Function at 0x462630
Capabilities:
Check internet connectivity via wininet
Shutdown system

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ef14e
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x11c0
call fcn.0041ead0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
call fcn.005dc5e0
push 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
push 0x2001f
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
call fcn.005d6a80
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
call fcn.005d6aa0
push 2
push str.Home
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.0045f680
mov ecx, edi
mov dword [ebp - 0x1160], eax
call fcn.0043e530
test al, al
jne 0x4626fb
mov byte [ebp - 0x1141], al
jmp 0x463fc8
push ecx
call fcn.0046e060
mov esi, dword [edi + 0x14e4]
mov ecx, esi
push 0x400
mov dword [ebp - 0x1148], esi
call fcn.005c4340
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_online_help__F1_
push 0x1e
push 0x4b
push 3
push 5
push 0x7d
push str.Help
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_the__About__dialog_box
push 0x1e
push 0x55
push 3
push 0x55
push 0x80
push str.About
mov dword [edi + 0x11bc], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Set_up_application_settings_and_preferences
push 0x1e
push 0x64
push 3
push 0xaf
push 0x8b
push str.Options
mov dword [ebp - 0x1154], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Send_the_application_logs_to_your_email_address_or_FTP_server
push 0x1e
push 0x6e
push 3
push 0x118
push 0x95
push str.Reporting
mov dword [ebp - 0x119c], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Access_the_internet_and_the_file_system_using_2Browse.
push 0x1e
push 0x69
push 3
push 0x18b
push 0x64
push str.2Browse
mov dword [ebp - 0x11b8], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
push str.A_quick_peek_into_your_computers_health_status.
push 0x1e
push 0x7d
push 3
push 0x1f9
mov dword [ebp - 0x11bc], eax
push 0x130
push str.Health_check
mov ecx, edi
call fcn.0045fd50
mov dword [ebp - 0x11b0], eax
lea ecx, [ebp - 0x20]
lea eax, [ebp - 0x48]
push eax
push str.VersionLabelIsLink
call fcn.005d66b0
lea eax, [ebp - 0x24]
push eax
push str.HybridShutdownAdviced
lea ecx, [ebp - 0x20]
call fcn.005d66b0
cmp dword [ebp - 0x24], 2
jae 0x46287d
lea eax, [ebp - 0x24]
push eax
push str.DisableHybridShutdownWarning
lea ecx, [ebp - 0x20]
call fcn.005d66b0
test al, al
je 0x46287d
cmp dword [ebp - 0x24], 0
je 0x46287d
mov dword [ebp - 0x24], 2
movsd xmm1, qword [0x6edb08]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6de19c
push 0
push ecx
push 0
push 0x6d1c48
lea ecx, [ebp - 0x34]
call fcn.005d9f40
mov ecx, eax
call fcn.005da510
cmp dword [ebp - 0x48], 0
lea ecx, [ebp - 0x34]
je 0x4629a7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__a_
call fcn.005dc190
push eax
push 0x6de1a0
lea ecx, [ebp - 0x34]
call fcn.005dc200
push ecx
push 0x10000020
push 0x14
push 0x69
push 0xa
push 0x276
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005c07e0
mov dword [ebp - 0x1158], eax
xor eax, eax
push 0x5e
push eax
mov word [ebp - 0x1120], ax
lea eax, [ebp - 0x111e]
push eax
mov dword [ebp - 0x1130], 3
mov dword [ebp - 0x112c], 0
mov dword [ebp - 0x1128], 0x10
mov dword [ebp - 0x1124], 0x10
call fcn.00420090
add esp, 0xc
xor eax, eax
mov word [ebp - 0x10c0], ax
push 0x1046
push eax
lea eax, [ebp - 0x10be]
push eax
call fcn.00420090
add esp, 0xc
lea eax, [ebp - 0x1130]
mov ecx, esi
push eax
push 0
push 0x702
push dword [ebp - 0x1158]
call fcn.005befd0
jmp 0x4629cc
push 0xffffffffffffffff
push 0x10000102
push 0x14
push 0x69
push 0xa
push 0x276
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005c0890
mov dword [ebp - 0x1158], eax
push dword [edi + 0x1438]
mov ecx, esi
push 0xffffffffffffffff
call fcn.005bec70
test dword [edi + 0x13dc], 2
mov ecx, 0xc8
mov eax, 0xf5
cmove eax, ecx
mov ecx, edi
push eax
push 0x17c
push 0x28
push 0xa
call fcn.0045fec0
test dword [edi + 0x13dc], 2
mov dword [ebp - 0x11c0], eax
jne 0x462a58
push 0xffffffffffffffff
push 0x10000001
push 0x28
push 0x140
push 0xfa
push 0x28
push 0x6de1a8
mov ecx, esi
call fcn.005c0890
movsd xmm0, qword [0x6edb40]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x320
push 0xffffffffffffffff
mov ecx, esi
call fcn.005beb10
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.DiskCopy_is_a_user_friendly_disk_partition_cloning_tool_with_really_cool_features_such_as_r_nMBR_to_GPT_and_GPT_to_MBR__Always_bootable.__Partition_selection_and_Single_partition_cloning.
