Function at 0x43d361
Capabilities:
Delete file
Move file

Disassembly:
push 0x128
mov eax, 0x469d83
call fcn.004414e8
xor eax, eax
mov ebx, eax
mov dword [ebp - 0xf8], ebx
mov esi, eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], eax
call fcn.0043d0ca
test al, al
jne 0x43d3a8
call fcn.0043d0e2
test al, al
mov eax, SysReAllocStringLen
je 0x43d3ad
mov eax, reloc.OLEAUT32.dll_SysReAllocString
push 0x20019
push str.Software
push eax
lea ecx, [ebp - 0x114]
call fcn.004013d0
test eax, eax
jne 0x43d651
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
push 0x2001f
push str.InstallShieldPendingOperation
push dword [ebp - 0x114]
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 1
call fcn.004013d0
test eax, eax
jne 0x43d646
push str.Count
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x108]
call fcn.004349dc
mov ecx, dword [ebp - 0xfc]
xor edx, edx
test eax, eax
cmovne ecx, edx
xor edi, edi
inc edi
mov dword [ebp - 0xfc], ecx
cmp ecx, edi
jb 0x43d636
push 0
lea eax, [ebp - 0xf1]
push eax
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xc0], 0x4745e4
mov dword [ebp - 0x98], 0x46ef78
call fcn.004033a0
push 0
lea eax, [ebp - 0xf1]
push eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x4745e4
mov dword [ebp - 0xc8], 0x46ef78
call fcn.004033a0
mov eax, 0x104
push edi
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x90]
push str.dest_d
push eax
mov byte [ebp - 4], 3
call dword [sym.imp.USER32.dll_wsprintfW]
push edi
lea eax, [ebp - 0x50]
push str.source_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
lea eax, [ebp - 0x134]
push 0x104
push eax
lea ecx, [ebp - 0xf0]
call fcn.004076d5
mov ecx, dword [eax]
or ebx, 1
mov byte [ebp - 4], 4
mov dword [ebp - 0xf8], ebx
mov byte [eax + 4], 1
call fcn.0040767a
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x90]
push ecx
push dword [eax]
lea ecx, [ebp - 0x108]
call fcn.00434a12
test eax, eax
jne 0x43d567
push 0x104
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0xc0]
call fcn.004076d5
mov ecx, dword [eax]
or ebx, 2
mov dword [ebp - 4], 5
mov dword [ebp - 0xf8], ebx
mov byte [eax + 4], 1
call fcn.0040767a
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x50]
push ecx
push dword [eax]
lea ecx, [ebp - 0x108]
call fcn.00434a12
mov byte [ebp - 0xf1], 1
test eax, eax
je 0x43d56e
mov byte [ebp - 0xf1], 0
mov dword [ebp - 4], 4
test bl, 2
je 0x43d58e
and ebx, 0xfffffffd
lea ecx, [ebp - 0x128]
mov dword [ebp - 0xf8], ebx
call fcn.00406d8b
mov dword [ebp - 4], 3
test bl, 1
je 0x43d5a8
lea ecx, [ebp - 0x134]
and ebx, 0xfffffffe
call fcn.00406d8b
cmp byte [ebp - 0xf1], 0
je 0x43d60f
cmp dword [ebp - 0xdc], 0
lea eax, [ebp - 0xbc]
jne 0x43d5d7
cmp dword [ebp - 0xa8], 8
cmovae eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x43d60f
cmp dword [ebp - 0xd8], 8
lea ecx, [ebp - 0xec]
cmovae ecx, dword [ebp - 0xec]
cmp dword [ebp - 0xa8], 8
push 1
cmovae eax, dword [ebp - 0xbc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x43d60f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
lea ecx, [ebp - 0xf0]
call fcn.00401500
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 1
call fcn.00401500
inc edi
cmp edi, dword [ebp - 0xfc]
jbe 0x43d439
push str.InstallShieldPendingOperation
lea ecx, [ebp - 0x114]
call fcn.0041b68b
lea ecx, [ebp - 0x108]
call fcn.004013a0
lea ecx, [ebp - 0x114]
call fcn.004013a0
movzx eax, si
or eax, 0x80070000
test esi, esi
cmovle eax, esi
call fcn.00441497
ret