Function at 0x422420
Capabilities:
Accept command line arguments
Check if file exists
Create thread
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x3f4
mov eax, dword [0x47b00c]
xor eax, esp
mov dword [esp + 0x3f0], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push 0
push 0x46f2fc
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], eax
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
test esi, esi
je 0x42248b
push 9
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
test eax, eax
je 0x42248b
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3f0]
xor ecx, esp
call fcn.00430eab
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x250
lea eax, [esp + 0x194]
push 0
push eax
call fcn.00435ae0
add esp, 0xc
lea eax, [esp + 0x158]
lea ecx, [esp + 0x190]
push eax
call fcn.00414310
lea ecx, [esp + 0xb0]
call fcn.0040abc0
lea ecx, [esp + 0xb8]
call fcn.0040abc0
lea ecx, [esp + 0xc0]
call fcn.0040abc0
lea ecx, [esp + 0xc8]
call fcn.0040abc0
lea ecx, [esp + 0xd0]
call fcn.0040abc0
lea ecx, [esp + 0xd8]
call fcn.0040abc0
lea ecx, [esp + 0xe0]
call fcn.0040abc0
lea ecx, [esp + 0xe8]
call fcn.0040abc0
lea eax, [esp + 0x158]
mov dword [esp + 0x88], 0x7f
mov dword [esp + 0x80], eax
lea ecx, [esp + 0xe8]
lea eax, [esp + 0x190]
mov dword [esp + 0x8c], 0
push 0x46f318
mov dword [esp + 0x88], eax
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
call fcn.0040ac70
push 0x46f32c
lea ecx, [esp + 0xcc]
call fcn.0040ac70
xorps xmm0, xmm0
mov dword [esp + 0xac], 0
xor edx, edx
mov ecx, str.HKCUSoftwareUVK
movups xmmword [esp + 0x9c], xmm0
call fcn.0040e8b0
test al, al
je 0x4225c8
mov edx, str.HKLM64SOFTWAREUVK___Ultra_virus_killer
mov ecx, str.HKCUSoftwareUVK
call fcn.0040e480
xor edx, edx
mov ecx, str.HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallUVK
call fcn.0040e8b0
test al, al
je 0x4225e7
mov edx, str.HKLM64SOFTWAREMicrosoftWindowsCurrentVersionUninstallUVK___Ultra_virus_killer
mov ecx, str.HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallUVK
call fcn.0040e480
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004128a0
push 0x20019
push str.HKLM64SOFTWAREMicrosoftWindowsCurrentVersionUninstallUVK___Ultra_virus_killer
lea ecx, [esp + 0x140]
mov byte [esp + 0x84], al
mov dword [esp + 0x140], 0
call fcn.0040d5b0
push 0x20019
push str.HKLM64SOFTWAREUVK___Ultra_virus_killer
lea ecx, [esp + 0x124]
mov dword [esp + 0x124], 0
call fcn.0040d5b0
xorps xmm0, xmm0
lea ecx, [esp + 0x144]
movq qword [esp + 0x144], xmm0
call fcn.0040abc0
lea eax, [esp + 0xb0]
mov byte [esp + 0x4b], 0
push eax
push str.InstallLocation
lea ecx, [esp + 0x140]
call fcn.0040d760
lea ecx, [esp + 0xb0]
call fcn.0040ad50
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4226c3
lea ecx, [esp + 0xb0]
call fcn.0040ae10
push eax
call ebx
test eax, eax
je 0x4226c3
push 0
push 1
push 1
push 0
push str.UVK
lea ecx, [esp + 0xc4]
call fcn.0040b7a0
test eax, eax
je 0x4226c3
mov byte [esp + 0x4b], 1
jmp 0x42274b
lea ecx, [esp + 0xb0]
call fcn.0040ad00
xorps xmm0, xmm0
lea ecx, [esp + 0x130]
movq qword [esp + 0x130], xmm0
call fcn.0040abc0
push dword [esp + 0x7c]
lea edx, [esp + 0x134]
lea ecx, [esp + 0x148]
call fcn.00412cb0
lea ecx, [esp + 0x144]
call fcn.0040af50
test al, al
jne 0x42273f
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.UVK___Ultra_Virus_Killer
lea ecx, [esp + 0x170]
call fcn.0040ae10
push eax
lea ecx, [esp + 0xe0]
call fcn.0040adb0
lea ecx, [esp + 0x130]
call fcn.0040acf0
push 0x400
push 0
push 0x400
lea ecx, [esp + 0xec]
call fcn.0040b080
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0xdc]
call fcn.0040ac80
push 0
lea ecx, [esp + 0xdc]
call fcn.0040af10
xorps xmm0, xmm0
lea ecx, [esp + 0x150]
