Function at 0x4a49e0
Capabilities:
Check if file exists
Check internet connectivity via wininet
Contain obfuscated stackstrings
Get graphical window text
Shutdown system

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f1de5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x878
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x774], edi
push str.System_Repair
lea ecx, [edi + 0x1448]
mov dword [ebp - 0x7ac], 0
mov byte [ebp - 0x775], 0
mov byte [ebp - 0x77d], 0
call fcn.005dc510
push str.Defaults
mov ecx, edi
call fcn.0046e060
push 0
lea ecx, [edi + 0x1448]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0046f160
push 7
push str.System_Repair
mov ecx, edi
call fcn.0045f680
mov ecx, edi
mov dword [ebp - 0x7dc], eax
call fcn.0043e530
test al, al
je 0x4ae201
mov esi, dword [edi + 0x14e4]
lea ecx, [edi + 0x119c]
push 1
push str.https:__www.carifred.com_uvk_help_system_repair.php
mov dword [ebp - 0x760], esi
call fcn.005dc260
push 0xffffffffffffffff
push 0
push 0x10
push 0x10
push 0
push 0x10
push 0x10
push 0xf9
mov ecx, edi
call fcn.00436420
push eax
mov ecx, esi
call fcn.005c0000
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6556e8
xorps xmm0, xmm0
mov dword [ebp - 0xb4], 0
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0xbc]
movq qword [ebp - 0xbc], xmm0
call fcn.005dc520
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1f4]
xorps xmm0, xmm0
mov dword [ebp - 0x1ec], 0
movq qword [ebp - 0x1f4], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xcc]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
movq qword [ebp - 0xcc], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb0]
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
movq qword [ebp - 0xb0], xmm0
call fcn.005dc5e0
push 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xbc]
push 0xffffffffffffffff
mov dword [ebp - 0x108], 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x108]
call fcn.005d6a80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0
call fcn.005d6aa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0
call fcn.005d6aa0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], 0
call fcn.005d6aa0
mov byte [ebp - 4], 7
mov eax, dword [edi + 0x1f70]
mov ecx, eax
and ecx, 1
and al, 2
mov dword [ebp - 0x794], ecx
lea ecx, [edi + 0x1460]
mov byte [ebp - 0x764], al
call fcn.005dc3e0
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc1c0
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
mov ecx, edi
mov dword [edi + 0x1f70], 0
call fcn.00495930
cmp dword [ebp - 0x794], 0
je 0x4a4ca5
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4a4ca5
push 0xf
push eax
push 1
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc260
mov ecx, eax
call fcn.005dbf40
mov ecx, eax
call fcn.005dad50
push 1
lea eax, [ebp - 0xbc]
mov ecx, edi
push eax
call fcn.00495160
mov byte [ebp - 0x775], 0
jmp 0x4ae1a3
push dword [edi + 0x1438]
mov ecx, esi
call fcn.005c44a0
push 0x400
mov ecx, esi
call fcn.005c4340
movsd xmm1, qword [0x6edb38]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.005c42b0
push 0x24
push 0x50
push 2
push 2
mov ecx, edi
call fcn.0045fec0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1a
push 0xb4
push 8
push 0x64
push str.System_repair
mov ecx, esi
call fcn.005c0890
push 0x8812
mov ecx, esi
call fcn.005c4340
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x5a
push 0xd
push 0x122
push str.Find_a_fix_app:
mov ecx, esi
call fcn.005c0890
push 0
mov ecx, esi
call fcn.005c44a0
push 0
push 0x10800080
push 0x16
push 0xaf
push 0xa
push 0x17c
push str.Find_a_fix_app__CtrlF_
mov ecx, esi
call fcn.005c0a40
push 0xffffff
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x790], eax
call fcn.005bedc0
push 0xa0a0a0
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bec70
movsd xmm0, qword [0x6edb18]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.005beb10
push 0
push ecx
mov dword [esp], 0x41500000
push str.Find_and_select_the_next_fix___app_containing_this_text__F3_.
push 0x1c
push 0x64
push 6
push 0x230
push 0x99
push str.Find__F3_
mov ecx, edi
call fcn.0045fd50
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x7e8], eax
call fcn.005c4370
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_online_help__F1_
push 0x1c
push 0x50
push 6
push 0x299
push 0x7d
push str.Help
call fcn.0045fd50
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [edi + 0x11bc], eax
call fcn.005c42b0
push 0x433
mov ecx, esi
call fcn.005c4340
movsd xmm0, qword [0x6edab8]
mov ecx, esi
comisd xmm0, xmmword [edi + 8]
push 0x10024
push 0x1000000d
push 0x1fe
push 0x14a
push 0x28
push 0
push 0x62794c
push str._________Fixes_and_third_party_apps_list_Description
seta byte [ebp - 0x7b1]
call fcn.005c0620
push 0
push str.Tick_the_checkboxes_corresponding_to_the_fixes_you_want_to_run._r_nTo_run_a_single_fix__just_double_click_on_it.
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x75c], eax
call fcn.0045b370
push 1
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb910
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005c5730
push 0
push 4
push 0x108e
push eax
mov dword [ebp - 0x77c], eax
call dword [sym.imp.USER32.dll_SendMessageW]
movaps xmm0, xmmword [0x6edc60]
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x77c]
push 0
mov dword [ebp - 0x21c], 0x28
mov dword [ebp - 0x218], 7
mov dword [ebp - 0x214], 3
movups xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 1
push 0x10a2
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push ecx
push 0x12
push 0x53
mov ecx, edi
call fcn.00436320
add esp, 4
mov ecx, esi
push eax
push 1
push dword [ebp - 0x75c]
call fcn.005be460
push 0
push ecx
push 0x12
push 0x53
mov ecx, edi
call fcn.00436320
mov edi, dword [ebp - 0x75c]
add esp, 4
mov ecx, esi
push eax
push 0
push edi
call fcn.005be460
push 0xff203000
push 0
push 0x12
push edi
mov ecx, esi
call fcn.005ba470
mov esi, dword [ebp - 0x77c]
push 0
push 1
push 0x1002
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1002
push esi
mov edi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x774]
push 0
push 0x12
push 0x12
push 0x6a
mov dword [ebp - 0x79c], eax
call fcn.00436420
push eax
lea ecx, [ebp - 0x6d8]
call fcn.005c6520
push 0
mov byte [ebp - 4], 8
push dword [ebp - 0x6d8]
mov esi, dword [sym.imp.COMCTL32.dll_ImageList_Add]
push edi
call esi
push 0
push dword [ebp - 0x6d8]
push dword [ebp - 0x79c]
call esi
mov ecx, dword [ebp - 0x774]
push 0
push 0x12
push 0x12
push 0xbe
call fcn.00436420
push eax
lea ecx, [ebp - 0x6d8]
call fcn.005c6480
push 0
push dword [ebp - 0x6d8]
push edi
call esi
mov dword [ebp - 0x7d0], eax
push 0
push dword [ebp - 0x6d8]
push dword [ebp - 0x79c]
call esi
mov ecx, dword [ebp - 0x774]
push 0
push 0x12
push 0x12
push 0x6e
call fcn.00436420
push eax
lea ecx, [ebp - 0x6d8]
call fcn.005c6480
push 0
push dword [ebp - 0x6d8]
push edi
call esi
push 0
push dword [ebp - 0x6d8]
mov dword [ebp - 0x7c8], eax
push dword [ebp - 0x79c]
call esi
mov ecx, dword [ebp - 0x774]
push 0
push 0x12
push 0x12
push 0x79
call fcn.00436420
push eax
lea ecx, [ebp - 0x6d8]
call fcn.005c6480
push 0
push dword [ebp - 0x6d8]
push edi
call esi
push 0
push dword [ebp - 0x6d8]
mov dword [ebp - 0x7cc], eax
push dword [ebp - 0x79c]
call esi
mov ecx, dword [ebp - 0x774]
push 0
push 0x12
push 0x12
push 0x9e
call fcn.00436420
push eax
lea ecx, [ebp - 0x6d8]
call fcn.005c6480
push 0
push dword [ebp - 0x6d8]
push edi
call esi
push 0
push dword [ebp - 0x6d8]
mov edi, eax
push dword [ebp - 0x79c]
call esi
mov eax, dword [ebp - 0x774]
xor esi, esi
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
movsd xmm0, qword [eax + 8]
mov eax, 8
comisd xmm0, xmmword [0x6edab8]
cmovae esi, eax
push esi
push 0xffffffffffffffff
push 0
push str.Top_apps_and_fixes
push 0
push dword [ebp - 0x75c]
mov dword [ebp - 0x7b0], esi
call fcn.005bbd80
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Pre_repair_actions
push 1
push dword [ebp - 0x75c]
mov esi, dword [ebp - 0x760]
mov ecx, esi
call fcn.005bbd80
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Backup_desktop_icon_layout
call fcn.005bbb80
push 1
push str.Sometimes_the_custom_layout_of_the_desktop_icons_is_lost_when_the_computer_reboots._r_n_r_nThis_fix_lets_you_backup_the_icons_positions_so_they_can_be_restored_later.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Auto_logon_the_current_user
call fcn.005bbb80
push 1
push str.This_fix_lets_you_set_up_automatic_logon_for_the_current_user._r_n_r_nUseful_to_avoid_entering_the_logon_password_if_the_PC_is_rebooted_before_the_repair_operation_ends.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Enable_Windows_Installer_in_Safe_Mode
call fcn.005bbb80
push 1
push str.This_fix_enables_the_Windows_installer_to_run_in_Safe_Mode_minimal_and_with_networking__allowing_you_to_install_applications_through_the_Windows_Installer_in_those_boot_modes.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Backup_all_device_drivers
call fcn.005bbb80
push 1
push str.Backup_all_third_party_drivers_to_a_folder_in_C:_so_they_can_be_restored_later_either_from_the_device_manager__or_with_the_Restore_a_driver_backup_fix_below._The_destination_folder_will_be_named_Driver_backup__creation_date_._Only_for_Windows_10_and_higher
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Reboot_in_safe_mode_and_continue
call fcn.005bbb80
push 1
push str.This_fix_reboots_the_computer_in_safe_mode_with_networking__and_continues_the_repair_operation_in_that_mode__starting_on_the_next_selected_fix_app.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Set_technician_power_settings
mov ecx, esi
call fcn.005bbb80
push 1
push str.Optimize_the_current_power_scheme_settings_for_the_repair_operation:_r_nClose_lid_does_nothing__auto_sleep_is_disabled__hard_drives_and_displays_are_always_on__dim_display_after_5_minutes._r_n_r_nThis_fix_is_not_available_on_Windows_XP.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Kill_all_non_system_processes
call fcn.005bbb80
push 1
push str.Kill_all_processes_which_executable_files_are_not_system_protected_files._r_n_r_nPlease_save_all_your_work_before_using_this_feature.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Delete_all_restore_points
call fcn.005bbb80
push 1
push str.Delete_all_the_existing_system_restore_points.__r_n_r_nThis_action_doesnt_disable_the_system_restore.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Create_a_system_restore_point
call fcn.005bbb80
mov ecx, dword [ebp - 0x774]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.it_will_be_automatically_enabled.
add ecx, 0x143c
push str._System_Repair_.__r_n_r_nIf_the_system_restore_is_disabled_
call fcn.005dc190
push eax
push str.This_fix_creates_a_system_restore_point_named__
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push esi
push dword [ebp - 0x75c]
mov esi, dword [ebp - 0x760]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Free_physical_memory
mov ecx, esi
call fcn.005bbb80
push 1
push str.This_fix_frees_memory_by_removing_as_many_pages_as_possible_from_the_working_set_of_all_the_processes._r_n_r_nThis_fix_should_only_be_used_if_the_system_is_running_low_on_memory.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Backup_the_registry
call fcn.005bbb80
push 1
push str.Create_a_registry_backup._r_n_r_nIf__Use_unattended_mode__is_checked__the_entire_registry_is_backed_up__otherwise_you_can_choose_which_hives_to_backup.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Un_immunize_all_areas
call fcn.005bbb80
push 1
push str.This_fix_removes_the_current_System_immunization_if_any._r_n_r_nCheck__Restore_previous_immunization__below_if_you_want_to_restore_the_immunized_areas_after_running_all_the_fixes_apps.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Disable_the_User_Account_Control
call fcn.005bbb80
push 1
push str.This_fix_disables_the_User_Account_Control__UAC_._r_n_r_nUse_the__Reset_previous_UAC_state__post_repair_action_to_reset_it_after_the_repair_operation.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Enable_the_legacy__F8__boot_menu
call fcn.005bbb80
push 1
push str.This_fix_enables_the_old_boot_menu__activated_by_pressing_F8._r_n_r_nObviously_this_fix_only_works_on_Windows_8_or_higher.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Enable_Windows_Recovery_Environment
call fcn.005bbb80
push 1
push str.This_fix_enables_the_Windows_Recovery_Environment__WinRE___for_the_next_time_the_computer_boots_up._r_n_r_nThis_fix_only_works_on_Windows_8_or_higher.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
push 0
push str.Prevent_rebooting_until_all_is_done
call fcn.005bbb80
push 1
push str.This_fix_will_try_to_prevent_this_PC_from_rebooting_until_the_current_repair_operation_is_complete.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
mov esi, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Third_party_builtin_apps
push 2
push dword [ebp - 0x75c]
call fcn.005bbd80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
push 0
push str.Ultra_Adware_Killer_scan
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Launch_Ultra_Adware_killer_and_automatically_start_a_scan.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov eax, dword [ebp - 0x774]
mov ecx, dword [ebp - 0x760]
push 0x12
push 0x12
push 0x12
push 0x12
push str.IMAGE
push 0x68
push dword [eax + 4]
push esi
push dword [ebp - 0x75c]
call fcn.005ba9e0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
push 0
push str.MalwareBytes_AntiMalware_scan
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Update_MalwareBytes_AntiMalware_and_starts_a_threat_scan._r_n_r_nThe_application_will_be_downloaded_if_not_already_installed_and_up_to_date.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x54
call fcn.00436320
push eax
push ecx
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x54
call fcn.00436320
mov ecx, dword [ebp - 0x760]
add esp, 4
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005bab80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
push 0
push str.Super_AntiSpyware_scan
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Update_Super_AntiSpyware_and_start_a_scan._r_n_r_nCheck__Third_party_full_scans__below_if_you_want_Super_AntiSpyware_to_perform_a_full_scan.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x57
call fcn.00436320
push eax
push ecx
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x57
call fcn.00436320
mov ecx, dword [ebp - 0x760]
add esp, 4
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005bab80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
push 0
push str.RogueKiller_scan
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Update_RogueKiller_and_start_a_scan._The_application_will_be_downloaded_if_not_up_to_date.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x56
call fcn.00436320
push eax
push ecx
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x56
call fcn.00436320
mov ecx, dword [ebp - 0x760]
add esp, 4
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005bab80
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x760]
push 0
push str.Kaspersky_TDSSKiller_scan
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Update_TDSSKiller_and_start_a_scan._The_process_is_totally_automated__except_the_threat_removal_process.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x5a
call fcn.00436320
push eax
push ecx
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x5a
call fcn.00436320
mov ecx, dword [ebp - 0x760]
add esp, 4
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005bab80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
push 0
push str.AdwCleaner_scan
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Update_AdwCleaner_and_start_a_scan._The_process_is_totally_automated__except_the_threat_removal_process.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x50
call fcn.00436320
push eax
push ecx
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x50
call fcn.00436320
mov ecx, dword [ebp - 0x760]
add esp, 4
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005bab80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
push 0
push str.Avast__Browser_Cleanup
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
mov esi, eax
push 1
push str.Update_and_run_Avast__Browser_Cleanup._This_tool_serves_to_delete_pesky_and_unwanted_toolbars_and_plug_ins_from_your_browser_s_.
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x52
call fcn.00436320
push eax
push ecx
mov ecx, dword [ebp - 0x774]
push 0x12
push 0x52
call fcn.00436320
mov ecx, dword [ebp - 0x760]
add esp, 4
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005bab80
mov esi, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Custom_third_party_apps
push 3
push dword [ebp - 0x75c]
call fcn.005bbd80
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Reset_actions:
push 4
push dword [ebp - 0x75c]
call fcn.005bbd80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Microsoft_Edge
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_Microsoft_Edge_to_its_default_settings__including_home_pages_and_preferences._The_reset_operation_is_applied_only_to_the_current_user__but_all_Edge_profiles_are_reset.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_MS_Edge_for_all_users
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_new__Chromium_based__MS_Edge_preferences_and_extensions._Cache_and_cookies_are_not_affected._r_n_r_nThe_reset_operation_is_performed_for_all_users__and_all_Edge_profiles_are_reset.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_IE_and_internet_settings
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_all_IE_search_providers___and_launches_the_reset_internet_settings_dialog._r_n_r_nCheck__Use_unattended_mode__to_automate_the_whole_procedure.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x760]
push 0
push str.Reset_Chrome
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_Google_chromes_preferences_and_extensions._Cache_and_cookies_are_not_affected._r_n_r_nThe_reset_operation_is_performed_only_for_the_current_user__but_all_Chrome_profiles_are_reset.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Chrome_for_all_users
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_Google_chromes_preferences_and_extensions._Cache_and_cookies_are_not_affected._r_n_r_nThe_reset_operation_is_performed_for_all_users__and_all_Chrome_profiles_are_reset.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Firefox
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_Firefox_preferences_and_extensions._Cache_and_cookies_are_not_affected._r_n_r_nThe_reset_operation_is_applied_only_to_the_current_user__but_all_Firefox_profiles_are_reset.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Firefox_for_all_users
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_Firefox_preferences_and_extensions._Cache_and_cookies_are_not_affected._r_n_r_nThe_reset_operation_is_performed_for_all_users__and_all_Firefox_profiles_are_reset.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Firefox_print_settings
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.Sometimes_Firefox_gets_stuck_with_one_print_paper_size__usually_after_switching_printers._This_fix_resets_Firefoxs_printer_settings__automatically_fixing_that_issue_and_similar_ones._r_n_r_nNote:_Firefoxs_process_is_killed_prior_to_the_reset_operation.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_the_DNS_cache
call fcn.005bbb80
push 1
push str.This_fix_flushes_the_DNS__by_running_the_following_command:__r_n_r_nIpconfig__FlushDns
mov ecx, dword [ebp - 0x760]
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_the_hosts_file_and_DNS
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_flushes_the_DNS_and_resets_the_hosts_file_to_their_defaults._r_n_r_nIf_you_only_want_to_flush_the_DNS__use_the__Reset_the_DNS_cache__fix_instead
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_IP__Winsock_and_proxy
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_IP__winsock_and_proxy_settings_on_the_local_computer._r_n_r_nPlease_note_that_the_internet_connection_will_be_restarted.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_the_group_policies
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_group_policies_in_gpedit_and_the_registry_to_their_defaults._r_n_r_n_In_unattended_mode__custom_templates_will_not_be_deleted._Otherwise__you_can_choose_whether_to_delete_them.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_and_fix_the_Windows_firewall
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_and_repairs_the_windows_firewall._r_n_r_nNote_that_all_the_current_firewall_rules_will_be_deleted.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_registry_and_file_permissions
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_ensures_that_the_System_and_Administrators_groups_have_full_access_to_the_registry__and_to_the_system_and_user_folders._r_n_r_nUse_this_fix_if_you_are_getting_access_denied_errors.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_user_default_settings
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_current_users_registry_settings_to_their_defauts._r_n_r_nIt_will_be_done_on_next_reboot._No_registry_entries_will_be_deleted__the_keys_and_values_will_be_copied_from_the_default_users_hive.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_user_shell_folders
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_registry_entries_for_the_User_Shell_Folders_key:_r_n_r_nHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_NumLock_ON_at_logon
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_sets_the_NumLock_state_ON_at__the_user_logon_screen_for_all_users.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_print_spooler_data
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_clears_and_resets_the_print_spoolers_queue._r_n_r_nAny_pending_printing_jobs_will_no_longer_be_printed.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_CD_burning_queue
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_CD_DVD_burning_queue._r_nAny_files_pendind_to_be_burned_to_CD_or_DVD_will_no_longer_be_burned._r_nPlease_ensure_no_CD_DVD_is_currently_being_burned_before_running_this_fix.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_WLAN_profiles_and_settings
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_everything_related_to_WIFI__including_saved_profiles_and_passwords._r_nUse_this_fix_only_if_youre_having_WIFI_issues.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Get_Windows_10_notifications
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix__only_available_on_Windows_7__8_and_8.1__removes_all_Windows_10_upgrade_notifications__including_the_tray_icon_and_the_corresponding_Windows_update_notification.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Unpin_all_Start_Menu_tiles
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix__only_available_on_Windows_8_and_above__removes_all_the_tiles_from_the_Start_Menu._New_tiles_can_be_added_manually__afterwards.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_Windows_services_start_types
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix__only_available_on_Windows_10__8.1__7__Vista_and_XP__resets_the_start_type_of_the_Windows_protected_services._Services_will_only_be_reset_if_they_have_been_modified.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_the_Windows_Store
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_Windows_Store_without_changing_account_settings_or_deleting_installed_apps._r_n_r_nThis_fix_is_only_available_on_Windows_10__8.1_and_8
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_and_fix_the_file_associations
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_resets_the_custom_file_associations_for_the_current_user_account_and_fixes_the_registry_permissions_for_file_associations._r_nThis_should_also_make_Windows_stop_resetting_your_file_associations.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_all_device_drivers
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_will_remove_all_third_party_installed_drivers__and_optionally_also_uninstall_them_from_any_devices_using_them._This_fix_lets_you_create_a_backup_before_the_removal_operation._Useful_for_fixing_hardware_related_issues_such_as_BSODs_or_hardware_devices_not_working_properly._Only_for_Windows_10_and_higher
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 4
push 0xffffffffffffffff
push 0
push str.Reset_all_print_jobs
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_will_cancel_all_print_jobs__for_all_the_printers_installed_in_this_computer
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Fixes_for_common_Windows_problems
push 5
push dword [ebp - 0x75c]
call fcn.005bbd80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_the_WMI__the_System_restore
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_attempts_to_repair_the_WMI__Windows_management_intrumentation__and_the_System_restore._r_n_r_nThe_System_restore_depends_on_the_WMI__being_the_reason_for_bundling_both_fixes_into_one.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_IE_and_the_Windows_shell
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_repairs_possible_Windows_shell_hijacks__fixes_some_common_Internet_Explorer_issues__and_registers_the_files_needed_for_the_shell_and_IE_to_work_properly.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_install_problems
call fcn.005bbb80
push 1
mov ecx, dword [ebp - 0x760]
push str.This_fix_grants_access_to_the_Windows_installers_database__and_repairs_common_issues_related_to_the_windows_installer__and_application_data_or_temp_directories.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Windows_sidebar
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_enables_and_repairs_the_Windows_sidebar._r_n_r_nIn_unattended_mode__the_current_sidebar_settings_will_be_kept__otherwise_you_can_choose_whether_to_delete_them.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_desktop_icons_and_context_menu
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_enables_displaying_the_desktop_icons_and_context_menu_if_they_have_been_hiden.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_and_enable_Windows_update
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_repairs_and_enables_the_Windows_update_service._r_n_r_nPlease_note_that_the_Security_center_service_will_be_restarted.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_shortcuts__urls_and_protocols
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_repairs_the_registry_entries_for_the_desktop_and_internet_shortcuts__and_the_http_and_https_protocols
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_the_EventSystem_service
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_repairs_common_isues_related_to_the_EventSystem_service__such_as_being_logged_into_the_system_account_instead_of_the_user_account.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_the_SubSystems_key
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.Sometimes_the_HKLMSYSTEMCurrentControlSetControlSession_ManagerSubSystems_registry_key_gets_hijacked_by_malware._r_n_r_nThis_fix_repairs_it.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_local_group_access
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_ads_the__Local_service__and__Network_service__members_of_the_administrators_group._r_n_r_nUse_it_when_you_have_network_or_service_problems__such_as_your_network_icon_not_displayng_the_connected_state.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_executable_file_associations
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_repairs_the_following_file_extensions_r_nEXE__COM__MSI__REG__BAT__CMD_and_VBS._r_n_r_nNote:_The_file_associations_must_not_have_been_locked_in_the__Tools_and_tweaks__module__or_the_fix_will_fail.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Internet_Explorer_10_history
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.Some_cleanup_programs_delete_IEs_History_folder__which_makes_Internet_Explorer_10_or_higher_stop_working_properly._r_n_r_nThis_fix_will_repair_that.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Apps_not_responding_too_soon
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_increases_the_time_windows_waits_before_marking_the_applications_as__Not_responding_._Nice_for_slow_systems._r_nYou_will_need_to_log_off_and_on_for_the_changes_to_take_effect.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_browser_shortcuts
mov ecx, dword [ebp - 0x760]
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.Some_adware_hijack_the_browsers_desktop_and_start_menu_shortcuts__making_them_open_specific_pages_when_launched_from_those_shortcuts._This_fix_repairs_IE__Chrome__Firefox_and_Operas_shortcuts_for_all_users.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_the_Windows_store_and_Metro_apps
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_re_registers_and_repairs_the_Windows_store_apps._r_n_r_nThis_fix_is_only_for_Windows_8_or_higher.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_corrupted_user_profiles
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_tries_to_detect_and_repair_corrupted_user_profiles__and_fix_system_errors_such_as__The_User_Profile_Service_failed_the_logon__and__User_profile_cannot_be_loaded_.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Task_scheduler_errors
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_tries_to_repair_Task_scheduler_related_errors__such_as_when_it_says__The_selected_task__0__no_longer_exists_._r_n_r_nNOTE:_This_fix_is_not_available_on_Windows_XP.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Wifi_takes_long_to_connect
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.Sometimes__after_booting_up__Windows_may_take_long_to_automatically_connect_to_a_saved_Wifi_network._r_n_r_nThis_fix_repairs_that_issue.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_this_PC_not_visible_in_the_network
call fcn.005bbb80
push 1
push str.This_fix_configures_and_starts_a_few_Windows_services_that_are_required_for_a_computer_to_be_visible_in_the_network._r_n_r_nNOTE:_This_fix_does_not_enable_network_discovery_or_file_sharing.
