Function at 0x43472a
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path

Disassembly:
sub esp, 0x414
push ebx
push ebp
push esi
push edi
xor eax, eax
mov esi, 0x206
push esi
mov word [esp + 0x21c], ax
xor ebp, ebp
lea eax, [esp + 0x21e]
push ebp
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push esi
mov word [esp + 0x20], ax
lea eax, [esp + 0x22]
push ebp
push eax
call sub.msvcrt.dll_memset
mov ebx, dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea eax, [esp + 0x230]
add esp, 0x18
push eax
push ebp
push ebp
push 0x10
push ebp
call ebx
lea eax, [esp + 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
push 0x4586c4
lea eax, [esp + 0x21c]
push eax
push 0x456b58
lea eax, [esp + 0x1c]
push 0x104
push eax
call fcn.0040203a
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [esp + 0x24]
add esp, 0x14
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x4347cf
lea eax, [esp + 0x10]
push eax
call edi
push 0x4588f0
lea eax, [esp + 0x21c]
push eax
push 0x456b58
lea eax, [esp + 0x1c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x14
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x434805
lea eax, [esp + 0x10]
push eax
call edi
push 0x208
lea eax, [esp + 0x21c]
push ebp
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [esp + 0x218]
push eax
push ebp
push ebp
push 0x1a
push ebp
call ebx
test eax, eax
jns 0x434835
xor eax, eax
jmp 0x434a9c
call fcn.00433535
test eax, eax
je 0x434aa7
push 0x4586c4
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedTaskBar_
lea eax, [esp + 0x220]
mov ebx, str._s_s_s
push eax
push ebx
lea eax, [esp + 0x20]
push 0x104
push eax
call fcn.0040203a
add esp, 0x18
lea eax, [esp + 0x10]
push eax
call esi
mov ebp, dword [sym.imp.SHELL32.dll_ShellExecuteW]
test eax, eax
je 0x43488f
xor ecx, ecx
lea eax, [esp + 0x10]
push ecx
push ecx
push ecx
push eax
push str.taskbarunpin
push ecx
call ebp
push 0x208
lea eax, [esp + 0x14]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x4586c4
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedStartMenu_
lea eax, [esp + 0x22c]
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4348e2
xor ecx, ecx
lea eax, [esp + 0x10]
push ecx
push ecx
push ecx
push eax
push str.startunpin
push ecx
call ebp
push 0x208
lea eax, [esp + 0x14]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x4588f0
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedTaskBar_
lea eax, [esp + 0x22c]
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x434935
xor ecx, ecx
lea eax, [esp + 0x10]
push ecx
push ecx
push ecx
push eax
push str.taskbarunpin
push ecx
call ebp
push 0x208
lea eax, [esp + 0x14]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x4588f0
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedStartMenu_
lea eax, [esp + 0x22c]
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x434988
xor ecx, ecx
lea eax, [esp + 0x10]
push ecx
push ecx
push ecx
push eax
push str.startunpin
push ecx
call ebp
push 0x208
lea eax, [esp + 0x14]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x4586dc
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedStartMenu_
lea eax, [esp + 0x22c]
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4349db
xor ecx, ecx
lea eax, [esp + 0x10]
push ecx
push ecx
push ecx
push eax
push str.startunpin
push ecx
call ebp
xor ebp, ebp
push 0x208
lea eax, [esp + 0x21c]
push ebp
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [esp + 0x218]
push eax
push ebp
push ebp
push 2
push ebp
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea eax, [esp + 0x218]
push eax
call ebx
push 0x208
lea eax, [esp + 0x14]
push ebp
push eax
call sub.msvcrt.dll_memset
push 0x4588f0
lea eax, [esp + 0x228]
push eax
push 0x456b58
lea eax, [esp + 0x28]
push 0x104
push eax
call fcn.0040203a
add esp, 0x20
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x434a5c
lea eax, [esp + 0x10]
push eax
call edi
push 0x453e7c
lea eax, [esp + 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [esp + 0x218]
push eax
call ebx
lea eax, [esp + 0x218]
push eax
call esi
test eax, eax
je 0x434a99
xor edx, edx
lea ecx, [esp + 0x218]
push 1
inc edx
call fcn.0043415f
pop ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x414
ret
push 0x208
lea eax, [esp + 0x14]
push ebp
push eax
call sub.msvcrt.dll_memset
push 0x4586c4
push str.MicrosoftInternet_ExplorerQuick_Launch_
lea eax, [esp + 0x22c]
mov ebx, str._s_s_s
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x434af3
lea eax, [esp + 0x10]
push eax
call edi
push 0x208
lea eax, [esp + 0x14]
push ebp
push eax
call sub.msvcrt.dll_memset
push 0x4588f0
push str.MicrosoftInternet_ExplorerQuick_Launch_
lea eax, [esp + 0x22c]
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x434b3a
lea eax, [esp + 0x10]
push eax
call edi
push 0x208
lea eax, [esp + 0x14]
push ebp
push eax
call sub.msvcrt.dll_memset
push 0x4586dc
push str.MicrosoftInternet_ExplorerQuick_Launch_
lea eax, [esp + 0x22c]
push eax
push ebx
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.0040203a
add esp, 0x24
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4349dd
lea eax, [esp + 0x10]
push eax
call edi
jmp 0x4349dd