Function at 0x44eed0
Capabilities:
Check if file exists
Create directory
Create process on windows
Get common file path
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6aa748
mov eax, dword fs:[0]
push eax
sub esp, 0x934
mov eax, dword [0x75a1c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
push 0
push 4
push 1
call sym.unpack_7z_from_resource.exe_caerDeviceOpen
push 1
push 1
push 0xfffffffffffffffe
push eax
mov dword [ebp - 0x93c], eax
call sym.unpack_7z_from_resource.exe_caerDeviceConfigSet
add esp, 0x24
push dword [ebp - 0x93c]
call sym.unpack_7z_from_resource.exe_caerDeviceDataGet
add esp, 4
test eax, eax
jne 0x44ef21
lea eax, [ebp - 0x93c]
push eax
call sym.unpack_7z_from_resource.exe_caerDeviceClose
add esp, 4
lea eax, [ebp - 0x628]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x44ef62
xor esi, esi
mov dword [ebp - 0x93c], esi
jmp 0x44efba
lea eax, [ebp - 0x420]
push eax
push 0
push 0x749d04
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
jne 0x44ef8b
xor esi, esi
mov dword [ebp - 0x93c], esi
jmp 0x44efba
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
add eax, eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
lea eax, [ebp - 0x420]
push eax
push esi
mov dword [ebp - 0x93c], esi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, esi
mov dword [ebp - 0x838], 0
xorps xmm0, xmm0
mov dword [ebp - 0x834], 0
movups xmmword [ebp - 0x848], xmm0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44efe0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x848]
call fcn.004565c0
lea ecx, [ebp - 0x848]
mov dword [ebp - 4], 0
call fcn.0044e490
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 0x93d], al
cmp ecx, 7
jbe 0x44f061
mov edx, dword [ebp - 0x848]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f051
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa48
push ecx
push edx
call fcn.0067bce7
mov al, byte [ebp - 0x93d]
add esp, 8
test al, al
jne 0x44f079
push 0x10
push str.Error
push str.Error_saving_localization_resources
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [ebp - 0x858], 0
movq qword [ebp - 0x860], xmm0
push 0x30023
mov dword [ebp - 0x860], 0
mov dword [ebp - 0x85c], 0
mov dword [ebp - 0x858], 0
call fcn.0067bcb2
add esp, 4
test eax, eax
je 0x44fa22
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
push 0x30000
push 0
push ecx
mov dword [ecx - 4], eax
lea esi, [ecx + 0x30000]
mov dword [ebp - 0x860], ecx
mov dword [ebp - 0x858], esi
call fcn.0067ddd0
add esp, 0xc
mov dword [ebp - 0x85c], esi
xor esi, esi
mov dword [ebp - 4], 1
xor ecx, ecx
nop dword [eax]
movd xmm1, esi
xor edx, edx
cvtdq2ps xmm1, xmm1
nop dword [eax]
mov eax, dword [ebp - 0x860]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [ecx + eax], xmm0
mov eax, dword [ebp - 0x860]
movss dword [ecx + eax + 4], xmm1
lea eax, [edx + esi]
movd xmm0, eax
inc edx
mov eax, dword [ebp - 0x860]
cvtdq2ps xmm0, xmm0
movss dword [ecx + eax + 8], xmm0
add ecx, 0xc
cmp edx, 0x80
jl 0x44f110
inc esi
cmp ecx, 0x30000
jl 0x44f100
xorps xmm0, xmm0
mov dword [ebp - 0x84c], 0
movq qword [ebp - 0x854], xmm0
push 0x30023
mov dword [ebp - 0x854], 0
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0
call fcn.0067bcb2
add esp, 4
test eax, eax
je 0x44fa22
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
push 0x30000
push 0
push ecx
mov dword [ecx - 4], eax
lea esi, [ecx + 0x30000]
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x84c], esi
call fcn.0067ddd0
add esp, 0xc
mov dword [ebp - 0x850], esi
lea eax, [ebp - 0x870]