push eax
push dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x760]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Google_Chrome_black_window
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.Sometimes_when_Chrome_is_launched_it_displays__a_non_working_window__usually_black_or_white._This_fix_repairs_that_issue.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 5
push 0xffffffffffffffff
push 0
push str.Fix_Microsoft_Defender_services
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_reinstalls_Microsoft_Defenders_services__and_removes_group_policies_that_are_eventually_disabling_Microsoft_Defender_Antivirus.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.File_system_related_actions
push 6
push dword [ebp - 0x75c]
call fcn.005bbd80
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
push 0
push str.Check_the_system_drive_on_reboot
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_schedules_CHKDSK_to_check_the_system_drive_for_errors_on_the_next_reboot.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
push 0
push str.Cancel_Chkdsk_on_reboot
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.If_CHKDSK_has_been_scheduled_to_check_the_system_drive_on_reboot__this_fix_cancels_it.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
push 0
push str.Unhide_user_files_and_folders
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_removes_hidden_properties_for_all_the_current_user_files_and_folders__except_some_system_files_such_as_destop.ini__ntuser.dat__etc.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov eax, dword [ebp - 0x774]
lea ecx, [ebp - 0xbc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [eax + 0x1c]
push str.Unhide
call fcn.005dc200
push 0
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xbc]
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
push 0
call fcn.005dc190
mov ecx, dword [ebp - 0x760]
push eax
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_removes_hidden_properties_for_all_the_files_and_folders_in_the_System_partition__except_system_files.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
push 0
push str.Unhide_all_fixed_drives
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_removes_hidden_properties_for_all_the_files_and_folders_in_all_fixed_drives__except_system_files.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
push 0
push str.Rebuild_icon_cache
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_rebuilds_the_current_users_icon_cache._r_n_r_nIf_unattended_mode_is_not_selected__you_will_be_prompted_to_restart_the_Windows_File_Explorer.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Essential_installs_updates
push 7
push dword [ebp - 0x75c]
call fcn.005bbd80
push 0
push dword [ebp - 0x75c]
push dword [ebp - 0x7c8]
mov ecx, dword [ebp - 0x760]
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_Chrome
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_updates_the_popular_Google_Chrome_Internet_browser._r_n_r_nThe_installer_will_only_be_downloaded_and_executed_if_the_application_is_not_up_to_date
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 7
push 0xffffffffffffffff
push 0
push str.Install_AdBlock_Plus_for_Chrome
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_opens_Chrome_on_the_web_page_that_installs_AdBlock_Plus._r_n_r_nYou_still_need_to_click_Add_to_Chrome_to_install_the_extension.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 7
push 0xffffffffffffffff
push 0
push str.Install_uBlock_Origin_for_Chrome
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_opens_Chrome_on_the_web_page_that_installs_uBlock_Origin._r_n_r_nYou_still_need_to_click_Add_to_Chrome_to_install_the_extension.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push dword [ebp - 0x7cc]
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_Firefox
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_updates_the_popular_Mozilla_Firefox_Internet_browser._r_n_r_nThe_installer_will_only_be_downloaded_and_executed_if_the_application_is_not_up_to_date
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 7
push 0xffffffffffffffff
push 0
push str.Install_AdBlock_Plus_for_Firefox
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_opens_Firefox_on_the_web_page_that_installs_AdBlock_Plus._r_n_r_nYou_still_need_to_click_Add_to_Firefox_to_install_the_extension.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 7
push 0xffffffffffffffff
push 0
push str.Install_uBlock_Origin_for_Firefox
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_opens_Firefox_on_the_web_page_that_installs_uBlock_Origin._r_n_r_nYou_still_need_to_click_Add_to_Firefox_to_install_the_extension.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 7
push 0xffffffffffffffff
push 0
push str.Install_AdBlock_Plus_for_Edge
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_opens_Edge_on_the_web_page_that_installs_AdBlock_Plus._r_n_r_nYou_still_need_to_click_Add_to_Edge_to_install_the_extension.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push edi
mov edi, dword [ebp - 0x760]
mov ecx, edi
push 7
push 0xffffffffffffffff
push 0
push str.Install_uBlock_Origin_for_Edge
call fcn.005bbb80
push 1
push str.This_fix_opens_Edge_on_the_web_page_that_installs_uBlock_Origin._r_n_r_nYou_still_need_to_click_Add_to_Edge_to_install_the_extension.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_7_Zip
call fcn.005bbb80
push 1
push str.This_fix_updates_the_popular_Z_Zip_file_compressorand_manager._r_n_r_nThe_installer_will_only_be_downloaded_and_executed_if_the_application_is_not_up_to_date
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_K_Lite_Codec_Pack
call fcn.005bbb80
push 1
push str.This_fix_installs_updates_the_K_Lite_Codec_Pack_Basic._r_n_r_nThe_installer_will_only_be_downloaded_and_executed_if_the_application_is_not_up_to_date
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_the_DirectX
call fcn.005bbb80
push 1
push str.This_fix_installs_or_updates_the_DirectX._r_n_r_nThe_process_is_totally_automated__even_if__Use_unattended_mode__is_unchecked.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_Java
call fcn.005bbb80
push 1
push str.This_fix_installs_or_updates_Java_in_this_computer._r_n_r_nThe_process_is_totally_automated__even_if__Use_unattended_mode__is_unchecked.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_Shockwave_player
call fcn.005bbb80
push 1
push str.This_fix_installs_or_updates_the_Adobe_shockwave_player._r_n_r_nThe_process_is_totally_automated__even_if__Use_unattended_mode__is_unchecked.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_.NET_Framework
call fcn.005bbb80
push 1
push str.This_fix_installs_or_updates_the_most_important_versions_of_the_the_.Net_Framework._r_n_r_nThe_process_is_totally_automated__even_if__Use_unattended_mode__is_unchecked.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Update_Visual_C_runtime
call fcn.005bbb80
push 1
push str.This_fix_installs_the_following_Visual_C_redistributable_packages:_r_n_r_nVC_2005_SP1__VC_2008_SP1__VC_2010_SP1__VC_2012__VC_2013_and_VC_2015_2017.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Natural_Landscapes_3_theme
call fcn.005bbb80
push 1
push str.This_fix_installs_the_beautiful_Natural_Landscapes_3__Windows_theme__from_Community_Showcase.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Waterfalls_theme
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_installs_the_beautiful_Windows_theme_Waterfalls___Downloaded_directly_from_Microsoft.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_Desktop_gadgets_on_Win_8
call fcn.005bbb80
push 1
push str.This_fix_only_works_for_Windows_8._r_nIt_downloads_the_8GadgetPack_from_addgadgets.com_and_silently_installs_it.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.Install_the_System_Update_Readiness_Tool
call fcn.005bbb80
push 1
push str.This_fix_only_works_for_Windows_Vista_and_7._r_n_r_nIt_downloads_and_runs_the_System_Update_Readiness_Tool_in_unattended_mode.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.PatchMyPC___Update_all_apps
call fcn.005bbb80
push 1
push str.This_fix_downloads_and_runs_the_excellent_software_updater_PatchMyPC._r_n_r_n_In_unattended_mode__outdated_applications_are_automatically_updated.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 7
push 0xffffffffffffffff
push 0
push str.WAU_Manager___Update_all_apps
call fcn.005bbb80
push 1
push str.This_fix_uses_our_WAU_Manager_tool_to_update_the_installed_applications._r_n_r_nThis_fix_is_only_available_on_Windows_10_version_21H1_and_higher.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Privacy_cleanup
push 0xc
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005bbd80
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_Quick_Access_and_Jump_Lists
call fcn.005bbb80
push 1
push str.This_fix_removes_all_items_in_the_Quick_access__and_Jump_lists__on_the_Start_menu_and_taskbar.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_computer_and_IE_history
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_computer_and_Internet_Explorer_browsing_history_for_the_current_user.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_MS_Edge_history
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_browsing_history_for_all_MS_Edge_profiles_in_the_current_users_application_data_folder._Note:_If_MS_Edge_is_syncing_the_browsing_history__this_fix_may_not_have_any_effect.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_Chrome_history
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_browsing_history_for_all_Chrome_profiles_in_the_current_users_application_data_folder._Note:_If_MS_Edge_is_syncing_the_browsing_history__this_fix_may_not_have_any_effect.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_Firefox_history
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_browsing_history_for_all_Firefox_profiles_in_the_current_users_application_data_folder._Note:_If_Firefox_is_syncing_the_browsing_history__this_fix_may_not_have_any_effect.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_Waterfox_history
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_browsing_history_for_all_Waterfox_profiles_in_the_current_users_application_data_folder._Note:_If_Waterfox_is_syncing_the_browsing_history__this_fix_may_not_have_any_effect.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_all_browsers_history
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_browsing_history_for_IE__MS_Edge__Chrome_and_Firefox__and_only_for_the_current_users_application_data_folder._Note:_For_browsers_syncing_the_history_this_fix_may_not_have_any_effect.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_all_browsers_history__all_users_
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_browsing_history_for_IE__MS_Edge__Chrome_and_Firefox__and_for_all_user_accounts_in_this_computer._Note:_For_browsers_syncing_the_browsing_history_this_fix_may_not_have_any_effect.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Delete_all_browsers_cookies
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_cookies_for_all_installed_internet_browsers._r_n_r_nSupported_browsers_are:_IE__Firefox__Chrome__Edge_and_Waterfox.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Delete_browsers_cookies__all_users_
call fcn.005bbb80
push 1
push str.This_fix_deletes_the_cookies_for_all_installed_internet_browsers__and_for_all_users_in_this_system.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_Windows_event_logs
call fcn.005bbb80
push 1
push str.This_fix_resets_the_windows_event_logs._r_n_r_nUse_this_fix_if_the_event_logs_have_become_too_big_to_be_easily_analyzed.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_Error_report_folders
call fcn.005bbb80
push 1
push str.With_time__Windows_can_accumulate_thousands_of_useless_error_reports._r_n_r_nThis_fix_removes_them_all__to_recover_storage_space
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_the_shell_cache
call fcn.005bbb80
push 1
push str.The_Windows_shell_saves_folder_view__position_and_size_in_a_registry_database._This_fix_clears_that_database__which_improves_the_response_of_the_shell__but_it_will_forget_any_previously_saved_folder_view__position_and_size.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push 0xffffffffffffffff
push 0
push str.Clear_the_shell_MuiCache
call fcn.005bbb80
push 1
push str.If_the_Shells_list_of_most_recently_used_programs_becomes_too_long__it_may_slow_down_the_Windows_file_explorer._r_n_r_nThis_fix_clears_that_list_for_the_current_user.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0xffffffffffffffff
push 0
push esi
mov esi, dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0
push str.Maintenance_actions
push 8
push esi
call fcn.005bbd80
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Free_storage_space_GUI
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_is_intended_to_be_used_only_if_the_system_volume_is_short_in_free_space._r_n_r_nDisplays_a_dialog_box_that_lets_ou_select_and_remove_file_system_items_that_usually_take_large_amounts_of_storage_space.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Empty_all_users_temp_folders
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_empties_all_users_and_system_temporary_folders__and_also_the_recycle_bin._r_n_r_nLocked_files_will_be_deleted_on_reboot._If_you_dont_want_to_empty_the_recycle_bin__use__Empty_temporary_folders__instead.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Empty_temporary_folders
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_empties_all_users_and_system_temporary_folders._The_recycle_bin_is_not_emptied._r_n_r_nLocked_files_are_deleted_on_reboot._If_you_also_want_to_empty_the_recycle_bin__use__Empty_all_users_temp_folders__instead.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Empty_all_browsers_cache
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_empties_the_Internet_cache_for_all_installed_browsers._r_n_r_nSupported_browsers_are:_IE__Firefox__Chrome__Opera_and_Safari.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Empty_browsers_cache__all_users_
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_empties_the_Internet_cache_for_all_installed_browsers__and_for_all_users_in_this_system.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Clear_empty_appdata_sub_directories
mov ecx, edi
call fcn.005bbb80
push 1
push str.Some_programs_leave_orphan_empty_appdata_sub_directories_behind__which_can_accumulate_over_time._r_n_r_nThis_fix_removes_those_folders.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Cleanup_MSI_orphan_files
mov ecx, edi
call fcn.005bbb80
push 1
push str.When_installing_uninstalling_programs_results_in_errors__orphan_files_are_left_over_in_the_Windows_installer_folder__which_may__over_time__use_a_large_ammount_of_HDD_space._This_fix_safely_removes_those_orphan_files.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Uninstall_programs
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_starts_a_separate_instance_of_the_Smart_Uninstaller__in_case_you_want_to_uninstall_some_unwanted_programs_during_the_repair_operation.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Cleanup_the_registry
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_will_cleanup_the_registry_the_same_way_the_System_booster_does._All_areas_will_be_scanned__except_the_Junk_files_and_the_System_restore_points._Invalid_items_are_automatically_removed._r_n_r_nNote:_This_fix_is_only_available_to_registered_users.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Cleanup_junk_files
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_will_cleanup_the_junk_files_the_same_way_the_System_booster_does._Junk_files_found_are_automatically_removed._r_n_r_nNote:_This_fix_is_only_available_to_registered_users.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Cleanup_notification_area_cache
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_will_cleanup_the_tray_icon_cache_for_all_users._r_n_r_nNOTE:_The_Windows_Explorer_process_will_be_restarted.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Run_full_disk_cleanup
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_the_Windows_disk_cleanup_utility_and_scan_the_system_drive._On_Windows_vista_and_higher__Windows_update_and_Service_pack_files_are_automatically_scanned.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Unattended_disk_cleanup
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_the_Windows_disk_cleanup_utility__scan_the_system_drive_and_automatically_free_disk_space._r_n_r_nNo_user_interaction_will_be_required_for_the_whole_operation.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Run_Memory_diagnostics_on_reboot
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_schedules_memdiag_to_perform_the_memory_diagnostics_on_the_next_system_boot.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Cancel_Memory_diagnostics_on_reboot
mov ecx, edi
call fcn.005bbb80
push 1
push str.If_memdiag_has_been_scheduled_to_perform_the_memory_diagnostics_on_the_next_boot__this_fix_cancels_it.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Prevent_resetting_default_apps
mov ecx, edi
call fcn.005bbb80
push 1
push str.Windows_10_is_known_for_periodically_resetting_the_default_apps._r_n_r_nThis_fix_works_around_that_issue_by_preventing_some_built_in_apps_such_as_Microsoft_Edge_or_Photos_to_be_set_as_the_default_apps.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Update_Windows
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_searches_for_Windows_updates__and_automatically_downloads_and_installs_the_available_ones.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Update_Windows_using_WAU_Manager
mov ecx, edi
call fcn.005bbb80
push 1
push str.Run_WAU_Manager_which_searches_for_Windows_updates__and_automatically_downloads_and_installs_the_available_ones.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Delete_temporary_profile_folders
mov ecx, edi
call fcn.005bbb80
push 1
push str.The_late_Windows_Update_issue_of_logging_users_in_to_a_temporary_profile_can_create_many_TEMP_profile_folders._This_fix_will_safely_remove_those.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Manage_Wi_Fi_profiles
mov ecx, edi
call fcn.005bbb80
push 1
push str.Wi_Fi_Profiles_Manager_lists_the_saved_Wi_Fi_profiles_and_lets_you_connect__disconnect__delete_and_set_their_connection_priority.
