Function at 0x43a18e
Capabilities:
Check if file exists
Delete file
Get common file path
Get file attributes

Disassembly:
push 0x328
mov eax, 0x46f323
call fcn.00443729
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x320], ebx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x318], ebx
mov byte [ebp - 4], 1
push 1
lea eax, [ebp - 0x320]
push eax
push ebx
push 0x3b
lea ecx, [ebp + 8]
call fcn.0041fd0d
mov ecx, dword [ebp - 0x31c]
mov esi, dword [ebp - 0x320]
mov eax, ecx
sub eax, esi
push 0x30
cdq
pop edi
idiv edi
cmp eax, 3
jne 0x43a231
push 1
lea eax, [ebp - 0x311]
push eax
push 0x485198
lea ecx, [ebp - 0x278]
call fcn.004025e0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x320]
call fcn.004301bf
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x278]
call fcn.00401580
mov ecx, dword [ebp - 0x31c]
mov esi, dword [ebp - 0x320]
sub ecx, esi
mov eax, ecx
cdq
idiv edi
cmp eax, 4
je 0x43a245
push 0xfffffffffffffffc
pop edi
jmp 0x43a4fa
lea eax, [esi + 0x34]
cmp dword [eax + 0x14], 8
jb 0x43a250
mov eax, dword [eax]
push eax
call fcn.00444faf
pop ecx
lea ecx, [esi + 0x64]
mov dword [ebp - 0x330], eax
cmp dword [ecx + 0x14], 8
jb 0x43a268
mov ecx, dword [ecx]
push ecx
call fcn.00444faf
mov dword [ebp - 0x334], eax
lea eax, [ebp - 0x248]
push eax
call fcn.00419936
pop ecx
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x230], 8
lea ecx, [ebp - 0x244]
cmovae ecx, dword [ebp - 0x244]
push ecx
mov bh, bl
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x43a418
push 0
lea eax, [ebp - 0x311]
push eax
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x278], 0x477ab0
mov dword [ebp - 0x250], 0x478490
call fcn.00402580
mov byte [ebp - 4], 7
mov edi, 0x104
push edi
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x278]
call fcn.00402910
mov byte [ebp - 4], 8
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.004035c0
push dword [eax]
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x32c]
call fcn.00403460
push edi
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x248]
call fcn.0040f5d4
mov byte [ebp - 4], 9
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f579
push dword [eax]
cmp dword [ebp - 0x260], 8
push 0
lea ecx, [ebp - 0x274]
cmovae ecx, dword [ebp - 0x274]
push 0x47e50c
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x32c]
call fcn.0040cd3a
push edi
lea eax, [ebp - 0x218]
push eax
push dword [0x4a5ff8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x310]
call fcn.0043e575
mov byte [ebp - 4], 0xa
push 1
lea eax, [ebp - 0x311]
push eax
push str.ISSetup.dll
lea ecx, [ebp - 0x2a8]
call fcn.0040c97a
mov byte [ebp - 4], 0xb
push 0
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x310]
call fcn.0043ecfa
cmp eax, 1
setne bl
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a8]
call fcn.00401580
test bl, bl
je 0x43a3f8
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x248]
call fcn.0040f2bf
jmp 0x43a3fa
mov bh, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x310]
call fcn.0043e89d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x278]
call fcn.00401580
cmp dword [ebp - 0x234], 0
mov edi, 0x1b59
je 0x43a495
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.004192f7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2ac]
call fcn.00419fb7
test eax, eax
jne 0x43a465
mov edi, dword [0x4a6824]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2ac]
call fcn.00419507
jmp 0x43a4e9
lea eax, [esi + 0x90]
push eax
push dword [ebp - 0x334]
lea ecx, [ebp - 0x2ac]
push dword [ebp - 0x330]
push esi
call fcn.0041a698
mov edi, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2ac]
call fcn.00419507
test bh, bh
je 0x43a4b4
cmp dword [ebp - 0x230], 8
lea eax, [ebp - 0x244]
cmovae eax, dword [ebp - 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [ebp + 0x38], 0
je 0x43a4e9
lea ecx, [ebp - 0x32c]
call fcn.0040cc42
mov byte [ebp - 4], 0x11
push dword [0x4a5ff8]
lea ecx, [ebp - 0x32c]
call fcn.0040cfbe
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x32c]
call fcn.0040cd33
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.00401580
xor ebx, ebx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x320]
call fcn.0042c6d8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00401580
mov eax, edi
call fcn.004436d8
ret