movq qword [esp + 0x150], xmm0
call fcn.0040abc0
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.key.uvkey
lea ecx, [esp + 0x104]
call fcn.0040ae10
push eax
lea ecx, [esp + 0xe8]
call fcn.0040adb0
lea ecx, [esp + 0xb8]
call fcn.0040ae10
push eax
call ebx
test eax, eax
jne 0x422811
push ecx
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.key.uvkey
lea ecx, [esp + 0xdc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0xe8]
call fcn.0040adb0
call fcn.0040f7f0
lea ecx, [esp + 0xb8]
mov dword [0x47db10], eax
call fcn.0040ae10
push eax
call ebx
test eax, eax
je 0x42283a
lea ecx, [esp + 0x80]
call fcn.004240c0
sub esp, 0x1c
lea ecx, [esp + 0xf4]
xorps xmm0, xmm0
movq qword [esp + 0x144], xmm0
push 0
push 0
push 0
push str.UVKSettings.ini
call fcn.0040ae10
push eax
lea ecx, [esp + 0x158]
call fcn.0040ac30
cmp dword [esp + 0x90], 0
je 0x42295b
lea ecx, [esp + 0x128]
call fcn.0040ae10
push eax
call ebx
test eax, eax
je 0x42295b
lea ecx, [esp + 0x128]
call fcn.0040ae10
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push eax
push 1
push str.DesktopShortcut
push str.Preferences
call esi
test eax, eax
jne 0x4228bf
and dword [esp + 0x88], 0xffffffef
lea ecx, [esp + 0x128]
call fcn.0040ae10
push eax
push 1
push str.ContextMenu
push str.Preferences
call esi
test eax, eax
jne 0x4228e6
and dword [esp + 0x88], 0xfffffffb
lea ecx, [esp + 0x128]
call fcn.0040ae10
push eax
push 1
push str.AssociateUVKScripts
push str.Preferences
call esi
test eax, eax
jne 0x42290d
and dword [esp + 0x88], 0xfffffff7
lea ecx, [esp + 0x128]
call fcn.0040ae10
push eax
push 1
push str.AutoUpdate
push str.Preferences
call esi
test eax, eax
jne 0x422934
and dword [esp + 0x88], 0xffffffdf
lea ecx, [esp + 0x128]
call fcn.0040ae10
push eax
push 1
push str.ShowTooltips
push str.Preferences
call esi
test eax, eax
jne 0x42295b
and dword [esp + 0x88], 0xffffffbf
mov ecx, dword [esp + 0x50]
xor esi, esi
mov dword [esp + 0x114], esi
xor edi, edi
call fcn.0040c920
cmp eax, 1
jle 0x42298c
lea eax, [esp + 0x114]
push eax
push ecx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, dword [esp + 0x114]
mov edi, eax
xorps xmm0, xmm0
lea ecx, [esp + 0xfc]
movq qword [esp + 0xfc], xmm0
call fcn.0040abc0
test edi, edi
je 0x422d1f
test esi, esi
je 0x422d18
xor esi, esi
cmp dword [esp + 0x114], esi
jle 0x422d18
nop dword [eax]
nop word [eax + eax]
push dword [edi + esi*4]
lea ecx, [esp + 0x100]
call fcn.0040ac70
push 0x46f650
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422ed6
push 0x46f658
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422ed6
push 0x46f660
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cff
push str._Silent
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cff
push 0x46f680
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cf2
push str._Auto
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cf2
cmp byte [esp + 0x4b], al
jne 0x422b6a
push 0x46f698
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422aad
push str._Installdir
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
je 0x422b6a
mov eax, dword [esp + 0x114]
dec eax
cmp esi, eax
jge 0x422b6a
push ecx
push dword [edi + esi*4 + 4]
xorps xmm0, xmm0
lea ecx, [esp + 0x10c]
movq qword [esp + 0x10c], xmm0
call fcn.0040ac00
lea ecx, [esp + 0x104]
call fcn.0040afa0
lea ecx, [esp + 0x104]
call fcn.0040ae10
mov ecx, eax
call fcn.00412970
test al, al
jne 0x422b0e
lea ecx, [esp + 0x104]
call fcn.0040acf0
jmp 0x422d0a
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.UVK___Ultra_Virus_Killer
lea ecx, [esp + 0x130]
call fcn.0040ae10
push eax
lea ecx, [esp + 0xe0]
call fcn.0040adb0
push 0
push 0
push 0x46dcd0
push 0x46e190
lea ecx, [esp + 0xc0]