mov esi, eax
mov ecx, edi
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x774]
push 0
push 0x12
push 0x12
push 0x101
call fcn.00436420
push eax
push eax
push esi
mov esi, dword [ebp - 0x75c]
mov ecx, edi
push esi
call fcn.005ba970
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Cleanup_the_systemprofile_folder
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_deletes_useless_folders_that_often_get_accumulated_in_the_System_profile__such_as_CrashDumps_and_tw_xxx.tmp.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 8
push 0xffffffffffffffff
push 0
push str.Uninstall_all_devices_not_present
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_uninstalls_all_devices_which_are_installed_but_are_no_longer_connected__to_this_computer.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
mov esi, dword [ebp - 0x7b0]
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.System_repair_and_optimization
push 9
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005bbd80
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Hardware_temperature_test
call fcn.005bbb80
push 1
push str.This_fix_runs_StressMyPC_and_HWMonitor_simmultaneously__which_lets_you_easily_check_whether_your_CPU__graphics_card_and_storage_devices_are_overheating.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Disk_speed_test
call fcn.005bbb80
push 1
push str.This_fix_downloads_and_runs_CrystalDiskMark__which_lets_you_easily_benchmark_the_speed_of_your_storage_devices.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Camera_test
call fcn.005bbb80
push 1
push str.This_fix_runs_the_Windows_Camera_app__which_lets_you_easily_check_whether_your_attached_cameras_are_working_properly.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Activate_Windows_with_BIOS_OEM_key
call fcn.005bbb80
push 1
push str.This_fix_checks_if_there_is_an_OEM_product_key_stored_in_the_BIOS_and_if_there_is__tries_to_install_and_activate_it
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Run_Sfc_scan
call fcn.005bbb80
push 1
push str.Run_the_system_protected_resources_scan__Sfc.exe__scannow_._This_will_check_the_integrity_of_the_system_files__and_fix_them_if_needed.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Register_system_DLLs
call fcn.005bbb80
push 1
push str.This_fix_registers_all_Windows_DLL_and_OCX_files_in_the_System32_SysWOW64_folders._r_n_r_nA_very_useful_fix_that_can_solve_many_common_Windows_problems.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Repair_Windows_using_Dism.exe
call fcn.005bbb80
push 1
push str.This_fix__available_only_for_Windows_8_and_higher__and_for_registered_users__uses_the__Dism__Online__Cleanup_Image__RestoreHealth__command_to_restore_the_health_of_the_current_Windows_installation._This_fix_can_take_long_to_complete__so_please_be_patient
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Clean_up_the_WinSxS_folder
call fcn.005bbb80
push 1
push str.This_fix_frees_up_HDD_space_by_removing_files_from_previous_Windows_versions_and_service_packs._It_may_take_long_time_to_execute._r_n_r_nPlease_note_that__after_that__you_will_no_longer_be_able_to_downgrade_to_those_previous_Windows_states.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Optimize_the_system_volume
call fcn.005bbb80
push 1
push str.This_fix_optimizes_the_system_volume._r_n_r_nSSD_volumes_are_trimmed__while_HDD_volumes_are_defragged.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Optimize_all_volumes
call fcn.005bbb80
push 1
push str.This_fix_optimizes_all_the_fixed_volumes_in_this_computer._r_n_r_nSSD_volumes_are_trimmed__while_HDD_volumes_are_defragged.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Optimize_boot_and_shutdown
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_applies_a_few_registry_tweaks_in_order_to_reduce_shutdown_time__and_then_optimizes_the_system_boot.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Optimize_all_volumes_and_boot_time
call fcn.005bbb80
push 1
push str.This_fix_optimizes_all_storage_volumes__and_then_optimizes_the_system_boot_and_shutdown_time.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Upgrade_to___Reinstall_Windows_10
call fcn.005bbb80
push 1
push str.This_fix_downloads_and_runs_the_Windows_10_Installation_Tool__which_lets_you_perform_an_in_place_Windows_10_reinstall_or_upgrade_your_OS_to_the_latest_Windows_version__while_keeping_all_your_data_and_apps.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Run_the_PC_Health_Check_tool
call fcn.005bbb80
push 1
push str.This_fix_downloads__installs_and_runs_the_PC_Health_Check_tool__which_helps_you_to_verify_whether_this_computer_is_compatible_with_Windows_11_and_why.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Upgrade_to___Reinstall_Windows_11
call fcn.005bbb80
push 1
push str.This_fix_downloads_and_runs_the_Windows_11_Installation_Assistant__which_lets_you_perform_an_in_place_Windows_11_reinstall_or_upgrade_your_OS_to_the_latest_Windows_version__while_keeping_all_your_data_and_apps.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Create_Install_media_for_Windows_11
call fcn.005bbb80
push 1
push str.This_fix_downloads_and_runs_the_Windows_11_Install_media_Creator__which_lets_you_Download_the_latest_Windows_11_installation_files__and_then_create_an_install_media_as_an_ISO_file_or_a_USB_stick.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.DISM_repair_GUI_with_all_options
call fcn.005bbb80
push 1
push str.This_fix_lets_you_easily_run_DISM_with_the_desired_command_line_switches._r_n_r_nIt_provides_a_guided_user_interface_for_the_most_common_DISM_options__such_as_selecting_the_desired_image_source_and_destination
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.SFC_scan_GUI_with_all_options
call fcn.005bbb80
push 1
push str.This_fix_lets_you_easily_run_the_System_File_Checker_with_the_desired_command_line_switches._r_n_r_nIt_provides_a_guided_user_interface_for_the_most_common_SFC_options__such_as_selecting_the_offline_Windows_dir_and_the_path_for_the_log
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Check_disk_GUI_with_all_options
call fcn.005bbb80
push 1
push str.This_fix_lets_you_easily_run_CHKDSK_with_the_desired_command_line_switches._r_n_r_nIt_provides_a_guided_user_interface_for_all_CHKDSK_options__such_as_selecting_the_volume_to_check_and_the_desired_repair_options
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Install_Repair_Group_Policy_files
call fcn.005bbb80
push 1
push str.This_fix_lets_install_Group_Policy_in_Windows_Home_versions__.or_reinstall_GP_if_it_is_not_working_properly_r_n_r_nNote_that_the_required_files_must_exist_in__WinDir__servicingPackages._They_usually_do__even_in_Windows_10_home.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 9
push 0xffffffffffffffff
push 0
push str.Install_Repair_the_Start_Menu_app
call fcn.005bbb80
push 1
push str.This_fix_attempts_to_reinstall_the_Windows_Start_Menu_app._.Run_this_fix_only_if_youre_having_isues_with_the_Start_Menu.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0xffffffffffffffff
push 0
push esi
push 0xffffffffffffffff
push 0
push str.Windows_troubleshooters
push 0xb
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005bbd80
mov edi, dword [ebp - 0x7d0]
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Aero_Effects_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Aero_Effects_Troubleshooter__which_troubleshoots_problems_displaying_Aero_effects_such_as_transparency.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.App_Compatibility_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_App_Compatibility_Troubleshooter__which_helps_the_user_configure_older_programs_so_that_they_can_run_in_the_current_version_of_Windows.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Audio_Playback_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Audio_Playback_Troubleshooter__which_troubleshoots_problems_playing_sounds_and_other_audio_files.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Audio_Recording_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Audio_Recording_Troubleshooter__which_troubleshoots_problems_recording_audio_from_a_microphone_or_other_input_source.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Device_Troubleshooter
call fcn.005bbb80
push 1
push str.This_fix_runs_the_Device_Troubleshooter__which_troubleshoots_problems_using_hardware_and_access_devices_connected_to_the_computer.
mov ecx, dword [ebp - 0x760]
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.DirectAccess_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_DirectAccess_Troubleshooter__which_troubleshoots_problems_connecting_to_a_workplace_network_over_the_Internet_using_DirectAccess.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.File_Share_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_File_Share_Troubleshooter__which_troubleshoots_problems_accessing_shared_files_and_folders_on_other_computers_over_the_network.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.HomeGroup_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_HomeGroup_Troubleshooter__which_troubleshoots_problems_viewing_computers_or_shared_files_in_a_homegroup.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.IE_Performance_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Internet_Explorer_Performance_Troubleshooter__which_helps_the_user_prevent_add_on_problems_and_optimize_temporary_files_and_connections.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.IE_Security_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Internet_Explorer_Security_Troubleshooter__which_helps_the_user_prevent_malware__pop_up_windows__and_online_attacks.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x760]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Install_Uninstall_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Install_Uninstall_Troubleshooter__which_helps_you_to_fix_problems_that_block_programs_from_being_installed_or_removed.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Internet_Connection_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Internet_Connection_Troubleshooter__which_troubleshoots_problems_connecting_to_the_Internet_or_to_a_specific_website.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Keyboard_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Keyboard_Troubleshooter__which_helps_you_to_find_and_fix_problems_with_your_keyboard_settings.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Maintenance_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Maintenance_Troubleshooter__which_helps_the_user_perform_maintenance_tasks.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Network_Adapter_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Network_Adapter_Troubleshooter__which_troubleshoots_problems_with_Ethernet__wireless__or_other_network_adapters.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Network_Inbound_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Network_Inbound_Troubleshooter__which_troubleshoots_problems_with_allowing_other_computers_to_communicate_with_the_target_computer_through_Windows_Firewall.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Performance_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Performance_Troubleshooter__which_helps_the_user_adjust_settings_to_improve_operating_system_speed_and_performance.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Power_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Power_Troubleshooter__which_helps_the_user_adjust_power_settings_to_improve_battery_life_and_reduce_power_consumption.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Printer_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Printer_Troubleshooter__which_troubleshoots_problems_printing_or_managing_the_printer_queue.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Search_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Search_Troubleshooter__which_troubleshoots_problems_with_search_and_indexing_using_Windows_Search.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Show_Hide_Updates_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Show_Hide_Updates_Troubleshooter__which_provides_a_user_interface_to_hide_and_show_Windows_updates_and_drivers_for_Windows_10__since_that_feature_is_no_longer_available_in_the_control_panel.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Start_Menu_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Start_Menu_Troubleshooter__which_troubleshoots_problems_related_to_the_Start_Menu_and_Cortana.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Windows_Store_Apps_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Windows_Store_Apps_Troubleshooter__which_troubleshoots_problems_with_apps_from_the_Windows_Store.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Windows_Update_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Windows_Update_Troubleshooter__which_troubleshoots_problems_that_prevent_Windows_Update_from_performing_update_tasks.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.Windows_Update_Web_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Windows_Update_Web_Troubleshooter__which_troubleshoots_problems_concerning_the_Windows_autoamtic_updates_and_related_services.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
push 0
push str.WMP_Settings_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Windows_Media_Player_Settings_Troubleshooter__which_helps_the_user_reset_Windows_Media_Player_settings_to_the_default_configuration.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push edi
push 0xb
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x760]
push 0
push str.WMP_DVD_Playing_Troubleshooter
call fcn.005bbb80
mov ecx, dword [ebp - 0x760]
push 1
push str.This_fix_runs_the_Windows_Media_Player_DVD_Troubleshooter__which_troubleshoots_problems_playing_a_DVD_using_Windows_Media_Player.
push eax
push dword [ebp - 0x75c]
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
push edi
mov edi, dword [ebp - 0x760]
mov ecx, edi
push 0xb
push 0xffffffffffffffff
push 0
push str.WMP_Library_Troubleshooter
call fcn.005bbb80
push 1
push str.This_fix_runs_the_Windows_Media_Player_Library_Troubleshooter__which_troubleshoots_problems_with_adding_media_files_to_the_Windows_Media_Player_library.
push eax
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.005ba4f0
push 0xffffffffffffffff
push 0
push esi
mov esi, dword [ebp - 0x75c]
mov ecx, edi
push 0xffffffffffffffff
push 0
push str.Post_repair_actions
push 0xa
push esi
call fcn.005bbd80
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restart_the_Windows_Shell
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_saves_all_Windows_Shell_settings__and_then_restarts_the_File_Explorer_process._This_usually_reloads_many_Windows_changes_without_the_need_to_reboot_the_system.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restore_desktop_icon_layout
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_restores_the_position_of_the_desktop_icons__as_previously_saved_with_the__Backup_desktop_icon_layout__pre_repair_acion.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restore_the_standard_boot_menu
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_restores_the_standard_boot_menu_on_windows_8__8.1_and_10._r_n_r_nNote:_The_F8_legacy_boot_menu_will_be_disabled.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_DeviceRescue
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_DeviceRescue_tool__which_lets_you_easily_manage_devices_and_drivers_in_this_computer__including_multiple_device_install_uninstall_and_driver_backup_restore.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_Multiple_Reboot_Scheduler
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_boot_optimizing_tool__MRS___which_lets_you_reboot_the_PC_several_times_in_sequence__with_a_configurable_delay_time_between_each_reboot._In_the_end__the_results_of_the_reboot_optimization_are_displayed_in_a_dialog_box.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_Account_Profile_Fixer
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_Account_Profile_Fixer__APF__tool__which_lets_you_easily_replace_a_user_account_with_a_new_one__while_keeping_all_the_data_from_the_old_account__fixing_all_possible_user_profile_related_issues.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_WAU_Manager
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_WAU_Manager_tool__which_is_a_lightweight_but_complete_replacement_for_the_built_in_WindowsAutomatic_Updates_interface.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_ClearDiskInfo
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_ClearDiskInfo__which_gives_you_full_storage_device_information_in_a_human_friendly_way.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_the_DiskCopy_application
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_DiskCopy_app__which_lets_you_easily_copy_a_disk_or_volume._Features_include_copying_a_MBR_disk_to_a_GPT_one__and_vice_versa__or_simply_cloning_a_single_partition
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Launch_the_DiskCopy_script
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_runs_our_DiskCopy_script__which_lets_you_easily_make_a_disk_or_volume_clone._Features_include_copying_a_MBR_disk_to_a_GPT_one__and_vice_versa__or_simply_cloning_a_single_volume
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restore_the_previous_UAC_state
mov ecx, edi
call fcn.005bbb80
push 1
push str.If_you_disabled_the_User_Account_Control_in_the_current_repair_operation_using_the__Disable_the_User_Account_Control__pre_repair_action__this_fix_restores_its_previous_state.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Enable_the_User_Account_Control
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_restores_the_User_Account_Control__UAC__enabled_state.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restore_previous_immunization
mov ecx, edi
call fcn.005bbb80
push 1
push str.If_you_used_the__Un_immunize_all_areas__pre_repair_action__then_this_fix_restores_the_previous_immunization.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Delete_all_restore_points__post_repair_
mov ecx, edi
call fcn.005bbb80
push 1
push str.Delete_all_the_existing_system_restore_points_after_running_the_selected_fixes_apps._This_can_be_useful_to_delete_eventual_restore_points_created_during_the_repair.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Create_restore_point__post_repair_
mov ecx, edi
call fcn.005bbb80
mov edi, dword [ebp - 0x774]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.post_repair_restore_point_._r_n_r_nIf_the_system_restore_is_disabled__it_will_be_automatically_enabled.
lea ecx, [edi + 0x143c]
call fcn.005dc190
push eax
push str.Create_a_system_restore_point_named__
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push esi
push dword [ebp - 0x75c]
mov esi, dword [ebp - 0x760]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Reset_power_settings
call fcn.005bbb80
push 1
push str.This_fix_applies_the_following_settings_for_the_current_power_scheme:__r_nClose_lid_action:_Sleep.__HDD_power_off_and_sleep_timeout:_30_min.__Dim_display_timeout:_5_min.__Display_power_off:_20_min._r_n_r_nThis_fix_is_not_available_on_Windows_XP.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Send_reports_by_Email_or_FTP
call fcn.005bbb80
push 1
push str.This_fix_automatically_sends_the_application_reports_to_your_email_address_or_FTP_server__as_previously_set_in_the_Reporting_module___after_the_repair_operation_completes.
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005ba4f0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Uninstall_Malwarebytes_AntiMalware
call fcn.005bbb80
mov esi, eax
push 1
push str.This_option_uninstalls_Malwarebytes_AntiMalware__if_it_has_been_previously_installed_in_this_PC.
lea ecx, [ebp - 0xbc]
call fcn.005dc260
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov ecx, dword [ebp - 0x760]
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Uninstall_Super_AntiSpyware
call fcn.005bbb80
push 1
push str.This_option_uninstalls_Super_AntiSpyware__if_it_has_been_previously_installed_in_this_PC.
lea ecx, [ebp - 0xbc]
mov esi, eax
call fcn.005dc260
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov ecx, dword [ebp - 0x760]
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Uninstall_RogueKiller
call fcn.005bbb80
push 1
push str.This_option_uninstalls_RogueKiller__if_it_has_been_previously_installed_in_this_PC.
lea ecx, [ebp - 0xbc]
mov esi, eax
call fcn.005dc260
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov ecx, dword [ebp - 0x760]
push eax
push esi
push dword [ebp - 0x75c]
call fcn.005ba4f0
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x75c]
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Uninstall_this_application
call fcn.005bbb80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._after_running_the_selected_fixes_above__if_any._r_n_r_nYou_can_combine_any_other_fixes_with_this_one__if_you_want_to_automatically_uninstall_this_app_after_running_them.
lea ecx, [edi + 0x143c]
mov esi, eax
call fcn.005dc190
push eax
push str.This_option_uninstalls
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov edi, dword [ebp - 0x760]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x75c]
push esi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Remove_user_auto_logon
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_cancels_any_existing_user_automatic_logon._r_n_r_nNormally_you_would_use_this_fix_if_you_checked__Auto_logon_the_current_user__above.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Defrag_the_registry_if_needed
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_checks_the_registry_hives_for_fragmentation__and_defraggs_the_ones_more_than_10__fragmented._r_n_r_nNote:_The_computer_may_be_automatically_rebooted_after_running_this_fix._Also__this_fix_requires_activation.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restore_a_driver_backup
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_restores_a_driver_backup_from_a_folder._The_restoe_operation_is_recursive__meaning_all_sub_folders_will_be_scanned_for_the_presence_of_driver_files._Drivers_can_be_just_added_to_the_store_or_also_installed_on_their_matching_devices._Only_for_Windows_10_and_higher
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Create_or_edit_a_note
mov ecx, edi
call fcn.005bbb80
push 1
push str.Create_a_rich_text_note_and_save_it_in_the_Notes_folder__or_manage_the_existing_notes__edit__delete__..._
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Shut_down_the_computer
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_shuts_this_computer_down_after_running_the_selected_fixes_above__if_any._r_n_r_nYou_can_combine_any_other_fixes_with_this_one__if_you_want_to_automatically_shut_down_in_the_end.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Reboot_the_computer
mov ecx, edi
call fcn.005bbb80
push 1
push str.This_fix_reboots_this_computer_after_running_the_selected_fixes_above__if_any._r_n_r_nYou_can_combine_any_other_fixes_with_this_one__if_you_want_to_automatically_reboot_after_the_whole_repair_operation.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Reboot_in_safe_mode
mov ecx, edi
call fcn.005bbb80
push 1
push str.Use_this_fix_to_reboot_the_computer_in_safe_mode._r_n_r_nThe_normal_boot_mode_is_automatically_restored_after_reboot.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Reboot_in_safe_mode_with_network
mov ecx, edi
call fcn.005bbb80
push 1
push str.Use_this_fix_to_reboot_the_computer_in_safe_mode_with_networking._r_n_r_nThe_normal_boot_mode_is_automatically_restored_after_reboot.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 0
push esi
push 0xffffffffffffffff
push 0xa
push 0xffffffffffffffff
push 0
push str.Restore_normal_boot
mov ecx, edi
call fcn.005bbb80
push 1
push str.If__for_some_reason_this_PC_is_stuck_in_safe_mode_boot__this_fix_restores_the_normal_boot.