push 0x30
push 0xa0
push 0x2a
push 0x19a
push 0x12b
push str.DiskCopy
mov dword [edi + 0x13e4], 0x41100000
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Clear_Disk_Info_is_a_free_software_program_that_provides_a_clear_view_r_nof_health_related_information_about_connected_storage_devices.
push 0x30
push 0xa0
push 0x2a
push 0x23f
push 0x12c
push str.Clear_Disk_Info
mov dword [ebp - 0x11c4], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_shows_a_list_of_all_processes_paths__r_nallows_to_kill_the_selected_process__delete_the_executable_file__r_nget_info_on_the_executable_path__and_kill_all_non_critical_processes.
push 0x30
push 0xa0
push 0x5f
push 0x19a
push 0x8a
push str.Process_Manager
mov dword [ebp - 0x11c8], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_shows_all_the_modules_used_by_the_processes_r_nallows_to_get_info_and_delete_them__if_desired.
push 0x30
push 0xa0
push 0x5f
push 0x23f
push 0x85
push str.Memory_modules
mov dword [ebp - 0x1168], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_shows_a_list_of_autorun_entries._You_will_be_able_to_delete_r_nthe_selected_entries_and_the_corresponding_files__if_desired__among_other_options
push 0x30
push 0xa0
push 0x94
push 0x19a
push 0x9c
push str.Autorun_manager
mov dword [ebp - 0x116c], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_shows_a_list_of_the_Windows_services_and_drivers._r_nIt_includes_a_full_range_of_service_management_tools.
push 0x30
push 0xa0
push 0x94
push 0x23f
push 0x75
push str.Service_manager
mov dword [ebp - 0x1170], eax
call fcn.0045fd50
push 0
mov dword [ebp - 0x1174], eax
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_scans_your_hard_drive_for_NTFS_data_streams_and_display_them_in_a_list._r_nIt_allows_you_to_get_information_on_those_streams__extract__read_or_delete_them.
push 0x30
push 0xa0
push 0xc9
push 0x19a
push 0x9f
push str.Alternate_data_streams_scan
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.In_This_module_you_are_able_to_delete__copy_or_replace_files_r_nor_folders_even_if_they_are_being_used_by_other_applications.
push 0x30
push 0xa0
push 0xc9
push 0x23f
push 0x73
push str.Delete_files_and_folders
mov dword [ebp - 0x1178], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_creates_a_report_containing_all_sorts_of_info_r_nwhich_you_can_use_later_to_disinfect_or_repair_your_computer.
push 0x30
push 0xa0
push 0xfe
push 0x19a
push 0x99
push str.Scan_and_create_log
mov dword [ebp - 0x117c], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.In_This_module_you_can_paste_lines_from_a_UVK_log_or_enter_custom_r_ncommands_to_automate_applicartions__or_disinfect__repair_and_optimize_your_computer
push 0x30
push 0xa0
push 0xfe
push 0x23f
push 0x97
push str.Run_scripts
mov dword [ebp - 0x1180], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_provides_many_Windows_tools_and_tweaks.
push 0x30
push 0xa0
push 0x133
push 0x19a
push 0xa5
push str.Tools_and_tweaks
mov dword [ebp - 0x1184], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_offers_a_complete_solution_for_data_backup_and_recovery.
push 0x30
push 0xa0
push 0x133
push 0x23f
push 0xc9
push str.Backup_and_recovery
mov dword [ebp - 0x1188], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
push str.This_module_shows_hardware_and_software_information_that_can_be_useful_especially_if_youre_planningto_reinstall_windows_or_if_youre_trying_to_diagnose_a_performance_or_conflict_problem
mov dword [ebp - 0x118c], eax
push 0x30
push 0xa0
push 0x168
push 0x19a
push 0x80
push str.System_Info
mov ecx, edi
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Search_the_registry_for_one_or_several_text_strings.
push 0x30
push 0xa0
push 0x168
push 0x23f
push 0x90
push str.Registry_seeker
mov dword [ebp - 0x1190], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.WAU_Manager__Windows_Automatic_Updates_Manager__is_a_fully_featured_r_nreplacement_for_the__built_in_Windows_Updating_interface.