call fcn.0040bea0
lea ecx, [esp + 0x104]
call fcn.0040acf0
jmp 0x422d0a
push 0x46f6c8
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422ce8
push str._NoRP
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422ce8
push 0x46f6e0
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cde
push str._NoDShct
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cde
push 0x46f708
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cd4
push str._NoCMenu
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cd4
push 0x46f730
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cca
push str._NoAU
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cca
push 0x46f748
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cc0
push str._NoRun
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
jne 0x422cc0
push ecx
lea ecx, [esp + 0x100]
call fcn.0040ae70
test al, al
je 0x422d0a
push str..uvkey
lea ecx, [esp + 0x100]
call fcn.0040acb0
test al, al
je 0x422d0a
push dword [edi + esi*4]
call ebx
test eax, eax
je 0x422d0a
push dword [edi + esi*4]
lea ecx, [esp + 0xbc]
call fcn.0040ac70
lea ecx, [esp + 0x80]
call fcn.004240c0
test al, al
jne 0x422d0a
lea ecx, [esp + 0xb8]
call fcn.0040ad00
jmp 0x422d0a
and dword [esp + 0x88], 0xfffffffd
jmp 0x422d0a
and dword [esp + 0x88], 0xffffffdf
jmp 0x422d0a
and dword [esp + 0x88], 0xfffffffb
jmp 0x422d0a
and dword [esp + 0x88], 0xffffffef
jmp 0x422d0a
and dword [esp + 0x88], 0xfffffffe
jmp 0x422d0a
mov dword [esp + 0x98], 1
jmp 0x422d0a
mov dword [esp + 0x94], 1
inc esi
cmp esi, dword [esp + 0x114]
jl 0x4229d0
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
xorps xmm0, xmm0
lea ecx, [esp + 0x120]
movq qword [esp + 0x120], xmm0
call fcn.0040abc0
xorps xmm0, xmm0
lea ecx, [esp + 0x130]
movq qword [esp + 0x130], xmm0
call fcn.0040abc0
push 0
push 0x200
lea ecx, [esp + 0xd8]
call fcn.0040b080
push eax
push 0x200
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.UVKSetup
lea ecx, [esp + 0x100]
call fcn.0040ba50
push 0
push 0
push 0x46dcd0
push 0x46e190
lea ecx, [esp + 0xe0]
call fcn.0040bea0
lea ecx, [esp + 0xd0]
call fcn.0040ae10
or edx, 0xffffffff
mov ecx, eax
call fcn.00412990
cmp dword [esp + 0x94], 0
je 0x422ef8
and dword [esp + 0x88], 0xfffffffe
lea ecx, [esp + 0xc8]
sub esp, 0x1c
xorps xmm0, xmm0
movq qword [esp + 0x128], xmm0
push 0
push 0
push 0
push str._progress
call fcn.0040ae10
push eax
lea ecx, [esp + 0x13c]
call fcn.0040ac30
sub esp, 8
lea ecx, [esp + 0x114]
call fcn.0040ae10
push eax
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x1a0]
call fcn.00419d00
push ecx
mov ecx, dword [esp + 0xa0]
push 1
call fcn.00415540
lea eax, [esp + 0x14c]
mov dword [esp + 0xf8], 0
push eax
push 0
lea eax, [esp + 0x88]
push eax
push fcn.004245d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov esi, eax
lea eax, [esp + 0xf8]
push eax
push esi
call edi
test eax, eax
je 0x422eca
mov ebx, dword [sym.imp.KERNEL32.dll_SleepEx]
nop dword [eax]
mov edx, dword [esp + 0xf8]
cmp edx, 0x103
jne 0x422fab
mov dl, 1
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
jne 0x422ebb
push 1
push 0xa
call ebx
lea eax, [esp + 0xf8]
push eax
push esi
call edi
test eax, eax
jne 0x422e90
mov edx, dword [esp + 0xf8]
jmp 0x422fab
lea ecx, [esp + 0x80]
call fcn.00427030
push ecx
xor edx, edx
lea ecx, [esp + 0x84]
call fcn.00424060
mov esi, eax
jmp 0x423f8e
cmp dword [esp + 0x98], 0
je 0x422f16
lea eax, [esp + 0x80]
push eax
call fcn.004245d0
mov esi, eax
jmp 0x423f76
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
push 0
push str.UVK_Ultra_GUI
call esi
test eax, eax
jne 0x422f3d
push str.__UVK
push str.AutoIt_v3_GUI
call esi
test eax, eax
je 0x422fd7
push 9
