Function at 0x4766b0
Capabilities:
Check if file exists
Move file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f03b0
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1038
call fcn.0041ead0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
test dword [ebx + 8], 1
lea ecx, [edi + 0x14]
jne 0x476763
call fcn.005b0b40
test eax, eax
je 0x47672d
push 5
lea ecx, [edi + 0x14]
call fcn.005b0b60
test eax, eax
jne 0x47672d
push 6
lea ecx, [edi + 0x14]
call fcn.005b0b60
test eax, eax
jne 0x47677a
jmp 0x47714c
lea ecx, [edi + 0x14]
call fcn.005b0b80
mov eax, dword [ebx + 8]
test al, 2
je 0x47675b
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.It_was_impossible_to_check_for_updates._r_n_r_nPlease_check_your_internet_connection.
call fcn.0043e2e0
or eax, 0xffffffff
jmp 0x47714c
call fcn.005b0b80
push 7
mov ecx, edi
call fcn.00460040
push eax
lea ecx, [edi + 0x14]
call fcn.005b0bb0
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
call fcn.005dc5e0
push 0x1b5
push ecx
push 0
lea ecx, [edi + 0x14]
mov dword [ebp - 4], 0
call fcn.005b0b50
push eax
lea ecx, [ebp - 0x34]
call fcn.005d9f40
push 3
lea ecx, [ebp - 0x34]
call fcn.005da0f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push 1
push 0x62781c
movups xmmword [ebp - 0x74], xmm0
movq qword [ebp - 0x64], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x74]
call fcn.005d92a0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.005d9210
cmp eax, 1
jbe 0x476942
push 0
push 1
push 1
push 0
push str.invalid
push 1
push 1
call fcn.005d9220
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc260
mov ecx, eax
call fcn.005daa70
test eax, eax
je 0x476889
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry_the_license_you_specified_is_not_valid._r_n_r_nPlease_specify_a_valid_license.
call fcn.0043e2e0
push 2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6c7be0
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc200
mov ecx, eax
call fcn.005dc190
push eax
call fcn.005771e0
push 1
push 0xffffffffffffffff
mov ecx, edi
call fcn.00469690
jmp 0x476942
push 0
push 1
push 1
push 0
push str.inuse
lea ecx, [ebp - 0x34]
call fcn.005daa70
test eax, eax
je 0x47690a
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry_the_license_you_specified_is_already_assigned_to_a_different_computer._r_n_r_nPlease_specify_a_valid_license.
call fcn.0043e2e0
push 2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6c7be0
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc200
mov ecx, eax
call fcn.005dc190
push eax
call fcn.005771e0
push 1
push 0xfffffffffffffff9
mov ecx, edi
call fcn.00469690
jmp 0x476942
push 0
push 1
push 1
push 0
push str.assigned
lea ecx, [ebp - 0x34]
call fcn.005daa70
test eax, eax
je 0x476942
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 4
push str.License_successfully_assigned_to_this_computer.
call fcn.0043e2e0
mov eax, dword [ebx + 8]
test al, 8
je 0x476954
mov esi, dword [edi + 0x13dc]
jmp 0x47713a
push 0
push ecx
push 0
push 0x6d1c48
lea ecx, [ebp - 0x34]
call fcn.005d9f40
mov ecx, eax
call fcn.005dc190
push 0
lea ecx, [ebp - 0x74]
mov esi, eax
call fcn.005d9220
mov edx, esi
mov ecx, eax
call fcn.005d8320
test eax, eax
jg 0x4769b5
test byte [ebx + 8], 2
je 0x4769ab
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.You_are_using_the_latest_version_of_the_application.
