Function at 0x42614f
Capabilities:
Check if file exists
Delete file
Read .ini file

Disassembly:
push 0xc44
mov eax, 0x4844be
call fcn.00468ad7
push str.utilityinstall.ini
push dword [0x4c1a40]
lea eax, [ebp - 0xc4c]
push eax
call fcn.0042bc31
and dword [ebp - 4], 0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00466c70
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
add esp, 0x18
push dword [ebp - 0xc4c]
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0x48c678
push str.suitepackage
mov ebx, str.installinfo
push ebx
call esi
mov edi, 0x48f54c
lea eax, [ebp - 0x218]
push edi
push eax
call fcn.00468cab
pop ecx
pop ecx
test eax, eax
jne 0x426561
push 0x206
push eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push eax
call fcn.00466c70
add esp, 0xc
push dword [ebp - 0xc4c]
lea eax, [ebp - 0x420]
push 0x104
push eax
push 0x48c678
push str.foxmail
push ebx
call esi
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.00468cab
pop ecx
pop ecx
test eax, eax
jne 0x4262ba
push str.Foxmail
push dword [0x4bd834]
lea eax, [ebp - 0xc48]
push eax
call fcn.0042bc31
mov eax, dword [eax]
push str.UninstallString
push eax
lea eax, [ebp - 0xc44]
push reloc.OLEAUT32.dll_SysReAllocString
push eax
mov byte [ebp - 4], 1
call fcn.0043d95e
add esp, 0x1c
mov ecx, dword [ebp - 0xc48]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.00417891
mov eax, dword [ebp - 0xc44]
cmp dword [eax - 0xc], 0
je 0x4262ae
push 1
push 0
push 0xffffffffffffffff
push 0x48f8d0
push eax
call fcn.004452b2
push eax
push str.Uninstall_Foxmail_return__d
push 0x4c1dc0
call fcn.00448b55
mov eax, dword [ebp - 0xc44]
add esp, 0x20
lea ecx, [eax - 0x10]
mov byte [ebp - 4], 0
call fcn.00417891
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call fcn.00466c70
add esp, 0xc
push dword [ebp - 0xc4c]
lea eax, [ebp - 0x628]
push 0x104
push eax
push 0x48c678
push str.foxitreader
push ebx
call esi
lea eax, [ebp - 0x628]
push edi
push eax
call fcn.00468cab
pop ecx
pop ecx
test eax, eax
jne 0x426391
push str.utilityPhantomSetup.exe
push dword [0x4c1a40]
lea eax, [ebp - 0xc44]
push eax
call fcn.0042bc31
add esp, 0xc
push dword [ebp - 0xc44]
mov byte [ebp - 4], 4
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42637f
push 1
push 0
push 0xffffffffffffffff
push str.UnInstall
push dword [ebp - 0xc44]
call fcn.004452b2
add esp, 0x14
push dword [ebp - 0xc44]
mov dword [ebp - 0xc48], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0xc48]
push str.Uninstall_FoxitReader_return__d
push 0x4c1dc0
call fcn.00448b55
add esp, 0xc
mov ecx, dword [ebp - 0xc44]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0
call fcn.00417891
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x830], ax
lea eax, [ebp - 0x82e]
push eax
call fcn.00466c70
add esp, 0xc
push dword [ebp - 0xc4c]
lea eax, [ebp - 0x830]
push 0x104
push eax
push 0x48c678
push str.sogou
push ebx
call esi
lea eax, [ebp - 0x830]
push edi
push eax
call fcn.00468cab
pop ecx
pop ecx
test eax, eax
jne 0x426482
push str.Sogou_Input
push dword [0x4bd834]
lea eax, [ebp - 0xc48]
push eax
call fcn.0042bc31
mov eax, dword [eax]