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
test eax, eax
je 0x422fd7
sub esp, 0x1c
lea ecx, [esp + 0xe4]
xorps xmm0, xmm0
movq qword [esp + 0x128], xmm0
push 0
push 0
push str.The_setup_process_will_close_it._r_n_r_nContinue_
push str._is_currently_running._r_n_r_n
call fcn.0040ae10
push eax
lea ecx, [esp + 0x13c]
call fcn.0040ac30
push ecx
push 0xa0
push 1
lea ecx, [esp + 0x118]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1a0]
call fcn.004199e0
test eax, eax
jne 0x422fcb
xor edx, edx
push ecx
lea ecx, [esp + 0x84]
call fcn.00424060
lea ecx, [esp + 0x10c]
mov esi, eax
call fcn.0040acf0
jmp 0x423f76
lea ecx, [esp + 0x10c]
call fcn.0040acf0
lea ecx, [esp + 0xc8]
call fcn.0040af50
test al, al
je 0x422ff8
push 0x46f32c
lea ecx, [esp + 0xcc]
call fcn.0040ac70
sub esp, 0x1c
lea ecx, [esp + 0xe4]
xorps xmm0, xmm0
movq qword [esp + 0x128], xmm0
push 0
push 0
push 0
push str._Setup
call fcn.0040ae10
push eax
lea ecx, [esp + 0x13c]
call fcn.0040ac30
cmp dword [esp + 0x8c], 2
jne 0x4230c3
lea ecx, [esp + 0xc0]
call fcn.0040ae10
push eax
call ebx
test eax, eax
je 0x4230c3
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.BrandIco.ico
lea ecx, [esp + 0xfc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x150]
call fcn.0040adb0
movaps xmm0, xmmword [0x472f10]
lea eax, [esp + 0x3e0]
push ecx
push eax
lea ecx, [esp + 0x128]
mov dword [esp + 0x3f8], 0x100
movups xmmword [esp + 0x3e8], xmm0
call fcn.0040ae10
lea ecx, [esp + 0xc8]
mov esi, eax
call fcn.0040ae10
mov edx, esi
mov ecx, eax
call fcn.00422070
cmp dword [esp + 0x8c], 2
mov dword [esp + 0x118], 0
jne 0x4230e6
cmp dword [esp + 0x90], 0
jne 0x42333a
lea eax, [esp + 0x118]
push eax
push str.EulaAccepted
lea ecx, [esp + 0x124]
call fcn.0040d8a0
test al, al
je 0x423111
cmp dword [esp + 0x118], 1
je 0x42333a
push ecx
call fcn.00417260
push ecx
push 0
push ecx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1d1
push 0x258
lea ecx, [esp + 0x12c]
call fcn.0040ae10
push eax
push 0x46f2fc
lea ecx, [esp + 0x1b8]
call fcn.00414440
mov esi, dword [esp + 0x4c]
lea ecx, [esp + 0x190]
sub esp, 0x10
push esi
call fcn.00415280
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.License.htm
lea ecx, [esp + 0xfc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x150]
call fcn.0040adb0
lea ecx, [esp + 0x120]
call fcn.0040ae10
push eax
push 0xa
push 0xc8
push esi
call fcn.0041a8d0
push 0
lea eax, [esp + 0x80]
mov dword [esp + 0x80], 0x400
push eax
push 0
push 0x400
lea ecx, [esp + 0x140]
call fcn.0040b080
push eax
lea ecx, [esp + 0x12c]
call fcn.0040ae10
push eax
call dword [sym.imp.SHLWAPI.dll_UrlCreateFromPathW]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.UVK.png
lea ecx, [esp + 0xfc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x150]
call fcn.0040adb0
lea ecx, [esp + 0x120]
call fcn.0040ae10
push eax
push 0x46e808
push 0x66
push esi
call fcn.0041a8d0
sub esp, 0x18
lea ecx, [esp + 0x148]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1ac]
call fcn.00416f80
push ecx
mov dword [esp], 0x41500000
lea ecx, [esp + 0x194]
push str.Continue_installation
push 0x1e
push 0x78
push 0x1ae
push 0x78
push 0x67
mov edx, str.I_Accept
call fcn.004139a0
push ecx
mov dword [esp], 0x41500000
lea ecx, [esp + 0x194]
push str.Cancel_installation
push 0x1e
push 0x78
push 0x1ae
push 0x168
push 0x68
mov edx, str.I_Decline
mov esi, eax
call fcn.004139a0
push ecx
push 5
lea ecx, [esp + 0x198]
mov edi, eax
call fcn.00415540
push 0x80
push esi
lea ecx, [esp + 0x198]
call fcn.004188f0
xor dl, dl
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
je 0x42330e
nop dword [eax + eax]
mov eax, dword [esp + 0x158]
cmp eax, 0xfffffffb
je 0x42344e
cmp eax, edi
je 0x42344e
