Function at 0x43b1b0
Capabilities:
Accept command line arguments
Check if file exists

Disassembly:
push ebp
lea ebp, [esp - 0x340]
sub esp, 0x3bc
mov eax, dword [0x536f50]
xor eax, ebp
mov dword [ebp + 0x33c], eax
mov eax, dword [ebp + 0x348]
push esi
mov esi, dword [ebp + 0x350]
lea ecx, [ebp - 0x7c]
push edi
push ecx
mov dword [0x53a938], eax
call fcn.00439830
add esp, 4
push 0xffffffffffffffff
push 0
push eax
mov ecx, 0x535f6c
call fcn.00403fb0
mov edi, 0x10
cmp dword [ebp - 0x64], edi
jb 0x43b20f
mov edx, dword [ebp - 0x78]
push edx
call fcn.004798f2
add esp, 4
lea eax, [ebp - 0x7c]
push eax
call fcn.00439860
add esp, 4
push 0xffffffffffffffff
push 0
push eax
mov ecx, 0x535f88
call fcn.00403fb0
cmp dword [ebp - 0x64], edi
jb 0x43b23b
mov ecx, dword [ebp - 0x78]
push ecx
call fcn.004798f2
add esp, 4
cmp dword [0x535f80], 0
je 0x43b4ac
cmp dword [0x535f9c], 0
je 0x43b4ac
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov ecx, 0x53a980
call fcn.00427a80
push esi
call fcn.004371f0
mov edi, eax
call fcn.0043ad10
xor edx, edx
push 0x1f2
push edx
lea eax, [ebp + 0x3a]
push eax
mov word [ebp + 0x38], dx
call fcn.0047a920
push 0x1f4
lea ecx, [ebp + 0x38]
push ecx
lea edx, [ebp - 0x48]
push 0x80
push edx
call fcn.0042d190
add esp, 0x20
lea eax, [ebp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x43b2b9
xor eax, eax
jmp 0x43b2d2
lea esi, [eax + eax]
mov eax, esi
call fcn.0047d7d0
mov eax, esp
push 3
push esi
lea ecx, [ebp + 0x38]
push ecx
push eax
call fcn.00437460
lea edx, [ebp + 0x240]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x43b2d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x43b498
push str.KuaiZip.exe
call fcn.00437120
add esp, 4
test eax, eax
jne 0x43b498
xor esi, esi
cmp edi, esi
je 0x43b34b
lea ecx, [ebp + 0x22c]
call fcn.0042c7c0
lea edx, [ebp - 0x50]
push edx
push esi
push esi
push esi
lea ecx, [ebp + 0x22c]
mov dword [ebp + 0x26c], 1
mov dword [ebp + 0x338], esi
call fcn.0042fec0
lea ecx, [ebp + 0x22c]
call fcn.0042c8b0
jmp 0x43b42b
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x58], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [ebp - 0x58], 1
jle 0x43b454
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00401870
cmp dword [0x535fa0], 0x10
mov edi, dword [0x535f8c]
jae 0x43b389
mov edi, 0x535f8c
lea ecx, [ebp - 0x50]
call fcn.0042a340
push eax
call fcn.0047be2e
add esp, 4
push edi
mov esi, eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x43b3cb
push esi
push 0
push 0x100008
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x43b3cb
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x50]
call fcn.004018f0
push str.2527DE55_109B_4928_8FB4_C03828EE159F
lea ecx, [ebp - 0x60]
call fcn.0043efd0
lea ecx, [ebp - 0x60]
call fcn.0043f020
test eax, eax
jne 0x43b40b
push eax
push 0x4df288
push 0x4e189c
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x60]
call fcn.0043f000
jmp 0x43b4ac
lea ecx, [ebp - 0x49]
call fcn.0041dbc0
lea ecx, [ebp - 0x49]
call fcn.0041dc50
lea ecx, [ebp - 0x49]
call fcn.004a3f00
lea ecx, [ebp - 0x60]
call fcn.0043f000
cmp byte [0x53a93c], 0
je 0x43b442
push 0
push 0
mov ecx, 0x53a980
call fcn.00425b00
mov ecx, 0x53a980
call fcn.0041f810
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x43b4ac
push str.2527DE55_109B_4928_8FB4_C03828EE159F
lea ecx, [ebp - 0x54]
call fcn.0043efd0
lea ecx, [ebp - 0x54]
call fcn.0043f020
test eax, eax
jne 0x43b489
push esi
push 0x4df288
push 0x4e189c
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x54]
call fcn.0043f000
jmp 0x43b4ac
call fcn.00437260
lea ecx, [ebp - 0x54]
call fcn.0043f000
jmp 0x43b4ac
push 0x10
push 0x4e1894
push 0x4e1840
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
lea esp, [ebp - 0x84]
pop edi
pop esi
mov ecx, dword [ebp + 0x33c]
xor ecx, ebp
call fcn.0047a885
add ebp, 0x340
mov esp, ebp
pop ebp
ret 0x10