mov byte [ebp - 4], 2
movsd xmm0, qword [0x750980]
push eax
push 0x30000
push dword [ebp - 0x854]
mov dword [ebp - 0x870], 0
sub esp, 8
movsd qword [esp], xmm0
push 0
push 0
push 3
push 0x80
push 0x80
push 1
push 6
push dword [ebp - 0x860]
call fcn.004c9160
push 0x30023
call fcn.0067bcb2
add esp, 0x38
test eax, eax
je 0x44fa22
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
push 0x30000
push 0
push ecx
mov dword [ecx - 4], eax
lea eax, [ecx + 0x30000]
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x834], eax
call fcn.0067ddd0
push dword [ebp - 0x83c]
push 6
push 3
push 0x80
push 0x80
push 1
push 0
push 0
push dword [ebp - 0x870]
push dword [ebp - 0x854]
call fcn.004c90d0
mov ecx, dword [ebp - 0x83c]
add esp, 0x34
test ecx, ecx
je 0x44f2ee
mov eax, dword [ebp - 0x834]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f2c6
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa22
push edx
push ecx
call fcn.0067bce7
add esp, 8
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x854]
test ecx, ecx
je 0x44f34a
mov edx, dword [ebp - 0x84c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x44f322
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa22
push edx
push ecx
call fcn.0067bce7
add esp, 8
mov dword [ebp - 0x854], 0
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x860]
test ecx, ecx
je 0x44f395
mov eax, dword [ebp - 0x858]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f38b
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa22
push edx
push ecx
call fcn.0067bce7
add esp, 8
push 0x104
lea eax, [ebp - 0x830]
push eax
push str.LOCALAPPDATA
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor ecx, ecx
nop
movzx eax, word [ebp + ecx - 0x830]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x21a], ax
test ax, ax
jne 0x44f3b0
lea ecx, [ebp - 0x218]
add ecx, 0xfffffffe
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x44f3d1
mov eax, dword [str.Programs]
mov dword [ecx], eax
mov eax, dword [0x749c9c]
mov dword [ecx + 4], eax
mov eax, dword [0x749ca0]
mov dword [ecx + 8], eax
mov eax, dword [0x749ca4]
mov dword [ecx + 0xc], eax
mov eax, dword [0x749ca8]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x218]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
nop dword [eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x44f420
mov eax, dword [0x749b78]
mov dword [edi], eax
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
nop dword [eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x44f440
mov ecx, 0xa
lea eax, [ebp - 0x218]
mov esi, str.VIRTINS_UART_Manager
rep movsd dword es:[edi], dword [esi]
push 0
push eax
movsw word es:[edi], word [esi]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x218]
push eax
call edi
test eax, eax
je 0x44fa06
mov esi, dword [ebp - 0x93c]
xorps xmm0, xmm0
mov ecx, esi
mov dword [ebp - 0x838], 0
movups xmmword [ebp - 0x848], xmm0
mov dword [ebp - 0x834], 0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44f4b0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x848]
call fcn.004565c0
push 0xb0
lea eax, [ebp - 0x938]
mov dword [ebp - 4], 3
push 0
push eax
call fcn.0067ddd0
cmp dword [ebp - 0x834], 7
lea eax, [ebp - 0x848]
lea ecx, [ebp - 0x938]
cmova eax, dword [ebp - 0x848]
push eax
call fcn.00453de0
mov eax, dword [ebp - 0x938]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x938]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x93c], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x8e8], 0
jne 0x44f5b4
mov edx, str.Error:_Could_not_open_the_file.
