Function at 0x43927c
Capabilities:
Check if file exists
Delete file
Get common file path
Get file attributes

Disassembly:
push 0x328
mov eax, 0x46bb2f
call fcn.004422f9
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x320], ebx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x318], ebx
mov byte [ebp - 4], 1
push 1
lea eax, [ebp - 0x320]
push eax
push ebx
push 0x3b
lea ecx, [ebp + 8]
call fcn.0041f1e2
mov ecx, dword [ebp - 0x31c]
mov esi, dword [ebp - 0x320]
mov eax, ecx
sub eax, esi
push 0x30
cdq
pop edi
idiv edi
cmp eax, 3
jne 0x43931f
push 1
lea eax, [ebp - 0x311]
push eax
push 0x47c998
lea ecx, [ebp - 0x278]
call fcn.004025e0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x320]
call fcn.0042c055
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x278]
call fcn.00401580
mov ecx, dword [ebp - 0x31c]
mov esi, dword [ebp - 0x320]
sub ecx, esi
mov eax, ecx
cdq
idiv edi
cmp eax, 4
je 0x439333
push 0xfffffffffffffffc
pop edi
jmp 0x4395e8
lea eax, [esi + 0x34]
cmp dword [eax + 0x14], 8
jb 0x43933e
mov eax, dword [eax]
push eax
call fcn.00443a3f
pop ecx
lea ecx, [esi + 0x64]
mov dword [ebp - 0x330], eax
cmp dword [ecx + 0x14], 8
jb 0x439356
mov ecx, dword [ecx]
push ecx
call fcn.00443a3f
mov dword [ebp - 0x334], eax
lea eax, [ebp - 0x248]
push eax
call fcn.004192e8
pop ecx
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x230], 8
lea ecx, [ebp - 0x244]
cmovae ecx, dword [ebp - 0x244]
push ecx
mov bh, bl
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x439506
push 0
lea eax, [ebp - 0x311]
push eax
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x278], 0x47c540
mov dword [ebp - 0x250], 0x474868
call fcn.00402580
mov byte [ebp - 4], 7
mov edi, 0x104
push edi
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x278]
call fcn.00402910
mov byte [ebp - 4], 8
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.004035c0
push dword [eax]
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x32c]
call fcn.00403460
push edi
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x248]
call fcn.0040f2f0
mov byte [ebp - 4], 9
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
cmp dword [ebp - 0x260], 8
push 0
lea ecx, [ebp - 0x274]
cmovae ecx, dword [ebp - 0x274]
push 0x475c88
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x32c]
call fcn.0040c772
push edi
lea eax, [ebp - 0x218]
push eax
push dword [0x498d58]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x310]
call fcn.0043d00f
mov byte [ebp - 4], 0xa
push 1
lea eax, [ebp - 0x311]
push eax
push str.ISSetup.dll
lea ecx, [ebp - 0x2a8]
call fcn.0040c452
mov byte [ebp - 4], 0xb
push 0
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x310]
call fcn.0043d6fa
cmp eax, 1
setne bl
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a8]
call fcn.00401580
test bl, bl
je 0x4394e6
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x248]
call fcn.0040ef75
jmp 0x4394e8
mov bh, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x310]
call fcn.0043d2df
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x278]
call fcn.00401580
cmp dword [ebp - 0x234], 0
mov edi, 0x1b59
je 0x439583
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00418bbd
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2ac]
call fcn.00419875
test eax, eax
jne 0x439553
mov edi, dword [0x499584]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2ac]
call fcn.00418ede
jmp 0x4395d7
lea eax, [esi + 0x90]
push eax
push dword [ebp - 0x334]
lea ecx, [ebp - 0x2ac]
push dword [ebp - 0x330]
push esi
call fcn.00419e3a
mov edi, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2ac]
call fcn.00418ede
test bh, bh
je 0x4395a2
cmp dword [ebp - 0x230], 8
lea eax, [ebp - 0x244]
cmovae eax, dword [ebp - 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [ebp + 0x38], 0
je 0x4395d7
lea ecx, [ebp - 0x32c]
call fcn.0040c724
mov byte [ebp - 4], 0x11
push dword [0x498d58]
lea ecx, [ebp - 0x32c]
call fcn.0040ca1b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x32c]
call fcn.0040c76b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.00401580
xor ebx, ebx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x320]
call fcn.00410425
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00401580
mov eax, edi
call fcn.004422a8
ret