call fcn.0043e2e0
mov esi, 1
jmp 0x47713a
push 0
push 0x2001f
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
call fcn.005d6a80
test byte [ebx + 8], 4
mov byte [ebp - 4], 2
je 0x476a9a
test dword [edi + 0x1f68], 0x1000000
jne 0x476a9a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__r_n_r_nDo_you_wish_to_update_
push 0
lea ecx, [ebp - 0x74]
call fcn.005d9220
push eax
push str._version_is_available__
lea ecx, [edi + 0x143c]
call fcn.005dc190
push eax
push str.A_new
lea ecx, [ebp - 0x34]
call fcn.005dc200
push 0
push 0x82
push 0x190
push ecx
push 0
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043ddd0
mov ecx, eax
and ecx, 4
test al, 2
je 0x476a7a
test ecx, ecx
je 0x476a72
push 0
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push eax
push 4
push str.AutoUpdate
lea ecx, [ebp - 0x1c]
call fcn.005d5f20
or esi, 0xffffffff
jmp 0x477132
test ecx, ecx
je 0x476a9a
push 0
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 2
push eax
push 4
push str.AutoUpdate
lea ecx, [ebp - 0x1c]
call fcn.005d5f20
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x40]
movq qword [ebp - 0x40], xmm0
call fcn.005dc5e0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 3
push eax
push str.InstallSource
lea ecx, [ebp - 0x1c]
call fcn.005d6740
lea ecx, [ebp - 0x40]
call fcn.005dc3a0
cmp eax, 7
jle 0x476e55
lea ecx, [ebp - 0x40]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x476e55
test dword [edi + 0x1f68], 0x20000
jne 0x476e45
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
push str.UVKPortable.exe
lea ecx, [ebp - 0x4c]
movq qword [ebp - 0x4c], xmm0
call fcn.005dc570
mov byte [ebp - 4], 8
mov edx, str.__Silent
mov eax, dword [edi + 0x1f68]
mov ecx, str.__Auto
and eax, 3
mov dword [ebp - 0x54], 0
cmp al, 3
xorps xmm0, xmm0
push 1
cmovne ecx, edx
movq qword [ebp - 0x5c], xmm0
push ecx
lea ecx, [ebp - 0x5c]
call fcn.005dc570
push 0xfc8
lea eax, [ebp - 0x1040]
mov byte [ebp - 4], 9
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1040]
call fcn.005e99f0
push 1
push 0x62439c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1040]
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push 0x62e020
movq qword [ebp - 0x28], xmm0
call fcn.005e98f0
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc570
push 0
push 1
push 1
push 0
push str.Ultra_Virus_Killer_installer
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.005daa70
test eax, eax
je 0x476bdd
push str.UVKInstaller.exe
lea ecx, [ebp - 0x4c]
call fcn.005dc510
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 9
call fcn.00401d90
lea ecx, [ebp - 0x40]
call fcn.005dbeb0
test al, al
jne 0x476c16
lea ecx, [edi + 0x174]
call fcn.005dc190
mov ecx, eax
call fcn.005ddc10
test al, al
jne 0x476c4b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.005dc190
push eax
push 0x624284
push ecx
lea ecx, [edi + 0x1290]
call fcn.0057bbe0
push eax
lea ecx, [ebp - 0x40]
call fcn.005dc200
sub esp, 8
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x4c]
movq qword [ebp - 0x28], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005dc190
push eax
push str.https:__www.carifred.com_uvk_
lea ecx, [ebp - 0x28]
call fcn.005dc520
push 0
push str.Cancel
sub esp, 8
mov byte [ebp - 4], 0xc
mov ecx, edi
push 0x46
push 0x1c2
push 0
push str.Downloading_update__please_wait...
call fcn.0043da60
mov ecx, eax
call fcn.005b64a0
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
je 0x476ccc
push 0xffffffffffffffff
mov ecx, edi
call fcn.0043d940
mov esi, eax
jmp 0x476e2d
push 0
push 0
push 0
push ecx
push 0xa
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x18], 0
call fcn.005dc190
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.005dc190
mov edx, esi
mov ecx, eax
call fcn.005b40e0
push eax
lea ecx, [ebp - 0x18]
call fcn.005b0bd0
push 6
mov byte [ebp - 4], 0xd
call fcn.005b0b60
test eax, eax
jne 0x476d5b
or esi, 0xffffffff
push 0
push 0
mov ecx, edi
call fcn.0043d720
lea ecx, [ebp - 0x18]
test eax, eax
jne 0x476db6
push 3
call fcn.005b0b60
cmp eax, esi
je 0x476d4d
push 0
push eax
lea ecx, [edi + 0x14f0]
mov dword [ebp - 0x1044], eax
call fcn.005b66e0
mov esi, dword [ebp - 0x1044]
push 6
lea ecx, [ebp - 0x18]
call fcn.005b0b60
test eax, eax
je 0x476d12
push 4
lea ecx, [ebp - 0x18]
call fcn.005b0b60
lea ecx, [ebp - 0x18]
mov esi, eax
call fcn.005b0b80
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6250
push 0
push 1
mov ecx, edi
call fcn.0043d720
cmp esi, 3
jge 0x476dd8
test byte [ebx + 8], 2
je 0x476db1
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.It_was_not_possible_to_download_the_updated_file._r_n_r_nPlease_try_again_later.
