Function at 0x448166
Capabilities:
Create directory
Get common file path
Get file size

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc28
mov eax, dword [0x46700c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [esi + 0x84]
xor ecx, ecx
push ebx
push edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ecx
test eax, eax
jne 0x448199
mov eax, 0x80004005
jmp 0x448437
mov dword [esi + 0x80], ecx
mov eax, dword [eax + 0x54]
test eax, eax
jne 0x4481aa
mov eax, ecx
jmp 0x4481b0
mov eax, dword [eax + reloc.ADVAPI32.dll_TraceMessage]
mov dword [esi + 0x80], eax
test eax, eax
je 0x44818f
push ecx
push ecx
push 0x800
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0xffffffffffffffff
push dword [esi + 8]
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x44842b
mov edi, dword [sym.imp.msvcrt.dll_strrchr]
lea eax, reloc.ADVAPI32.dll_TraceMessage
push 0x5c
push eax
call edi
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jne 0x448214
lea eax, reloc.ADVAPI32.dll_TraceMessage
push 0x2f
push eax
call edi
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x44842b
inc ebx
je 0x44842b
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
mov edi, 0x104
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x44842b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x186a0
div ecx
mov ecx, edi
mov eax, edx
push eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x41ef7c
lea eax, reloc.ADVAPI32.dll_TraceMessage
call fcn.0043f5a4
add esp, 0xc
test eax, eax
js 0x44842b
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0xffffffffffffffff
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x44842b
lea edi, [esi + 0x28]
lea eax, reloc.ADVAPI32.dll_TraceMessage
mov dword [esi + 0x50], 1
call fcn.0044056c
push ebx
push dword [ebp - 0xc28]
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
mov edi, 0x104
push 0x41ef8c
mov ecx, edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
call fcn.0043f5a4
add esp, 0x10
test eax, eax
js 0x44842b
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0xffffffffffffffff
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
xor ebx, ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x448433
push ebx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x448433
lea edi, [esi + 0x1c]
lea eax, reloc.ADVAPI32.dll_TraceMessage
inc ebx
call fcn.0044056c
xor edi, edi
inc edi
mov dword [esi + 0x4c], edi
cmp dword [esi + 0x30], 0
je 0x448334
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esi + 0x30], 0
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00440bc3
test eax, eax
je 0x4483aa
push 0
push 0x80
push 3
push 0
push edi
push 0x80000000
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, reloc.ADVAPI32.dll_TraceMessage
je 0x4483aa
and dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, eax
cmp edx, reloc.ADVAPI32.dll_TraceMessage
je 0x44839b
mov ecx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
xor eax, eax
or eax, edx
cmp eax, dword [esi + 0x70]
jne 0x44839b
cmp ecx, dword [esi + 0x74]
jne 0x44839b
xor ebx, ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x44842b
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push reloc.KERNEL32.dll_InitializeCriticalSection
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], 1
call fcn.0043f6bb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x64], eax
cmp dword [esi + 0x30], ebx
je 0x448433
mov eax, dword [esi + 0x80]
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push 0x8000080
push 2
lea edx, reloc.ADVAPI32.dll_TraceMessage
push edx
lea edx, reloc.ADVAPI32.dll_TraceMessage
push edx
push eax
call dword [ecx + 0x14]
mov edi, eax
test edi, edi
js 0x448435
jmp 0x448424
push 0x258
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x448435
cmp dword [esi + 0x34], ebx
je 0x448435
mov ecx, esi
call fcn.00447e39
mov edi, eax
cmp dword [esi + 0x30], ebx
jne 0x448401
jmp 0x448435
mov edi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
jmp 0x448435
mov edi, ebx
mov eax, edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.004655f1
leave
ret