push eax
push esi
mov ecx, edi
call fcn.005ba4f0
push 1
push esi
mov ecx, edi
call fcn.005bb910
push 0x832
mov ecx, edi
call fcn.005c4340
push 0xffffffffffffffff
push 0x10000804
push 0xd7
push 0x1a4
push 0x28
push 0x14a
push 0x6b1f10
mov ecx, edi
call fcn.005c0c90
mov esi, eax
push 0x50005
push 3
push 0xd3
push esi
mov ecx, edi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffff
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bedc0
mov eax, dword [ebp - 0x760]
xorps xmm0, xmm0
mov edi, dword [ebp - 0x774]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x750], eax
lea eax, [ebp - 0x6d4]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x77c]
push 0
mov dword [ebp - 0x744], eax
lea eax, [ebp - 0x758]
push eax
mov dword [ebp - 0x74c], esi
mov esi, dword [ebp - 0x760]
mov ecx, esi
push 1
push 0x494ef0
mov dword [ebp - 0x6d4], 0xffffffff
mov dword [ebp - 0x7e4], 0xffffffff
mov dword [ebp - 0x758], edi
mov dword [ebp - 0x740], 0x6b1f10
movq qword [ebp - 0x738], xmm0
call fcn.005b8c90
push 0x422
mov ecx, esi
call fcn.005c4340
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x11d
push 0x19a
push 0x104
push 0x14f
mov ecx, esi
call fcn.005bfd30
push 0x10
mov dword [ebp - 0x798], eax
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov dword [ebp - 0x7a8], eax
test eax, eax
je 0x4a82df
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax], vtable.Gdiplus::Bitmap.0
lea eax, [ebp - 0x6f0]
push eax
push 0
push 0x26200a
push 0
push 0x11d
push 0x19a
mov dword [ebp - 0x6f0], 0
call dword [sym.imp.gdiplus.dll_GdipCreateBitmapFromScan0]
mov ecx, dword [ebp - 0x7a8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ecx + 4], eax
test ecx, ecx
je 0x4a82e1
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x6f4], 0
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x11c], xmm0
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipGetImageGraphicsContext]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x844]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x850]
mov dword [ebp - 0x844], 0xffafafaf
call fcn.00401650
mov edi, dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
push 0x11d
push 0x19a
push 0
push 0
push dword [eax + 4]
push dword [ebp - 0x11c]
call edi
mov ecx, dword [ebp - 0x118]
test eax, eax
push dword [ebp - 0x84c]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteBrush]
cmovne ecx, eax
mov dword [ebp - 0x118], ecx
mov dword [ebp - method.Gdiplus::SolidBrush.virtual_0], vtable.Gdiplus::Brush.0
call esi
mov ecx, dword [ebp - 0x774]
mov eax, dword [ecx + 0x50]
lea ecx, [ebp - 0x85c]
mov dword [ebp - 0x840], eax
lea eax, [ebp - 0x840]
push eax
call fcn.00401650
push 0x11d
push 0x19a
push 0
push 0
push dword [eax + 4]
push dword [ebp - 0x11c]
call edi
mov ecx, dword [ebp - 0x118]
test eax, eax
push dword [ebp - 0x858]
cmovne ecx, eax
mov dword [ebp - method.Gdiplus::SolidBrush.virtual_0], vtable.Gdiplus::Brush.0
mov dword [ebp - 0x118], ecx
call esi
mov edi, dword [ebp - 0x774]
lea ecx, [ebp - 0x820]
push ecx
push 0
push ecx
mov eax, dword [edi + 0x4c]
mov dword [esp], 0x40000000
push eax
mov dword [ebp - 0x820], 0
call dword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [ebp - 0x81c], eax
lea eax, [ebp - 0x884]
mov byte [ebp - 4], 0xa
movaps xmm0, xmmword [0x6eddb0]
lea ecx, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x820]
push eax
movups xmmword [ebp - 0x884], xmm0
call fcn.004016f0
push dword [ebp - 0x820]
call dword [sym.imp.gdiplus.dll_GdipDeletePen]
mov byte [ebp - 4], 8
push dword [ebp - 0x11c]
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
mov ecx, dword [ebp - 0x7a8]
mov esi, dword [ebp - 0x760]
jmp 0x4a82e1
xor ecx, ecx
mov dl, 1
call fcn.005d3470
push 0
push eax
push dword [ebp - 0x798]
mov ecx, esi
call fcn.005bef90
push 0x400
mov ecx, esi
call fcn.005c4340
mov edx, dword [edi + 0x50]
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, dl
and edx, 0xff00
shl eax, 0x10
or ecx, eax
or ecx, edx
push ecx
mov ecx, esi
call fcn.005c44b0
push 0
mov ecx, esi
call fcn.005c44a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_the_fixes_apps_lists_context_menu.
push 0x23
push 0x23
push 5
push 0xa
push 0x86
push 0
call fcn.0045fdf0
push 0
mov ecx, esi
mov dword [ebp - 0x7f0], eax
call fcn.005c4340
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x28
push 0xf
push 0x36
push str.Load:
mov ecx, esi
call fcn.005c0890
push dword [edi + 0x1438]
mov ecx, esi
push 0xffffffffffffffff
call fcn.005bec70
push 0
push 0xffffffffffffffff
push 0x10000043
push 0x1f4
push 0x131
push 0xa
push 0x5f
push str.Unload_current__if_any
mov ecx, esi
call fcn.005c1650
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6edb10]
mov dword [ebp - 0x7b8], eax
jbe 0x4a83d1
push 0x800
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bda80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x174]
push 0x6b21a8
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 0x260
lea eax, [ebp - 0x6d0]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0xbc]
push 3
call fcn.005dc190
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00401130
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x480], 0xffffffff
je 0x4a84b7
mov edi, dword [ebp - 0x7b8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x6a4]
push eax
push str._InstallSourceDir__
lea ecx, [ebp - 0xbc]
call fcn.005dc200
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push 0
push 0x143
push edi
mov ecx, esi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x6d0]
call fcn.00401230
test al, al
jne 0x4a8443
mov eax, dword [ebp - 0x480]
mov edi, dword [ebp - 0x774]
cmp eax, 0xffffffff
je 0x4a84b7
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [edi + 0x174]
mov dword [ebp - 0x480], 0xffffffff
call fcn.005dc190
push eax
lea ecx, [edi + 0x150]
call fcn.005dc480
test al, al
je 0x4a8584
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6b21a8
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00401280
test al, al
je 0x4a8584
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x6a4]
push eax
push str._UVKDir__
lea ecx, [ebp - 0xbc]
call fcn.005dc200
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push dword [ebp - 0x7b8]
mov ecx, edi
push esi
call fcn.004a28a0
lea ecx, [ebp - 0x6d0]
call fcn.00401230
test al, al
jne 0x4a8530
xorps xmm0, xmm0
mov dword [ebp - 0x724], 0
lea ecx, [ebp - 0x72c]
movq qword [ebp - 0x72c], xmm0
call fcn.005d6ac0
push 0
push 0x20019
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerSystemRepairLoadedFiles
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xc
call fcn.005d6a30
test al, al
je 0x4a8628
lea eax, [ebp - 0x72c]
mov dword [ebp - 0x7a8], 0
push eax
push 0
lea ecx, [ebp - 0xd0]
call fcn.005d62e0
test al, al
je 0x4a8628
nop word [eax + eax]
push dword [ebp - 0x72c]
mov ecx, edi
push dword [ebp - 0x7b8]
push esi
call fcn.004a28a0
mov eax, dword [ebp - 0x7a8]
lea ecx, [ebp - 0x72c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x7a8], eax
call fcn.005d62e0
test al, al
jne 0x4a85f0
push 0x400
mov ecx, esi
call fcn.005c4340
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Add_a_custom_third_party_app_to_the_list._r_nYou_will_be_able_to_set_the_download_url__and_several_commands._r_nto_run__register__update_and_run_the_application__if_desired.
push 0x64
push 0x5a
push 0x2d
push 0xa
push 0x6a
push str.Add_third_party_app
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Quickly_select_items_based_on_the_state_of_this_PC.
push 0x64
push 0x5a
push 0x2d
push 0x6e
push 0xfa
push str.Easy_diagnostic
mov dword [ebp - 0x82c], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Import_the_settings_from_a_previously_created_file._r_nThis_includes_the_fixes_selection__the_custom_third_party_tools_and_the_selected_settings_below.
push 0x64
push 0x5a
push 0x2d
push 0xd2
push 0x7a
push str.Load_settings
mov dword [ebp - 0x7c4], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Save_the_current_settings_to_a_system_repair_settings_file__CtrlS_._r_nThis_includes_the_fixes_selection__the_top_and_custom_third_party__r_napps__and_the_selected_settings_below.
push 0x64
push 0x5a
push 0x2d
push 0x136
push 0x98
push str.Save_settings
mov dword [ebp - 0x824], eax
call fcn.0045fdf0
push 0
mov ecx, esi
mov dword [ebp - 0x834], eax
call fcn.005c4340
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push esi
push str.Whether_to_skip_monitoring_the_third_party_built_in_scans_after_they_are_automatically_started.
push 0
push 0x10
push 0xbe
push 0xa0
push 0xa
push str._Multiple_third_party_scans
mov ecx, edi
call fcn.0045fc60
push 0xffffffffffffffff
mov dword [ebp - 0x784], eax
push 0xffffffffffffffff
push 0
push esi
push str.When_this_option_is_selected__Super_AntiSpyware_will_perform_a_full_scan._r_nThis_option_also_enables_aswMBR_to_download_and_use_the_latest_avast__virus_definitions_database.
push 0
push 0x10
push 0xb4
push 0xb9
push 0xa
push str._Third_party_full_scans
mov ecx, edi
call fcn.0045fc60
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push esi
push str.Play_a_sound_after_running_the_selected_fixes_apps.
push 0
push 0x10
push 0xb4
push 0xd2
push 0xa
push str._Play_sound_when_done
mov ecx, edi
mov dword [ebp - 0x808], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push esi
push str.Run_the_selected_fixes_apps_with_no_user_interaction._r_nNote:_This_will_not_automate_the_threat_removal_process_of_the_third_party_scans.
push 1
push 0x10
push 0xb4
push 0xeb
push 0xa
push str._Use_unattended_mode
mov ecx, edi
mov dword [ebp - 0x838], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push esi
push str.Whether_to_create_a_professional_html_report_of_all_the_actions_performed.
push 0
push 0x10
push 0xb4
push 0x104
push 0xa
push str._Create_professional_report
mov ecx, edi
mov dword [ebp - 0x810], eax
call fcn.0045fc60
push 0x400
mov ecx, esi
mov dword [ebp - 0x7a4], eax
call fcn.005c4340
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Run_the_selected_fixes__and_third_party_scans_and_apps._r_nCheck__Use_unattended_mode__if_you_dont_want_any_confirmation_dialogs.
push 0x64
push 0x64
push 0xaa
push 0xd2
push 0x97
push str.Run_selected_fixes_apps
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Go_back_to_the_Home_page__Esc_
push 0x64
push 0x50
push 0xaa
push 0x140
push 0xb3
mov dword [ebp - 0x80c], eax
push str.Home
call fcn.0045fdf0
push 0x48
mov dword [ebp - 0x83c], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x768], eax
jb 0x4a88a1
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, eax
mov eax, dword [ebp - 0x768]
or ecx, 0xff000000
jmp 0x4a88a3
xor ecx, ecx
push ecx
push eax
push eax
mov dword [ebp - 0x770], ecx
mov ecx, edi
push 0x97
call fcn.00436420
push eax
lea ecx, [ebp - 0x720]
call fcn.005c6520
mov byte [ebp - 4], 0xd
mov ecx, esi
push dword [ebp - 0x720]
push str.Run_selected_fixes_tCtrlEnter
push dword [ebp - 0x75c]
call fcn.005c1450
push 0
push eax
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7d8], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
push dword [ebp - 0x770]
mov eax, dword [ebp - 0x768]
mov ecx, edi
push eax
push eax
push 0x75
call fcn.00436420
push eax
lea ecx, [ebp - 0x71c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xe
mov ecx, esi
push dword [ebp - 0x71c]
push 0
push 0x32
push str.Run_selected_fixes_unattended_tAltEnter
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7d4], eax
call fcn.005c0400
push dword [ebp - 0x770]
mov eax, dword [ebp - 0x768]
mov ecx, edi
push eax
push eax
push 0x6d
call fcn.00436420
push eax
lea ecx, [ebp - 0x718]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xf
mov ecx, esi
push dword [ebp - 0x718]
push 0
push 0x32
push str.Check_all_recommended_tCtrlA
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x7d0], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0xa6
call fcn.00436420
push eax
lea ecx, [ebp - 0x6e8]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x10
mov ecx, esi
push dword [ebp - 0x6e8]
push 0
push 0x32
push str.Uncheck_all_tCtrlN
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x7cc], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0x8b
call fcn.00436420
push eax
lea ecx, [ebp - 0x6e4]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x11
mov ecx, esi
push dword [ebp - 0x6e4]
push 0
push 0x32
push str.Check_all_in_this_group_tAltA
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push dword [ebp - 0x6e8]
mov ecx, esi
mov dword [ebp - 0x7b0], eax
push 0
push 0x32
push str.Uncheck_all_in_this_group_tAltN
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x7e0], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0xa1
call fcn.00436420
push eax
lea ecx, [ebp - 0x6ec]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x12
mov ecx, esi
push dword [ebp - 0x6ec]
push 0
push 0x32
push str.Check_recommended_maintenance_tAltR
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7c8], eax
call fcn.005c0400
push dword [ebp - 0x770]
mov eax, dword [ebp - 0x768]
mov ecx, edi
push eax
push eax
push 0x88
call fcn.00436420
push eax
lea ecx, [ebp - 0x714]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x13
mov ecx, esi
push dword [ebp - 0x714]
push 0
push 0x32
push str.Move_up_tCtrlU
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x79c], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0x87
call fcn.00436420
push eax
lea ecx, [ebp - 0x710]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x14
mov ecx, esi
push dword [ebp - 0x710]
push 0
push 0x32
push str.Move_down_tCtrlD
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7bc], eax
call fcn.005c0400
push dword [ebp - 0x770]
mov eax, dword [ebp - 0x768]
mov ecx, edi
push eax
push eax
push 0x67
call fcn.00436420
push eax
lea ecx, [ebp - 0x70c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x15
mov ecx, esi
push dword [ebp - 0x70c]
push 0
push 0x32
push str.Add_to_top_apps_and_fixes_tCtrlT
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x7fc], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0x92
call fcn.00436420
push eax
lea ecx, [ebp - 0x708]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x16
push dword [ebp - 0x708]
push 0
push 0x32
push str.Remove_from_top_apps_and_fixes_tAltT
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7ec], eax
call fcn.005c0400
push 0
push dword [ebp - 0x6e4]
mov ecx, esi
push 0
push 0x32
push str.Edit_highlighted_app_tCtrlE
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x7f8], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0x72
call fcn.00436420
push eax
lea ecx, [ebp - 0x704]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x17
mov ecx, esi
push dword [ebp - 0x704]
push 0
push 0x32
push str.Delete_highlighted_app_tCtrlDel
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7c0], eax
call fcn.005c0400
push dword [ebp - 0x770]
mov eax, dword [ebp - 0x768]
mov ecx, edi
push eax
push eax
push 0x98
call fcn.00436420
push eax
lea ecx, [ebp - 0x6e0]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x18
mov ecx, esi
push dword [ebp - 0x6e0]
push 0
push 0x32
push str.Save_highlighted_app_in..._tCtrlI
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7f4], eax
call fcn.005c0400
push 0
push dword [ebp - 0x6e0]
push 0
push 0x32
push str.Save_settings_as..._tAltS
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x804], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0x94
call fcn.00436420
push eax
lea ecx, [ebp - 0x700]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x19
mov ecx, esi
push dword [ebp - 0x700]
push 0
push 0x32
push str.Unload_settings_tAltU
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x7a8], eax
call fcn.005c0400
push dword [ebp - 0x770]
mov eax, dword [ebp - 0x768]
mov ecx, edi
push eax
push eax
push 0x9a
call fcn.00436420
push eax
lea ecx, [ebp - 0x6fc]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x1a
mov ecx, esi
push dword [ebp - 0x6fc]
push 0
push 0x32
push str.Create_shortcut_tCtrlL
push dword [ebp - 0x75c]
call fcn.005c0400
push dword [ebp - 0x770]
mov dword [ebp - 0x800], eax
mov ecx, edi
mov eax, dword [ebp - 0x768]
push eax
push eax
push 0xa0
call fcn.00436420
push eax
lea ecx, [ebp - 0x6f8]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0x1b
mov ecx, esi
push dword [ebp - 0x6f8]
push 0
push 0x32
push str.Create_automatic_schedule_tAltC
push dword [ebp - 0x75c]
call fcn.005c0400
push 0
mov ecx, esi
mov dword [ebp - 0x814], eax
call fcn.005c4340
push 0
push 0
push 0xa
push 0xa
push 0xffffffffffffff9c
push 0xffffffffffffff9c
push 0
mov ecx, esi
call fcn.005c0890
push 0
push 0
push 0xa
push 0xa
push 0xffffffffffffff9c
push 0xffffffffffffff92
push 0
mov ecx, esi
mov dword [edi + 0x11c0], eax
call fcn.005c0890
mov dword [ebp - 0x818], eax
mov ecx, 0x70
mov word [ebp - 0x9e], cx
mov edx, 0x41
mov byte [ebp - 0xa0], 1
mov cx, word [edi + 0x11bc]
mov word [ebp - 0x90], ax
mov eax, 0x1b
mov word [ebp - 0x9c], cx
mov ecx, 0x72
mov word [ebp - 0x8c], ax
mov word [ebp - 0x98], cx
mov ecx, dword [ebp - 0x7e8]
mov word [ebp - 0x96], cx
mov ecx, 0x46
mov word [ebp - 0x92], cx
mov ecx, 0xd
mov byte [ebp - 0x9a], 1
mov byte [ebp - 0x94], 9
mov byte [ebp - 0x8e], 1
mov ax, word [edi + 0x11c0]
mov word [ebp - 0x8a], ax
mov eax, dword [ebp - 0x7d8]
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0x7d4]
mov word [ebp - 0x7e], ax
mov eax, dword [ebp - 0x7d0]
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x7cc]
mov word [ebp - 0x72], ax
mov eax, dword [ebp - 0x7b0]
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x7e0]
mov word [ebp - 0x66], ax
mov eax, 0x52
mov word [ebp - 0x62], ax
mov eax, dword [ebp - 0x7c8]
mov word [ebp - 0x60], ax
mov eax, dword [ebp - 0x79c]
mov word [ebp - 0x5a], ax
mov eax, 0x44
mov word [ebp - 0x86], cx
mov word [ebp - 0x80], cx
mov ecx, 0x4e
mov word [ebp - 0x7a], dx
mov word [ebp - 0x6e], dx
mov edx, 0x55
mov word [ebp - 0x56], ax
mov eax, dword [ebp - 0x7bc]
mov byte [ebp - 0x88], 9
mov byte [ebp - 0x82], 0x11
mov byte [ebp - 0x7c], 9
mov byte [ebp - 0x76], 9
mov word [ebp - 0x74], cx
mov byte [ebp - 0x70], 0x11
mov byte [ebp - 0x6a], 0x11
mov word [ebp - 0x68], cx
mov byte [ebp - 0x64], 0x11
mov byte [ebp - 0x5e], 9
mov word [ebp - 0x5c], dx
mov byte [ebp - 0x58], 9
mov word [ebp - 0x54], ax
mov eax, dword [ebp - 0x7fc]
mov ecx, 0x54
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x7ec]
mov word [ebp - 0x48], ax
mov eax, 0x45
mov word [ebp - 0x44], ax
mov eax, dword [ebp - 0x7f8]
mov word [ebp - 0x42], ax
mov eax, 0x2e
mov word [ebp - 0x3e], ax
mov eax, dword [ebp - 0x7c0]
