404eee
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x4049de
mov edx, 0xffffffff
mov eax, esi
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Failed_to_extract__s_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x404596
mov dword [esp + 4], esi
mov dword [esp], 0x409008
call sym._wine_dbg_sprintf.constprop.0
jmp 0x40496e
mov eax, dword [ebp - 0x4d8]
mov edx, str._manifest_.cix.xml
call dbg.path_combine
mov ebx, eax
test eax, eax
je 0x404c40
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetFileAttributesW]
sub esp, 4
cmp eax, 0xffffffff
je 0x404aad
test byte [section..data], 1
je 0x404aad
mov dword [esp + 0xc], str.Cabinet_uses_proprietary_msdelta_file_compression_which_is_not__yet__supported_n
mov dword [esp + 8], str.load_assemblies_from_cab
mov dword [esp + 4], 0x408000
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0
test byte [section..data], 1
je 0x404aad
mov dword [esp + 0xc], str.Installation_of_msu_file_will_most_likely_fail_n
mov dword [esp + 8], str.load_assemblies_from_cab
mov dword [esp + 4], 0x408000
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0
mov dword [esp], ebx
mov ebx, dword [ebp - 0x4d4]
call ebx
mov eax, dword [ebp - 0x4d8]
mov edx, 0x40906e
call dbg.path_combine
mov edx, eax
test eax, eax
je 0x404c40
lea eax, [ebp - 0x268]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e8], edx
call eax
mov edx, dword [ebp - 0x4e8]
sub esp, 8
mov dword [ebp - 0x4e4], eax
mov dword [esp], edx
call ebx
mov ebx, dword [ebp - 0x4e4]
cmp ebx, 0xffffffff
je 0x40475b
mov dword [ebp - 0x4e8], edi
lea esi, [esi]
lea esi, [esi]
test byte [ebp - 0x268], 0x10
jne 0x404b98
mov edx, str..manifest
lea eax, [ebp - 0x23c]
call dbg.str_ends_with
test eax, eax
jne 0x404b51
mov edx, str..mum
lea eax, [ebp - 0x23c]
call dbg.str_ends_with
test eax, eax
je 0x404b98
mov eax, dword [ebp - 0x4d8]
lea edx, [ebp - 0x23c]
call dbg.path_combine
mov edi, eax
test eax, eax
je 0x404b98
mov dword [esp], eax
call dbg.load_manifest
test eax, eax
je 0x404b8d
mov edx, dword [ebp - 0x4c4]
mov dword [eax], edx
mov edx, dword [ebp - 0x4c0]
mov ecx, dword [edx + 0x14]
mov dword [eax + 4], ecx
mov dword [ecx], eax
mov dword [edx + 0x14], eax
mov dword [esp], edi
mov eax, dword [ebp - 0x4d4]
call eax
lea eax, [ebp - 0x268]
mov dword [esp], ebx
mov dword [esp + 4], eax
call esi
sub esp, 8
test eax, eax
jne 0x404b20
mov eax, dword [ebp - 0x4e4]
mov edi, dword [ebp - 0x4e8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindClose]
sub esp, 4
jmp 0x40475b
mov eax, dword [ebp - 0x4d0]
shr eax, 0x10
je 0x4051c4
mov dword [esp + 4], 0xffffffff
mov ebx, dword [ebp - 0x4d0]
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x404c0f
mov edx, 0xffffffff
mov eax, ebx
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Failed_to_extract__s_n
mov dword [esp + 8], str.load_assemblies_from_cab
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
lea esi, [esi]
nop
test byte [section..data], 2
je 0x40475b
mov eax, dword [ebp - 0x4d0]
shr eax, 0x10
je 0x405164
mov dword [esp + 4], 0xffffffff
mov ebx, dword [ebp - 0x4d0]
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x404c8d
mov edx, 0xffffffff
mov eax, ebx
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Failed_to_load_all_manifests_from__s__ignoring_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x40475b
shr eax, 0x10
je 0x404e11
mov dword [esp + 4], 0xffffffff
mov ebx, dword [ebp - 0x4d0]
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x404cfa
mov edx, 0xffffffff
mov eax, ebx
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Processing_cab_file__s_n
mov dword [esp + 8], str.load_assemblies_from_cab
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x404720
mov eax, 0x40900e
jmp 0x40496e
mov dword [esp], section..data
call sym.___wine_dbg_get_channel_flags
test al, 8
je 0x404883
movzx eax, byte [section..data]
test al, 8
jne 0x40517f
mov edx, dword [ebp - 0x4c0]
mov esi, dword [edx + 0x18]
cmp dword [ebp - 0x4c8], esi
je 0x404fa1
mov ebx, dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edi, dword [ebp - 0x4c8]
jmp 0x404d8a
mov esi, dword [esi]
cmp edi, esi
je 0x404f79
mov edx, eax
and edx, 8
