Function at 0x43fe04
Capabilities:
Check if file exists
Get file attributes
Set registry value

Disassembly:
sub esp, 0x220
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x18]
call fcn.0040b6e3
mov eax, dword [edi + 0x54]
xor ebx, ebx
add eax, 0x6ac
mov dword [esp + 0x10], ebx
push eax
mov eax, ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall_s
push eax
call fcn.0040c813
add esp, 0xc
lea eax, [esp + 0x14]
mov edx, 0x20206
mov ecx, 0x20106
push eax
lea eax, [esp + 0x14]
push eax
mov eax, dword [edi + 0x54]
push ebx
cmp dword [eax + 4], 2
cmovne ecx, edx
push ecx
push ebx
push ebx
push ebx
push dword [esp + 0x38]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x440069
mov edx, dword [edi + 0x54]
add edx, 0x94
je 0x43fe93
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x43fe82
sub ecx, esi
sar ecx, 1
jmp 0x43fe95
mov ecx, ebx
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea eax, [ecx*2 + 2]
push eax
push edx
push 1
push ebx
push str.DisplayName
push dword [esp + 0x24]
call esi
mov edx, dword [edi + 0x54]
add edx, 0x29c
je 0x43fed3
mov ecx, edx
lea ebp, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x43fec2
sub ecx, ebp
sar ecx, 1
jmp 0x43fed5
mov ecx, ebx
lea eax, [ecx*2 + 2]
push eax
push edx
push 1
push ebx
push str.InstallLocation
push dword [esp + 0x24]
call esi
mov eax, dword [edi + 0x54]
add eax, 0x29c
push eax
lea eax, [esp + 0x1c]
push str._s_terminal.ico
push eax
call fcn.0040c813
add esp, 0xc
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x43ff39
mov ecx, dword [edi + 0x54]
lea eax, [ecx + 0x4a4]
push eax
lea eax, [ecx + 0x29c]
push eax
lea eax, [esp + 0x20]
push 0x45c788
push eax
call fcn.0040c813
add esp, 0x10
mov eax, dword [esp + 0x20]
lea eax, [eax*2 + 2]
push eax
push dword [esp + 0x20]
push 1
push ebx
push str.DisplayIcon
push dword [esp + 0x24]
call esi
push 0x36
push 0x461c40
push 1
push ebx
push str.Publisher
push dword [esp + 0x24]
call esi
push 0x38
mov ebp, 0x461c88
push ebp
push 1
push ebx
push str.HelpLink
push dword [esp + 0x24]
call esi
push 0x38
push ebp
push 1
push ebx
push str.UrlInfoAbout
push dword [esp + 0x24]
call esi
mov ebp, dword [esp + 0x234]
mov eax, dword [ebp + 8]
lea eax, [eax*2 + 2]
push eax
push dword [ebp + 4]
push 1
push ebx
push str.UninstallString
push dword [esp + 0x24]
call esi
mov eax, dword [edi + 0x54]
push 0xa
cmp dword [eax + 8], 7
jae 0x43ffdd
push str.5.00
push 1
push ebx
push str.DisplayVersion
push dword [esp + 0x24]
call esi
push 4
push 0x461d3c
jmp 0x43fff7
push str.4.00
push 1
push ebx
push str.DisplayVersion
push dword [esp + 0x24]
call esi
push 4
push 0x461d88
push 1
push ebx
push 0x461d40
push dword [esp + 0x24]
call esi
push 4
push 0x461d5c
push 1
push ebx
push 0x461d60
push dword [esp + 0x24]
call esi
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [edi + 0x20d4]
call fcn.00401782
test al, al
jne 0x440067
push dword [edi + 0x20d8]
lea eax, [esp + 0x1c]
push 0x461d8c
push eax
call fcn.0040c813
mov eax, dword [edi + 0x54]
add esp, 0xc
add eax, 0x29c
push 1
push dword [ebp + 4]
push ecx
push ecx
push dword [esp + 0x2c]
push dword [ebp + 4]
push eax
call fcn.0043ad7c
mov bl, 1
pop edi
pop esi
pop ebp
mov al, bl
pop ebx
add esp, 0x220
ret 4