mov word [ebp - 0x3c], ax
mov eax, 0x49
mov word [ebp - 0x38], ax
mov eax, dword [ebp - 0x7f4]
mov word [ebp - 0x36], ax
mov eax, 0x53
mov word [ebp - 0x32], ax
mov eax, dword [ebp - 0x804]
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x7a8]
mov word [ebp - 0x2a], ax
mov eax, 0x4c
mov word [ebp - 0x26], ax
mov eax, dword [ebp - 0x800]
mov word [ebp - 0x24], ax
mov eax, 0x43
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 0x814]
mov word [ebp - 0x1e], ax
lea eax, [ebp - 0xa0]
push 0x16
mov word [ebp - 0x50], cx
mov word [ebp - 0x4a], cx
mov ecx, esi
push eax
mov byte [ebp - 0x52], 9
mov byte [ebp - 0x4c], 0x11
mov byte [ebp - 0x46], 9
mov byte [ebp - 0x40], 9
mov byte [ebp - 0x3a], 9
mov byte [ebp - 0x34], 0x11
mov byte [ebp - 0x2e], 0x11
mov word [ebp - 0x2c], dx
mov byte [ebp - 0x28], 9
mov byte [ebp - 0x22], 0x11
call fcn.005c47a0
lea ecx, [ebp - 0xcc]
call fcn.005dbeb0
test al, al
je 0x4a91c0
lea eax, [ebp - 0x164]
mov dword [ebp - 0x164], 0
push eax
push str.AutoLoadLastSR
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x108]
call fcn.005d6580
cmp dword [ebp - 0x164], 0
je 0x4a9121
lea eax, [ebp - 0xcc]
push eax
push str.LastSRFile
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerSystemRepair
lea ecx, [ebp - 0x108]
call fcn.005d65d0
test al, al
je 0x4a9121
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4a9121
lea ecx, [ebp - 0xcc]
call fcn.005dc400
lea ecx, [ebp - 0xcc]
call fcn.005dbeb0
test al, al
je 0x4a91c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6b31f8
lea ecx, [edi + 0x174]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc200
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4a9190
lea ecx, [edi + 0x174]
call fcn.005dc190
mov ecx, eax
call fcn.005ddc10
test al, al
jne 0x4a91c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.DefaultsUVK_SR_settings.uvksr
lea ecx, [edi + 0x15c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc200
xorps xmm0, xmm0
mov dword [ebp - 0xf0], 0
movq qword [ebp - 0xf8], xmm0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x1c
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea ecx, [ebp - 0xcc]
test eax, eax
jne 0x4a921a
call fcn.005dc400
jmp 0x4a9241
push dword [ebp - 0x794]
lea eax, [ebp - 0xf8]
push dword [ebp - 0x784]
push esi
push eax
push dword [ebp - 0x75c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e750
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
push dword [ebp - 0x7b8]
mov ecx, edi
push esi
call fcn.004a28a0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 1
lea ecx, [ebp - 0xdc]
movq qword [ebp - 0xdc], xmm0
mov dword [ebp - 0xd4], 0
call fcn.005dc5e0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x198]
xorps xmm0, xmm0
mov dword [ebp - 0x190], 0
movq qword [ebp - 0x198], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x178], 0
movq qword [ebp - 0x180], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x174]
xorps xmm0, xmm0
mov dword [ebp - 0x16c], 0
movq qword [ebp - 0x174], xmm0
call fcn.005dc5e0
push 0
push 0xffffffffffffffff
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x20
call fcn.005d6a30
lea eax, [ebp - 0x180]
push eax
push str.ClientName
lea ecx, [ebp - 0xec]
call fcn.005d6740
lea eax, [ebp - 0x174]
push eax
push str.ReportID
lea ecx, [ebp - 0xec]
call fcn.005d6740
lea eax, [ebp - 0xdc]
push eax
push str.LastReportPath
lea ecx, [ebp - 0xec]
call fcn.005d6740
push 0
push str.SystemRepair
mov ecx, edi
call fcn.0045f4d0
mov ecx, edi
call fcn.0045f300
push 4
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bc500
test eax, eax
je 0x4a9428
cmp dword [ebp - 0x794], 0
lea ecx, [ebp - 0xdc]
je 0x4a939c
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
sete al
jmp 0x4a93fa
call fcn.005dc3a0
cmp eax, 5
jge 0x4a9428
lea ecx, [ebp - 0xdc]
call fcn.005dc400
push dword [ebp - 0x764]
lea eax, [ebp - 0x174]
mov ecx, edi
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00496470
push dword [ebp - 0x7dc]
cmp eax, 1
setne byte [ebp - 0x785]
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov al, byte [ebp - 0x785]
test al, al
je 0x4a9428
push 8
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bd3f0
lea ecx, [ebp - 0xdc]
call fcn.005dc400
push str.LastReportPath
lea ecx, [ebp - 0xec]
call fcn.005d5df0
push dword [ebp - 0x7e8]
mov ecx, esi
call fcn.005c4370
push 1
lea ecx, [ebp - 0x378]
call fcn.005d0610
push 0
mov ecx, edi
call fcn.004771c0
cmp dword [ebp - 0x794], 0
jne 0x4a945d
test byte [edi + 0x1f68], 1
je 0x4a946f
mov eax, dword [ebp - 0x80c]
mov dword [edi + 0x14d8], esi
mov dword [edi + 0x14a8], eax
mov ecx, dword [edi + 0x14a8]
mov dword [ebp - 0xe0], ecx
cmp ecx, 0xfffffffa
je 0x4adfaa
mov eax, dword [edi + 0x14d8]
cmp eax, esi
jne 0x4a94a6
cmp ecx, dword [edi + 0x11c0]
je 0x4adfaa
cmp ecx, dword [ebp - 0x83c]
je 0x4adfaa
cmp byte [ebp - 0x77d], 1
jne 0x4a94ce
cmp ecx, 0xffffff31
jne 0x4a94ce
lea ecx, [ebp - 0x378]
call fcn.005d05f0
mov byte [ebp - 0x77d], 2
jmp 0x4a9442
cmp eax, esi
jne 0x4a94f7
cmp ecx, 0xffffffea
jne 0x4a94e9
mov eax, dword [ebp - 0x75c]
cmp dword [edi + 0x14b4], eax
je 0x4a9571
mov eax, dword [ebp - 0x7f0]
cmp ecx, eax
je 0x4a9577
mov edx, dword [edi + 0x14d8]
cmp edx, esi
jne 0x4acf3a
mov eax, dword [edi + 0x14a8]
mov ecx, eax
cmp eax, dword [ebp - 0x7d8]
je 0x4a9907
cmp eax, dword [ebp - 0x7d4]
je 0x4a9907
cmp eax, dword [ebp - 0x80c]
je 0x4a9907
cmp eax, 0xfffffff2
jne 0x4a9550
mov eax, dword [ebp - 0x75c]
cmp dword [edi + 0x14b4], eax
je 0x4a9907
cmp edx, esi
jne 0x4acf3a
mov ecx, dword [edi + 0x14a8]
mov eax, dword [ebp - 0x7c4]
cmp ecx, eax
jne 0x4acaed
cmp edx, esi
jne 0x4a9918
jmp 0x4a990d
mov eax, dword [ebp - 0x7f0]
cmp dword [edi + 0x14a8], eax
jne 0x4a95cc
push dword [ebp - 0x77c]
mov byte [ebp - 0x769], 1
call dword [sym.imp.USER32.dll_SetFocus]
cmp byte [ebp - 0x77d], 2
jne 0x4a95c3
xorps xmm1, xmm1
lea ecx, [ebp - 0x378]
call fcn.005d05a0
movsd xmm1, qword [0x6edb98]
comisd xmm1, xmm0
jbe 0x4a95c3
mov byte [ebp - 0x77d], 0
jmp 0x4a9442
mov byte [ebp - 0x77d], 1
jmp 0x4a95d3
mov byte [ebp - 0x769], 0
push dword [ebp - 0x75c]
xorps xmm0, xmm0
mov ecx, esi
movlpd qword [ebp - 0xe4], xmm0
call fcn.005bb7f0
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 0
mov ecx, dword [ebp - 0x760]
mov esi, 0x20
mov byte [ebp - 4], 0x21
cmp dword [eax], 0
mov eax, 0x40
cmove esi, eax
push esi
push dword [ebp - 0x7d8]
call fcn.005bd3f0
mov ecx, dword [ebp - 0x760]
push esi
push dword [ebp - 0x7d4]
call fcn.005bd3f0
mov ecx, dword [ebp - 0x760]
push 2
push 0xffffffffffffffff
push dword [ebp - 0x75c]
call fcn.005bb4c0
mov ecx, dword [ebp - 0x760]
cmp eax, 0xffffffff
mov dword [ebp - 0x6d4], eax
mov esi, 0x20
mov eax, 0x40
cmove esi, eax
push esi
push dword [ebp - 0x7b0]
call fcn.005bd3f0
mov ecx, dword [ebp - 0x760]
push esi
push dword [ebp - 0x7e0]
call fcn.005bd3f0
push esi
push dword [ebp - 0x7f4]
mov esi, dword [ebp - 0x760]
mov ecx, esi
call fcn.005bd3f0
mov edx, dword [ebp - 0x6d4]
cmp edx, 0xffffffff
jne 0x4a96d3
mov eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0x7c0]
jg 0x4a989b
mov edi, eax
push 0x40
push edi
mov ecx, esi
call fcn.005bd3f0
inc edi
cmp edi, dword [ebp - 0x7c0]
jle 0x4a96b5
mov edi, dword [ebp - 0x774]
jmp 0x4a989b
mov ecx, dword [ebp - 0x77c]
call fcn.005c9b10
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x4a9703
cmp eax, 2
je 0x4a9703
cmp eax, 3
je 0x4a9703
push 0x40
push dword [ebp - 0x79c]
mov ecx, esi
call fcn.005bd3f0
jmp 0x4a9768
mov edx, dword [ebp - 0x6d4]
mov ecx, dword [ebp - 0x77c]
lea edx, [edx - 1]
call fcn.005c9b10
mov ecx, dword [ebp - 0x78c]
mov edx, esi
mov dword [ebp - 0x764], eax
mov eax, 0x20
cmp dword [ebp - 0x764], ecx
mov ecx, 0x40
cmovne eax, ecx
mov ecx, edx
push eax
mov eax, dword [ebp - 0x79c]
push eax
call fcn.005bd3f0
mov edx, dword [ebp - 0x6d4]
mov ecx, dword [ebp - 0x77c]
lea edx, [edx + 1]
call fcn.005c9b10
mov ecx, 0x20
cmp eax, dword [ebp - 0x78c]
je 0x4a976d
mov ecx, 0x40
mov eax, dword [ebp - 0x7bc]
push ecx
push eax
mov ecx, esi
call fcn.005bd3f0
cmp dword [ebp - 0x78c], 3
mov eax, 0x20
mov ecx, dword [ebp - 0x760]
mov esi, 0x40
cmove esi, eax
push esi
push dword [ebp - 0x7f8]
call fcn.005bd3f0
push esi
push dword [ebp - 0x7c0]
mov esi, dword [ebp - 0x760]
mov ecx, esi
call fcn.005bd3f0
cmp dword [ebp - 0x78c], 0
mov ecx, 0x20
mov eax, 0x40
cmove eax, ecx
mov ecx, esi
push eax
push dword [ebp - 0x7ec]
call fcn.005bd3f0
mov eax, dword [ebp - 0x78c]
mov ecx, 0x20
test eax, eax
mov edx, 0x40
cmove ecx, edx
mov dword [ebp - 0x764], ecx
je 0x4a9865
push 0
push dword [ebp - 0x6d4]
mov ecx, esi
push dword [ebp - 0x75c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov ecx, dword [ebp - 0x77c]
mov edx, eax
call fcn.005c9cf0
test eax, eax
js 0x4a985f
cmp eax, dword [ebp - 0x6d4]
jge 0x4a985f
mov ecx, dword [ebp - 0x77c]
mov edx, eax
call fcn.005c9b10
mov ecx, dword [ebp - 0x764]
test eax, eax
mov eax, 0x40
cmove ecx, eax
jmp 0x4a9865
mov ecx, dword [ebp - 0x764]
push ecx
push dword [ebp - 0x7fc]
mov ecx, esi
call fcn.005bd3f0
lea ecx, [ebp - 0xcc]
call fcn.005dbeb0
test al, al
mov ecx, 0x20
mov eax, 0x40
cmovne ecx, eax
push ecx
push dword [ebp - 0x7a8]
mov ecx, esi
call fcn.005bd3f0
cmp byte [ebp - 0x769], 0
je 0x4a98dd
lea eax, [ebp - 0x22c]
mov ecx, esi
push eax
push dword [ebp - 0x7f0]
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x4a98dd
mov eax, dword [ebp - 0x220]
add eax, 0x98
push eax
mov eax, dword [ebp - 0x22c]
add eax, 0xfffffffe
push eax
push 0x28
jmp 0x4a98e3
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bbfd0
mov byte [ebp - 4], 0x20
push dword [ebp - 0xe4]
call fcn.0041e1c3
add esp, 4
jmp 0x4a9442
mov eax, dword [ebp - 0x7c4]
mov byte [ebp - 0x79d], 1
cmp ecx, eax
je 0x4a991f
mov byte [ebp - 0x79d], 0
mov al, byte [edi + 0x1f68]
and al, 1
mov byte [ebp - 0x785], al
jne 0x4a993b
cmp ecx, dword [ebp - 0x7d4]
je 0x4a993b
xor al, al
jmp 0x4a993d
mov al, 1
mov byte [ebp - 0x770], al
cmp edx, esi
jne 0x4a9953
mov byte [ebp - 0x769], 1
cmp ecx, 0xfffffff2
je 0x4a995a
mov byte [ebp - 0x769], 0
test al, al
jne 0x4a997e
cmp ecx, dword [ebp - 0x7d8]
je 0x4a997e
push 4
push dword [ebp - 0x810]
mov ecx, esi
call fcn.005bc500
test eax, eax
setne byte [ebp - 0x770]
push 0xf
xorps xmm0, xmm0
lea ecx, [ebp - 0x1e8]
movups xmmword [ebp - 0x1e8], xmm0
movups xmmword [ebp - 0x1d8], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
cmp byte [ebp - 0x79d], 0
mov byte [ebp - 4], 0x22
je 0x4a99e2
push dword [ebp - 0x75c]
mov ecx, edi
call fcn.0049f410
cmp eax, 2
je 0x4a99e2
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
xor eax, eax
mov ecx, esi
cmp byte [ebp - 0x770], al
sete al
lea eax, [eax*4 + 4]
push eax
push dword [ebp - 0x810]
call fcn.005bd3f0
push 0
push 0
push 0x1004
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x764], ecx
cmp byte [ebp - 0x769], cl
je 0x4a9ad4
push 2
push 0xffffffffffffffff
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb4c0
mov ecx, eax
mov dword [ebp - 0x764], ecx
test ecx, ecx
jns 0x4a9a62
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
push ecx
push dword [ebp - 0x75c]
lea eax, [ecx + 1]
mov ecx, esi
mov dword [ebp - 0x78c], eax
call fcn.005bb5c0
test eax, eax
jne 0x4a9abe
push eax
push dword [ebp - 0x764]
mov ecx, esi
push dword [ebp - 0x75c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xb0]
call fcn.005dc1c0
push 0
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xb0]
push dword [ebp - 0x764]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.004950b0
cmp eax, 1
jne 0x4a9b73
xor al, al
mov byte [ebp - 0x770], al
jmp 0x4a9b79
test eax, eax
jle 0x4a9b1b
mov esi, dword [ebp - 0x77c]
mov edi, ecx
push 0xf000
push edi
push 0x102c
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x764]
inc edi
shr eax, 0xd
and eax, 1
add ecx, eax
mov dword [ebp - 0x764], ecx
cmp edi, dword [ebp - 0x78c]
jl 0x4a9ae0
mov edi, dword [ebp - 0x774]
mov esi, dword [ebp - 0x760]
mov dword [ebp - 0x764], 0
test ecx, ecx
jne 0x4a9b73
cmp dword [ebp - 0x794], ecx
jne 0x4ae21f
cmp byte [ebp - 0x785], cl
jne 0x4ae273
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push ecx
push esi
push 4
push str.Please_select_at_least_one_fix_app_before_using_this_feature._r_n_r_nTo_select_a_fix__tick_the_corresponding_checkbox._r_nTo_run_a_single_fix__just_double_click_it.
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
mov al, byte [ebp - 0x770]
cmp byte [ebp - 0x785], 0
jne 0x4a9c26
test al, al
je 0x4a9c26
cmp dword [ebp - 0x794], 0
jne 0x4a9c26
push 1
push str.Are_you_sure_you_want_to_run_the_selected_fixes__You_will_not_be_prompted_again.
lea ecx, [ebp - 0xbc]
call fcn.005dc260
push 0
push 0
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
lea ecx, [ebp - 0xbc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
jne 0x4a9bde
push str._r_n_r_nNote:_This_PC_is_NOT_connected_to_the_internet__so_we_will_not_be_able_to_download_anything.
jmp 0x4a9be3
push str._r_n_r_nNote:_If_nothing_else_works_to_fix_your_issues__you_can_always_reinstall_Windows_without_losing_any_data_or_apps__by_running_the__Upgrade_to___Reinstall_Windows_10__fix.
call fcn.005da780
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xc8
push 0x1c2
push 0x1e
push esi
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x4a9c26
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
push 0
push str.Cancel_all
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xfa
push 0x28a
push esi
push str.Preparing_to_run_the_selected_fixes_apps...
mov ecx, edi
call fcn.0043d960
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
push 1
push str.Cancel_current
lea ecx, [edi + 0x14f0]
call fcn.005b64a0
push 0
push str.Preparing_to_run_the_selected_fixes_apps...
lea ecx, [edi + 0x14f0]
call fcn.005b67a0
mov esi, dword [ebp - 0x760]
mov ecx, esi
push 0x40
push dword [ebp - 0x798]
call fcn.005bd3f0
push 4
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bc500
test eax, eax
je 0x4a9da4
cmp byte [edi + 0x13d8], 0
jne 0x4a9cc7
push 8
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bd3f0
jmp 0x4a9da4
lea ecx, [ebp - 0xdc]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4a9da4
lea eax, [ebp - 0x174]
mov ecx, edi
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00496140
cmp eax, 1
je 0x4a9da4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0xa
push esi
push 1
push str.The_professional_reports_html_file_could_not_be_created._r_n_r_nDo_you_wish_to_select_another_file_
mov ecx, edi
call fcn.0043e2e0
test eax, eax
je 0x4a9d7a
push 0
lea eax, [ebp - 0x174]
mov ecx, edi
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00496470
cmp eax, 1
jne 0x4a9cb3
lea ecx, [ebp - 0xdc]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4a9ce1
jmp 0x4a9da4
push 8
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bd3f0
lea ecx, [ebp - 0xdc]
call fcn.005dc400
push str.LastReportPath
lea ecx, [ebp - 0xec]
call fcn.005d5df0
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0xffffffff
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x768], 0
mov dword [ebp - 0x120], 1
movq qword [ebp - 0x114], xmm0
mov dword [ebp - 0x10c], 0
call fcn.005dc5e0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x144]
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
movq qword [ebp - 0x144], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x104]
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
movq qword [ebp - 0x104], xmm0
call fcn.005dc5e0
cmp dword [ebp - 0x794], 0
mov byte [ebp - 4], 0x25
jne 0x4a9ee9
cmp byte [ebp - 0x769], 0
jne 0x4a9f2a
mov dl, 1
lea ecx, [ebp - 0x114]
call fcn.005cf7a0
push 0
push 0
push 0x624288
push 0x6287b8
push 0
push 0
push 0x627968
push 0x6287bc
lea ecx, [ebp - 0x114]
call fcn.005da270
mov ecx, eax
call fcn.005da270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6b38bc
lea ecx, [ebp - 0x114]
call fcn.005dc190
push eax
push str.ContinueRepair_
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x144]
call fcn.005dc200
push dword [ebp - 0x784]
lea eax, [ebp - 0xf8]
push esi
push eax
push dword [ebp - 0x75c]
lea ecx, [ebp - 0x144]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e3b0
jmp 0x4a9f2a
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x144]
call fcn.005dc4e0
push 0
push 1
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x114]
call fcn.005dc260
mov ecx, eax
call fcn.005dbf40
push 0xf
lea ecx, [ebp - 0x114]
call fcn.005dad50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x184], 0
push 0
lea ecx, [ebp - 0x114]
movq qword [ebp - 0x18c], xmm0
call fcn.005dc190
push eax
push str.SystemRepair_
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x18c]
call fcn.005dc520
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x26
call fcn.005dc190
push eax
lea ecx, [ebp - 0xe8]
call fcn.005d6a30
lea ecx, [ebp - 0x114]
call fcn.005dc3a0
test eax, eax
je 0x4a9fee
push 0
lea eax, [ebp - 0x114]
mov ecx, edi
push eax
call fcn.00495160
cmp dword [ebp - 0x794], 0
je 0x4a9fd0
lea eax, [ebp - 0x168]
push eax
push str.LastRepairFix
lea ecx, [ebp - 0xe8]
call fcn.005d66b0
lea ecx, [ebp - 0x114]
call fcn.005dc190
push eax
lea ecx, [edi + 0x14f0]
call fcn.005b6bd0
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
cmp dword [ebp - 0x794], 0
jne 0x4aa020
cmp byte [ebp - 0x769], 0
jne 0x4aa020
push 0
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
push 1
push str.SRFile
lea ecx, [ebp - 0xe8]
call fcn.005d5f20
push 0
lea ecx, [ebp - 0x2c8]
call fcn.005d0610
push 1
push 0
lea ecx, [edi + 0x14f0]
call fcn.005b6bd0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x764]
xorps xmm0, xmm0
movups xmmword [edi + 0x78], xmm0
movups xmmword [edi + 0x88], xmm0
movq qword [edi + 0x98], xmm0
movups xmmword [edi + 0xa0], xmm0
movups xmmword [edi + 0xb0], xmm0
movq qword [edi + 0xc0], xmm0
mov dword [ebp - 0x6dc], eax
cmp eax, dword [ebp - 0x78c]
jg 0x4ac6e9
mov esi, dword [ebp - 0x770]
lea eax, [edi + 0x14f0]
push 1
mov ecx, eax
call fcn.005b6180
cmp byte [edi + 0x11c9], 0
jne 0x4ac6e3
cmp byte [ebp - 0x769], 0
mov eax, dword [ebp - 0x6dc]
jne 0x4aa0f0
test eax, eax
jle 0x4aa0f0
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x45c], 0xf000
push ecx
dec eax
mov dword [ebp - 0x460], 0x1000
push eax
push 0x102b
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x6dc]
cmp eax, dword [ebp - 0x78c]
je 0x4ac6e3
cmp dword [ebp - 0x794], 0
je 0x4aa129
cmp eax, dword [ebp - 0x168]
jne 0x4aa129
push 0xffffffffffffffff
push eax
push dword [ebp - 0x75c]
lea eax, [ebp - 0xdc]
mov ecx, edi
push str.The_computer_was_rebooted_or_the_user_logged_off_during_this_operation.