call fcn.0043e2e0
or esi, 0xffffffff
jmp 0x476e25
call fcn.005b0b80
push 2
lea ecx, [ebp - 0x40]
call fcn.005dc190
push eax
call fcn.005771e0
push 0xffffffffffffffff
mov ecx, edi
call fcn.0043d940
mov esi, eax
jmp 0x476e25
push 5
push 0
and dword [edi + 0x1f68], 0xfffff7ff
lea ecx, [ebp - 0x5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x40]
call fcn.005da780
mov ecx, eax
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.00579420
mov esi, 2
lea ecx, [ebp - 0x18]
call fcn.005b0bc0
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x5c]
call fcn.005dc430
lea ecx, [ebp - 0x4c]
jmp 0x477125
push 0
lea ecx, [ebp - 0x40]
call fcn.005dc190
push eax
call fcn.005771e0
sub esp, 8
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
lea ecx, [edi + 0x168]
movq qword [ebp - 0x28], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.UVK.zip
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc520
push 0
push str.Cancel
sub esp, 8
mov byte [ebp - 4], 4
mov ecx, edi
or esi, 0xffffffff
push 0x46
push 0x1c2
push 0
push str.Downloading_update__please_wait...
call fcn.0043da60
mov ecx, eax
call fcn.005b64a0
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
je 0x476edb
push esi
mov ecx, edi
call fcn.0043d940
mov esi, eax
jmp 0x477122
push 0
push 0
push 0
push ecx
push 0xa
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
call fcn.005dc190
mov edx, eax
mov ecx, str.https:__www.carifred.com_uvk_UVK.zip
call fcn.005b40e0
push eax
lea ecx, [ebp - 0x18]
call fcn.005b0bd0
push 6
mov byte [ebp - 4], 5
call fcn.005b0b60
test eax, eax
jne 0x476f56
push 0
push 0
mov ecx, edi
call fcn.0043d720
lea ecx, [ebp - 0x18]
test eax, eax
jne 0x476fb4
push 3
call fcn.005b0b60
cmp eax, esi
je 0x476f48
push 0
push eax
lea ecx, [edi + 0x14f0]
mov esi, eax
call fcn.005b66e0
push 6
lea ecx, [ebp - 0x18]
call fcn.005b0b60
test eax, eax
je 0x476f17
push 4
lea ecx, [ebp - 0x18]
call fcn.005b0b60
lea ecx, [ebp - 0x18]
mov esi, eax
call fcn.005b0b80
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6250
push 0
push 1
mov ecx, edi
call fcn.0043d720
cmp esi, 3
jge 0x476fd9
test byte [ebx + 8], 2
je 0x476fac
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.Sorry__we_couldnt_download_the_update_this_time._r_n_r_nPlease_try_again_later.
call fcn.0043e2e0
or esi, 0xffffffff
jmp 0x47711a
call fcn.005b0b80
push 2
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
call fcn.005771e0
push 0xffffffffffffffff
mov ecx, edi
call fcn.0043d940
mov esi, eax
jmp 0x47711a
sub esp, 8
mov dword [ebp - 0x44], 0
xorps xmm0, xmm0
lea ecx, [edi + 0x150]
movq qword [ebp - 0x4c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.UVKUpdater.exe
call fcn.005dc190
push eax
lea ecx, [ebp - 0x4c]
call fcn.005dc520
sub esp, 8
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
lea ecx, [edi + 0x143c]
movq qword [ebp - 0x5c], xmm0
push 0
push 0
push 0x6d1e94
call fcn.005dc190
push eax
push 0x629d60
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
push 0x629d60
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
push str.__UpdateFromZip__
lea ecx, [ebp - 0x4c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x5c]
call fcn.005dc520
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 7
call fcn.005dc190
push eax
lea ecx, [edi + 0x1184]
call fcn.005dc190
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4770c5
push 0
push 0
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x5c]
call fcn.005dc190
mov edx, eax
xor ecx, ecx
call fcn.005e2a10
test eax, eax
je 0x4770c5
mov esi, 2
jmp 0x47710a
push 1
lea ecx, [edi + 0x1184]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x4c]
call fcn.005dc190
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test byte [ebx + 8], 2
je 0x477107
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push 0
push 0
push str.It_was_not_possible_to_update_the_application_this_time._r_n_r_nPlease_try_again_later.
call fcn.0043e2e0
or esi, 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.005dc430
lea ecx, [ebp - 0x4c]
call fcn.005dc430
lea ecx, [ebp - 0x18]
call fcn.005b0bc0
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x40]
call fcn.005dc430
lea ecx, [ebp - 0x1c]
call fcn.005d69e0
lea ecx, [ebp - 0x74]
call fcn.005d9280
lea ecx, [ebp - 0x34]
call fcn.005dc430
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4