mov ecx, 0x75ddf8
call fcn.00455720
push eax
call fcn.004559e0
mov eax, dword [ebp - 0x938]
add esp, 4
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x938]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x93c], eax
lea ecx, [ebp - 0x934]
call fcn.00451480
mov eax, dword [ebp - 0x938]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x938]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x93c], eax
mov byte [ebp - 4], 5
jmp 0x44f696
sub esp, 0x18
lea ecx, [ebp - 0x938]
mov eax, esp
xorps xmm0, xmm0
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
movq qword [eax + 0x10], xmm0
call fcn.00451810
push 0x37
lea ecx, [ebp - 0x938]
call fcn.00451990
push 0x7a
lea ecx, [ebp - 0x938]
call fcn.00451990
lea ecx, [ebp - 0x934]
call fcn.00453cf0
test eax, eax
jne 0x44f639
mov eax, dword [ebp - 0x938]
lea ecx, [ebp - 0x938]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.0044cf30
mov eax, dword [ebp - 0x938]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x938]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x93c], eax
lea ecx, [ebp - 0x934]
call fcn.00451480
mov eax, dword [ebp - 0x938]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x938]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x93c], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x8d0]
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
push eax
call fcn.0067ab99
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x834]
cmp ecx, 7
jbe 0x44f6f6
mov edx, dword [ebp - 0x848]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f6ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa22
push ecx
push edx
call fcn.0067bce7
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x85c], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x858], 0
movups xmmword [ebp - 0x86c], xmm0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44f720
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x86c]
call fcn.004565c0
mov ecx, esi
mov dword [ebp - 4], 7
xorps xmm0, xmm0
mov dword [ebp - 0x838], 0
movups xmmword [ebp - 0x848], xmm0
mov dword [ebp - 0x834], 0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44f770
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x848]
call fcn.004565c0
lea edx, [ebp - 0x86c]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x848]
call fcn.0044e7f0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x834]
cmp ecx, 7
jbe 0x44f7e5
mov edx, dword [ebp - 0x848]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f7db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa27
push ecx
push edx
call fcn.0067bce7
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x858]
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
cmp ecx, 7
jbe 0x44f849
mov edx, dword [ebp - 0x86c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f83f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa27
push ecx
push edx
call fcn.0067bce7
add esp, 8
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x85c], 0
push 0x749b30
lea ecx, [ebp - 0x86c]
mov dword [ebp - 0x858], 0
movups xmmword [ebp - 0x86c], xmm0
call fcn.004565c0
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x218]
xorps xmm0, xmm0
mov dword [ebp - 0x838], 0
movups xmmword [ebp - 0x848], xmm0
mov dword [ebp - 0x834], 0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44f8a7
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x848]
call fcn.004565c0
lea eax, [ebp - 0x86c]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x848]
lea ecx, [ebp - 0x888]
call fcn.0044e010
mov ecx, dword [ebp - 0x834]
add esp, 4
cmp ecx, 7
jbe 0x44f928
mov edx, dword [ebp - 0x848]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f91e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa48
push ecx
push edx
call fcn.0067bce7
add esp, 8
mov ecx, dword [ebp - 0x858]
cmp ecx, 7
jbe 0x44f968
mov edx, dword [ebp - 0x86c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f95e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa48
push ecx
push edx
call fcn.0067bce7
add esp, 8
cmp dword [ebp - 0x874], 7
lea eax, [ebp - 0x888]
cmova eax, dword [ebp - 0x888]
push eax
call edi
test eax, eax
je 0x44fa2c
cmp dword [ebp - 0x874], 7
lea eax, [ebp - 0x888]
push 5
cmova eax, dword [ebp - 0x888]
push 0
push 0
push eax
push 0x749cf8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0x874]
cmp ecx, 7
jbe 0x44f9eb
mov edx, dword [ebp - 0x888]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f9e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fa48
push ecx
push edx
call fcn.0067bce7
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0067bc9f
mov esp, ebp
pop ebp
ret
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Error_creating_working_directory
push 0
call eax
push 0
call fcn.0068176e
call fcn.00688364
call fcn.00688364
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Error_finding_final_localization_file
push 0
call eax
push 0
call fcn.0068176e
call fcn.00688364
int3