Function at 0x4bd520
Capabilities:
Check if file exists

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f2aec
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov edx, dword [ebx + 8]
mov dword [ebp - 0x2e0], edx
call fcn.0043e530
test al, al
je 0x4bd5cc
mov esi, dword [edi + 0x14e4]
mov ecx, esi
push 0
push 9
push edx
mov dword [ebp - 0x2e8], esi
call fcn.005ba020
push eax
push 3
push dword [ebp - 0x2e0]
mov ecx, esi
mov dword [ebp - 0x2e4], eax
call fcn.005ba020
mov dword [ebp - 0x2ec], eax
test eax, eax
jne 0x4bd613
mov eax, dword [ebp - 0x2e4]
test eax, eax
je 0x4bd5ee
push eax
push 2
push 0x1102
push dword [ebp - 0x2e0]
mov ecx, esi
call fcn.005befd0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push dword [edi + 0x14e4]
push 4
push str.Please_select_an_item_in_the_list_before_using_this_feature.
call fcn.0043e2e0
jmp 0x4bd5cc
push 0
push dword [ebp - 0x2e4]
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
push dword [ebp - 0x2e0]
mov ecx, esi
movq qword [ebp - 0x40], xmm0
call fcn.005ba070
push eax
lea ecx, [ebp - 0x40]
call fcn.005dc570
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov byte [ebp - 4], 2
push 1
push 0x68fb68
lea ecx, [ebp - 0x40]
movq qword [ebp - 0x48], xmm0
movups xmmword [ebp - 0x58], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x58]
call fcn.005d92a0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.005d9210
cmp eax, 2
jb 0x4bdbd3
push 1
push 0
call fcn.005d9220
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc260
lea ecx, [edi + 0x1a4]
call fcn.005dc3a0
inc eax
lea ecx, [edi + 0x1a4]
push eax
push 1
push 1
push 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005daa70
test eax, eax
je 0x4bd6f6
mov eax, str.This_scheduled_task_points_to_a_file_located_in_the_installation_folder
jmp 0x4bd769
push 0x630518
push 1
lea ecx, [ebp - 0x28]
call fcn.005dc030
mov ecx, eax
call fcn.005dc4c0
test al, al
je 0x4bd717
mov eax, str.This_shortcut_points_to_a_file_located_in_the_installation_folder
jmp 0x4bd769
push 0
lea ecx, [ebp - 0x58]
call fcn.005d9220
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4bd733
mov eax, str.This_item_is_is_a_leftover_file_object
jmp 0x4bd769
push 2
push 1
push 1
push 0
push 0x62f440
push 1
push 0
lea ecx, [ebp - 0x58]
call fcn.005d9220
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc260
mov ecx, eax
call fcn.005daa70
test eax, eax
je 0x4bdbd3
mov eax, str.This_registry_entry_points_to_a_file_located_in_the_installation_folder
push eax
lea ecx, [ebp - 0x40]
call fcn.005dc510
mov ecx, dword [ebp - 0x2e8]
push 0
call fcn.005c5730
push 0x270
mov esi, eax
lea eax, [ebp - 0x2d8]
push 0
push eax
call fcn.00420090
add esp, 8
lea eax, [edi + 0x14a8]
lea ecx, [ebp - 0x2d8]
push esi
push 0xffffffffffffffff
push 0xc80000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14a
push 0x226
push str.Uninstall_leftover_item_properties
push str.UVK_DLG_CLASS
push eax
call fcn.005c6220
push 0
push 0
lea ecx, [ebp - 0x2d8]
call fcn.005c5730
mov edx, esi
mov ecx, eax
call fcn.005d3010
push 0
lea ecx, [ebp - 0x2d8]
call fcn.005c5730
mov ecx, dword [ebp - 0x2e8]
push eax
call fcn.005c6150
movsd xmm1, qword [0x6edae8]
lea ecx, [ebp - 0x2d8]
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x2e8]
call fcn.005c5730
mov edx, dword [ebp - 0x2e4]
mov ecx, eax
call fcn.005c8d30
push eax
lea ecx, [ebp - 0x2e4]
call fcn.005c6590
sub esp, 8
mov byte [ebp - 4], 5
mov esi, dword [ebp - 0x2e4]
lea ecx, [ebp - 0x2d8]
push 0x14
push 0x14
push 0x11
push 0x12
push esi
call fcn.005c0b10
push esi
push esi
lea ecx, [ebp - 0x2d8]
call fcn.005c4210
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10
push 0x69
push 0x14
push 0x37
push str.Uninstalled_program:
lea ecx, [ebp - 0x2d8]
call fcn.005c0890
push 8
mov ecx, dword [ebp - 0x2e8]
push 0
