Function at 0x43fb80
Capabilities:
Delete file
Get common file path
Move file

Disassembly:
mov eax, 0x480bd0
call fcn.0045c348
sub esp, 0x114
mov eax, dword [0x4a84c4]
push ebx
push esi
push edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
mov edi, dword [ecx + 0x108]
and dword [ebp - 4], 0
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ebx, 0x49e93c
test edi, edi
je 0x43fc06
mov eax, edi
mov edi, dword [edi]
push ebx
mov eax, dword [eax + 8]
mov dword [ebp - 0x10], eax
lea eax, [ecx + 0xc0]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0046b492
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.0046b336
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.0046b249
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
add eax, 8
push eax
call fcn.0046b615
push dword [ebp - 0x14]
call esi
mov ecx, dword [ebp - 0x18]
test edi, edi
jne 0x43fbb7
mov edi, dword [ecx + 0x3f0]
test edi, edi
je 0x43fc5f
mov eax, edi
mov edi, dword [edi]
push ebx
mov eax, dword [eax + 8]
mov dword [ebp - 0x1c], eax
lea eax, [ecx + 0xc0]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0046b492
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.0046b336
and byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.0046b249
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x14]
add eax, 0xc
push eax
call fcn.0046b615
push dword [ebp - 0x14]
call esi
mov ecx, dword [ebp - 0x18]
test edi, edi
jne 0x43fc10
xor ebx, ebx
lea edi, [ecx + 0xc0]
push ebx
lea eax, [ebp - 0x14]
push dword [edi]
push str._s_suf6lng._d
push eax
call fcn.00468cd1
add esp, 0x10
push dword [ebp - 0x14]
call esi
inc ebx
cmp ebx, 0x65
jl 0x43fc67
push str.irsetup.avi
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.0046b492
push dword [eax]
call esi
lea ecx, [ebp - 0x10]
call fcn.0046b249
push str.irsetup.ini
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.0046b492
push dword [eax]
call esi
lea ecx, [ebp - 0x10]
call fcn.0046b249
push str.irsetup.dat
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.0046b492
push dword [eax]
call esi
lea ecx, [ebp - 0x10]
call fcn.0046b249
mov ebx, 0x4a2a9c
lea eax, [ebp - 0x10]
push ebx
push edi
push eax
call fcn.0046b492
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExA]
push 4
push 0
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.0046b249
lea eax, [ebp - 0x120]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x120]
push eax
call fcn.0045cbd0
cmp byte [ebp + eax - 0x121], 0x5c
pop ecx
jne 0x43fd3c
lea eax, [ebp - 0x120]
push eax
call fcn.0045cbd0
and byte [ebp + eax - 0x121], 0
pop ecx
mov eax, dword [edi]
lea ecx, [ebp - 0x120]
push ecx
push eax
call fcn.0045c985
pop ecx
test eax, eax
pop ecx
je 0x43fd5a
mov eax, dword [edi]
push 4
push 0
push eax
call esi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp dword [eax + 0x134], ecx
jne 0x43fd77
cmp dword [eax + 0x138], ecx
jne 0x43fd77
cmp dword [eax + 0x13c], ecx
je 0x43fda7
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x4a9d28
call fcn.0046b2b7
push ecx
mov byte [ebp - 4], 3
mov eax, esp
mov dword [ebp - 0x18], esp
push ebx
push edi
push eax
call fcn.0046b492
and byte [ebp - 4], 0
call fcn.00429597
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0046b249
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret