Function at 0x46afd0
Capabilities:
Check if file exists

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ef8bb
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp byte [edi + 0x13d8], 0
mov esi, dword [ebx + 8]
jne 0x46b027
or eax, 0xffffffff
jmp 0x46bd71
push 0
push 0x20019
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
call fcn.005d6a80
lea eax, [ebp - 0xcc]
mov dword [ebp - 4], 0
push eax
push str.UseRepairShopr
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x64], 0
call fcn.005d66b0
test al, al
je 0x46bd64
cmp dword [ebp - 0xcc], 0
je 0x46bd64
push 1
xorps xmm0, xmm0
mov dword [ebp - 0xdc], 0
push esi
lea ecx, [ebp - 0xe4]
movq qword [ebp - 0xe4], xmm0
call fcn.005dc570
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x48]
movq qword [ebp - 0x48], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
lea ecx, [ebp - 0x94]
movq qword [ebp - 0x94], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
lea ecx, [ebp - 0x88]
movq qword [ebp - 0x88], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
lea ecx, [ebp - 0xc8]
movq qword [ebp - 0xc8], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
lea ecx, [ebp - 0x60]
movq qword [ebp - 0x60], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x7c]
movq qword [ebp - 0x7c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x108], 0
lea ecx, [ebp - 0x110]
movq qword [ebp - 0x110], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x3c]
movq qword [ebp - 0x3c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x70]
movq qword [ebp - 0x70], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
lea ecx, [ebp - 0x104]
movups xmmword [ebp - 0x104], xmm0
movups xmmword [ebp - 0xf4], xmm0
call fcn.005b0b00
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0xc
push eax
push str.RepairShoprDomain
lea ecx, [ebp - 0x18]
call fcn.005d6740
test al, al
je 0x46bcea
lea ecx, [ebp - 0x60]
call fcn.005dbeb0
test al, al
jne 0x46bcea
lea eax, [ebp - 0x7c]
push eax
push str.RepairShoprApiKey
lea ecx, [ebp - 0x18]
call fcn.005d6740
test al, al
je 0x46bcea
lea ecx, [ebp - 0x7c]
call fcn.005dbeb0
test al, al
jne 0x46bcea
lea eax, [ebp - 0x70]
push eax
push str.RepairShoprAlert
lea ecx, [ebp - 0x18]
call fcn.005d6740
test al, al
je 0x46b24f
lea ecx, [ebp - 0x70]
call fcn.005dbeb0
test al, al
jne 0x46b24f
push 1
push str.true
call fcn.005dc3c0
test eax, eax
je 0x46b25c
push str.false
lea ecx, [ebp - 0x70]
call fcn.005dc510
lea edx, [ebp - 0x60]
mov esi, 2
push ecx
mov ecx, edx
call fcn.00477530
test eax, eax
je 0x46ba4a
push 8
push 0
push 0x62439c
push str..repairshopr.com_
lea ecx, [ebp - 0x60]
call fcn.005d9660
lea edx, [ebp - 0x7c]
mov esi, 3
push ecx
mov ecx, edx
call fcn.00477530
test eax, eax
je 0x46ba4a
lea eax, [ebp - 0x3c]
mov esi, 4
push eax
push str.RepairShoprTicketID
lea ecx, [ebp - 0x18]
call fcn.005d6740
test al, al
je 0x46b2db
lea ecx, [ebp - 0x3c]
call fcn.005dc3a0
test eax, eax
je 0x46b2db
lea edx, [ebp - 0x3c]
push ecx
mov ecx, edx
call fcn.00477530
test eax, eax
je 0x46ba4a
xorps xmm0, xmm0
lea ecx, [ebp - 0xb4]
movups xmmword [ebp - 0xb4], xmm0
movups xmmword [ebp - 0xa4], xmm0
call fcn.005e47e0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xd
push eax
push str.RepairShoprSIreport
lea ecx, [ebp - 0x18]
call fcn.005d66b0
test al, al
je 0x46b3e8
cmp dword [ebp - 0x64], 0
je 0x46b3e8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x68b498
lea ecx, [edi + 0x15c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x48]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__WriteSysInfo__NP__Auto
lea ecx, [edi + 0x1478]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xd8]
call fcn.005dc200
lea ecx, [ebp - 0x48]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x46b3bc
push 5