push 0x30
push 0xa0
push 0x19d
push 0x19a
push 0x12d
push str.WAU_Manager
mov dword [ebp - 0x1194], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.DeviceRescue_is_a_highly_featured_r_nreplacement_for_the__built_in_Windows_Device_Manager.
push 0x30
push 0xa0
push 0x19d
push 0x23f
push 0x13f
push str.DeviceRescue
mov dword [ebp - 0x1164], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Desktop_watermark__Configure_immunization__Account_profile_fixer_and_others.
push 0x30
push 0xa0
push 0x1d2
push 0x19a
push 0xae
push str.RebootExec_utilities
mov dword [ebp - 0x11cc], eax
call fcn.0045fd50
xorps xmm0, xmm0
mov dword [ebp - 0x1198], eax
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
call fcn.005dc5e0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 3
push eax
push str.MoreCustomApps
lea ecx, [ebp - 0x20]
mov dword [edi + 0x140c], 0x41500000
call fcn.005d6740
test al, al
je 0x462e46
push 0x28
lea ecx, [ebp - 0x44]
call fcn.005dae00
mov ecx, eax
call fcn.005dbeb0
test al, al
je 0x462e53
push str.Custom_apps
lea ecx, [ebp - 0x44]
call fcn.005dc510
lea eax, [edi + 0x140c]
mov ecx, edi
push eax
push str.Create_more_custom_apps
push 0x30
push 0xa0
push 0x1d2
push 0x23f
push 0
push 0
push 0
push 0x6a
call fcn.00436420
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc190
mov edx, eax
mov ecx, esi
call fcn.005c7f50
push 0x47
mov dword [ebp - 0x114c], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
movsd xmm0, qword [0x6edab8]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x1150], ecx
jb 0x462ecb
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, dword [ebp - 0x1150]
or eax, 0xff000000
jmp 0x462ecd
xor eax, eax
push eax
push ecx
push ecx
push 0xfc
mov ecx, edi
call fcn.00436420
push eax
lea ecx, [ebp - 0x1140]
call fcn.005c6520
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x1140]
push str.Edit_this_buttons_name
push dword [ebp - 0x114c]
call fcn.005c1450
push 0xffffffffffffffff
push 0x10000002
push 0x12
push 0x6e
push 0x20d
push 0x41
push str.Internet_status:
mov ecx, esi
mov dword [ebp - 0x1150], eax
mov dword [edi + 0x13e4], 0x40c00000
call fcn.005c0890
push 0
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], 0
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
movsd xmm0, qword [0x6edaf8]
sub esp, 0x10
mov edx, eax
mov ecx, 0x505050
test edx, edx
mov eax, 0x107010
cmovne ecx, eax
movsd qword [esp + 8], xmm0
push ecx
push ecx
push 0x7d
push ecx
mov ecx, str.NOT_CONNECTED
mov eax, str.CONNECTED
cmove eax, ecx
mov ecx, edi
push 0xb4
push eax
call fcn.0045fe40
push 0xffffffffffffffff
push 0x10000002
push 0x12
push 0x5f
push 0x20d
push 0x19a
push str.Immunization:
mov ecx, esi
call fcn.005c0890
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64cd74
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x34]
call fcn.005dc200
push ecx
push 0x20019
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005d6a30
lea eax, [ebp - 0x34]
push eax
push str.Immunized
lea ecx, [ebp - 0x38]
call fcn.005d6740
test al, al
je 0x46300d
lea ecx, [ebp - 0x34]
call fcn.005dc3a0
cmp eax, 1
jle 0x46300d
mov ecx, 1
jmp 0x46300f
xor ecx, ecx
movsd xmm0, qword [0x6edaf8]
sub esp, 0x10
test ecx, ecx
mov edx, 0x107010
mov eax, 0x505050
mov esi, 0x6dd398
cmovne eax, edx
mov edx, 0x6dd3a0
movsd qword [esp + 8], xmm0
push eax
push ecx
push 0x28
push ecx
mov eax, esi
mov ecx, edi
push 0x1fe
cmove eax, edx
push eax
call fcn.0045fe40
mov ecx, dword [ebp - 0x1148]
push 0xffffffffffffffff
push 0x10000002
push 0x12
push 0x73
push 0x20d
push 0x23a
push str.Execute_Prevent:
call fcn.005c0890
push 0
call fcn.004b12d0
movsd xmm0, qword [0x6edaf8]
sub esp, 0x10
test eax, eax
mov edx, 0x107010
mov ecx, 0x505050
mov eax, 0x6dd3a0
cmovg ecx, edx
cmovle esi, eax
movsd qword [esp + 8], xmm0
push ecx
push ecx
push 0x28
push ecx
push 0x2b2
push esi
mov ecx, edi
call fcn.0045fe40
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Improve_performance_by_removing_invalid_and_unneeded_registry_and_file_system_objects
push 0x64
push 0x64
push 0x12c
push 0x28
push 0xa1
push str.System_Booster
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Uninstall_several_programs_at_once__even_when_they_can_not_be_uninstalled_from_Windows.
