Function at 0x4757f0
Capabilities:
Check if file exists
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f02b9
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x30]
push 1
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
push eax
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x28], 0
call fcn.005dc570
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
movq qword [ebp - 0x6c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
lea ecx, [ebp - 0x60]
movq qword [ebp - 0x60], xmm0
call fcn.005dc5e0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.005dbeb0
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test al, al
jne 0x47589f
call fcn.005dc190
push eax
call ebx
test eax, eax
jne 0x4759a4
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push ecx
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.0043e540
push eax
push 0
push str.uvkey
push 0
push 0x1008
push str.UVK_license_key_.uvkey_
push 0
lea ecx, [edi + 0x1290]
call fcn.0057b9e0
push eax
mov edx, str.Browse_to_the_license_you_wish_to_install
lea ecx, [ebp - 0x20]
call fcn.005e1f20
test al, al
jne 0x475941
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x47593a
push fcn.005dc430
mov byte [ebp - 4], 4
lea esi, [edi - 4]
push dword [esi]
push 0xc
push edi
call fcn.0041e45b
mov eax, dword [edi - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
xor esi, esi
jmp 0x476007
mov eax, dword [ebp - 0x20]
mov ecx, 1
test eax, eax
cmove eax, ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
call fcn.005dc3e0
push eax
lea ecx, [ebp - 0x30]
call fcn.005dc1c0
mov byte [ebp - 4], 2
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x47599e
push fcn.005dc430
mov byte [ebp - 4], 5
lea esi, [ebx - 4]
push dword [esi]
push 0xc
push ebx
call fcn.0041e45b
mov eax, dword [ebx - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
mov byte [ebp - 4], 2
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov eax, dword [edi + 0x13dc]
lea ecx, [edi + 0x150]
sub esp, 8
mov dword [ebp - 0x70], eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x20], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6c7be0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc520
sub esp, 8
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x20]
movq qword [ebp - 0x3c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..backup
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3c]
call fcn.005dc520
mov byte [ebp - 4], 7
cmp dword [ebp - 0x70], 0
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExW]
jbe 0x475a6f
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
call ebx
test eax, eax
je 0x475a6f
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x30]
call fcn.005dc450
test al, al
je 0x475a6f
push 1
lea ecx, [ebp - 0x3c]
mov byte [ebp - 0x71], 1
call fcn.005dc190
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
call esi
jmp 0x475a73
mov byte [ebp - 0x71], 0
test byte [ebp - 0x70], 2
xorps xmm0, xmm0
movq qword [ebp - 0x48], xmm0
mov dword [ebp - 0x40], 0
je 0x475aa5
lea eax, [edi + 0x143c]
push eax
lea ecx, [ebp - 0x90]
call fcn.005dc5b0
mov byte [ebp - 4], 8
mov ebx, 1
jmp 0x475ac3
push 1
push 0x62439c
lea ecx, [ebp - 0x84]
call fcn.005dc570
mov dword [ebp - 4], 9
mov ebx, 2
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x78], ebx
call fcn.005dc5b0
mov dword [ebp - 4], 0xa
test bl, 2
ret
invalid
je 0x475ae9
lea ecx, [ebp - 0x84]
and ebx, 0xfffffffd
call fcn.005dc430
mov byte [ebp - 4], 0xc
test bl, 1
je 0x475afd
lea ecx, [ebp - 0x90]
call fcn.005dc430
lea ecx, [ebp - 0x30]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00468150
cmp byte [edi + 0x13d8], 0
mov ebx, eax
je 0x475b2d
test bl, 0x10
je 0x475b2d
push 9
mov ecx, edi
call fcn.004766b0
mov ebx, eax
jmp 0x475baf
cmp ebx, 0xffffffff
jne 0x475b5e
mov al, byte [ebp + 0xc]
test al, al
jne 0x475bea
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry__this_file_is_not_a_valid_UVK_license_key.
call fcn.0043e2e0
jmp 0x475bb7
cmp ebx, 0xfffffffe
jne 0x475b84
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry__an_error_occurred_while_validating_this_license.
call fcn.0043e2e0
jmp 0x475bb7
mov al, byte [ebp + 0xc]
test bl, 0x40
je 0x475bea
test al, al
jne 0x475bea
sub esp, 8
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Your_logo_file_could_not_be_downloaded_or_found._r_n_r_nThe_default_logo_will_be_used_this_time.
mov ecx, edi
call fcn.0043e2e0
test ebx, ebx
jns 0x475cee
cmp byte [ebp - 0x71], 0
je 0x475be3
push 1
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3c]
call fcn.005dc190
push eax
call esi
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00468150
xor esi, esi
jmp 0x475fef
test bl, bl
jns 0x475c0c
test al, al
jne 0x475c0c
sub esp, 8
push 0x8c
push 0x190
push 0
push 0
push 0
push str.The_application_icon_could_not_be_branded._r_n_r_nThe_default_icon_will_be_used_this_time.
jmp 0x475ba8
cmp ebx, 0xfffffffb
jne 0x475c36
test al, al
jne 0x475bb7
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry__this_OEM_license_is_not_made_for_this_computer.
call fcn.0043e2e0
jmp 0x475bb7
cmp ebx, 0xfffffff9
jne 0x475c67
test al, al
jne 0x475bb7
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry__this_OEM_license_is_already_assigned_to_a_different_computer.
