Function at 0x43e2d5
Capabilities:
Delete file

Disassembly:
push 0x304
mov eax, 0x5e4d81
call fcn.0059bbd7
mov edi, ecx
mov dword [ebp - 0x2f8], edi
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x310]
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp + 0x10]
push ebx
mov dword [ebp - 0x300], eax
call fcn.00404ba6
mov dword [ebp - 4], ebx
mov ecx, esi
cmp dword [esi + 0x14], 0x10
jb 0x43e31c
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
lea eax, [ebp - 0x310]
push eax
call fcn.0043b9c3
pop ecx
lea ecx, [ebp - 0x310]
call fcn.004056d7
test al, al
jne 0x43e357
push 0xdf
push str.BeautifyStartMenu::UpdateStartMenuConfig
push str.__s__d___json_parse_error_
call fcn.0040a649
add esp, 0xc
jmp 0x43e53d
push 0x63c760
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x2f4], ebx
call fcn.00405401
lea edx, [ebp - 0x2f4]
mov ecx, eax
call fcn.0043bf56
lea ecx, [ebp - 0x230]
call fcn.004d6c63
push 0x63c668
mov edx, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x260]
call fcn.0041152a
pop ecx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 3
call fcn.0040b67e
cmp dword [ebp - 0x2f4], 1
jne 0x43e3b9
lea eax, [edi + 0x54]
jmp 0x43e3c5
cmp dword [ebp - 0x2f4], 2
jne 0x43e3d1
lea eax, [edi + 0x3c]
push eax
lea ecx, [ebp - 0x260]
call fcn.0041322b
lea ecx, [ebp - 0x2f0]
call fcn.00406b04
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x248]
push esi
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
call fcn.00404267
cmp dword [ebp + 0x14], 2
mov byte [ebp - 4], 5
jne 0x43e552
push 0x208
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.005b24a0
mov eax, dword [ebp - 0x2fc]
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x43e429
mov eax, dword [eax]
push ebx
lea ecx, [ebp - 0x218]
push ecx
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x18
lea eax, [ebp - 0x218]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0x230]
call fcn.00435a2c
add esp, 0x18
mov edx, dword [ebp - 0x300]
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004168cd
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.00404812
push str.path
lea ecx, [ebp - 0x310]
call fcn.00405401
mov ecx, dword [ebp - 0x300]
mov edx, eax
call fcn.0043bd2f
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00406b1f
push eax
lea ecx, [ebp - 0x248]
call fcn.00409145
lea ecx, [ebp - 0x230]
call fcn.00404812
cmp dword [ebp - 0x234], 0x10
lea edx, [ebp - 0x248]
push dword [ebp - 0x238]
cmovae edx, dword [ebp - 0x248]
lea ecx, [ebp - 0x260]
cmp dword [ebp - 0x24c], 8
cmovae ecx, dword [ebp - 0x260]
call fcn.0041e514
pop ecx
lea eax, [ebp - 0x248]
lea esi, [edi + 0x6c]
push eax
mov ecx, esi
call fcn.00404698
push esi
lea ecx, [edi + 0x84]
call fcn.004441f2
lea ecx, [ebp - 0x248]
call fcn.00404812
lea ecx, [ebp - 0x2f0]
call fcn.004065e4
lea ecx, [ebp - 0x260]
call fcn.0040b67e
mov bl, 1
lea ecx, [ebp - 0x310]
call fcn.00404dbc
mov al, bl
call fcn.0059bb81
ret 0x10
cmp dword [ebp + 0x14], 3
jne 0x43e4c9
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0xf
pop esi
lea eax, [ebp - 0x230]
mov dword [ebp - 0x220], ebx
push eax
lea ecx, [edi + 0x6c]
mov dword [ebp - 0x21c], esi
mov byte [ebp - 0x230], bl
call fcn.00409145
lea ecx, [ebp - 0x230]
call fcn.00404812
mov ecx, dword [ebp - 0x2f8]
lea edi, [ebp - 0x2d0]
xor eax, eax
add ecx, 0x84
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x2d0]
push eax
mov dword [ebp - 0x2b0], ebx
mov dword [ebp - 0x2ac], esi
mov byte [ebp - 0x2c0], bl
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], esi
mov byte [ebp - 0x2a8], bl
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], esi
mov byte [ebp - 0x290], bl
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], esi
mov byte [ebp - 0x278], bl
call fcn.0043d9eb
lea ecx, [ebp - 0x2d0]
call fcn.0043d8ba
jmp 0x43e51a