push eax
call fcn.00495eb0
lea ecx, [ebp - 0x144]
call fcn.005dc3a0
test eax, eax
je 0x4aa2c9
push 0x38
lea eax, [ebp - 0x360]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x144]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x360]
call fcn.005dd680
push 0xf000
mov byte [ebp - 4], 0x27
push dword [ebp - 0x6dc]
push 0x102c
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xd
test al, 1
jne 0x4aa1a1
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x26
call fcn.005dd5d0
jmp 0x4ac6c4
mov ecx, dword [ebp - 0x6dc]
mov eax, ecx
mov dword [ebp - 0x764], ecx
cmp eax, dword [ebp - 0x78c]
jge 0x4aa2a9
mov esi, dword [ebp - 0x760]
mov edi, dword [ebp - 0x75c]
cmp eax, ecx
jle 0x4aa1ee
push 0xf000
push eax
push 0x102c
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xd
test al, 1
mov eax, 0x62a118
jne 0x4aa1f3
mov eax, 0x62796c
push 1
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc260
push dword [ebp - 0x764]
mov ecx, esi
push edi
call fcn.005bb5c0
push 0
push dword [ebp - 0x764]
mov ecx, esi
mov dword [ebp - 0xe0], eax
push edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0xb0]
call fcn.005dc1c0
mov eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0xb0]
test eax, eax
jne 0x4aa24e
call fcn.005dc190
push eax
push str.Top_apps_and_fixes
jmp 0x4aa26b
cmp eax, 3
jne 0x4aa260
call fcn.005dc190
push eax
push str.CustomThirdPartyApps
jmp 0x4aa26b
call fcn.005dc190
push eax
push str.LV_Selection
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0xbc]
call fcn.005db130
mov eax, dword [ebp - 0x764]
inc eax
mov dword [ebp - 0x764], eax
cmp eax, dword [ebp - 0x78c]
jge 0x4aa29d
mov ecx, dword [ebp - 0x6dc]
jmp 0x4aa1c7
mov edi, dword [ebp - 0x774]
mov esi, dword [ebp - 0x770]
push 1
push 0
push 0
lea ecx, [ebp - 0x360]
call fcn.005dca80
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x26
call fcn.005dd5d0
push 3
mov ecx, edi
call fcn.0043d8e0
push 1
lea ecx, [edi + 0x14f0]
call fcn.005b6180
mov ecx, dword [ebp - 0x760]
push 0
push dword [ebp - 0x6dc]
push dword [ebp - 0x75c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xb0]
call fcn.005dc1c0
push dword [ebp - 0x6dc]
mov ecx, dword [ebp - 0x760]
push dword [ebp - 0x75c]
call fcn.005bb5c0
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x764], eax
test eax, eax
jne 0x4aa352
push eax
push dword [ebp - 0x75c]
push ecx
lea ecx, [ebp - 0xb0]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.004950b0
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x764], eax
push 0xffffffffffffffff
push ecx
mov ecx, dword [ebp - 0x760]
push 1
push dword [ebp - 0x75c]
call fcn.005bb290
mov eax, dword [ebp - 0x764]
lea ecx, [ebp - 0xb0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp eax, 2
jne 0x4aa39a
call fcn.005dc190
push eax
push str.Currently_running_third_party_app:_r_n_r_n
jmp 0x4aa3b7
cmp eax, 3
jne 0x4aa3ac
call fcn.005dc190
push eax
push str.Running_custom_third_party_app:_r_n_r_n
jmp 0x4aa3b7
call fcn.005dc190
push eax
push str.Currently_executing_fix:_r_n_r_n
lea ecx, [ebp - 0xbc]
call fcn.005dc200
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push 0xffffffffffffffba
lea ecx, [edi + 0x14f0]
call fcn.005b66e0
lea ecx, [ebp - 0x2c8]
call fcn.005d05f0
push 0
lea eax, [ebp - 0x6dc]
mov dword [ebp - 0xa4], 1
push eax
push 4
push str.LastRepairFix
lea ecx, [ebp - 0xe8]
call fcn.005d5f20
lea ecx, [ebp - 0x104]
call fcn.005dc400
lea ecx, [ebp - 0xb0]
call fcn.005dbeb0
test al, al
jne 0x4ac6c4
cmp dword [ebp - 0x764], 3
lea ecx, [ebp - 0xb0]
jne 0x4aa502
call fcn.005dc190
push eax
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
call fcn.0049e010
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x4ac6c4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__custom_third_party_app_
lea ecx, [ebp - 0xb0]
call fcn.005dc190
push eax
push str.Are_you_sure_you_want_to_execute_the__
lea ecx, [ebp - 0xbc]
call fcn.005dc200
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push dword [ebp - 0xe0]
lea eax, [ebp - 0xf8]
push eax
lea ecx, [edi + 0x1290]
call fcn.0054aa80
mov dword [ebp - 0xa4], eax
test eax, eax
jne 0x4ac604
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__custom_app.
lea ecx, [ebp - 0xb0]
call fcn.005dc190
push eax
push str.One_or_more_actions_could_not_be_executed_when_running_the__
lea ecx, [ebp - 0x104]
call fcn.005dc200
jmp 0x4ac604
push str.Backup_desktop_icon_layout
call fcn.005dc4c0
test al, al
je 0x4aa52a
push 0
push 0
lea ecx, [edi + 0x1290]
call fcn.00554cb0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Auto_logon_the_current_user
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa568
push 0
lea ecx, [edi + 0x1290]
call fcn.0057c300
push eax
lea ecx, [edi + 0x1290]
call fcn.00553be0
mov esi, dword [ebp - 0x770]
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Reboot_in_safe_mode_and_continue
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa722
xorps xmm1, xmm1
lea ecx, [ebp - 0x2c8]
call fcn.005d05a0
divsd xmm0, qword [0x6edbb8]
mov ecx, edi
cvttsd2si eax, xmm0
push eax
push dword [ebp - 0x6dc]
lea eax, [ebp - 0xdc]
push dword [ebp - 0x75c]
push str.The_computer_is_now_going_to_be_rebooted_in_safe_mode_with_networking.
push eax
call fcn.00495eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x630518
lea ecx, [ebp - 0x114]
call fcn.005dc190
push eax
push str.Continue_repair
push 0
lea ecx, [edi + 0x1290]
call fcn.0057bdc0
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 2
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.005771e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionRunOnce
push 0
lea ecx, [edi + 0x1290]
call fcn.0057bef0
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x19c], 0
push str..uvksr_
lea ecx, [ebp - 0x114]
movq qword [ebp - 0x1a4], xmm0
call fcn.005dc190
push eax
push str.ContinueRepair_
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
push str.__ContinueRepair__
lea ecx, [edi + 0x1184]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1a4]
call fcn.005dc520
mov byte [ebp - 4], 0x28
push 1
push 1
lea ecx, [ebp - 0x1a4]
call fcn.005dc190
push eax
push str.Continue_system_repair_in_safe_mode
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.005537f0
push 0
lea eax, [ebp - 0x120]
push eax
push 4
push str.RestoreBoot
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
lea ecx, [ebp - 0xd0]
call fcn.005d5e20
push 1
lea ecx, [edi + 0x1290]
call fcn.00578890
lea ecx, [ebp - 0x1a4]
test eax, eax
jne 0x4ae287
mov byte [ebp - 4], 0x26
call fcn.005dc430
mov esi, dword [ebp - 0x770]
jmp 0x4ac604
push str.Enable_Windows_Installer_in_Safe_Mode
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa76c
push str.Are_you_sure_you_want_to_enable_the_Windows_Installer_service_in_Safe_Mode_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
push 1
lea ecx, [edi + 0x1290]
call fcn.00555480
xor ecx, ecx
test eax, eax
setg cl
mov dword [ebp - 0xa4], ecx
jmp 0x4ac604
push str.Backup_all_device_drivers
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa7c4
movsd xmm0, qword [0x6edaf8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_create_a_backup_of_all_third_party_drivers_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
push 0
push 0
lea ecx, [edi + 0x1290]
call fcn.00576fa0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Set_technician_power_settings
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa818
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_apply_the_technician_power_settings_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00560480
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Kill_all_non_system_processes
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa83f
push 1
push esi
lea ecx, [edi + 0x1290]
call fcn.0057a800
jmp 0x4ac604
push str.Delete_all_restore_points
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
jne 0x4ac5e4
push str.Delete_all_restore_points__post_repair_
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
jne 0x4ac5e4
push str.Create_a_system_restore_point
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
jne 0x4ac555
push str.Create_restore_point__post_repair_
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
jne 0x4ac555
push str.Free_physical_memory
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa8d8
push str.Are_you_sure_you_want_to_free_physical_memory_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00545ff0
jmp 0x4ac604
push str.Backup_the_registry
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aa99d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x1a8], 0
push 0x682808
lea ecx, [edi + 0x15c]
movq qword [ebp - 0x1b0], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1b0]
call fcn.005dc520
cmp byte [ebp - 0x770], 0
mov byte [ebp - 4], 0x29
je 0x4aa97c
push 0
push str.All_users
push 3
lea ecx, [ebp - 0x1b0]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.0054ddf0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0xa4], eax
call fcn.005dc430
jmp 0x4ac604
mov ecx, edi
call fcn.00431db0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0xa4], eax
call fcn.005dc430
jmp 0x4ac604
push str.Un_immunize_all_areas
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aaa5b
push str.Are_you_sure_you_want_to_remove_the_current_System_immunization_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea eax, [ebp - 0xbc]
push eax
push str.Immunized
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerImmunization
lea ecx, [ebp - 0xd0]
call fcn.005d65d0
push 1
push 0
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push str.PreviousImmunization
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerImmunization
lea ecx, [edi + 0x1290]
call fcn.005537f0
lea eax, [ebp - 0x154]
mov dword [ebp - 0x154], 0
push eax
push str.ImmunizeAllUsers
lea ecx, [ebp - 0xd0]
call fcn.005d66b0
cmp dword [ebp - 0x154], 0
lea ecx, [edi + 0x1290]
setne al
movzx eax, al
push eax
push 0x62439c
call fcn.0055e210
mov esi, dword [ebp - 0x770]
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Restore_previous_immunization
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aaaf5
push str.Are_you_sure_you_want_to_restore_the_previous_System_immunization_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea eax, [ebp - 0xbc]
push eax
push str.PreviousImmunization
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerImmunization
lea ecx, [ebp - 0xd0]
call fcn.005d65d0
lea eax, [ebp - 0x158]
mov dword [ebp - 0x158], 0
push eax
push str.ImmunizeAllUsers
lea ecx, [ebp - 0xd0]
call fcn.005d66b0
cmp dword [ebp - 0x158], 0
lea ecx, [ebp - 0xbc]
setne al
movzx eax, al
push eax
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.0055e210
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Disable_the_User_Account_Control
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aab9a
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_disable_the_User_Account_Control__UAC__
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea eax, [ebp - 0x150]
mov dword [ebp - 0x150], 5
push eax
push str.ConsentPromptBehaviorAdmin
push str.HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
lea ecx, [ebp - 0xd0]
call fcn.005d6580
test al, al
jne 0x4aab69
mov dword [ebp - 0x150], 5
push 0
lea eax, [ebp - 0x150]
push eax
push 4
push str.UACState
lea ecx, [ebp - 0x108]
call fcn.005d5f20
lea ecx, [edi + 0x1290]
call fcn.0056fde0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Enable_the_User_Account_Control
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aabec
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_enable_the_User_Account_Control__UAC__
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.005718a0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Restore_the_previous_UAC_state
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aace2
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_restore_the_User_Account_Control__UAC_s_previous_state_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x14c], 5
push eax
push str.UACState
lea ecx, [ebp - 0x108]
call fcn.005d66b0
test al, al
jne 0x4aac5e
mov eax, 5
mov dword [ebp - 0x14c], eax
jmp 0x4aac64
mov eax, dword [ebp - 0x14c]
push 1
push eax
push str.ConsentPromptBehaviorAdmin
push str.HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
lea ecx, [edi + 0x1290]
call fcn.00553890
push 1
push 1
push str.EnableLUA
movzx eax, al
lea ecx, [edi + 0x1290]
push str.HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
mov dword [ebp - 0xa4], eax
call fcn.00553890
cmp dword [ebp - 0xa4], 0
lea ecx, [ebp - 0x104]
jne 0x4aacb4
push str.The_previous_UACs_state_could_not_be_restored.
jmp 0x4aacb9
push str.The_previous_UACs_state_was_successfully_restored.
call fcn.005dc510
push 0
lea ecx, [ebp - 0x104]
call fcn.005dc190
push eax
lea ecx, [edi + 0x14f0]
call fcn.005b67a0
mov esi, dword [ebp - 0x770]
jmp 0x4ac604
push str.Enable_the_legacy__F8__boot_menu
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aad34
movsd xmm0, qword [0x6edac8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_enable_the_legacy__F8__boot_menu_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00560360
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Enable_Windows_Recovery_Environment
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aad86
movsd xmm0, qword [0x6edac8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_enable_the_Windows_Recovery_Environment_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00555320
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Prevent_rebooting_until_all_is_done
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aae10
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_prevent_rebooting_this_PC_until_the_current_repair_operation_ends_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push str.The_repair_operation_is_not_complete._Please_cancel_shutdown.
lea ecx, [edi + 0x1290]
call fcn.00549180
cmp dword [ebp - 0xa4], 0
lea ecx, [ebp - 0x104]
je 0x4aade8
push str.Successfully_prevented_this_PC_from_rebooting.
jmp 0x4aaded
push str.Failed_to_prevent_this_PC_from_rebooting.
call fcn.005dc510
push 0
lea ecx, [ebp - 0x104]
call fcn.005dc190
push eax
lea ecx, [edi + 0x14f0]
call fcn.005b67a0
jmp 0x4ac604
push str.Restart_the_Windows_Shell
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aae51
push str.Are_you_sure_you_want_to_restart_the_Windows_Shell_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00578c60
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Restore_desktop_icon_layout
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aae94
push str.Are_you_sure_you_want_to_restore_the_previously_saved_desktop_icons_layout_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 0
lea ecx, [edi + 0x1290]
call fcn.00554bc0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Restore_the_standard_boot_menu
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aaee6
movsd xmm0, qword [0x6edac8]
comisd xmm0, xmmword [edi + 8]
ja 0x4ac6c4
push str.Are_you_sure_you_want_to_restore_the_standard_boot_menu_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00560240
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Ultra_Adware_Killer_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aafc3
push str.Are_you_sure_you_want_to_run_a_Ultra_Adware_Killer_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
sbb eax, eax
and eax, 0x800
cmp byte [edi + 0x13d8], 0
mov dword [ebp - 0x764], eax
je 0x4aafad
push 0
push 0x20019
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x148], 0
call fcn.005d6a80
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0x2a
push eax
push str.UAKAutoRemove
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x15c], 0
call fcn.005d66b0
test al, al
je 0x4aaf98
cmp dword [ebp - 0x15c], 0
je 0x4aaf98
or dword [ebp - 0x764], 0x10
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x26
call fcn.005d69e0
mov eax, dword [ebp - 0x764]
or eax, 0xf
mov ecx, edi
push eax
call fcn.00436650
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.MalwareBytes_AntiMalware_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab01b
push str.Are_you_sure_you_want_to_run_a_Malwarebytes_AntiMalware_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00437430
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Super_AntiSpyware_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab095
push str.Are_you_sure_you_want_to_run_a_Super_AntiSpyware_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
mov ecx, dword [ebp - 0x760]
neg eax
push 4
push dword [ebp - 0x808]
sbb esi, esi
and esi, 0x800
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
neg eax
or esi, eax
push esi
call fcn.00437220
mov esi, dword [ebp - 0x770]
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Kaspersky_TDSSKiller_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab0ed
push str.Are_you_sure_you_want_to_run_a_Kaspersky_TDSSKiller_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00437120
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Avast__aswMBR_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab167
push str.Are_you_sure_you_want_to_run_an_Avast__aswMBR_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
mov ecx, dword [ebp - 0x760]
neg eax
push 4
push dword [ebp - 0x808]
sbb esi, esi
and esi, 0x800
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
neg eax
or esi, eax
push esi
call fcn.00437000
mov esi, dword [ebp - 0x770]
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.AdwCleaner_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab1bf
push str.Are_you_sure_you_want_to_run_an_AdwCleaner_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00436dc0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.RogueKiller_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab217
push str.Are_you_sure_you_want_to_run_a_RogueKiller_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00436cc0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.avast__Browser_Cleanup
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
mov ecx, edi
test al, al
je 0x4ab26f
push str.Are_you_sure_you_want_to_run_Avast__Browser_Cleanup_
push esi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00436c90
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xa4]
push eax
push esi
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x77c]
call fcn.004a2b40
test al, al
je 0x4ac6c4
push str.Install_the_System_Update_Readiness_Tool
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab2d7
push str.Are_you_sure_you_want_to_install_the_System_Update_Readiness_Tool_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0056df80
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.PatchMyPC___Update_all_apps
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab341
push str.Are_you_sure_you_want_to_download_and_run_PatchMyPC_updater_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, dword [ebp - 0x760]
push 4
push dword [ebp - 0x784]
call fcn.005bc500
neg eax
mov edx, 2
sbb eax, eax
xor ecx, ecx
and eax, 0x800
cmp byte [ebp - 0x770], cl
cmovne ecx, edx
or eax, ecx
mov ecx, edi
push eax
call fcn.00437030
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.WAU_Manager___Update_all_apps
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab395
push str.Are_you_sure_you_want_to_update_applications_using_WAU_Manager_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
xor eax, eax
mov ecx, edi
cmp byte [ebp - 0x770], al
push 1
setne al
push 1
push 1
lea eax, [eax*2 + 9]
push eax
call fcn.0046a8d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_computer_and_IE_history
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab3d8
push str.Are_you_sure_you_want_to_delete_Internet_Explorer_and_Computer_history_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 1
lea ecx, [edi + 0x1290]
call fcn.005622d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_MS_Edge_history
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab41b
push str.Are_you_sure_you_want_to_delete_MS_Edges_history_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 2
lea ecx, [edi + 0x1290]
call fcn.005622d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_Chrome_history
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab45e
push str.Are_you_sure_you_want_to_delete_Chromes_history_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 4
lea ecx, [edi + 0x1290]
call fcn.005622d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_Firefox_history
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab4a1
push str.Are_you_sure_you_want_to_delete_Firefoxs_history_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 8
lea ecx, [edi + 0x1290]
call fcn.005622d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_Waterfox_history
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab4e4
push str.Are_you_sure_you_want_to_delete_Waterfoxs_history_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 0x10
lea ecx, [edi + 0x1290]
call fcn.005622d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_all_browsers_history
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab525
push str.Are_you_sure_you_want_to_delete_the_browsing_history_for_all_installed_browsers_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
lea ecx, [edi + 0x1290]
call fcn.005623a0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_all_browsers_history__all_users_
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab566
push str.Are_you_sure_you_want_to_delete_the_browsing_history_for_all_installed_browsers_and_for_all_user_accounts_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.005623a0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Delete_all_browsers_cookies
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab5a7
push str.Are_you_sure_you_want_to_delete_all_browsers_cookies_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
lea ecx, [edi + 0x1290]
call fcn.005623c0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Delete_browsers_cookies__all_users_
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab5e8
push str.Are_you_sure_you_want_to_delete_browsers_cookies_for_all_users_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.005623c0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_Windows_event_logs
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab627
push str.Are_you_sure_you_want_to_clear_the_Windows_event_logs_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00560bb0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_Error_report_folders
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab666
push str.Are_you_sure_you_want_to_clear_the_Windows_error_report_folders_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00560860
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_the_shell_cache
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab6a5
push str.Are_you_sure_you_want_to_clear_the_Windows_Shell_cache_database_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00560760
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_the_shell_MuiCache
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab6e4
push str.Are_you_sure_you_want_to_clear_the_Windows_Shell_MuiCache_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00545e90
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Free_storage_space_GUI
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab754
lea ecx, [edi + 0x14f0]
call fcn.005b6bd0
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test al, al
je 0x4ab73e
push 1
lea ecx, [edi + 0x14f0]
call fcn.005b6250
lea ecx, [edi + 0x1290]
call fcn.0055b840
push 0
lea ecx, [edi + 0x14f0]
mov dword [ebp - 0xa4], eax
call fcn.005b6250
jmp 0x4ac604
lea ecx, [edi + 0x1290]
call fcn.0055b840
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Empty_all_users_temp_folders
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab797
push str.Are_you_sure_you_want_to_empty_the_temporary_folders_and_the_recycle_bin_for_all_users_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 7
lea ecx, [edi + 0x1290]
call fcn.0057a030
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Empty_temporary_folders
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab7da
push str.Are_you_sure_you_want_to_empty_all_users_and_system_temporary_folders_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 5
lea ecx, [edi + 0x1290]
call fcn.0057a030
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Empty_all_browsers_cache
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab840
push str.Are_you_sure_you_want_to_empty_the_cache_for_all_installed_Internet_browsers_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
lea ecx, [edi + 0x1290]
call fcn.00563140
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x104]
push 1
test eax, eax
jne 0x4ab831
push str.The_browsers_cache_could_not_be_emptied.
call fcn.005dc260
jmp 0x4ac604
push str.The_browsers_cache_was_successfully_emptied.
call fcn.005dc260
jmp 0x4ac604
push str.Empty_browsers_cache__all_users_
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab881
push str.Are_you_sure_you_want_to_empty_browsers_cache_for_all_users_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00563140
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_empty_appdata_sub_directories
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab8c0
push str.Are_you_sure_you_want_to_remove_empty_appdata_sub_folders_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00545cf0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clear_Quick_Access_and_Jump_Lists
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab8ff
push str.Are_you_sure_you_want_to_clear_Quick_Access_and_Jump_Lists_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0055fdf0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Cleanup_MSI_orphan_files
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab93e
push str.Are_you_sure_you_want_to_cleanup_the_Windows_installer_orphan_files_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0055ef80
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Uninstall_programs
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab964
mov ecx, edi
call fcn.00435de0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Cleanup_the_registry
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab99f
push str.Are_you_sure_you_want_to_cleanup_the_registry_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, edi
call fcn.00436050
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Cleanup_junk_files
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ab9da
push str.Are_you_sure_you_want_to_cleanup_the_junk_files_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
mov ecx, edi
call fcn.00435ee0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Cleanup_notification_area_cache
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aba1b
push str.Are_you_sure_you_want_to_cleanup_the_notification_area_cache_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00545770
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Run_full_disk_cleanup
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aba5a
push str.Are_you_sure_you_want_to_perform_an_automated_full_disk_cleanup_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0055ee70
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Unattended_disk_cleanup
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4aba99
push str.Are_you_sure_you_want_to_perform_an_unattended_disk_cleanup_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0055ec70
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Run_Memory_diagnostics_on_reboot
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abada
push str.Are_you_sure_you_want_to_schedule_the_memory_diagnostics_to_run_on_the_next_system_boot_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
lea ecx, [edi + 0x1290]
call fcn.0055fce0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Cancel_Memory_diagnostics_on_reboot
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abb1b
push str.Are_you_sure_you_want_to_cancel_the_memory_diagnostics_from_running_on_the_next_system_boot_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.0055fce0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Prevent_resetting_default_apps
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abb43
push 1
mov ecx, edi
call fcn.0046abb0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Update_Windows
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abb82
push str.Are_you_sure_you_want_to_update_Windows_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0055fb20
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Update_Windows_using_WAU_Manager
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abbc5
push str.Are_you_sure_you_want_to_update_Windows_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 1
push 1
push 0xb
mov ecx, edi
call fcn.0046a8d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Delete_temporary_profile_folders
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abc04
push str.Are_you_sure_you_want_to_delete_temporary_profile_folders_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00564660
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Hardware_temperature_test
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abc43
push str.Are_you_sure_you_want_to_perform_a_hardware_temperature_test_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.005559f0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Disk_speed_test
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abc82
push str.Are_you_sure_you_want_to_perform_a_disk_speed_test_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00555750
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Camera_test
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abccd
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6edac8]
jbe 0x4ac604
push 0
push 5
push dword [edi + 0x20]
xor edx, edx
mov ecx, str.shell:AppsFolderMicrosoft.WindowsCamera_8wekyb3d8bbwe_App
call fcn.005e2950
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Activate_Windows_with_BIOS_OEM_key
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abd0e
push str.Are_you_sure_you_want_to_try_to_activate_Windows_using_the_product_key_stored_in_the_BIOS_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.005555a0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Run_Sfc_scan
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abd4f
push str.Are_you_sure_you_want_to_run_the_system_protected_resources_scan_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00546c60
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Register_system_DLLs
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abd8e
push str.Are_you_sure_you_want_to_register_the_system_files_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0056b2b0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Repair_Windows_using_Dism.exe
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abdcd
push str.Are_you_sure_you_want_to_repair_Windows_using_Dism.exe__r_n_r_nThe_operation_can_take_half_an_hour__or_longer__to_complete.