call fcn.0043e2e0
jmp 0x475bb7
cmp ebx, 0xfffffffa
jne 0x475baf
test al, al
jne 0x475bb7
sub esp, 8
mov dword [ebp - 0x4c], 0
xorps xmm0, xmm0
lea ecx, [edi + 0x1484]
movq qword [ebp - 0x54], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624288
call fcn.005dc190
push eax
push str.Sorry__this_trial_license_expired_in
lea ecx, [ebp - 0x54]
call fcn.005dc520
sub esp, 8
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x54]
push 0x8c
push 0x190
push 0
push 0
push 0
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xc
call fcn.005dc430
jmp 0x475bb7
lea ecx, [ebp - 0x3c]
call fcn.005dc190
mov edx, 2
mov ecx, eax
call fcn.005e4c40
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0
call fcn.005d6aa0
mov byte [ebp - 4], 0xe
mov eax, dword [edi + 0x13dc]
or eax, dword [ebp - 0x70]
test al, 2
je 0x475f67
lea ecx, [ebp - 0x48]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.004730d0
lea ecx, [ebp - 0x48]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00472d40
lea ecx, [edi + 0x1490]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.005d3780
test al, al
je 0x475dcd
push ecx
push 0
lea ecx, [edi + 0x143c]
call fcn.005dc190
push eax
push str.DisplayName
lea ecx, [edi + 0x1490]
call fcn.005dc190
push eax
call fcn.00438530
push ecx
push 0
lea ecx, [edi + 0x108]
call fcn.005dc190
push eax
push str.Publisher
lea ecx, [edi + 0x1490]
call fcn.005dc190
push eax
call fcn.00438530
push ecx
push 0
lea ecx, [edi + 0x146c]
call fcn.005dc190
push eax
push str.DisplayIcon
lea ecx, [edi + 0x1490]
call fcn.005dc190
push eax
call fcn.00438530
xor edx, edx
mov ecx, str.HKLMSOFTWAREClassesUVKCommandsScript
call fcn.005d3780
test al, al
je 0x475e39
push ecx
push 0
lea ecx, [edi + 0x146c]
call fcn.005dc190
push eax
push 0x62439c
push str.HKLMSOFTWAREClassesUVKCommandsScriptDefaultIcon
call fcn.00438530
push ecx
push 0
lea ecx, [edi + 0x146c]
call fcn.005dc190
push eax
push 0x62439c
push str.HKLMSOFTWAREClassesSrSettingsFileDefaultIcon
call fcn.00438530
push ecx
push 0
lea ecx, [edi + 0x146c]
call fcn.005dc190
push eax
push 0x62439c
push str.HKLMSOFTWAREClassesUVKLicenseKeyDefaultIcon
call fcn.00438530
jmp 0x475e60
push str.HKLMSOFTWAREClassesUVKCommandsScriptDefaultIcon
lea ecx, [ebp - 0x14]
call fcn.005d5740
push str.HKLMSOFTWAREClassesSrSettingsFileDefaultIcon
lea ecx, [ebp - 0x14]
call fcn.005d5740
push str.HKLMSOFTWAREClassesUVKLicenseKeyDefaultIcon
lea ecx, [ebp - 0x14]
call fcn.005d5740
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 1
push eax
push str.DesktopShortcut
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x14]
call fcn.005d6580
test al, al
je 0x475e87
cmp dword [ebp - 0x24], 1
jne 0x475e8e
mov ecx, edi
call fcn.004727d0
push ecx
push 0
lea ecx, [edi + 0x143c]
call fcn.005dc190
push eax
push str.AppName
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
call fcn.00438530
test dword [edi + 0x1f68], 0x20000
jne 0x475ebf
mov ecx, edi
call fcn.00472960
mov ecx, edi
call fcn.00472400
push ecx
mov ecx, edi
call fcn.0043e540
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x475f56
lea ecx, [edi + 0x143c]
call fcn.005dc190
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowTextW]
push ecx
lea ecx, [edi + 0x146c]
call fcn.005dc190
mov ecx, dword [edi + 0x14e4]
push eax
call fcn.005c4180
mov dword [ebp - 0x70], 0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xf
push eax
push 0x604c60
push 1
push 0
push 0x604cd0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x475f41
mov eax, dword [ebp - 0x70]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x70]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x475f52
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe
push 0
push 0
push 0
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [ebp - 0x24]
push eax
push str.NoOEMCloudUpload
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x14]
call fcn.005d6580
test al, al
je 0x475f91
cmp dword [ebp - 0x24], 1
jne 0x475f91
or dword [edi + 0x1f68], 0x2000000
cmp byte [ebp + 0xc], 0
jne 0x475fe2
cmp byte [edi + 0x13d8], 0
je 0x475fba
sub esp, 8
push 0x8c
push 0x190
push 0
push 0
push 0
push str.The_license_key_was_successfully_installed.
jmp 0x475fdb
cmp dword [edi + 0x13dc], 0x42
jne 0x475fe2
sub esp, 8
push 0x8c
push 0x190
push 0
push 0
push 0
push str.The_demo_license_key_was_successfully_installed.
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0x14]
mov esi, 1
call fcn.005d69e0
lea ecx, [ebp - 0x48]
call fcn.005dc430
lea ecx, [ebp - 0x3c]
call fcn.005dc430
lea ecx, [ebp - 0x20]
call fcn.005dc430
lea ecx, [ebp - 0x60]
call fcn.005dc430
lea ecx, [ebp - 0x6c]
call fcn.005dc430
lea ecx, [ebp - 0x30]
call fcn.005dc430
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 8