cmp eax, esi
je 0x42330e
xor dl, dl
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
jne 0x4232e0
push ecx
lea eax, [esp + 0x11c]
mov dword [esp + 0x11c], 1
push eax
push 4
push str.EulaAccepted
push str.HKLM64SOFTWAREUVK___Ultra_virus_killer
lea ecx, [esp + 0x130]
call fcn.0040db30
push ecx
push 0
push ecx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1d1
push 0x258
lea ecx, [esp + 0x12c]
call fcn.0040ae10
push eax
push 0x46f2fc
lea ecx, [esp + 0x1b8]
call fcn.00414440
mov edi, dword [esp + 0x4c]
push ecx
push 0x1d1
push 0x258
push ecx
push 0x65
push edi
call fcn.0041a700
mov esi, eax
sub esp, 0x18
mov ecx, esi
call fcn.0040f1e0
push 0
push 0
push esi
lea ecx, [esp + 0x19c]
call fcn.004150a0
test esi, esi
je 0x4233ad
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push ecx
push 0x10000001
push 0x1c
push 0x244
push 0xa
push 0xa
lea ecx, [esp + 0xe0]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1ac]
call fcn.00417a40
movsd xmm0, qword [0x472e90]
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
push 0x320
push ecx
lea ecx, [esp + 0x1ac]
call fcn.00418660
push 0xffffff
push 0xffffffffffffffff
lea ecx, [esp + 0x198]
call fcn.00418540
lea ecx, [esp + 0xc0]
call fcn.0040ae10
push eax
call ebx
test eax, eax
je 0x423476
push 0x10
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov esi, eax
test esi, esi
je 0x423470
xorps xmm0, xmm0
lea ecx, [esp + 0xc0]
push 0
movups xmmword [esi], xmm0
call fcn.0040ae10
push eax
mov ecx, esi
call fcn.00401800
mov esi, eax
jmp 0x423472
push ecx
xor edx, edx
lea ecx, [esp + 0x84]
call fcn.00424060
lea ecx, [esp + 0x10c]
mov esi, eax
call fcn.0040acf0
jmp 0x423f76
xor esi, esi
test esi, esi
jne 0x42348c
push ecx
push 0xbe
push 0xbe
push ecx
push 0x64
push edi
call fcn.0041a700
mov esi, eax
sub esp, 0x1c
lea ecx, [esp + 0x1ac]
call fcn.00417af0
sub esp, 8
lea ecx, [esp + 0x198]
push eax
call fcn.00414890
mov edx, esi
mov ecx, eax
call fcn.004101a0
test esi, esi
je 0x4234c0
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push ecx
push 0xffffffffffffffff
push 0x12
push 0x82
push 0x154
push 0x127
push str.Select_install_folder:
lea ecx, [esp + 0x1ac]
call fcn.00417a40
push ecx
push 0x10000001
push 0x19
push 0x64
push 0x46
push 0x17c
push str.Options:
lea ecx, [esp + 0x1ac]
call fcn.00417a40
movsd xmm0, qword [0x472e88]
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
push 0
push ecx
lea ecx, [esp + 0x1ac]
call fcn.00418660
push 0xffffff
push 0xffffffffffffffff
lea ecx, [esp + 0x198]
call fcn.00418540
push ecx
push 0x10000001
push 0x28
push 0x10e
push 0x18b
push 0x122
push 0x46cc74
lea ecx, [esp + 0x1ac]
call fcn.00417a40
sub esp, 0x18
lea ecx, [esp + 0xc8]
mov ebx, eax
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1ac]
call fcn.004179a0
push ecx
mov dword [esp], 0x41500000
lea ecx, [esp + 0x194]
push str.Start_installing_the_application
push 0x23
push 0x96
push 0x14a
push 0x3c
push 0x69
mov edx, str.Install_now
mov dword [esp + 0x70], eax
call fcn.004139a0
push ecx
mov dword [esp], 0x41500000
lea ecx, [esp + 0x194]
push str.Cancel_the_installation
push 0x1e
push 0x6e
push 0x17c
push 0x50
push 0x6a
mov edx, str.Cancel
mov dword [esp + 0x98], eax
call fcn.004139a0
sub esp, 0xc
mov dword [esp + 0x64], eax
mov edx, 1
call fcn.0040ee80
push eax
lea ecx, [esp + 0x50]
call fcn.00414200
sub esp, 0xc
xor edx, edx
call fcn.0040ee80
push eax
lea ecx, [esp + 0x54]
call fcn.00414200
movsd xmm1, qword [0x472e78]
lea ecx, [esp + 0x190]
sub esp, 0xc
push 0x320
call fcn.00415410
mov edi, dword [esp + 0x50]
sub esp, 8
test byte [esp + 0x90], 1
mov eax, 0
mov esi, dword [esp + 0x54]
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0xc8
