Function at 0x557170
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fa22a
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0xe4], 0
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x54], eax
jne 0x5571bc
xor eax, eax
jmp 0x55743e
test edi, edi
je 0x5571c6
mov dword [edi], 0
push 2
call fcn.00554030
push str.Updating_AdwCleaner...
push 0xffffffffffffffff
mov ecx, esi
call fcn.0057b610
push 0
push 1
mov ecx, esi
call fcn.005494d0
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
call fcn.005dc5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c]
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
movq qword [ebp - 0x1c], xmm0
call fcn.005dc5e0
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [esi + 0xe4]
xorps xmm0, xmm0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x20], 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._adwCleaner.exe
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc520
push str.https:__adwcleaner.malwarebytes.com_adwcleaner_channelrelease
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 2
push eax
push str.AdwCleanerUrl
mov ecx, esi
call fcn.005403a0
push 0x62439c
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push str.AdwCleanerLnk
call fcn.005403a0
lea ecx, [ebp - 0x1c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005795d0
cmp eax, 1
jge 0x5572fe
push 0
push 1
mov ecx, esi
call fcn.005494d0
test eax, eax
jne 0x557421
push str.https:__www.softpedia.com_get_Antivirus_Removal_Tools_AdwCleaner.shtml
lea ecx, [ebp - 0x34]
call fcn.005dc510
push str.Softpedia
lea ecx, [ebp - 0x1c]
call fcn.005dc510
lea ecx, [ebp - 0x1c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005795d0
push 0
push 1
mov ecx, esi
call fcn.005494d0
test eax, eax
jne 0x557421
push 1
lea ecx, [ebp - 0x50]
call fcn.005d0610
lea ecx, [ebp - 0x28]
xor ebx, ebx
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x55740b
mov ecx, dword [esi + 0xe4]
push 5
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.00579420
mov dword [ebp - 0x58], eax
test eax, eax
je 0x55740b
test edi, edi
je 0x557363
mov dword [edi], eax
push str.AdwCleaner_scan...
push 0xffffffffffffffff
mov ecx, esi
call fcn.0057b610
push 0
push 1
mov ecx, esi
call fcn.005494d0
mov ebx, dword [ebp - 0x54]
push ebx
push 8
call fcn.005561f0
push str.__WaitWindow2_600__2__0__Qt5QWindowIcon__Malwarebytes_AdwCleaner___Sleep_1__0___ClickWindowPos_376__347___Sleep_500__1___ClickWindowPos_437__193___Sleep_500__1___ClickWindowPos_68__64___ClickWindowPos_437__195___ClickWindowPos_435__215___ClickWindowPos_435__235___WaitProcessClose__
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push str.AdwCleanerAutomation
call fcn.005403a0
push ecx
push 0
push dword [ebp + 8]
lea ecx, [ebp - 0x1c]
call fcn.005dc190
push eax
push dword [ebp - 0x58]
mov ecx, esi
call fcn.00577ba0
cmp eax, 0xffffffff
je 0x557421
push ebx
push dword [ebp - 0x5c]
push ecx
push 8
mov ecx, esi
call fcn.00555df0
test edi, edi
je 0x5573d2
mov dword [edi], 0
xorps xmm1, xmm1
lea ecx, [ebp - 0x50]
call fcn.005d05a0
divsd xmm0, qword [0x6edbb8]
lea edx, [ebp - 0x1c]
mov edi, str.Successfully_executed_AdwCleaner_scan._Running_time:
cvttsd2si ebx, xmm0
mov ecx, ebx
call fcn.005cf990
push 0
mov ecx, 0x624288
push ecx
push eax
push edi
mov ecx, esi
call fcn.0057b7e0
jmp 0x557424
xor ecx, ecx
xor eax, eax
push ecx
push ecx
push eax
mov edi, str.Failed_to_execute_the_AdwCleaner_scan.
mov ecx, esi
push edi
call fcn.0057b7e0
jmp 0x557424
or ebx, 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x1c]
call fcn.005dc430
lea ecx, [ebp - 0x34]
call fcn.005dc430
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 0x10