Function at 0x438ba0
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54c
mov eax, dword [0x459080]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x54c], ecx
push 0x44d828
push 0x1f57
call sym.Install_ring.exe_int___cdecl_NsResSize_int__wchar_t_const__
add esp, 8
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jg 0x438bdf
jmp 0x438e93
mov eax, dword [ebp - 0x228]
push eax
call fcn.00422764
add esp, 4
mov dword [ebp - 0x544], eax
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x220], ecx
mov edx, dword [ebp - 0x220]
push edx
push 0x44d830
push 0x1f57
call sym.Install_ring.exe_int___cdecl_NsResGetBuff_int__wchar_t_const___void__
add esp, 0xc
mov dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x224], eax
push 4
mov ecx, dword [ebp - 0x224]
push ecx
lea edx, [ebp - 0x21c]
push edx
call fcn.004192b0
add esp, 0xc
mov eax, dword [ebp - 0x224]
add eax, 4
mov dword [ebp - 0x224], eax
xor ecx, ecx
mov word [ebp - 0x218], cx
push 0x208
push 0
lea edx, [ebp - 0x216]
push edx
call fcn.004188a0
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
movzx edx, word [ebp + eax*2 - 0x21a]
cmp edx, 0x5c
jne 0x438cb5
push 0x44d838
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x438cc7
push str._nscomponent_setup.exe
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov dword [ebp - 0x22c], 0
jmp 0x438ce2
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x21c]
jge 0x438e78
push 0x310
mov ecx, dword [ebp - 0x224]
push ecx
lea edx, [ebp - 0x540]
push edx
call fcn.004192b0
add esp, 0xc
mov eax, dword [ebp - 0x224]
add eax, 0x310
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x540]
push ecx
call sym.Install_ring.exe_int___cdecl_CheckInstalled_wchar_t_const__
add esp, 4
test eax, eax
jne 0x438e73
lea edx, [ebp - 0x540]
push edx
mov eax, dword [ebp - 0x54c]
add eax, 0xb5e
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.nscomponent_setup.exe
call sym.Install_ring.exe_public:_static_class_CNsProcess____cdecl_CNsProcess::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_void___thiscall_CNsProcess::KillProcess_wchar_t_const__
mov ecx, dword [ebp - 0x54c]
cmp dword [ecx + 4], 0
jne 0x438dd5
push 0
push 0
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x478]
push eax
call sym.Install_ring.exe_public:_static_class_CNsDownload____cdecl_CNsDownload::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsDownload::GetHttpFile_wchar_t_const___wchar_t_const___int__void____stdcall___int__wchar_t_const___long_long___int64___long_long___int64___double__
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x438db8
push 0
push 1
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x218]
push eax
call sym.Install_ring.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
jmp 0x438dd0
push 0
push 1
push 0x44d8c0
lea ecx, [ebp - 0x218]
push ecx
call sym.Install_ring.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
jmp 0x438e73
mov edx, dword [ebp - 0x54c]
mov dword [edx + 0xb54], 0xfffffffe
push 0
push 0xfffffffffffffffe
push 0x7ea
mov eax, dword [ebp - 0x54c]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [ebp - 0x54c]
mov byte [edx + 0xb4d], 1
mov eax, dword [ebp - 0x54c]
mov dword [eax + 0xb50], 0x258
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
push sym.Install_ring.exe_private:_static_void___stdcall_CNsInstaller::DownNotify_int__wchar_t_const___long_long___int64___long_long___int64___double_
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x478]
push eax
call sym.Install_ring.exe_public:_static_class_CNsDownload____cdecl_CNsDownload::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_void___thiscall_CNsDownload::StartDownload_wchar_t_const___wchar_t_const___void____stdcall___int__wchar_t_const___long_long___int64___long_long___int64___double___int_
cmp dword [ebp - 0x234], 0
je 0x438e66
lea ecx, [ebp - 0x270]
push ecx
mov ecx, dword [ebp - 0x54c]
call sym.Install_ring.exe_private:_void___thiscall_CNsInstaller::WaitInstall_wchar_t_const__
jmp 0x438e73
push 0
mov ecx, dword [ebp - 0x54c]
call sym.Install_ring.exe_private:_void___thiscall_CNsInstaller::WaitInstall_wchar_t_const__
jmp 0x438cd3
mov edx, dword [ebp - 0x220]
mov dword [ebp - 0x548], edx
mov eax, dword [ebp - 0x548]
push eax
call fcn.00424395
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041799a
mov esp, ebp
pop ebp
ret