push 0x78
push ecx
push edi
push esi
push str._Create_system_restore_point
lea ecx, [esp + 0x1b8]
call fcn.004176c0
sub esp, 8
mov dword [esp + 0x3e8], eax
test byte [esp + 0x90], 2
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0xd2
push 0x96
push ecx
push edi
push esi
push str._Run_the_application_after_install
lea ecx, [esp + 0x1b8]
call fcn.004176c0
sub esp, 8
mov dword [esp + 0x3ec], eax
test byte [esp + 0x90], 4
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0x96
push 0xb4
push ecx
push edi
push esi
push str._Install_context_menu
lea ecx, [esp + 0x1b8]
call fcn.004176c0
sub esp, 8
mov dword [esp + 0x3f0], eax
test byte [esp + 0x90], 8
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0xf0
push 0xd2
push ecx
push edi
push esi
push str._Associate_with_.uvk_and_.uvksr_files
lea ecx, [esp + 0x1b8]
call fcn.004176c0
sub esp, 8
mov dword [esp + 0x3f4], eax
test byte [esp + 0x90], 0x10
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0xb4
push 0xf0
push ecx
push edi
push esi
push str._Create_desktop_shortcut
lea ecx, [esp + 0x1b8]
call fcn.004176c0
sub esp, 8
mov dword [esp + 0x3f8], eax
test byte [esp + 0x90], 0x20
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0x82
push 0x10e
push ecx
push edi
push esi
push str._Use_AutoUpdate
lea ecx, [esp + 0x1b8]
call fcn.004176c0
sub esp, 8
mov dword [esp + 0x3fc], eax
test byte [esp + 0x90], 0x40
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push ecx
push 0x6e
push 0x12c
push ecx
push edi
push esi
push str._Use_tooltips
lea ecx, [esp + 0x1b8]
call fcn.004176c0
movsd xmm1, qword [0x472e78]
lea ecx, [esp + 0x190]
sub esp, 0xc
mov dword [esp + 0x404], eax
push 0x190
call fcn.00415410
push ecx
mov dword [esp], 0x41500000
lea ecx, [esp + 0x194]
push str.Choose_the_installation_folder_for_the_application.
push 0x19
push 0x46
push 0x165
push 0x201
push 0x6b
mov edx, 0x46fc28
call fcn.004139a0
mov esi, eax
lea ecx, [esp + 0x13c]
xorps xmm0, xmm0
mov dword [esp + 0x5c], esi
movq qword [esp + 0x13c], xmm0
call fcn.0040abc0
sub esp, 8
lea ecx, [esp + 0x144]
push 0x46fc30
call fcn.0040c1d0
sub esp, 0x28
lea ecx, [esp + 0x164]
push 0
push 0x46fc38
call fcn.0040bd60
push ecx
push 0x10000001
push 0x12
push 0x64
push 0xa
push 0x1f4
lea ecx, [esp + 0x154]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1ac]
call fcn.00417a40
push 0xffffff
push 0xffffffffffffffff
lea ecx, [esp + 0x198]
call fcn.00418540
cmp byte [esp + 0x4b], 0
je 0x423913
push ecx
push str.The_application_is_already_installed_in_this_pc._r_nThe_install_folder_path_cannot_be_changed.
push ebx
lea ecx, [esp + 0x19c]
call fcn.00418cc0
push 0x40
push esi
lea ecx, [esp + 0x198]
call fcn.004188f0
mov edi, dword [esp + 0x54]
push ecx
push edi
lea ecx, [esp + 0x198]
call fcn.00418380
push 0x40
push edi
lea ecx, [esp + 0x198]
call fcn.004188f0
jmp 0x423917
mov edi, dword [esp + 0x54]
push ecx
push 5
lea ecx, [esp + 0x198]
call fcn.00415540
push 0x80
push dword [esp + 0x80]
lea ecx, [esp + 0x198]
call fcn.004188f0
mov dword [esp + 0x60], str.Whether_to_create_a_system_restore_point_before_installing.
xor esi, esi
mov dword [esp + 0x64], str.Whether_to_run_the_application_after_install_complete.
mov dword [esp + 0x68], str.Whether_to_create_the__Force_delete__and__File_information__context_menu_items._r_nThis_option_can_be_changed_later_in_the_applications_interface.
mov dword [esp + 0x6c], str.Whether_to_associate_the_application_after_with_.uvk_and_.uvksr_files._r_nThis_option_can_be_changed_later_in_the_applications_interface.
mov dword [esp + 0x70], str.Whether_to_create_a_shortcut_to_the_application_in_the_desktop._r_nThis_option_can_be_changed_later_in_the_applications_interface.