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0056b200
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Clean_up_the_WinSxS_folder
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abe28
push str.Are_you_sure_you_want_to_clean_up_the_WinSxS_folder_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.0056afb0
test edx, edx
jl 0x4abe1b
jg 0x4abe0b
test eax, eax
je 0x4abe1b
mov eax, 1
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
xor eax, eax
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Optimize_the_system_volume
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abea0
push dword [ebp - 0x77c]
mov ecx, edi
push str.Optimize_all_volumes
call fcn.0046e510
test al, al
jne 0x4ac6c4
push dword [ebp - 0x77c]
mov ecx, edi
push str.Optimize_all_volumes_and_boot_time
call fcn.0046e510
test al, al
jne 0x4ac6c4
push str.Are_you_sure_you_want_to_optimize_the_system_volume_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
push dword [edi + 0x1c]
lea ecx, [edi + 0x1290]
call fcn.00570ea0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Optimize_all_volumes
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abefb
push dword [ebp - 0x77c]
mov ecx, edi
push str.Optimize_all_volumes_and_boot_time
call fcn.0046e510
test al, al
jne 0x4ac6c4
push str.Are_you_sure_you_want_to_optimize_all_fixed_volumes_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
lea ecx, [edi + 0x1290]
call fcn.00570d40
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Optimize_boot_and_shutdown
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abf56
push dword [ebp - 0x77c]
mov ecx, edi
push str.Optimize_all_volumes_and_boot_time
call fcn.0046e510
test al, al
jne 0x4ac6c4
push str.Are_you_sure_you_want_to_optimize_the_system_boot_and_shutdown_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00571220
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Optimize_all_volumes_and_boot_time
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abf97
push str.Are_you_sure_you_want_to_optimize_all_storage_volumes_and_also_boot_and_shutdown_time_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 1
lea ecx, [edi + 0x1290]
call fcn.00570d40
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.DISM_repair_GUI_with_all_options
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abfc1
lea ecx, [edi + 0x1290]
call fcn.005747d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.SFC_scan_GUI_with_all_options
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4abfeb
lea ecx, [edi + 0x1290]
call fcn.00572fc0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Check_disk_GUI_with_all_options
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ac015
lea ecx, [edi + 0x1290]
call fcn.00571de0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Install_Repair_Group_Policy_files
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ac054
push str.Are_you_sure_you_want_to_Install_the_Group_Policy_files_in_this_system_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.005543d0
mov dword [ebp - 0xa4], eax
jmp 0x4ac604
push str.Install_Repair_the_Start_Menu_app
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ac093
push str.Are_you_sure_you_want_to_reinstall_the_Start_Menu_app_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push str.Upgrade_to___Reinstall_Windows_10
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
je 0x4ac0d2
push str.Are_you_sure_you_want_to_create_a_system_restore_point_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Create_a_system_restore_point
lea ecx, [ebp - 0xb0]
call fcn.005dc4c0
test al, al
mov ecx, str._System_Repair_Restore_Point
mov eax, str._Post_Repair_Restore_Point
cmove ecx, eax
push ecx
push 1
lea ecx, [edi + 0x143c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc260
mov ecx, eax
call fcn.005da780
push 0
push 0
push 0
push 0x64
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.00564a40
jmp 0x4abe01
push str.Are_you_sure_you_want_to_delete_all_restore_points_
push esi
mov ecx, edi
call fcn.004a2850
test al, al
je 0x4ac6c4
lea ecx, [edi + 0x1290]
call fcn.00564db0
cmp dword [ebp - 0xa4], 0xffffffff
jne 0x4ac659
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__fix_was_cancelled.
lea ecx, [ebp - 0xb0]
call fcn.005dc190
push eax
push str.The__
lea ecx, [ebp - 0x104]
call fcn.005dc200
push 0
lea ecx, [ebp - 0x104]
call fcn.005dc190
push eax
lea ecx, [edi + 0x14f0]
call fcn.005b67a0
lea ecx, [ebp - 0xdc]
call fcn.005dc3a0
test eax, eax
je 0x4ac6c4
push 1
push 0xffffffffffffffff
lea ecx, [edi + 0x14f0]
call fcn.005b6750
push eax
lea ecx, [ebp - 0x104]
call fcn.005dc1c0
xorps xmm1, xmm1
lea ecx, [ebp - 0x2c8]
call fcn.005d05a0
divsd xmm0, qword [0x6edbb8]
lea ecx, [ebp - 0x104]
cvttsd2si eax, xmm0
push eax
push dword [ebp - 0x6dc]
push dword [ebp - 0x75c]
call fcn.005dc190
push eax
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00495eb0
mov eax, dword [ebp - 0x6dc]
inc eax
cmp eax, dword [ebp - 0x78c]
mov dword [ebp - 0x6dc], eax
lea eax, [edi + 0x14f0]
jle 0x4aa093
mov esi, dword [ebp - 0x760]
cmp byte [edi + 0x11c9], 0
jne 0x4ac75a
push 4
push dword [ebp - 0x784]
mov ecx, esi
call fcn.005bc500
test eax, eax
je 0x4ac75a
push str.Waiting_for_the_third_party_scans_to_complete...
push 0xffffffffffffffff
lea ecx, [edi + 0x14f0]
call fcn.005b66e0
nop word [eax + eax]
mov edx, 0xa
lea ecx, [edi + 0x78]
call fcn.005cd410
test al, al
jne 0x4ac745
mov edx, 0xa
lea ecx, [edi + 0xa0]
call fcn.005cd3d0
test al, al
je 0x4ac754
push 0
push 0
mov ecx, edi
call fcn.0043d720
test eax, eax
je 0x4ac720
mov esi, dword [ebp - 0x760]
push 3
mov ecx, edi
call fcn.0043d8e0
push 0
mov ecx, edi
call fcn.0043dbb0
push str.Repair_operation_complete.
push 0x64
lea ecx, [edi + 0x14f0]
call fcn.005b66e0
push 0
push str.Repair_operation_complete.
lea ecx, [edi + 0x14f0]
call fcn.005b67a0
push 0
push 1
mov ecx, edi
call fcn.0043d720
push 2
lea ecx, [ebp - 0x144]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.005771e0
push 1
lea eax, [ebp - 0x114]
mov ecx, edi
push eax
call fcn.00495160
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
mov ecx, edi
call fcn.00495930
lea ecx, [ebp - 0x18c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xe8]
call fcn.005d5740
push 4
push dword [ebp - 0x838]
mov ecx, esi
call fcn.005bc500
test eax, eax
je 0x4ac83a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Media_tada.wav
push dword [edi + 0x20]
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 0x20000
push 0
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
call dword [sym.imp.WINMM.dll_PlaySoundW]
cmp dword [ebp - 0x768], 0
jne 0x4ac89a
test dword [edi + 0x1f68], 1
jne 0x4ac89a
push str.View_application_log
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6150
push str.OK__close_this_dialog_box
push 1
lea ecx, [edi + 0x14f0]
call fcn.005b6150
push 0
push 0
mov ecx, edi
call fcn.0043d720
cmp eax, 1
je 0x4ac889
test eax, eax
je 0x4ac873
jmp 0x4ac89a
mov byte [ebp - 0x775], 0x16
mov dword [edi + 0x1f70], 0x12
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6250
push 3
mov ecx, edi
call fcn.0043d8e0
push 0x20
push dword [ebp - 0x798]
mov ecx, esi
call fcn.005bd3f0
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0
push eax
push str.RestoreBoot
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
lea ecx, [ebp - 0xd0]
call fcn.005d6580
test al, al
je 0x4ac8ff
cmp dword [ebp - 0x120], 0
je 0x4ac8ff
push 0
lea ecx, [edi + 0x1290]
call fcn.00553920
cmp dword [ebp - 0x794], 0
je 0x4ac929
lea eax, [ebp - 0xcc]
push eax
push str.SRFile
lea ecx, [ebp - 0xe8]
call fcn.005d6740
mov dword [ebp - 0x794], 0
cmp dword [ebp - 0x768], 0
mov byte [edi + 0x1f80], 0
je 0x4aca93
and dword [edi + 0x1f68], 0xffffd7ff
lea ecx, [ebp - 0xdc]
call fcn.005dc3a0
test eax, eax
je 0x4ac964
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00495ac0
lea ecx, [ebp - 0xdc]
call fcn.005dc400
mov eax, dword [ebp - 0x768]
test al, 0x20
je 0x4ac9c7
mov ecx, edi
call fcn.00435ce0
cmp eax, 1
jl 0x4ac99f
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push str.The_reports_were_successfully_sent.
jmp 0x4ac9ba
test eax, eax
jne 0x4ac9c1
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push esi
push 4
push str.The_reports_could_not_be_sent_this_time.
mov ecx, edi
call fcn.0043e2e0
mov eax, dword [ebp - 0x768]
mov ecx, eax
and ecx, 1
test al, 0x10
je 0x4aca50
test ecx, ecx
je 0x4ac9df
push str._Shutdown__Auto
jmp 0x4ac9ef
test al, 2
je 0x4ac9ea
push str._Reboot__Auto
jmp 0x4ac9ef
push 0x6b7398
lea ecx, [ebp - 0xbc]
call fcn.005dc510
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6b73a4
lea ecx, [edi + 0x1478]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005da510
push 0
push 5
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov edx, eax
xor ecx, ecx
call fcn.005e2a10
jmp 0x4aca85
test ecx, ecx
je 0x4aca60
push 0
push 0x11
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x4aca85
test al, 2
je 0x4aca70
push 0
push 0x12
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x4aca85
test al, 0xc
je 0x4aca8b
and al, 8
lea ecx, [edi + 0x1290]
movzx eax, al
push eax
call fcn.00578890
mov eax, dword [ebp - 0x768]
test al, 0x1f
jne 0x4ae28e
test byte [edi + 0x1f68], 1
jne 0x4ae2dc
cmp byte [ebp - 0x775], 0x16
je 0x4ae2dc
lea ecx, [ebp - 0x18c]
call fcn.005dc430
lea ecx, [ebp - 0x104]
call fcn.005dc430
lea ecx, [ebp - 0x144]
call fcn.005dc430
lea ecx, [ebp - 0x114]
call fcn.005dc430
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
mov eax, dword [ebp - 0x804]
cmp ecx, eax
je 0x4acdc5
cmp ecx, dword [ebp - 0x834]
je 0x4acdc1
cmp ecx, dword [ebp - 0x800]
jne 0x4acc2c
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x26c]
movups xmmword [ebp - 0x26c], xmm0
movups xmmword [ebp - 0x25c], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, edi
call fcn.0049dc60
cmp eax, 0xffffffff
jne 0x4acb6f
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
cmp eax, 1
jne 0x4acb9b
push dword [ebp - 0x784]
lea eax, [ebp - 0xf8]
push esi
push eax
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e3b0
test eax, eax
jne 0x4acbd1
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push esi
push 4
push str.The_current_settings_could_not_be_exported_to_the_selected_file._r_n_r_nPlease_ensure_you_have_enough_rights_to_create_modify_this_file.
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
push 1
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xc0], 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00474f40
cmp eax, 1
jne 0x4acc0f
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push str.A_shortcut_pointing_to_the_current_repair_procedure_was_successfully_created.
jmp 0x4acbb6
test eax, eax
jne 0x4acbbd
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push esi
push 4
push str.A_shortcut_pointing_to_the_current_repair_procedure_could_not_be_created.
jmp 0x4acbb6
cmp ecx, dword [ebp - 0x814]
jne 0x4acf3a
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x24c]
movups xmmword [ebp - 0x24c], xmm0
movups xmmword [ebp - 0x23c], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
mov dword [ebp - 0x130], 0
push eax
lea ecx, [ebp - 0x138]
movq qword [ebp - 0x138], xmm0
call fcn.005dc5b0
push str.Unload_current__if_any
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x30
call fcn.005dc4c0
test al, al
je 0x4accb7
lea ecx, [ebp - 0x138]
call fcn.005dc400
push 1
lea eax, [ebp - 0x138]
mov ecx, edi
push eax
call fcn.004740d0
lea ecx, [ebp - 0x138]
cmp eax, 1
jne 0x4acd1b
push dword [ebp - 0x784]
lea eax, [ebp - 0xf8]
push esi
push eax
push dword [ebp - 0x75c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e3b0
test eax, eax
jne 0x4acd34
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push esi
push 4
push str.The_current_settings_could_not_be_exported_to_the_selected_file._r_n_r_nPlease_ensure_you_have_enough_rights_to_create_modify_this_file.
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0x138]
call fcn.005dc430
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x138]
call fcn.005dc4a0
test al, al
jne 0x4acdb2
lea ecx, [ebp - 0xcc]
call fcn.005dbeb0
test al, al
je 0x4acd15
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc4e0
push dword [ebp - 0x794]
lea eax, [ebp - 0xf8]
push dword [ebp - 0x784]
lea ecx, [ebp - 0xcc]
push esi
push eax
push dword [ebp - 0x75c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e750
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
push dword [ebp - 0x7b8]
mov ecx, edi
push esi
call fcn.004a28a0
mov dword [ebp - 0xc0], 1
jmp 0x4acd15
cmp ecx, eax
jne 0x4acde4
push 1
push 0x62439c
lea ecx, [ebp - 0x868]
call fcn.005dc570
mov byte [ebp - 4], 0x2b
or dword [ebp - 0x7ac], 1
jmp 0x4ace04
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x874]
call fcn.005dc5b0
mov dword [ebp - 4], 0x2c
or dword [ebp - 0x7ac], 2
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc4e0
mov eax, dword [ebp - 0x7ac]
test al, 2
je 0x4ace34
and eax, 0xfffffffd
lea ecx, [ebp - 0x874]
mov dword [ebp - 0x7ac], eax
call fcn.005dc430
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 4], 0x20
test al, 1
je 0x4ace53
and eax, 0xfffffffe
lea ecx, [ebp - 0x868]
mov dword [ebp - 0x7ac], eax
call fcn.005dc430
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x2e8]
movups xmmword [ebp - 0x2e8], xmm0
movups xmmword [ebp - 0x2d8], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, edi
call fcn.0049dc60
cmp eax, 0xffffffff
jne 0x4aceaf
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
cmp eax, 1
jne 0x4acedb
push dword [ebp - 0x784]
lea eax, [ebp - 0xf8]
push esi
push eax
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e3b0
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
test eax, eax
je 0x4acf1c
push str.The_current_selection__settings__top_and_custom_third_party_apps_were_successfully_saved.
call fcn.0043e2e0
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0xc0], 1
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
push str.The_current_settings_could_not_be_exported_to_the_selected_file._r_n_r_nPlease_ensure_you_have_enough_rights_to_write_to_the_file.
call fcn.0043e2e0
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
cmp dword [edi + 0x14d8], esi
jne 0x4a9442
mov ecx, dword [edi + 0x14a8]
cmp ecx, 0xffffffeb
jne 0x4acf72
mov eax, dword [ebp - 0x75c]
cmp dword [edi + 0x14b4], eax
jne 0x4acf8d
push dword [ebp - 0x790]
mov ecx, edi
push eax
call fcn.0043e280
jmp 0x4a9442
mov edx, dword [ebp - 0x790]
cmp ecx, 0xffffffb3
jne 0x4acf85
cmp dword [edi + 0x14b4], edx
je 0x4acf9f
mov eax, dword [ebp - 0x75c]
jmp 0x4acf93
mov edx, dword [ebp - 0x790]
cmp ecx, dword [ebp - 0x818]
jne 0x4ad017
push 0x80
push edx
mov ecx, esi
call fcn.005bd3f0
push dword [ebp - 0x790]
mov ecx, esi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
push str.Find_a_fix_app__CtrlF_
lea ecx, [ebp - 0xbc]
call fcn.005dc4c0
mov ecx, esi
test al, al
je 0x4acffe
push 0
push 0
push dword [ebp - 0x790]
call fcn.005bcd30
push 0
push dword [ebp - 0x790]
mov ecx, esi
call fcn.005bec70
jmp 0x4a9442
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x790]
call fcn.005befd0
jmp 0x4a9442
cmp ecx, 0xffffffb4
jne 0x4ad06f
cmp dword [edi + 0x14b4], edx
jne 0x4ad06f
push edx
mov ecx, esi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
lea ecx, [ebp - 0xbc]
call fcn.005dc3a0
cmp eax, 3
jl 0x4a9442
push 0xffffffffffffffff
push 6
push 0
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov ecx, dword [ebp - 0x77c]
mov edx, eax
call fcn.005c9ea0
jmp 0x4a9442
cmp ecx, dword [ebp - 0x7e8]
jne 0x4ad1e5
push edx
mov ecx, esi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
lea ecx, [ebp - 0xbc]
call fcn.005dbeb0
test al, al
jne 0x4ad1ca
push str.Find_a_fix_app__CtrlF_
lea ecx, [ebp - 0xbc]
call fcn.005dc4c0
test al, al
jne 0x4ad1ca
push dword [ebp - 0x7e4]
lea ecx, [ebp - 0xbc]
push 0x1e
push 0
call fcn.005dc190
mov ecx, dword [ebp - 0x77c]
mov edx, eax
call fcn.005c9ea0
mov dword [ebp - 0x7e4], eax
mov ecx, esi
cmp eax, 0xffffffff
je 0x4ad196
push eax
push dword [ebp - 0x75c]
call fcn.005bb5c0
cmp byte [ebp - 0x7b1], 0
mov dword [ebp - 0xe0], eax
jne 0x4ad17f
push 1
push eax
push 0x105c
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x4ad17f
lea eax, [ebp - 0x430]
mov dword [ebp - 0x430], 0x60
push eax
push dword [ebp - 0xe0]
mov dword [ebp - 0x42c], 4
push 0x1093
push dword [ebp - 0x77c]
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x410], 0
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push dword [ebp - 0x7e4]
push 0x1013
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x80
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bd3f0
jmp 0x4a9442
push 0x80
push dword [ebp - 0x790]
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push str.Find_reached_the_end_of_the_list.
