Function at 0x4fe920
Capabilities:
Check if file exists
Delete file
Get common file path
Get file attributes
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55ea5e
mov eax, dword fs:[0]
push eax
sub esp, 0x2b8
mov eax, dword [0x5c30d8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x23c]
xor eax, eax
mov dword [ebp - 0x2c4], ebx
push 0xffffffffffffffff
push eax
push esi
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x228], 7
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], ax
call fcn.00499820
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x2bc]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x2bc], 0x3f
call fcn.004ff840
cmp eax, 0xffffffff
je 0x4fea4e
push eax
push 0
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x23c]
call fcn.004a5f90
mov esi, eax
lea eax, [ebp - 0x23c]
cmp eax, esi
je 0x4fea26
mov eax, dword [ebp - 0x228]
cmp eax, 8
jb 0x4fe9fd
inc eax
lea ecx, [ebp - 0x23c]
push eax
push dword [ebp - 0x23c]
call fcn.00499ac0
xor eax, eax
mov dword [ebp - 0x228], 7
push esi
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], ax
call fcn.004a50e0
mov eax, dword [ebp - 0x270]
mov byte [ebp - 4], 0
cmp eax, 8
jb 0x4fea48
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00499ac0
mov esi, dword [ebp - 0x2c0]
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x2bc]
mov dword [ebp - 0x2bc], 0x2f
push eax
lea ecx, [ebp - 0x23c]
call fcn.004ff840
cmp eax, 0xffffffff
je 0x4feb0b
inc eax
cmp eax, dword [esi + 0x10]
jae 0x4feb0b
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x23c]
call fcn.004a5f90
mov esi, eax
lea eax, [ebp - 0x23c]
cmp eax, esi
je 0x4feae9
mov eax, dword [ebp - 0x228]
cmp eax, 8
jb 0x4feac0
inc eax
lea ecx, [ebp - 0x23c]
push eax
push dword [ebp - 0x23c]
call fcn.00499ac0
xor eax, eax
mov dword [ebp - 0x228], 7
push esi
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], ax
call fcn.004a50e0
mov eax, dword [ebp - 0x270]
mov byte [ebp - 4], 0
cmp eax, 8
jb 0x4feb0b
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00499ac0
mov eax, dword [ebp - 0x22c]
cmp eax, 4
jae 0x4feb3f
cmp dword [ebp - 0x228], 8
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x22c], 0
cmovae eax, dword [ebp - 0x23c]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x22c]
or esi, 0xffffffff
mov dword [ebp - 0x2bc], esi
test eax, eax
je 0x4fece1
lea ecx, [ebp - 0x23c]
push ecx
lea eax, [ebx + 0x20]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.004fe580
push str..temp
push eax
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 3
push eax
call fcn.004fe520
add esp, 0x18
mov eax, dword [ebp - 0x270]
mov byte [ebp - 4], 5
cmp eax, 8
jb 0x4feba2
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00499ac0
xor eax, eax
mov dword [ebp - 0x270], 7
cmp dword [ebp - 0x258], 8
mov word [ebp - 0x284], ax
lea eax, [ebp - 0x26c]
cmovae eax, dword [ebp - 0x26c]
push eax
mov dword [ebp - 0x274], 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 0xffffffff
je 0x4fec3f
cmp dword [ebp - 0x258], 8
lea eax, [ebp - 0x26c]
cmovae eax, dword [ebp - 0x26c]
push eax
call edi
cmp dword [ebp - 0x258], 8
lea eax, [ebp - 0x26c]
cmovae eax, dword [ebp - 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4fec3f
cmp dword [ebp - 0x258], 8
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x25c], 0
cmovae eax, dword [ebp - 0x26c]
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x25c], 0
je 0x4fec99
cmp dword [ebp - 0x258], 8
lea eax, [ebp - 0x26c]
push 0
cmovae eax, dword [ebp - 0x26c]
push 0x80
push 1
push 0
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0x2bc], esi
cmp esi, 0xffffffff
je 0x4fec99
lea ecx, [ebx + 0x38]
lea eax, [ebp - 0x26c]
cmp ecx, eax
je 0x4fec99
push 0xffffffffffffffff
push 0
push eax
call fcn.00499820
mov eax, dword [ebp - 0x258]
mov byte [ebp - 4], 0
cmp eax, 8
jb 0x4fecbb
inc eax
lea ecx, [ebp - 0x26c]
push eax
push dword [ebp - 0x26c]
call fcn.00499ac0
xor eax, eax
mov dword [ebp - 0x258], 7
mov dword [ebp - 0x25c], 0
mov word [ebp - 0x26c], ax
cmp esi, 0xffffffff
jne 0x4fefae
push 9
xor eax, eax
mov dword [ebp - 0x288], 7
push str.Setup.exe
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x28c], 0