push 0x64
push 0x64
push 0x12c
push 0x96
push 0xa7
push str.Smart_Uninstaller
mov dword [ebp - 0x11b4], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
push str.This_module_contains_all_windows_user_account_setup_options_in_one_place.
push 0x64
push 0x64
push 0x12c
mov dword [ebp - 0x11a0], eax
push 0x104
push 0x8c
push str.Quick_user_manager
mov ecx, edi
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Prevent_your_system_from_getting_infected.
push 0x64
push 0x64
push 0x19a
push 0x28
push 0x7f
push str.System_Immunization
mov dword [ebp - 0x11a4], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_offers_a_large_number_of_automated_fixes_and_maintenance_actions._r_nIt_also_allows_to_automate_third_party_applications_and_create_professional_reports.
push 0x64
push 0x64
push 0x19a
push 0x96
push 0x93
push str.System_repair
mov dword [ebp - 0x11a8], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.This_module_is_a_lighspeed_adware_malware_scanner_and_remover.
push 0x64
push 0x64
push 0x19a
push 0x104
push 0x68
push str.Threat_scanner
mov dword [ebp - 0x11ac], eax
call fcn.0045fdf0
mov cx, word [edi + 0x11bc]
mov esi, dword [ebp - 0x1148]
mov dword [ebp - 0x115c], eax
mov eax, 0x70
mov word [ebp - 0x1a], ax
lea eax, [ebp - 0x1c]
push 1
mov word [ebp - 0x18], cx
mov ecx, esi
push eax
mov byte [ebp - 0x1141], 0
mov byte [ebp - 0x1c], 1
call fcn.005c47a0
mov ecx, edi
call fcn.0045f300
call fcn.005d8ff0
mov ecx, edi
call fcn.0045f1c0
mov eax, dword [edi + 0x38]
or eax, dword [edi + 0x3c]
je 0x463253
lea ecx, [edi + 0x1448]
call fcn.005dc3a0
test eax, eax
je 0x463253
push 0
lea ecx, [edi + 0x1448]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0046f640
ret
add byte [eax], al
push str.Welcome_screen
lea ecx, [edi + 0x1448]
call fcn.005dc510
mov dword [ebp - 0x113c], 0
lea eax, [ebp - 0x113c]
mov byte [ebp - 4], 5
push eax
push 0x604c60
push 1
push 0
push 0x604cd0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x463346
mov dword [ebp - 0x1134], 0
mov byte [ebp - 4], 6
lea edx, [ebp - 0x1134]
mov eax, dword [ebp - 0x113c]
push edx
push 0x604c70
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x4632c3
mov byte [ebp - 4], 7
jmp 0x463332
mov dword [ebp - 0x1138], 0
mov byte [ebp - 4], 8
lea edx, [ebp - 0x1138]
mov eax, dword [ebp - 0x1134]
push edx
push 0x604c80
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x463306
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x1138]
test eax, eax
je 0x463300
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
jmp 0x463332
mov eax, dword [ebp - 0x1138]
push 0
push dword [ebp - 0x1160]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1138]
test eax, eax
je 0x46332e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1134]
test eax, eax
je 0x463342
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x113c]
test eax, eax
je 0x463356
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 1
push str.https:__www.carifred.com_uvk_help_welcome_screen.php
lea ecx, [edi + 0x119c]
mov dword [ebp - 0x113c], 0
call fcn.005dc260
cmp dword [edi + 0x13dc], 0xfffffffa
jne 0x4633e0
mov eax, dword [edi + 0x1f68]
test eax, 0x400000
jne 0x4633e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
or eax, 0x400000
lea ecx, [edi + 0x1484]
push str.._r_n_r_nIf_you_like_this_application__you_can_now_purchase_a_new_license._r_n_r_nPlease_use_one_of_the_options_below__or_close_this_dialog_box_to_use_the_free_version.
mov dword [edi + 0x1f68], eax
call fcn.005dc190
push eax
push str.Your_trial_license_expired_in
lea ecx, [ebp - 0x34]
call fcn.005dc200
push 0xe6
push 0
push ecx
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00476040
jmp 0x46357f
call fcn.005965b0
test al, al
je 0x46343a
sub esp, 8
mov ecx, edi
push 0xd2
push 0x1e0
push 0
push esi
push 1
push str.You_have_Windows_updates_waiting_to_be_installed_on_reboot._r_nYou_should_restart_the_computer_to_install_those_updates_before_attempting_any_repairs._r_n_r_nAlso__rebooting_might_fix_any_issues_youre_experiencing._r_n_r_nDo_you_want_to_reboot_now_
call fcn.0043e2e0
cmp eax, 1
jne 0x46357f
or dword [edi + 0x1f68], 3
push 0x30000
push eax
push 0
push 0xa
push str.This_PC_will_reboot_in_less_than_10_seconds.
push 0
mov byte [edi + 0x1f80], 0
call dword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownExW]
jmp 0x46357f
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6edab8]
jbe 0x46357f
cmp dword [ebp - 0x24], 0
jne 0x46357f
lea eax, [ebp - 0x28]
push eax
push str.HiberbootEnabled
push str.HKLMSYSTEMCurrentControlSetControlSession_ManagerPower
lea ecx, [ebp - 0x38]
call fcn.005d6580
test al, al
je 0x46357f
cmp dword [ebp - 0x28], 0
je 0x46357f
push 0xd
push 0
push dword [ebp - 0x115c]
xorps xmm0, xmm0
lea ecx, [ebp - 0x74]
push dword [ebp - 0x1154]
movups xmmword [ebp - 0x74], xmm0
push esi
movups xmmword [ebp - 0x64], xmm0
call fcn.005b8800
push 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0xd
push eax
push 4
push str.HybridShutdownAdviced
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 1
call fcn.005d5f20
push str._Anyway__disable_Hybrid_Shutdown
push 0xd2
push 0x1e0
push ecx
push 0
push str.Hybrid_Shutdown_is_enabled__which_means_this_computer_usually_hibernates_instead_of_shutting_down__and_rarely_really_reboots._r_n_r_nIf_you_are_experiencing_hardware_or_software_issues_with_this_machine__a_real_reboot_might_fix_them_for_you._r_n_r_nDo_you_want_to_reboot_now_
mov ecx, edi
call fcn.0043ddd0
mov dword [ebp - 0x1138], eax
test al, 8
je 0x463512
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0
push eax
push 4
push str.HiberbootEnabled
push str.HKLMSYSTEMCurrentControlSetControlSession_ManagerPower
lea ecx, [ebp - 0x38]
call fcn.005d5be0
mov eax, dword [ebp - 0x1138]
test al, 4
je 0x463538
push 0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 2
push eax
push 4
push str.HybridShutdownAdviced
lea ecx, [ebp - 0x20]
call fcn.005d5f20
mov eax, dword [ebp - 0x1138]
test al, 1
je 0x463577
push 0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 2
push eax
push 4
push str.HybridShutdownAdviced
lea ecx, [ebp - 0x20]
call fcn.005d5f20
or dword [edi + 0x1f68], 3
push 0x30000
push 1
push 0
push 0xa
push str.This_PC_will_reboot_in_less_than_10_seconds.
push 0
call dword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownExW]
lea ecx, [ebp - 0x74]
call fcn.005b8790
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movq qword [ebp - 0x54], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe
call fcn.0059df90
mov dword [ebp - 0x1138], eax
test eax, eax
je 0x4636c4
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push esi
push 1
push str.We_found_one_or_more_corrupted_user_profiles._r_n_r_nDo_you_want_to_fix_them_
call fcn.0043e2e0
cmp eax, 1
jne 0x4636c4
push 0
push 0xffffffffffffffba
sub esp, 8
mov ecx, edi
push 0x46
push 0x1c2
push esi
push str.Fixing_corrupted_user_profiles...