mov dword [esp + 0x74], str.Whether_to_search_for_updates_when_the_application_is_launched._r_nThis_option_can_be_changed_later_in_the_applications_interface.
mov dword [esp + 0x78], str.Whether_to_use_tooltips_in_thee_applications_interface._r_nThis_option_can_be_changed_later_in_the_applications_interface.
nop dword [eax + eax]
push 0x1f4
push ecx
push dword [esp + esi + 0x68]
lea ecx, [esp + 0x19c]
push dword [esp + esi + 0x3ec]
call fcn.00419160
add esi, 4
cmp esi, 0x1c
jl 0x423980
xor dl, dl
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
je 0x423f4a
mov ebx, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esp + 0x158]
cmp eax, 0xfffffffb
je 0x423f0d
cmp eax, dword [esp + 0x58]
je 0x423f0d
cmp eax, dword [esp + 0x5c]
jne 0x423b6b
xorps xmm0, xmm0
lea ecx, [esp + 0xf0]
movq qword [esp + 0xf0], xmm0
call fcn.0040abc0
xorps xmm0, xmm0
lea ecx, [esp + 0x104]
movq qword [esp + 0x104], xmm0
call fcn.0040abc0
push 0x104
push 0
push 0x104
lea ecx, [esp + 0x110]
call fcn.0040b080
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
push 3
lea ecx, [esp + 0x108]
call fcn.0040b6c0
lea ecx, [esp + 0x144]
call fcn.0040ae10
push 0
lea ecx, [esp + 0x194]
call fcn.00414890
push eax
sub esp, 8
lea ecx, [esp + 0x110]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x100]
call fcn.004126a0
test al, al
jne 0x423a9d
lea ecx, [esp + 0x104]
call fcn.0040acf0
jmp 0x423e3c
lea ecx, [esp + 0xf0]
call fcn.0040af50
test al, al
jne 0x423a8c
lea ecx, [esp + 0xf0]
call fcn.0040ae10
mov ecx, eax
call fcn.00412970
test al, al
je 0x423a8c
lea ecx, [esp + 0xf0]
call fcn.0040ad50
dec eax
lea ecx, [esp + 0xf0]
push eax
call fcn.0040ace0
cmp word [eax], 0x5c
jne 0x423af2
push 1
lea ecx, [esp + 0xf4]
call fcn.0040b700
push 0
push 1
push 1
push 0
push str.UVK
lea ecx, [esp + 0x104]
call fcn.0040b7a0
test eax, eax
jne 0x423b2b
push ecx
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.UVK___Ultra_Virus_Killer
lea ecx, [esp + 0x120]
call fcn.0040ba50
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xb4]
call fcn.0040ac80
push ecx
lea ecx, [esp + 0xf4]
call fcn.0040ae10
push eax
push edi
lea ecx, [esp + 0x19c]
call fcn.00418cc0
lea ecx, [esp + 0x104]
call fcn.0040acf0
jmp 0x423e3c
cmp eax, dword [esp + 0x7c]
jne 0x423e48
mov edi, 1
mov dword [esp + 0x88], 0
xor esi, esi
nop word [eax + eax]
push ecx
push dword [esp + esi*4 + 0x3e4]
lea ecx, [esp + 0x198]
call fcn.00419570
test eax, eax
je 0x423baf
or dword [esp + 0x88], edi
inc esi
add edi, edi
cmp esi, 7
jl 0x423b90
sub esp, 0x1c
lea ecx, [esp + 0xe4]
xorps xmm0, xmm0
movq qword [esp + 0x10c], xmm0
push 0
push 0
push 0
push str._install_progress
call fcn.0040ae10
push eax
lea ecx, [esp + 0x120]
call fcn.0040ac30
sub esp, 8
lea ecx, [esp + 0xf8]
call fcn.0040ae10
push eax
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x1a0]
call fcn.00419d00
push ecx
mov ecx, dword [esp + 0xa0]
push 1
call fcn.00415540
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x14c]
push eax
push 0
lea eax, [esp + 0x88]
mov dword [esp + 0x100], 0
push eax
push fcn.004245d0
push 0
push 0
call edi
mov esi, eax
lea eax, [esp + 0xf8]
push eax
push esi
call ebx
test eax, eax
je 0x423c98
nop dword [eax]
cmp dword [esp + 0xf8], 0x103
jne 0x423c98
mov dl, 1
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
jne 0x423c89
push 1
push 5
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [esp + 0xf8]
push eax
push esi
call ebx
test eax, eax
jne 0x423c60
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0xf8]
cmp eax, 1
jne 0x423dde
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Do_you_wish_to_intall_the_application_anyway_
push str.The_system_restore_point_could_not_be_created._r_n_r_n
lea ecx, [esp + 0x120]
call fcn.0040adb0
push ecx
push 0x8c
push 1
lea ecx, [esp + 0xfc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1a0]
call fcn.004199e0
push ecx
test eax, eax
je 0x423e67
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._install_progress
lea ecx, [esp + 0xf4]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x120]
call fcn.0040adb0
sub esp, 8
lea ecx, [esp + 0xf8]
call fcn.0040ae10
push eax
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x1a0]
call fcn.00419d00
push ecx
mov ecx, dword [esp + 0xa0]
push 1
call fcn.00415540
and dword [esp + 0x88], 0xfffffffe
lea eax, [esp + 0x14c]
push eax
push 0
lea eax, [esp + 0x88]
push eax
push fcn.004245d0
push 0
push 0
call edi
mov esi, eax
lea eax, [esp + 0xf8]
push eax
push esi
call ebx
test eax, eax
je 0x423e3c
nop
cmp dword [esp + 0xf8], 0x103
jne 0x423e3c
mov dl, 1
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
jne 0x423dcd
push 1
push 5
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [esp + 0xf8]
push eax
push esi
call ebx
test eax, eax
jne 0x423da0
jmp 0x423e3c
cmp eax, 2
jne 0x423e71
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Please_specify_a_different_folder_or_ensure_the_setup_can_create_the_current_one.
