Function at 0x4292c0
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2d76
mov eax, dword fs:[0]
push eax
sub esp, 0x670
mov eax, dword [0x4e500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x660], ecx
mov ax, word [0x4d9e8c]
mov word [ebp - 0x420], ax
push 0x206
push 0
lea ecx, [ebp - 0x41e]
push ecx
call fcn.00487cb0
add esp, 0xc
mov dx, word [0x4d9f14]
mov word [ebp - 0x218], dx
push 0x206
push 0
lea eax, [ebp - 0x216]
push eax
call fcn.00487cb0
add esp, 0xc
mov byte [ebp - 0x65a], 0
mov byte [ebp - 0x659], 0
xor ecx, ecx
mov dword [ebp - 0x648], ecx
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x640], ecx
mov dword [ebp - 0x63c], ecx
xor edx, edx
mov dword [ebp - 0x658], edx
mov dword [ebp - 0x654], edx
mov dword [ebp - 0x650], edx
mov dword [ebp - 0x64c], edx
mov ax, word [0x4d9ff4]
mov word [ebp - 0x628], ax
push 0x206
push 0
lea ecx, [ebp - 0x626]
push ecx
call fcn.00487cb0
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
push str.CUNSvcLaunchUrNotice::LaunchLocalBinary_on_session___d_...
push 0x4e7f50
call fcn.00427440
add esp, 0xc
push 0x104
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x660]
call fcn.0042a640
test eax, eax
je 0x429448
lea ecx, [ebp - 0x420]
push ecx
push str.__installed_file_:__s
push 0x4e7f50
call fcn.00427440
add esp, 0xc
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x429436
lea eax, [ebp - 0x648]
push eax
lea ecx, [ebp - 0x420]
push ecx
call fcn.00426000
add esp, 8
test eax, eax
je 0x42941b
mov byte [ebp - 0x65a], 1
jmp 0x429434
push str.__file_not_trusted.
push 0x4e7f50
call fcn.00427440
add esp, 8
mov byte [ebp - 0x65a], 0
jmp 0x429448
push 0x4da3bc
push 0x4e7f50
call fcn.00427440
add esp, 8
push 0x104
lea edx, [ebp - 0x218]
push edx
mov ecx, dword [ebp - 0x660]
call fcn.0042a820
test eax, eax
je 0x4294ee
lea eax, [ebp - 0x218]
push eax
push str.__downloaded_file_:__s
push 0x4e7f50
call fcn.00427440
add esp, 0xc
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4294dc
lea edx, [ebp - 0x658]
push edx
lea eax, [ebp - 0x218]
push eax
call fcn.00426000
add esp, 8
test eax, eax
je 0x4294b4
mov byte [ebp - 0x659], 1
jmp 0x4294da
push str.__file_not_trusted._delete_file.
push 0x4e7f50
call fcn.00427440
add esp, 8
mov byte [ebp - 0x659], 0
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4294ee
push str.__file_not_exist
push 0x4e7f50
call fcn.00427440
add esp, 8
movzx edx, byte [ebp - 0x65a]
test edx, edx
je 0x429693
movzx eax, byte [ebp - 0x659]
test eax, eax
je 0x429693
push 0xffffffffffffffff
lea ecx, [ebp - 0x648]
push ecx
lea ecx, [ebp - 0x638]
call fcn.004289c0
push 0xffffffffffffffff
lea edx, [ebp - 0x658]
push edx
lea ecx, [ebp - 0x630]
call fcn.004289c0
push 0x4da478
lea eax, [ebp - 0x670]
push eax
lea ecx, [ebp - 0x638]
call fcn.00428ab0
mov dword [ebp - 0x668], eax
mov ecx, dword [ebp - 0x668]
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
push eax
push str.Last_modified_time_of_Installed_UrNotice.exe._:__s
push 0x4e7f50
call fcn.00427440
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x670]
call fcn.0042b340
push str._Y__m__d
lea ecx, [ebp - 0x67c]
push ecx
lea ecx, [ebp - 0x630]
call fcn.00428ab0
mov dword [ebp - 0x674], eax
mov edx, dword [ebp - 0x674]
mov dword [ebp - 0x678], edx
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x678]
mov ecx, dword [eax]
push ecx
push str.Last_modified_time_of_Pre_Downloaded_UrNotice.exe._:__s
push 0x4e7f50
call fcn.00427440
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x67c]
call fcn.0042b340
mov edx, dword [ebp - 0x62c]
push edx
mov eax, dword [ebp - 0x630]
push eax
lea ecx, [ebp - 0x638]
call fcn.00428a70
movzx ecx, al
test ecx, ecx
je 0x42964f
lea edx, [ebp - 0x218]
push edx
push 0x4da578
push 0x4e7f50
call fcn.00427440
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
lea ecx, [ebp - 0x628]
push ecx
call fcn.0048b0bd
add esp, 0xc
test eax, eax
je 0x42964d
xor eax, eax
jmp 0x4297b5
jmp 0x42968e
lea edx, [ebp - 0x420]
push edx
push 0x4da5bc
push 0x4e7f50
call fcn.00427440
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push 0x104
lea ecx, [ebp - 0x628]
push ecx
call fcn.0048b0bd
add esp, 0xc
test eax, eax
je 0x42968e
xor eax, eax
jmp 0x4297b5
jmp 0x42973a
movzx edx, byte [ebp - 0x65a]
test edx, edx
je 0x4296ea
movzx eax, byte [ebp - 0x659]
test eax, eax
jne 0x4296ea
lea ecx, [ebp - 0x420]
push ecx
push str.Launch_installed_binary:__s
push 0x4e7f50
call fcn.00427440
add esp, 0xc
lea edx, [ebp - 0x420]
push edx
push 0x104
lea eax, [ebp - 0x628]
push eax
call fcn.0048b0bd
add esp, 0xc
test eax, eax
je 0x4296e8
xor eax, eax
jmp 0x4297b5
jmp 0x42973a
movzx ecx, byte [ebp - 0x659]
test ecx, ecx
je 0x429736
lea edx, [ebp - 0x218]
push edx
push str.Launch_pre_downloaded_binary:__s
push 0x4e7f50
call fcn.00427440
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
lea ecx, [ebp - 0x628]
push ecx
call fcn.0048b0bd
add esp, 0xc
test eax, eax
je 0x429734
xor eax, eax
jmp 0x4297b5
jmp 0x42973a
xor eax, eax
jmp 0x4297b5
mov dword [ebp - 0x664], 0
jmp 0x429755
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x660]
mov ecx, dword [ebp - 0x664]
cmp ecx, dword [eax]
ja 0x4297b3
push str..___.___.___.___.
lea edx, [ebp - 0x628]
push edx
push 1
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x660]
call fcn.0042ade0
test eax, eax
je 0x429791
mov eax, 1
jmp 0x4297b5
mov ecx, dword [ebp - 0x660]
mov edx, dword [ebp - 0x664]
cmp edx, dword [ecx]
jae 0x4297b1
mov eax, dword [ebp - 0x660]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x429746
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043a792
mov esp, ebp
pop ebp
ret 4