push 0x62439c
push str._s_d__
push dword [ebp - 0x2ec]
push dword [ebp - 0x2e0]
call fcn.005ba070
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc1c0
mov ecx, eax
call fcn.005d9660
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x17c
push 0x10
push 0xa0
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2d8]
call fcn.005c0a40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10
push 0x64
push 0x46
push 0xf
push str.Remnant_item:
lea ecx, [ebp - 0x2d8]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x1db
push 0x58
push 0xa
push 0
lea ecx, [ebp - 0x58]
call fcn.005d9220
push eax
lea ecx, [ebp - 0x2d8]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x32
push 0x57
push 0x1ea
push 0x675ddc
lea ecx, [ebp - 0x2d8]
call fcn.005c1a50
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10
push 0x64
push 0x78
push 0xf
push str.Points_to:
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x2ec], eax
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x1db
push 0x8a
push 0xa
push 1
lea ecx, [ebp - 0x58]
call fcn.005d9220
push eax
lea ecx, [ebp - 0x2d8]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x32
mov dword [ebp - 0x2e0], eax
push 0x89
push 0x1ea
push 0x660330
lea ecx, [ebp - 0x2d8]
call fcn.005c1a50
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10
push 0x64
push 0xaa
push 0xf
push 0x675de4
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x2e8], eax
call fcn.005c0890
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x63c250
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
push str._of_an_uninstalled_program__
lea ecx, [ebp - 0x40]
call fcn.005da780
push 0xffffffffffffffff
push 0x10800804
push 0x42
push 0x212
push 0xbe
push 0xa
lea ecx, [ebp - 0x40]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2d8]
call fcn.005c0c90
movaps xmm0, xmmword [0x6edd90]
lea eax, [ebp - 0x68]
push eax
push 0
push 0xb3
push 0xffffffffffffffff
lea ecx, [ebp - 0x2d8]
movups xmmword [ebp - 0x68], xmm0
call fcn.005befd0
push ecx
push 0xffffffffffffffff
push 0x19
push 0xa0
push 0x11a
push 0x64
push str.Google_this_item
lea ecx, [ebp - 0x2d8]
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x19
push 0x5a
push 0x11a
push 0x168
push str.Close__Esc_
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x2f0], eax
call fcn.005c1a50
push 0xffffffffffffffff
lea ecx, [ebp - 0x2d8]
mov esi, eax
call fcn.005c4370
mov eax, 0x1b
mov byte [ebp - 0x1c], 1
mov word [ebp - 0x1a], ax
lea ecx, [ebp - 0x2d8]
push 1
lea eax, [ebp - 0x1c]
mov word [ebp - 0x18], si
push eax
call fcn.005c47a0
push 1
push 1
lea ecx, [ebp - 0x2d8]
call fcn.005c3f80
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
je 0x4bdb93
nop word [eax + eax]
mov eax, dword [edi + 0x14a8]
lea ecx, [ebp - 0x2d8]
cmp dword [edi + 0x14d8], ecx
jne 0x4bdbb2
cmp eax, dword [ebp - 0x2ec]
jne 0x4bdb35
push 0
lea ecx, [ebp - 0x58]
call fcn.005d9220
push eax
call fcn.0043bf00
jmp 0x4bdbb7
cmp eax, dword [ebp - 0x2e8]
jne 0x4bdb6e
push 0
push ecx
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0x2d8]
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045ee00
jmp 0x4bdbb7
cmp eax, dword [ebp - 0x2f0]
jne 0x4bdb8a
push 0
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045ee00
jmp 0x4bdbb7
cmp eax, esi
je 0x4bdb93
cmp eax, 0xfffffffa
jne 0x4bdbb7
mov byte [ebp - 0x2d9], 0
lea ecx, [ebp - 0x2e4]
call fcn.005c6580
lea ecx, [ebp - 0x2d8]
call fcn.005c1c60
jmp 0x4bdbda
cmp eax, 0xfffffffa
je 0x4bdbca
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
jne 0x4bdb00
jmp 0x4bdb93
mov byte [ebp - 0x2d9], 1
jmp 0x4bdb9a
mov byte [ebp - 0x2d9], 0
lea ecx, [ebp - 0x58]
call fcn.005d9280
lea ecx, [ebp - 0x34]
call fcn.005dc430
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x40]
call fcn.005dc430
mov al, byte [ebp - 0x2d9]
jmp 0x4bd5ce