push str.UninstallString
push eax
lea eax, [ebp - 0xc44]
push reloc.OLEAUT32.dll_SysReAllocString
push eax
mov byte [ebp - 4], 5
call fcn.0043d95e
add esp, 0x1c
mov ecx, dword [ebp - 0xc48]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00417891
mov eax, dword [ebp - 0xc44]
cmp dword [eax - 0xc], 0
je 0x426470
push 0x22
lea ecx, [ebp - 0xc44]
call fcn.00425d53
push 1
push 0
push 0xffffffffffffffff
push 0x48f8d0
push dword [ebp - 0xc44]
call fcn.004452b2
push eax
push str.Uninstall_Sogou_return__d
push 0x4c1dc0
call fcn.00448b55
add esp, 0x20
mov ecx, dword [ebp - 0xc44]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0
call fcn.00417891
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc40], ax
lea eax, [ebp - 0xc3e]
push eax
call fcn.00466c70
add esp, 0xc
push dword [ebp - 0xc4c]
lea eax, [ebp - 0xc40]
push 0x104
push eax
push 0x48c678
push str.istylepdf
push ebx
call esi
lea eax, [ebp - 0xc40]
push edi
push eax
call fcn.00468cab
pop ecx
pop ecx
test eax, eax
jne 0x426561
push str.iStylePDF
push dword [0x4bd834]
lea eax, [ebp - 0xc48]
push eax
call fcn.0042bc31
mov eax, dword [eax]
push str.UninstallString
push eax
lea eax, [ebp - 0xc44]
push reloc.OLEAUT32.dll_SysReAllocString
push eax
mov byte [ebp - 4], 8
call fcn.0043d95e
add esp, 0x1c
mov ecx, dword [ebp - 0xc48]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xa
call fcn.00417891
mov eax, dword [ebp - 0xc44]
cmp dword [eax - 0xc], 0
je 0x426555
push 1
push 0
push 0xffffffffffffffff
push 0x48f8d0
push eax
call fcn.004452b2
push eax
push str.Uninstall_iStylePDF_return__d
push 0x4c1dc0
call fcn.00448b55
mov eax, dword [ebp - 0xc44]
add esp, 0x20
lea ecx, [eax - 0x10]
mov byte [ebp - 4], 0
call fcn.00417891
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xa38], ax
lea eax, [ebp - 0xa36]
push eax
call fcn.00466c70
add esp, 0xc
push dword [ebp - 0xc4c]
lea eax, [ebp - 0xa38]
push 0x104
push eax
push 0x48c678
push 0x48f7a4
push ebx
call esi
lea eax, [ebp - 0xa38]
push edi
push eax
call fcn.00468cab
pop ecx
pop ecx
test eax, eax
jne 0x42666b
push str.PowerWord2012cut
push dword [0x4bd7cc]
lea eax, [ebp - 0xc48]
push eax
call fcn.0042bc31
mov eax, dword [eax]
push str.PathName
push eax
lea eax, [ebp - 0xc44]
push reloc.OLEAUT32.dll_SysReAllocString
push eax
mov byte [ebp - 4], 0xb
call fcn.0043d95e
add esp, 0x1c
mov ecx, dword [ebp - 0xc48]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xd
call fcn.00417891
mov eax, dword [ebp - 0xc44]
cmp dword [eax - 0xc], 0
je 0x426663
push str.Uninst.exe
push eax
lea eax, [ebp - 0xc50]
push eax
call fcn.0042bc31
mov eax, dword [eax]
push 1
push 0
push 0xffffffffffffffff
push str.48E32C2A_4A45_43CB_9BE3_C26F201CD20D__s
push eax
mov byte [ebp - 4], 0xe
call fcn.004452b2
mov ecx, dword [ebp - 0xc50]
add esp, 0x20
add ecx, 0xfffffff0
mov esi, eax
mov byte [ebp - 4], 0xd
call fcn.00417891
push esi
push str.Uninstall_Ksd_return__d
push 0x4c1dc0
call fcn.00448b55
mov eax, dword [ebp - 0xc44]
add esp, 0xc
lea ecx, [eax - 0x10]
call fcn.00417891
mov ecx, dword [ebp - 0xc4c]
add ecx, 0xfffffff0
call fcn.00417891
xor eax, eax
inc eax
call fcn.00468b5a
ret