push str._could_not_create_the_specified_install_folder._r_n_r_n
lea ecx, [esp + 0xf4]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x120]
call fcn.0040adb0
push ecx
push 0xa0
push 0
lea ecx, [esp + 0xfc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1a0]
call fcn.004199e0
lea ecx, [esp + 0xf0]
call fcn.0040acf0
xor dl, dl
lea ecx, [esp + 0x158]
call fcn.00413720
test eax, eax
je 0x423f4a
mov edi, dword [esp + 0x54]
jmp 0x4239d0
mov edx, 1
jmp 0x423ef1
test byte [esp + 0x88], 2
jne 0x423eee
push 1
lea ecx, [esp + 0xcc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0xf8]
call fcn.0040ad70
push 5
lea ecx, [esp + 0xf4]
call fcn.0040b700
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Press_OK_to_close_this_window.
push str._was_successfully_installed._r_n_r_n
lea ecx, [esp + 0x120]
call fcn.0040ba50
push ecx
push 0x8c
push 0
lea ecx, [esp + 0xfc]
call fcn.0040ae10
push eax
lea ecx, [esp + 0x1a0]
call fcn.004199e0
xor edx, edx
push ecx
lea ecx, [esp + 0x84]
call fcn.00424060
lea ecx, [esp + 0xf0]
mov esi, eax
call fcn.0040acf0
jmp 0x423f1e
push ecx
xor edx, edx
lea ecx, [esp + 0x84]
call fcn.00424060
mov esi, eax
lea ecx, [esp + 0x13c]
call fcn.0040acf0
lea ecx, [esp + 0x50]
call fcn.00414210
lea ecx, [esp + 0x4c]
call fcn.00414210
lea ecx, [esp + 0x10c]
call fcn.0040acf0
jmp 0x423f76
lea ecx, [esp + 0x13c]
call fcn.0040acf0
lea ecx, [esp + 0x50]
call fcn.00414210
lea ecx, [esp + 0x4c]
call fcn.00414210
lea ecx, [esp + 0x10c]
call fcn.0040acf0
xor esi, esi
lea ecx, [esp + 0x130]
call fcn.0040acf0
lea ecx, [esp + 0x120]
call fcn.0040acf0
lea ecx, [esp + 0xfc]
call fcn.0040acf0
lea ecx, [esp + 0x128]
call fcn.0040acf0
lea ecx, [esp + 0x150]
call fcn.0040acf0
lea ecx, [esp + 0x144]
call fcn.0040acf0
lea ecx, [esp + 0x11c]
call fcn.0040d630
lea ecx, [esp + 0x138]
call fcn.0040d630
lea ecx, [esp + 0xe8]
call fcn.0040acf0
lea ecx, [esp + 0xe0]
call fcn.0040acf0
lea ecx, [esp + 0xd8]
call fcn.0040acf0
lea ecx, [esp + 0xd0]
call fcn.0040acf0
lea ecx, [esp + 0xc8]
call fcn.0040acf0
lea ecx, [esp + 0xc0]
call fcn.0040acf0
lea ecx, [esp + 0xb8]
call fcn.0040acf0
lea ecx, [esp + 0xb0]
call fcn.0040acf0
lea ecx, [esp + 0x190]
call fcn.00416f20
mov ecx, dword [esp + 0x3fc]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00430eab
mov esp, ebp
pop ebp
ret 0x10