call fcn.0043da60
mov ecx, eax
call fcn.005b66e0
xor eax, eax
mov dword [ebp - 0x1134], 0
cmp dword [ebp - 0x1138], eax
jbe 0x463659
nop word [eax + eax]
lea esi, [eax + 1]
cmp dword [ebp - 0x54], eax
ja 0x46362b
mov dword [ebp - 0x54], esi
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + ecx*4]
call fcn.005dc190
mov ecx, eax
call fcn.0059da40
movzx eax, al
add dword [ebp - 0x1134], eax
mov eax, esi
cmp eax, dword [ebp - 0x1138]
jb 0x463620
mov esi, dword [ebp - 0x1148]
lea ecx, [edi + 0x14f0]
call fcn.005b6b30
mov eax, dword [ebp - 0x1138]
sub esp, 8
mov ecx, edi
cmp dword [ebp - 0x1134], eax
jne 0x4636ab
push 0xb4
push 0x1c2
push 0
push esi
push 1
push str.The_corrupted_user_profiles_were_successfully_fixed._Changes_will_be_effective_after_you_log_out_of_the_affected_profile_s_._r_n_r_nDo_you_want_to_log_out_now_
call fcn.0043e2e0
cmp eax, 1
jne 0x4636c4
push 0
push 0
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov byte [ebp - 0x1141], 0
jmp 0x463f6d
push 0x8c
push 0x190
push 0
push esi
push 4
push str.Sorry__some_of_the_corrupted_user_profiles_could_not_be_fixed
call fcn.0043e2e0
lea eax, [ebp - 0x28]
push eax
push str.HivePermissionsChecked
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backups
lea ecx, [ebp - 0x20]
call fcn.005d6580
test al, al
je 0x4636e4
cmp dword [ebp - 0x28], 0
jne 0x463705
push 0
push 0
lea eax, [edi + 0x1290]
push eax
push 0x53fe10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x28]
push eax
push str.RestoreBoot
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer_backupsSystemRepair
lea ecx, [ebp - 0x20]
call fcn.005d6580
test al, al
je 0x463732
cmp dword [ebp - 0x28], 0
je 0x463732
push 0
lea ecx, [edi + 0x1290]
call fcn.00553920
push 0
mov ecx, edi
mov dword [ebp - 0x1134], 0
call fcn.004771c0
test eax, eax
je 0x463eb4
nop dword [eax]
test byte [edi + 0x1f68], 0x10
je 0x463776
push 4
mov ecx, edi
call fcn.004766b0
test eax, eax
je 0x46376d
and dword [edi + 0x1f68], 0xffffffef
cmp eax, 2
je 0x463dca
mov eax, dword [edi + 0x14a8]
cmp eax, 0xfffffffa
je 0x463eb4
cmp dword [edi + 0x14d8], esi
jne 0x463db4
mov edx, dword [ebp - 0x1154]
cmp eax, edx
jne 0x4639b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._r_n_r_n_r_nLicensed_to_:_r_n_r_n
sub esp, 0xc
lea ecx, [edi + 0x143c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.___Version:
call fcn.005dc190
push eax
push 0
push ecx
push 0
push 0x6d1c48
lea ecx, [ebp - 0x34]
call fcn.005d9f40
mov ecx, eax
call fcn.005da510
mov ecx, eax
call fcn.005da780
mov eax, dword [edi + 0x13dc]
cmp eax, 0x42
jne 0x463831
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x120]
call fcn.005dc190
push eax
push str.Not_licensed._Using_a_DEMO_license._r_n_r_n
jmp 0x46393b
cmp byte [edi + 0x13d8], 0
jne 0x463864
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x120]
call fcn.005dc190
push eax
push str.Not_licensed._Free__limited_version._r_n_r_n
jmp 0x46393b
test al, 8
je 0x46388b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.License_type:_Technician_OEM_license.
push str.This_computer_only._r_n_r_n
jmp 0x46393b
test al, 4
je 0x4638b2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.License_type:_OEM_license.
push str.This_computer_only._r_n_r_n
jmp 0x46393b
cmp eax, 0x21
jne 0x4638dd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x627930
lea ecx, [edi + 0x1484]
call fcn.005dc190
push eax
push str.License_type:_TRIAL_license__expires_in
jmp 0x46392a
test al, 2
je 0x46390e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x120]
call fcn.005dc190
push eax
push 0x629230
lea ecx, [edi + 0x114]
call fcn.005dc190
push eax
jmp 0x46392a
cmp eax, 1
jne 0x463943
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.License_type:_PRO_license.