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xd8]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.0057b4f0
cmp eax, 0xffffffff
je 0x46bcdf
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xb4]
call fcn.005e4120
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xb4]
call fcn.005e3f60
push 0
push 0
lea ecx, [ebp - 0xe4]
mov esi, 5
call fcn.005dc190
push eax
lea ecx, [ebp - 0xb4]
call fcn.005e4120
push 0
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xb4]
call fcn.005e3f60
test eax, eax
je 0x46b507
push ecx
lea ecx, [ebp - 0xb4]
call fcn.005e36a0
push 1
lea ecx, [ebp - 0x3c]
call fcn.005dba50
lea ecx, [ebp - 0x3c]
test al, al
jne 0x46b46d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x3c]
call fcn.005dc200
jmp 0x46b483
call fcn.005dbeb0
test al, al
je 0x46b483
push str.null
lea ecx, [ebp - 0x3c]
call fcn.005dc510
push 0
push 0
push 0x6db6fc
push 0x624388
lea ecx, [ebp - 0x3c]
call fcn.005da270
sub esp, 8
mov dword [ebp - 0x4c], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x60]
mov esi, 6
movq qword [ebp - 0x54], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..repairshopr.com
call fcn.005dc190
push eax
lea ecx, [ebp - 0x54]
call fcn.005dc520
push ecx
push str.UltraVirusKiller
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe
call fcn.005dc190
push eax
lea ecx, [ebp - 0x104]
call fcn.005b0a40
mov ecx, eax
call fcn.005b0a20
test al, al
jne 0x46b51b
lea ecx, [ebp - 0x54]
call fcn.005dc430
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc
call fcn.00401e20
jmp 0x46ba4a
sub esp, 8
lea ecx, [ebp - 0x104]
push 0xea60
push 0xea60
call fcn.005b09e0
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x46bcd7
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x7c]
lea esi, [eax + 7]
call fcn.005dc190
push eax
push str._api_v1_computer_reports_api_key
lea ecx, [ebp - 0xc8]
call fcn.005dc200
sub esp, 0x14
lea ecx, [ebp - 0xc8]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x104]
call fcn.005b0990
test eax, eax
je 0x46b4ff
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x46bcd7
xorps xmm0, xmm0
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
movq qword [ebp - 0x30], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x24]
movq qword [ebp - 0x24], xmm0
call fcn.005dc5e0
push ecx
push 0x28
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x10
push eax
push str._p_class_titlep__._div_class_clientinfo__.___div_
lea ecx, [ebp - 0x94]
call fcn.005d9870
push 0
push 0
push 0x62439c
push 0x62781c
lea ecx, [ebp - 0x30]
call fcn.005da270
push 0
push 0
push 0x62439c
push 0x629bbc
lea ecx, [ebp - 0x30]
call fcn.005da270
push 0
push 0
push 0x62439c
push str._p_class_titlep__
lea ecx, [ebp - 0x30]
call fcn.005da270
push 0
push 0
push 0x62781c
push str._div_class_clientinfo__
lea ecx, [ebp - 0x30]
call fcn.005da270
push 0
push 0
push 0x62781c
push str.__p_
lea ecx, [ebp - 0x30]
call fcn.005da270
push 0
push 0
push 0x629bbc
push 0x6c0474
lea ecx, [ebp - 0x30]
call fcn.005da270
push 0
push 0
push 0x62439c
push str.__div_
lea ecx, [ebp - 0x30]
call fcn.005da270
push ecx
push 0x28
lea eax, [ebp - 0x24]
push eax
push str._tr__td_class_ftd1__.__td___tr_
lea ecx, [ebp - 0x94]
call fcn.005d9870
push 0
push 0
push 0x62439c
push 0x62781c
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x62439c
push 0x629bbc
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x62438c
push 0x6c0474
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x62438c
push str._br_
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x62438c
push str.__p_
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push str.Repair_action:
push str._tr__td_class_ftd1__
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push str.Description:
push str._td_class_ftd2__
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push str.Result:
push str._td_class_ftd3__
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x62781c
push str.__td_
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x62781c
push str.__tr_
lea ecx, [ebp - 0x24]
call fcn.005da270
xor ecx, ecx
call fcn.005d3930
test eax, eax
je 0x46b787
push eax
call fcn.0041e1c3
add esp, 4
call fcn.0058c0c0
push 0x38
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x148]
call fcn.00588af0
mov byte [ebp - 4], 0x11
mov esi, str.false
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6edab0]
push ecx
mov dword [ebp - 0x154], str.false
lea ecx, [ebp - 0x148]
jb 0x46b7da
push str.rootSecurityCenter2
jmp 0x46b7df
push str.rootSecurityCenter
call fcn.00588830
push 1
push str.Select_ProductState_from_AntiVirusProduct
lea ecx, [ebp - 0x48]
call fcn.005dc260
lea ecx, [ebp - 0x48]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x148]
call fcn.005887d0
test eax, eax
je 0x46b852
lea ecx, [ebp - 0x148]
call fcn.00588680
test eax, eax
je 0x46b852
nop word [eax + eax]
push str.ProductState
lea ecx, [ebp - 0x148]
call fcn.00588310
test eax, 0x1000
jne 0x46b848
lea ecx, [ebp - 0x148]
call fcn.00588680
test eax, eax
jne 0x46b820
jmp 0x46b852
mov dword [ebp - 0x154], str.true
push 1
push str.Select_ProductState_from_FirewallProduct
lea ecx, [ebp - 0x48]
call fcn.005dc260
lea ecx, [ebp - 0x48]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x148]
call fcn.005887d0
test eax, eax
je 0x46b8bd
lea ecx, [ebp - 0x148]
call fcn.00588680
test eax, eax
je 0x46b8bd
nop dword [eax + eax]
push str.ProductState
lea ecx, [ebp - 0x148]
call fcn.00588310
test eax, 0x1000
jne 0x46b8b8
lea ecx, [ebp - 0x148]
call fcn.00588680
test eax, eax
jne 0x46b890
jmp 0x46b8bd
mov esi, str.true
push 0
mov edx, str.true
mov ecx, esi
call fcn.005d8ad0
test eax, eax
je 0x46b8e3
call fcn.005ce740
test al, al
mov esi, str.true
mov ecx, str.false
cmove esi, ecx
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
push 0x629230
push esi
push str._r_nFirewall_enabled:
push dword [ebp - 0x154]
lea ecx, [ebp - 0x30]
push str._r_nAntivirus_enabled:
call fcn.005dc190
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0x6dbaec
lea ecx, [ebp - 0x94]
call fcn.005b6010
push eax
push str.__full_report_:_
lea ecx, [ebp - 0x3c]
call fcn.005dc190
push eax
push str.__ticket_id_:
push esi
push str.__firewall_:
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x154]
lea ecx, [ebp - 0x70]
push str.__antivirus_:
call fcn.005dc190
push eax
push str.___alerting_:
lea ecx, [edi + 0x198]
call fcn.005dc190
push eax
push str._computer_name_:_
lea ecx, [ebp - 0x48]
call fcn.005dc200
mov ecx, eax
call fcn.005da780
push ecx
lea eax, [ebp - 0x150]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x48]
movlpd qword [ebp - 0x150], xmm0
call fcn.005dbcf0
mov byte [ebp - 4], 0x12
mov esi, dword [ebp - 0x150]
mov ecx, esi
call fcn.005d8c20
push 0
push 1
mov ecx, edi
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x154], 8
call fcn.0043d720
test eax, eax
jne 0x46bcaf
sub esp, 0xc
lea ecx, [ebp - 0x104]
push dword [ebp - 0x15c]
push esi
call fcn.005b0950
test al, al
jne 0x46bae6
test esi, esi
je 0x46ba12
push esi
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x148]
call fcn.00588a50
lea ecx, [ebp - 0x24]
call fcn.005dc430
lea ecx, [ebp - 0x30]
call fcn.005dc430
lea ecx, [ebp - 0x54]
call fcn.005dc430
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc
call fcn.00401e20
mov esi, dword [ebp - 0x154]
push 0
push 0
mov ecx, str.Failed_to_send_reports_to_RepairShopr:
mov dword [ebp - 0xbc], str.Reports_successfully_sent_to_RepairShopr
test esi, esi
mov dword [ebp - 0xb8], str.Option_not_previously_enabled.
mov dword [ebp - 0xb4], str.RepairShoprs_sub_domain_not_specified.
mov eax, 0x62439c
mov dword [ebp - 0xb0], str.RepairShoprs_API_key_not_specified.
cmovne eax, ecx
mov dword [ebp - 0xac], str.Invalid_RepairShoprs_Ticket_ID
mov ecx, edi
mov dword [ebp - 0xa8], str.HTML_report_to_send_not_found.
mov dword [ebp - 0xa4], str.Could_not_connect_to_repairShopr.com.
mov dword [ebp - 0xa0], str.Could_not_open_a_request_at_repairShopr.com.
mov dword [ebp - 0x9c], str.Could_not_POST_request_to_repairShopr.com.
mov dword [ebp - 0x98], str.The_request_was_refused_by_repairShopr.com.
push dword [ebp + esi*4 - 0xbc]
push eax
call fcn.0045a700
xor eax, eax
mov ecx, edi
test esi, esi
sete al
push eax
call fcn.0043d940
mov esi, eax
jmp 0x46bced
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x46bcaf
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x154], 9
call fcn.005b0840
cmp eax, 0xc8
jne 0x46ba05
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x46bcaf
lea ecx, [ebp - 0x88]
call fcn.005dc3a0
cmp eax, 0x64
jle 0x46bc43
push 8
push 0
push str._r_n_r_n___1___r_n
push str.__m___.____r_n_
lea ecx, [ebp - 0x88]
call fcn.005d9660
push 8
push 1
push 0x62439c
push str.__r_n_r_n_
lea ecx, [ebp - 0x88]
call fcn.005d9660
sub esp, 0x14
lea ecx, [ebp - 0xc8]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x104]
call fcn.005b0990
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x46bcaf
push eax
push eax
push eax
push eax
push eax
push 0x6dbaec
lea ecx, [ebp - 0x88]
call fcn.005b6010
push eax
push str.__full_report_:_
lea ecx, [ebp - 0x3c]
call fcn.005dc190
push eax
push str.___ticket_id_:
lea ecx, [edi + 0x198]
call fcn.005dc190
push eax
push str._computer_name_:_
lea ecx, [ebp - 0x48]
call fcn.005dc200
push ecx
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x48]
call fcn.005dbcf0
mov dword [ebp - 0x15c], eax
test esi, esi
je 0x46bc0a
push esi
call fcn.0041e1c3
mov eax, dword [ebp - 0x15c]
add esp, 4
mov esi, dword [eax]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x158]
test eax, eax
je 0x46bc2c
push eax
call fcn.0041e1c3
add esp, 4
mov ecx, esi
call fcn.005d8c20
sub esp, 0xc
lea ecx, [ebp - 0x104]
push eax
push esi
call fcn.005b0950
mov dword [ebp - 0x154], 0
test esi, esi
je 0x46bc5a
push esi
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x148]
call fcn.00588a50
lea ecx, [ebp - 0x24]
call fcn.005dc430
lea ecx, [ebp - 0x30]
call fcn.005dc430
lea ecx, [ebp - 0x54]
call fcn.005dc430
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xc
call fcn.005d9280
mov eax, dword [ebp - 0xb4]
cmp eax, 0xffffffff
je 0x46ba44
test eax, eax
je 0x46ba44
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x46ba44
test esi, esi
je 0x46bcbc
push esi
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x148]
call fcn.00588a50
lea ecx, [ebp - 0x24]
call fcn.005dc430
lea ecx, [ebp - 0x30]
call fcn.005dc430
lea ecx, [ebp - 0x54]
call fcn.005dc430
lea ecx, [ebp - 0xb4]
call fcn.00401e20
or esi, 0xffffffff
lea ecx, [ebp - 0x104]
call fcn.005b0540
lea ecx, [ebp - 0x70]
call fcn.005dc430
lea ecx, [ebp - 0x3c]
call fcn.005dc430
lea ecx, [ebp - 0x110]
call fcn.005dc430
lea ecx, [ebp - 0x7c]
call fcn.005dc430
lea ecx, [ebp - 0x60]
call fcn.005dc430
lea ecx, [ebp - 0xc8]
call fcn.005dc430
lea ecx, [ebp - 0x88]
call fcn.005dc430
lea ecx, [ebp - 0x94]
call fcn.005dc430
lea ecx, [ebp - 0xd8]
call fcn.005dc430
lea ecx, [ebp - 0x48]
call fcn.005dc430
lea ecx, [ebp - 0xe4]
call fcn.005dc430
jmp 0x46bd67
or esi, 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.005d69e0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4