mov word [ebp - 0x29c], ax
call fcn.00499940
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 6
push eax
lea esi, [ebx + 0x20]
lea eax, [ebp - 0x284]
push esi
push eax
call fcn.004fe580
push str..temp
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 7
push eax
call fcn.004fe520
add esp, 0x18
mov eax, dword [ebp - 0x270]
mov byte [ebp - 4], 9
cmp eax, 8
jb 0x4fed66
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00499ac0
xor eax, eax
mov dword [ebp - 0x270], 7
cmp dword [ebp - 0x240], 8
mov word [ebp - 0x284], ax
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
mov dword [ebp - 0x274], 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 0xffffffff
je 0x4fee03
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
call edi
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4fee03
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
mov dword [ebp - 0x244], 0
cmovae eax, dword [ebp - 0x254]
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x244], 0
jne 0x4feee1
push 0x20c
lea eax, [ebp - 0x224]
push 0
push eax
call fcn.00507800
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x4fee2e
mov esi, dword [esi]
lea eax, [ebp - 0x224]
push eax
push 1
push 0x56e228
push esi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x4feea2
xor eax, eax
lea ecx, [ebp - 0x254]
mov word [ebp - 0x1a], ax
lea eax, [ebp - 0x224]
push eax
call fcn.004a1230
push 0xffffffffffffffff
push 0x561408
lea ecx, [ebp - 0x254]
call fcn.004ff770
cmp eax, 0xffffffff
je 0x4feea2
push eax
push 0
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x254]
call fcn.004a5f90
push eax
lea ecx, [ebp - 0x254]
call fcn.004a6290
lea ecx, [ebp - 0x2b4]
call fcn.004a0f40
cmp dword [ebp - 0x244], 0
lea ecx, [ebp - 0x254]
jne 0x4feec3
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x29c]
push eax
call fcn.00499820
jmp 0x4feecd
push str._Setup.exe
call fcn.004a1280
cmp dword [ebx + 0x48], 0
je 0x4feee1
cmp dword [ebx + 0x4c], 8
lea eax, [ebx + 0x38]
jb 0x4feede
mov eax, dword [eax]
push eax
call edi
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
call edi
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
push 0
cmovae eax, dword [ebp - 0x254]
push 0x80
push 1
push 0
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0x2bc], esi
cmp esi, 0xffffffff
je 0x4fef49
lea ecx, [ebx + 0x38]
lea eax, [ebp - 0x254]
cmp ecx, eax
je 0x4fef49
push 0xffffffffffffffff
push 0
push eax
call fcn.00499820
lea ecx, [ebp - 0x254]
call fcn.004a0f40
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], 0
call fcn.004a0f40
cmp esi, 0xffffffff
jne 0x4fefae
cmp dword [ebx], 0
je 0x4fef83
sub esp, 0x18
mov ecx, esp
push 0x56e248
call fcn.004a0c80
mov ecx, dword [ebx]
mov eax, dword [ecx]
call dword [eax + 0x14]
lea ecx, [ebp - 0x23c]
call fcn.004a0f40
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004bcc20
mov esp, ebp
pop ebp
ret 0xc
push dword [ebp - 0x2c0]
mov ecx, ebx
mov byte [ebp - 4], 0xa
push dword [ebp + 8]
push esi
call fcn.004ff0d0
push esi
mov byte [ebp - 0x2b5], al
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x2b5], 0
mov dword [ebp - 0x2bc], 0xffffffff
jne 0x4ff004
add ebx, 0x38
cmp dword [ebx + 0x14], 8
jb 0x4fefee
mov ebx, dword [ebx]
push ebx
call edi
lea ecx, [ebp - 0x23c]
call fcn.004a0f40
mov al, byte [ebp - 0x2b5]
jmp 0x4fef90
mov eax, dword [ebx + 0x48]
lea edi, [ebx + 0x38]
add eax, 0xfffffffb
mov ecx, edi
push eax
push 0
lea eax, [ebp - 0x2b4]
push eax
call fcn.004a5f90
lea esi, [ebx + 8]
push eax
mov ecx, esi
call fcn.004a6290
lea ecx, [ebp - 0x2b4]
call fcn.004a0f40
cmp dword [esi + 0x14], 8
jb 0x4ff03e
mov eax, dword [esi]
jmp 0x4ff040
mov eax, esi
cmp dword [edi + 0x14], 8
jb 0x4ff04a
mov ecx, dword [edi]
jmp 0x4ff04c
mov ecx, edi
push eax
push ecx
call fcn.0051a429
add esp, 8
test eax, eax
je 0x4ff087
cmp dword [esi + 0x14], 8
jb 0x4ff064
mov eax, dword [esi]
jmp 0x4ff066
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esi + 0x14], 8
jb 0x4ff075
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x4ff07d
mov edi, dword [edi]
push esi
push edi
call fcn.0051a429
add esp, 8
lea ecx, [ebp - 0x23c]
call fcn.004a0f40
mov al, byte [ebp - 0x2b5]
jmp 0x4fef90