push 0x629230
lea ecx, [edi + 0x108]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005da780
push 0xd
xorps xmm0, xmm0
mov ecx, esi
push 0
movups xmmword [ebp - 0x74], xmm0
movups xmmword [ebp - 0x64], xmm0
call fcn.005c56d0
push eax
push dword [ebp - 0x1154]
lea ecx, [ebp - 0x74]
push esi
call fcn.005b8800
push 0xfa
push esi
push ecx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x10
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00476040
test eax, eax
je 0x463da8
push 6
mov ecx, edi
call fcn.00460040
push eax
lea ecx, [edi + 0x14]
call fcn.005b0bb0
lea ecx, [ebp - 0x74]
mov byte [ebp - 0x1141], 1
mov byte [ebp - 4], 0xe
call fcn.005b8790
jmp 0x463eb4
cmp eax, dword [ebp - 0x119c]
je 0x463ead
cmp eax, dword [ebp - 0x11b8]
je 0x463ea4
cmp eax, dword [ebp - 0x11bc]
jne 0x463a32
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.2Browse.exe_
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x34]
call fcn.005dc200
push 0
push 5
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc190
mov edx, eax
xor ecx, ecx
call fcn.005e2a10
mov esi, dword [ebp - 0x1148]
jmp 0x463db4
cmp dword [ebp - 0x48], 0
je 0x463a56
cmp eax, dword [ebp - 0x1158]
jne 0x463a56
push ecx
push 5
push 0
xor edx, edx
mov ecx, str.https:__www.carifred.com_uvk_changelog.php
call fcn.005e2950
jmp 0x463db4
test byte [edi + 0x13dc], 2
je 0x463a7f
cmp eax, dword [ebp - 0x11c0]
jne 0x463a7f
lea ecx, [edi + 0x120]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045f0d0
jmp 0x463db4
cmp eax, dword [ebp - 0x11c4]
jne 0x463a96
push ecx
push 0
mov ecx, edi
call fcn.0046a530
jmp 0x463db4
mov eax, dword [edi + 0x14a8]
cmp eax, dword [ebp - 0x11c8]
jne 0x463ab3
push ecx
push 0
mov ecx, edi
call fcn.0046a7a0
jmp 0x463db4
cmp eax, dword [ebp - 0x1164]
jne 0x463ace
push 0
push ecx
push 0
push 0
mov ecx, edi
call fcn.0046a8d0
jmp 0x463db4
cmp eax, dword [ebp - 0x1168]
je 0x463e9b
cmp eax, dword [ebp - 0x116c]
je 0x463e92
cmp eax, dword [ebp - 0x1170]
je 0x463e89
cmp eax, dword [ebp - 0x1174]
je 0x463e80
cmp eax, dword [ebp - 0x1178]
je 0x463e77
cmp eax, dword [ebp - 0x117c]
je 0x463e6e
cmp eax, dword [ebp - 0x1180]
je 0x463e65
cmp eax, dword [ebp - 0x1184]
je 0x463e5c
mov eax, dword [edi + 0x14a8]
cmp eax, dword [ebp - 0x1188]
je 0x463e53
cmp eax, dword [ebp - 0x118c]
je 0x463e4a
cmp eax, dword [ebp - 0x1190]
je 0x463e41
cmp eax, dword [ebp - 0x1194]
je 0x463e38
cmp eax, dword [ebp - 0x1198]
jne 0x463b95
push 0
push 5
lea ecx, [edi + 0x150]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1184]
call fcn.005dc190
mov edx, eax
xor ecx, ecx
call fcn.005e2a10
jmp 0x463db4
cmp eax, dword [ebp - 0x11b4]
je 0x463e2f
cmp eax, dword [ebp - 0x11a0]
je 0x463e23
cmp eax, dword [ebp - 0x11a4]
je 0x463e17
cmp eax, dword [ebp - 0x11a8]
je 0x463e0b
cmp eax, dword [ebp - 0x11ac]
je 0x463dff
mov eax, dword [edi + 0x14a8]
cmp eax, dword [ebp - 0x115c]
je 0x463df3
cmp eax, dword [ebp - 0x11b0]
je 0x463de7
cmp eax, dword [ebp - 0x11cc]
je 0x463dd6
mov ecx, dword [ebp - 0x114c]
cmp eax, 0xffffffea
jne 0x463c26
cmp dword [edi + 0x14b4], ecx
jne 0x463c26
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x1150]
mov ecx, esi
call fcn.005bbfd0
jmp 0x463db4
cmp eax, dword [ebp - 0x1150]
jne 0x463d65
push 0xd
push 0
push dword [ebp - 0x115c]
xorps xmm0, xmm0
lea ecx, [ebp - 0x74]
push edx
push esi
movups xmmword [ebp - 0x74], xmm0
movups xmmword [ebp - 0x64], xmm0
call fcn.005b8800
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x11
push eax
push str.MoreCustomApps
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x20]
call fcn.005d65d0
test al, al
je 0x463c84
push 0x28
lea ecx, [ebp - 0x44]
call fcn.005dae00
mov ecx, eax
call fcn.005dbeb0
test al, al
je 0x463c91
push str.More_custom_apps
lea ecx, [ebp - 0x44]
call fcn.005dc510
sub esp, 8
lea ecx, [ebp - 0x44]
push 0x190
push 0
call fcn.005dc190
push eax
push str.Please_indicate_the_desired_text_for_the_More_custom_apps_button._The_maximum_text_length_is_40_characters._Clear_the_text_field_to_restore_the_default_value
mov ecx, edi
call fcn.0043d160
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc1c0
lea ecx, [ebp - 0x34]