je 0x404d80
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x405150
mov eax, ecx
shr eax, 0x10
je 0x405126
mov dword [esp + 4], 0xffffffff
mov dword [esp], ecx
mov dword [ebp - 0x4cc], ecx
call ebx
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x404dd8
mov eax, dword [ebp - 0x4cc]
mov edx, 0xffffffff
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.___s_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
movzx eax, byte [section..data]
mov edx, eax
and edx, 8
jmp 0x404d80
mov eax, dword [ebp - 0x4d0]
mov dword [esp], 0x409008
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf.constprop.0
jmp 0x404cfa
mov dword [esp + 0xc], str.Installation_finished_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x40491f
mov eax, ebx
shr eax, 0x10
je 0x40513b
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x404e8b
mov edx, 0xffffffff
mov eax, ebx
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Failed_to_load_all_updates_from__s__ignoring_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x404843
test byte [section..data], 2
je 0x404596
mov dword [esp + 0xc], str.Dry_run_failed__aborting_installation_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x404596
mov dword [esp + 4], esi
mov dword [esp], 0x409008
call sym._wine_dbg_sprintf.constprop.0
jmp 0x4049de
test byte [section..data], 2
je 0x404596
mov dword [esp + 0xc], str.Installation_failed_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x404596
test byte [section..data], 2
je 0x404596
mov dword [esp + 0xc], str.No_updates_found__probably_incompatible_MSU_file_format__n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x404596
movzx edx, byte [section..data]
and edx, 8
test dl, dl
je 0x404fa1
mov dword [esp + 0xc], str.List_of_manifests__with_dependencies_:_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
mov eax, dword [ebp - 0x4c0]
mov esi, dword [eax + 0x10]
cmp dword [ebp - 0x4c4], esi
je 0x404883
mov edi, esi
lea esi, [esi]
nop
test byte [section..data], 8
jne 0x4050a0
mov ebx, dword [edi + 0x28]
lea esi, [edi + 0x28]
cmp esi, ebx
je 0x405068
mov dword [ebp - 0x4cc], edi
jmp 0x404fee
mov ebx, dword [ebx]
cmp ebx, esi
je 0x405062
test byte [section..data], 8
je 0x404fe8
mov edi, dword [ebx + 8]
test edi, edi
je 0x405098
mov eax, edi
shr eax, 0x10
je 0x405080
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x405034
mov edx, 0xffffffff
mov eax, edi
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str._______s_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
mov ebx, dword [ebx]
cmp ebx, esi
jne 0x404fee
mov edi, dword [ebp - 0x4cc]
mov edi, dword [edi]
cmp dword [ebp - 0x4c4], edi
jne 0x404fc0
jmp 0x404883
mov dword [esp + 4], edi
mov dword [esp], 0x409008
call sym._wine_dbg_sprintf.constprop.0
jmp 0x405034
mov eax, 0x40900e
jmp 0x405034
mov ebx, dword [edi + 0x14]
test ebx, ebx
je 0x40515a
mov eax, ebx
shr eax, 0x10
je 0x405114
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x409015
test edx, edx
jne 0x4050dd
mov edx, 0xffffffff
mov eax, ebx
call sym._wine_dbgstr_wn.part.0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.___s_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x404fcd
mov eax, 0x40900e
jmp 0x4049de
mov dword [esp + 4], ebx
mov dword [esp], 0x409008
call sym._wine_dbg_sprintf.constprop.0
jmp 0x4050dd
mov dword [esp + 4], ecx
mov dword [esp], 0x409008
call sym._wine_dbg_sprintf.constprop.0
jmp 0x404dd8
mov dword [esp + 4], ebx
mov dword [esp], 0x409008
call sym._wine_dbg_sprintf.constprop.0
jmp 0x404e8b
mov eax, 0x40900e
jmp 0x404dd8
mov eax, 0x40900e
jmp 0x4050dd
mov eax, dword [ebp - 0x4d0]
mov dword [esp], 0x409008
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf.constprop.0
jmp 0x404c8d
mov dword [esp + 0xc], str.List_of_updates:_n
mov dword [esp + 8], global___FUNCTION__.1
mov dword [esp + 4], 0x408000
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
mov eax, dword [ebp - 0x4c0]
mov esi, dword [eax + 0x18]
cmp dword [ebp - 0x4c8], esi
je 0x404f6f
movzx eax, byte [section..data]
jmp 0x404d69
mov eax, dword [ebp - 0x4d0]
mov dword [esp], 0x409008
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf.constprop.0
jmp 0x404c0f