mov ecx, edi
call fcn.0043e2e0
jmp 0x4a9442
push 0
push 0
push 0x201
push dword [ebp - 0x818]
mov ecx, esi
call fcn.005befd0
jmp 0x4a9442
cmp ecx, dword [ebp - 0x7d0]
jne 0x4ad331
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x1b4], 0
push str.Create_a_system_restore_pointFree_physical_memoryMalwareBytes_AntiMalware_scanKaspersky_TDSSKiller_scanUltra_Adware_Killer_scanReset_IE_and_internet_settingsReset_ChromeReset_FirefoxReset_the_hosts_file_and_DNSFix_install_problemsFix_and_enable_Windows_updateFix_local_group_accessFix_Apps_not_responding_too_soonFix_browser_shortcutsRebuild_icon_cacheInstall_Update_JavaInstall_Update_FlashEmpty_all_users_temp_foldersEmpty_all_browsers_cacheClear_Windows_event_logsPatchMyPC___Update_all_appsFix_Google_Chrome_black_windowPatchMyPC___Update_all_appsUnattended_disk_cleanupClear_Error_report_foldersCleanup_the_registryRun_Sfc_scanRepair_Windows_using_Dism.exeRegister_system_DLLsOptimize_boot_and_shutdownUpdate_Windows_using_WAU_ManagerCreate_restore_point__post_repair_Reboot_the_computerBackup_the_registryRestart_the_Windows_ShellUn_immunize_all_areasRestore_previous_immunization
lea ecx, [ebp - 0x1bc]
movq qword [ebp - 0x1bc], xmm0
call fcn.005dc570
push 0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x764], 0
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc3a0
test eax, eax
je 0x4ad31d
mov edi, dword [ebp - 0x75c]
nop dword [eax + eax]
push dword [ebp - 0x764]
mov ecx, esi
push edi
call fcn.005bb5c0
test eax, eax
je 0x4ad2e4
cmp eax, 3
je 0x4ad2e4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62794c
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push 0x62794c
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 0xffffffffffffffff
push 0
push dword [ebp - 0x764]
lea ecx, [ebp - 0xbc]
push 0
push 1
push 1
push 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1bc]
call fcn.005daa70
test eax, eax
mov ecx, esi
setg al
movzx eax, al
push eax
push edi
call fcn.005bba40
mov eax, dword [ebp - 0x764]
mov ecx, esi
inc eax
push 0
push eax
push edi
mov dword [ebp - 0x764], eax
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc3a0
test eax, eax
jne 0x4ad260
mov edi, dword [ebp - 0x774]
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x20
call fcn.005dc430
jmp 0x4a9442
cmp ecx, dword [ebp - 0x7cc]
jne 0x4ad34e
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push eax
mov ecx, esi
call fcn.005bba40
jmp 0x4a9442
cmp ecx, dword [ebp - 0x7b0]
je 0x4adf0d
cmp ecx, dword [ebp - 0x7e0]
je 0x4adf0d
cmp ecx, dword [ebp - 0x7c8]
jne 0x4ad4b1
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x1c0], 0
push str.Create_a_system_restore_pointFree_physical_memoryUltra_Adware_Killer_scanRebuild_icon_cacheInstall_Update_FlashEmpty_all_users_temp_foldersClear_Windows_event_logsClear_Error_report_foldersClear_the_shell_MuiCacheClear_empty_appdata_sub_directoriesClear_Quick_Access_and_Jump_ListsCleanup_the_registryUnattended_disk_cleanupOptimize_boot_and_shutdownPatchMyPC___Update_all_appsClear_the_shell_MuiCacheCleanup_notification_area_cache
lea ecx, [ebp - 0x1c8]
movq qword [ebp - 0x1c8], xmm0
call fcn.005dc570
push 0
push 0
push dword [ebp - 0x75c]
mov ecx, esi
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x764], 0
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc3a0
test eax, eax
je 0x4ad49d
mov edi, dword [ebp - 0x75c]
nop dword [eax]
push dword [ebp - 0x764]
mov ecx, esi
push edi
call fcn.005bb5c0
test eax, eax
je 0x4ad464
cmp eax, 3
je 0x4ad464
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62794c
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
push 0x62794c
lea ecx, [ebp - 0xbc]
call fcn.005dc200
push 0xffffffffffffffff
push 0
push dword [ebp - 0x764]
lea ecx, [ebp - 0xbc]
push 0
push 1
push 1
push 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1c8]
call fcn.005daa70
test eax, eax
mov ecx, esi
setg al
movzx eax, al
push eax
push edi
call fcn.005bba40
mov eax, dword [ebp - 0x764]
mov ecx, esi
inc eax
push 0
push eax
push edi
mov dword [ebp - 0x764], eax
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc3a0
test eax, eax
jne 0x4ad3e0
mov edi, dword [ebp - 0x774]
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x20
call fcn.005dc430
jmp 0x4a9442
cmp ecx, dword [ebp - 0x79c]
je 0x4ade78
cmp ecx, dword [ebp - 0x7bc]
je 0x4ade78
cmp ecx, dword [ebp - 0x7fc]
jne 0x4ad5c7
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
test eax, eax
js 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
cmp eax, 1
jl 0x4a9442
push 0
push dword [ebp - 0x6d4]
mov ecx, esi
push dword [ebp - 0x75c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0xbc]
call fcn.005dc190
mov ecx, dword [ebp - 0x77c]
mov edx, eax
call fcn.005c9cf0
test eax, eax
js 0x4ad57f
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
test eax, eax
jne 0x4ad57f
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0xa
push eax
push 4
push str.You_already_have_this_item_in_the__Top_apps_and_fixes__group.
mov ecx, edi
call fcn.0043e2e0
jmp 0x4a9442
mov ecx, dword [ebp - 0x77c]
xor edx, edx
push 1
push 0
call fcn.005c9c40
mov edx, dword [ebp - 0x6d4]
mov ecx, dword [ebp - 0x77c]
push eax
call fcn.005c95b0
test eax, eax
js 0x4ad5b8
push 0xffffffffffffffff
push eax
push 1
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb290
mov dword [ebp - 0xc0], 0
jmp 0x4a9442
cmp ecx, dword [ebp - 0x7ec]
jne 0x4ad622
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
test eax, eax
js 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
test eax, eax
jne 0x4a9442
push eax
push dword [ebp - 0x6d4]
mov ecx, esi
push dword [ebp - 0x75c]
call fcn.005bb970
mov dword [ebp - 0xc0], 0
jmp 0x4a9442
cmp ecx, dword [ebp - 0x7f8]
jne 0x4ad6c7
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
test eax, eax
js 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
cmp eax, 3
jne 0x4a9442
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x308]
movups xmmword [ebp - 0x308], xmm0
movups xmmword [ebp - 0x2f8], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0xf8]
push dword [ebp - 0x6d4]
mov ecx, edi
push dword [ebp - 0x75c]
push eax
call fcn.0049a800
push dword [ebp - 0x7dc]
mov esi, eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x308]
jmp 0x4adc85
cmp ecx, dword [ebp - 0x7c0]
jne 0x4ad823
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
test eax, eax
js 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
cmp eax, 3
jne 0x4a9442
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x28c]
movups xmmword [ebp - 0x28c], xmm0
movups xmmword [ebp - 0x27c], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__custom_third_party_app_
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Are_you_sure_you_want_to_delete_the__
push 0
mov byte [ebp - 4], 0x34
mov ecx, esi
push dword [ebp - 0x6d4]
push dword [ebp - 0x75c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005da510
mov ecx, eax
call fcn.005da780
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
lea ecx, [ebp - 0xbc]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x4ad7dd
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
push dword [ebp - 0x6d4]
lea eax, [ebp - 0xf8]
mov ecx, edi
push dword [ebp - 0x75c]
push eax
call fcn.0049a6a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x28c]
test eax, eax
jne 0x4ad80f
call fcn.005b8790
jmp 0x4a9442
mov dword [ebp - 0xc0], 0
call fcn.005b8790
jmp 0x4a9442
mov ecx, dword [edi + 0x14a8]
cmp ecx, dword [ebp - 0x7f4]
jne 0x4ada4e
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
test eax, eax
js 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
cmp eax, 3
jne 0x4a9442
push 0
push dword [ebp - 0x6d4]
mov ecx, esi
push dword [ebp - 0x75c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xb0]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4a9442
xorps xmm0, xmm0
mov dword [ebp - 0x124], 0
movq qword [ebp - 0x12c], xmm0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
push dword [ebp - 0x7dc]
mov edx, str.Save_custom_app_in_existing_SR_files
mov byte [ebp - 4], 0x35
push str.Save_to_files
push 0
push 0
push 0x10000208
push str.System_Repair_Settings_file__.uvksr_
push 0
lea ecx, [ebp - 0x12c]
call fcn.005e1f20
test al, al
jne 0x4ad91a
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x124]
test ecx, ecx
je 0x4a9442
push 3
call fcn.00401e90
jmp 0x4a9442
push 0xf000
push dword [ebp - 0x6d4]
push 0x102c
push dword [ebp - 0x77c]
call dword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xd
xor ecx, ecx
and al, 1
mov dword [ebp - 0x78c], ecx
mov byte [ebp - 0x830], al
cmp dword [ebp - 0x12c], ecx
jbe 0x4ada2a
mov dword [ebp - 0x764], ecx
mov esi, ecx
nop dword [eax]
push 0x38
lea eax, [ebp - 0x3d0]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea eax, [esi + 1]
cmp dword [ebp - 0x12c], esi
mov esi, eax
ja 0x4ad986
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x764]
add ecx, dword [ebp - 0x124]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3d0]
call fcn.005dd680
push dword [ebp - 0x830]
lea eax, [ebp - 0x3d0]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0xb0]
call fcn.005dc190
push eax
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
call fcn.0049e080
add dword [ebp - 0x78c], eax
lea ecx, [ebp - 0x3d0]
mov byte [ebp - 4], 0x35
call fcn.005dd5d0
add dword [ebp - 0x764], 0xc
mov eax, dword [ebp - 0x12c]
cmp esi, eax
jb 0x4ad960
mov esi, dword [ebp - 0x760]
cmp dword [ebp - 0x78c], eax
jae 0x4ada2a
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push str.The_highlighted_app_was_could_not_be_saved_to_one_or_more_files.
mov ecx, edi
call fcn.0043e2e0
jmp 0x4ad8fc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push str.The_highlighted_app_was_successfully_saved_in_the_indicated_files.
mov ecx, edi
call fcn.0043e2e0
jmp 0x4ad8fc
cmp ecx, dword [ebp - 0x7a8]
jne 0x4adb61
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x2ac]
movups xmmword [ebp - 0x2ac], xmm0
movups xmmword [ebp - 0x29c], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push edx
push esi
call fcn.005b8800
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0xc0], 0
jne 0x4adb28
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 3
push str.Do_you_want_to_save_the_current_settings_and_apps_before_loading_another_file_
mov ecx, edi
call fcn.0043e2e0
cmp eax, 0xffffffff
jne 0x4adad0
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
cmp eax, 1
jne 0x4adb28
lea eax, [ebp - 0xcc]
mov ecx, edi
push eax
call fcn.0049dc60
cmp eax, 0xffffffff
jne 0x4adafc
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
cmp eax, 1
jne 0x4adb28
push dword [ebp - 0x784]
lea eax, [ebp - 0xf8]
push esi
push eax
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e3b0
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
push dword [ebp - 0x75c]
lea eax, [ebp - 0xcc]
push eax
call fcn.0049f2e0
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0xc0], 1
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
cmp ecx, 0xffffffbf
jne 0x4adc1f
mov eax, dword [ebp - 0x7b8]
cmp dword [edi + 0x14b4], eax
jne 0x4adc1f
push 0
push ecx
push eax
mov ecx, esi
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0xbc]
push eax
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbc20
push str.Unload_current__if_any
lea ecx, [ebp - 0xbc]
call fcn.005dc4c0
test al, al
lea eax, [ebp - 0xf8]
je 0x4adbce
push eax
push dword [ebp - 0x75c]
lea eax, [ebp - 0xcc]
mov ecx, edi
push eax
call fcn.0049f2e0
jmp 0x4adbf5
push dword [ebp - 0x794]
lea ecx, [ebp - 0xbc]
push dword [ebp - 0x784]
push esi
push eax
push dword [ebp - 0x75c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e750
cmp eax, 1
jl 0x4a9442
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc4e0
mov dword [ebp - 0xc0], 1
jmp 0x4a9442
cmp ecx, dword [ebp - 0x82c]
jne 0x4adcb8
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x328]
movups xmmword [ebp - 0x328], xmm0
movups xmmword [ebp - 0x318], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push edx
push esi
call fcn.005b8800
push 0xffffffffffffffff
push dword [ebp - 0x75c]
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0x38
push eax
mov ecx, edi
call fcn.0049a800
push dword [ebp - 0x7dc]
mov esi, eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x20
cmp esi, 1
je 0x4adc9e
call fcn.005b8790
mov esi, dword [ebp - 0x760]
jmp 0x4a9442
mov dword [ebp - 0xc0], 0
call fcn.005b8790
mov esi, dword [ebp - 0x760]
jmp 0x4a9442
cmp ecx, dword [ebp - 0x824]
jne 0x4add56
lea eax, [ebp - 0xcc]
mov ecx, edi
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0049de70
cmp eax, 1
jne 0x4add0b
push dword [ebp - 0x794]
lea eax, [ebp - 0xf8]
push dword [ebp - 0x784]
lea ecx, [ebp - 0xcc]
push esi
push eax
push dword [ebp - 0x75c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e750
test eax, eax
jne 0x4add2d
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push esi
push 4
push str.The_current_settings_could_not_be_loaded_from_the_selected_file._r_n_r_nPlease_ensure_the_file_you_indicate_exists_and_is_valid.
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
push dword [ebp - 0x7b8]
mov ecx, edi
push esi
call fcn.004a28a0
mov dword [ebp - 0xc0], 1
jmp 0x4a9442
mov eax, dword [ebp - 0x7a4]
cmp ecx, eax
jne 0x4a9442
push 4
push eax
mov ecx, esi
call fcn.005bc500
test eax, eax
je 0x4ade40
push 0
push 0
mov ecx, edi
call fcn.00477170
test al, al
jne 0x4add99
push 8
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bd3f0
jmp 0x4a9442
push 0xd
xorps xmm0, xmm0
lea ecx, [ebp - 0x398]
movups xmmword [ebp - 0x398], xmm0
movups xmmword [ebp - 0x388], xmm0
push dword [edi + 0x11bc]
push dword [ebp - 0x798]
push dword [ebp - 0x790]
push esi
call fcn.005b8800
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x39
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4addf3
lea ecx, [ebp - 0xdc]
call fcn.005dbeb0
test al, al
je 0x4ade2c
push 0
lea eax, [ebp - 0x174]
mov ecx, edi
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00496470
cmp eax, 1
je 0x4ade2c
push 8
push dword [ebp - 0x7a4]
mov ecx, esi
call fcn.005bd3f0
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4a9442
lea ecx, [ebp - 0xdc]
call fcn.005dc3a0
test eax, eax
je 0x4ade68
push 2
lea ecx, [ebp - 0xdc]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.005771e0
lea ecx, [ebp - 0xdc]
call fcn.005dc400
jmp 0x4a9442
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
cmp eax, 0xffffffff
je 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
mov dword [ebp - 0xe0], eax
test eax, eax
je 0x4adeb9
cmp eax, 2
je 0x4adeb9
cmp eax, 3
jne 0x4a9442
mov eax, dword [ebp - 0x79c]
cmp dword [edi + 0x14a8], eax
mov eax, dword [ebp - 0x6d4]
jne 0x4aded0
dec eax
jmp 0x4aded1
inc eax
push eax
push dword [ebp - 0x75c]
mov ecx, esi
mov dword [ebp - 0x764], eax
call fcn.005bb5c0
cmp eax, dword [ebp - 0xe0]
jne 0x4a9442
push dword [ebp - 0x764]
mov edx, dword [ebp - 0x6d4]
mov ecx, dword [ebp - 0x77c]
call fcn.005c8fe0
jmp 0x4a9442
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x6d4], eax
cmp eax, 0xffffffff
je 0x4a9442
push eax
push dword [ebp - 0x75c]
mov ecx, esi
call fcn.005bb5c0
mov ecx, dword [ebp - 0x7b0]
mov edx, eax
cmp dword [edi + 0x14a8], ecx
mov ecx, dword [ebp - 0x77c]
mov dword [ebp - 0xe0], eax
sete byte [ebp - 0x828]
call fcn.005ca440
mov edi, dword [ebp - 0x75c]
mov dword [ebp - 0x764], eax
push 0xffffffffffffffff
push 0
push eax
push dword [ebp - 0x828]
mov ecx, esi
push edi
call fcn.005bba40
mov eax, dword [ebp - 0x764]
mov ecx, esi
inc eax
push eax
push edi
mov dword [ebp - 0x764], eax
call fcn.005bb5c0
cmp eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x764]
je 0x4adf68
mov edi, dword [ebp - 0x774]
jmp 0x4a9442
cmp dword [ebp - 0xc0], 0
jne 0x4ae024
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 3
push str.Do_you_want_to_save_the_current_settings_and_apps_before_closing_this_module_
mov ecx, edi
call fcn.0043e2e0
cmp eax, 0xffffffff
je 0x4a9442
cmp eax, 1
jne 0x4ae024
lea eax, [ebp - 0xcc]
mov ecx, edi
push eax
call fcn.0049dc60
cmp eax, 0xffffffff
je 0x4a9442
cmp eax, 1
jne 0x4ae024
push dword [ebp - 0x784]
lea eax, [ebp - 0xf8]
push esi
push eax
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0049e3b0
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
mov ecx, edi
call fcn.00495930
cmp dword [ebp - 0xe0], 0xfffffffa
setne byte [ebp - 0x775]
push 0
push 0
push 0
push 0x494ef0
mov ecx, esi
call fcn.005b8c90
push 0
mov ecx, edi
call fcn.0043dbb0
lea ecx, [ebp - 0xdc]
call fcn.005dc3a0
test eax, eax
je 0x4ae076
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00495ac0
push 0
push str.SystemRepair
mov ecx, edi
call fcn.0045f380
cmp byte [ebp - 0x775], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0x174]
call fcn.005dc430
lea ecx, [ebp - 0x180]
call fcn.005dc430
lea ecx, [ebp - 0x198]
call fcn.005dc430
lea ecx, [ebp - 0xdc]
call fcn.005dc430
mov ecx, dword [ebp - 0xf0]
test ecx, ecx
je 0x4ae0d6
push 3
call fcn.00404690
lea ecx, [ebp - 0x6f8]
call fcn.005c6500
lea ecx, [ebp - 0x6fc]
call fcn.005c6500
lea ecx, [ebp - 0x700]
call fcn.005c6500
lea ecx, [ebp - 0x6e0]
call fcn.005c6500
lea ecx, [ebp - 0x704]
call fcn.005c6500
lea ecx, [ebp - 0x708]
call fcn.005c6500
lea ecx, [ebp - 0x70c]
call fcn.005c6500
lea ecx, [ebp - 0x710]
call fcn.005c6500
lea ecx, [ebp - 0x714]
call fcn.005c6500
lea ecx, [ebp - 0x6ec]
call fcn.005c6500
lea ecx, [ebp - 0x6e4]
call fcn.005c6500
lea ecx, [ebp - 0x6e8]
call fcn.005c6500
lea ecx, [ebp - 0x718]
call fcn.005c6500
lea ecx, [ebp - 0x71c]
call fcn.005c6500
lea ecx, [ebp - 0x720]
call fcn.005c6500
lea ecx, [ebp - 0x72c]
call fcn.005d6ab0
mov eax, dword [ebp - 0x480]
cmp eax, 0xffffffff
je 0x4ae198
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x6d8]
call fcn.005c6500
lea ecx, [ebp - 0xec]
call fcn.005d69e0
lea ecx, [ebp - 0xd0]
call fcn.005d69e0
lea ecx, [ebp - 0xe8]
call fcn.005d69e0
lea ecx, [ebp - 0x108]
call fcn.005d69e0
lea ecx, [ebp - 0xb0]
call fcn.005dc430
lea ecx, [ebp - 0xcc]
call fcn.005dc430
lea ecx, [ebp - 0x1f4]
call fcn.005dc430
lea ecx, [ebp - 0xbc]
call fcn.005dc430
mov al, byte [ebp - 0x775]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0xf
push 0
push 1
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xbc]
call fcn.005dc260
mov ecx, eax
call fcn.005dbf40
mov ecx, eax
call fcn.005dad50
push 1
lea eax, [ebp - 0xbc]
mov ecx, edi
push eax
call fcn.00495160
push 2
lea ecx, [ebp - 0xcc]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.005771e0
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4ae03e
call fcn.005dc430
jmp 0x4ae299
lea ecx, [edi + 0x17e0]
call fcn.005b7680
lea ecx, [ebp - 0x18c]
call fcn.005dc430
lea ecx, [ebp - 0x104]
call fcn.005dc430
lea ecx, [ebp - 0x144]
call fcn.005dc430
lea ecx, [ebp - 0x114]
call fcn.005dc430
lea ecx, [ebp - 0x1e8]
call fcn.005b8790
mov byte [ebp - 0x775], 0
jmp 0x4ae099
lea ecx, [ebp - 0x18c]
call fcn.005dc430
lea ecx, [ebp - 0x104]
call fcn.005dc430
lea ecx, [ebp - 0x144]
call fcn.005dc430
lea ecx, [ebp - 0x114]
call fcn.005dc430
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x20
call fcn.005b8790
jmp 0x4ae03e