call fcn.005dbeb0
mov byte [ebp - 0x1142], al
test al, al
je 0x463cd5
push str.More_custom_apps
call fcn.005dc510
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc450
xor ecx, ecx
test al, al
lea eax, [edi + 0x140c]
push eax
push str.Create_more_custom_apps
push 0x30
push 0xa0
push 0
push 0
setne cl
add dword [ebp - 0x1134], ecx
mov ecx, edi
push 0
push 0x6a
call fcn.00436420
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc190
mov edx, dword [ebp - 0x114c]
mov ecx, esi
push eax
call fcn.005c77b0
cmp byte [ebp - 0x1142], 0
je 0x463d44
push str.MoreCustomApps
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x20]
call fcn.005d5da0
jmp 0x463da8
push 0
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
push 1
push str.MoreCustomApps
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x20]
call fcn.005d5e20
jmp 0x463da8
cmp eax, ecx
jne 0x463db4
push 0xd
xorps xmm0, xmm0
mov ecx, esi
push 0
movups xmmword [ebp - 0x74], xmm0
movups xmmword [ebp - 0x64], xmm0
call fcn.005c56d0
push eax
push edx
push esi
lea ecx, [ebp - 0x74]
call fcn.005b8800
push esi
mov ecx, edi
mov byte [ebp - 4], 0x12
call fcn.00460300
push dword [ebp - 0x1160]
add dword [ebp - 0x1134], eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xe
call fcn.005b8790
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
jne 0x463750
jmp 0x463eb4
or dword [edi + 0x1f68], 1
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x1a
call fcn.00467640
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x19
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x13
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x12
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x11
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x10
jmp 0x463eb4
mov byte [ebp - 0x1141], 0xf
jmp 0x463eb4
mov byte [ebp - 0x1141], 0xe
jmp 0x463eb4
mov byte [ebp - 0x1141], 0xd
jmp 0x463eb4
mov byte [ebp - 0x1141], 0xc
jmp 0x463eb4
mov byte [ebp - 0x1141], 0xb
jmp 0x463eb4
mov byte [ebp - 0x1141], 0xa
jmp 0x463eb4
mov byte [ebp - 0x1141], 9
jmp 0x463eb4
mov byte [ebp - 0x1141], 8
jmp 0x463eb4
mov byte [ebp - 0x1141], 7
jmp 0x463eb4
mov byte [ebp - 0x1141], 6
jmp 0x463eb4
mov byte [ebp - 0x1141], 5
jmp 0x463eb4
mov byte [ebp - 0x1141], 4
jmp 0x463eb4
mov byte [ebp - 0x1141], 3
jmp 0x463eb4
mov byte [ebp - 0x1141], 2
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x15
jmp 0x463eb4
mov byte [ebp - 0x1141], 0x14
cmp byte [edi + 0x13d8], 0
je 0x463f58
mov eax, dword [edi + 0x1f74]
and al, 3
cmp al, 1
jne 0x463f58
cmp dword [ebp - 0x1134], 0
je 0x463f58
lea eax, [ebp - 0x28]
push eax
push str.SkipSettingsChangedWarning
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
lea ecx, [ebp - 0x20]
call fcn.005d6580
test al, al
je 0x463f00
cmp dword [ebp - 0x28], 0
jne 0x463f58
nop word [eax + eax]
push 1
mov ecx, edi
call fcn.004771c0
test eax, eax
jne 0x463f00
push eax
push 0xaa
push 0x190
push ecx
push 2
push str.You_are_using_CloudSync_to_load_settings_from_the_cloud._If_you_dont_upload_your_extra_apps_changes_to_the_cloud_now__they_will_be_discarded_the_next_time_you_launch_this_application._r_n_r_nDo_you_want_to_upload_your_new_settings_to_the_cloud_now_
mov ecx, edi
call fcn.0043ddd0
test al, 1
je 0x463f38
push 2
push 0
mov ecx, edi
call fcn.0046f640
jmp 0x463f58
test al, 4
je 0x463f58
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 1
push eax
push 4
push str.SkipSettingsChangedWarning
lea ecx, [ebp - 0x20]
call fcn.005d5f20
cmp byte [ebp - 0x1141], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0045f260
mov edi, dword [ebp - 0x4c]
test edi, edi
je 0x463fa1
push fcn.005dc430
mov byte [ebp - 4], 0x13
lea esi, [edi - 4]
push dword [esi]
push 0xc
push edi
call fcn.0041e45b
mov eax, dword [edi - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x113c]
test eax, eax
je 0x463fb5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1140]
call fcn.005c6500
lea ecx, [ebp - 0x44]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005d69e0
lea ecx, [ebp - 0x20]
call fcn.005d69e0
lea ecx, [ebp - 0x34]
call fcn.005dc430
mov al, byte [ebp - 0x1141]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx