Function at 0x861390
Capabilities:
Delete directory
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
mov eax, 0x16f4
call fcn.00a91950
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0x16f0], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea eax, [esp + 0x3a5]
push ebx
push eax
mov edi, ecx
mov byte [esp + 0x3ac], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea ecx, [esp + 0x19d]
push ebx
push ecx
mov byte [esp + 0x1a4], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea edx, [esp + 0xccd]
push ebx
push edx
mov byte [esp + 0xcd4], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea eax, [esp + 0xed5]
push ebx
push eax
mov byte [esp + 0xedc], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea ecx, [esp + 0x10dd]
push ebx
push ecx
mov byte [esp + 0x10e4], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea edx, [esp + 0x6b5]
push ebx
push edx
mov byte [esp + 0x6bc], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea eax, [esp + 0x8bd]
push ebx
push eax
mov byte [esp + 0x8c4], bl
call fcn.00a7ffb0
add esp, 0xc
xor eax, eax
push 0x103
lea edx, [esp + 0x13ed]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x54], cx
mov dword [esp + 0x56], eax
mov dword [esp + 0x5a], eax
mov dword [esp + 0x5e], eax
mov word [esp + 0x62], ax
mov byte [esp + 0x13f4], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
lea eax, [esp + 0x14f5]
push ebx
push eax
mov dword [esp + 0x50], 1
mov dword [esp + 0x40], ebx
mov byte [esp + 0x14fc], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x207
mov byte [esp + 0x4ac], bl
push ebx
lea ecx, [esp + 0x4b1]
push ecx
call fcn.00a7ffb0
add esp, 0xc
lea edx, [esp + 0x48]
push edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x52]
movzx ecx, word [esp + 0x50]
movzx edx, word [esp + 0x48]
push eax
movzx eax, word [esp + 0x4e]
push ecx
movzx ecx, word [esp + 0x56]
push edx
push eax
push ecx
lea edx, [esp + 0x13fc]
push str._02u__02u__04u__02u__02u
push edx
call fcn.00a78f30
add esp, 0x1c
mov dword [esp + 0x28], ebx
xor eax, eax
mov cl, byte [eax + 0xb56830]
mov byte [esp + eax + 0x198], cl
inc eax
cmp cl, bl
jne 0x861551
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp byte [esp + 0x198], bl
je 0x8615a4
lea eax, [esp + 0x198]
lea esp, [esp]
inc eax
cmp byte [eax], bl
jne 0x861580
lea ecx, [esp + 0x198]
sub eax, ecx
je 0x8615a4
cmp byte [esp + eax + 0x197], 0x5c
je 0x8615a4
push 0xaa1564
mov edx, ecx
push edx
call esi
lea eax, [esp + 0x198]
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x8615b0
mov ecx, dword [str.general.log]
mov edx, dword [0xaacd4c]
mov dword [eax], ecx
mov ecx, dword [0xaacd50]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
push ebx
push ebx
lea edx, [esp + 0x30]
lea ecx, [esp + 0x1a0]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x861617
mov edx, dword [esp + 0x28]
cmp edx, 0x6400000
jb 0x861617
jmp 0x861600
mov cl, byte [esp + eax + 0x198]
mov byte [esp + eax + 0xcc8], cl
inc eax
cmp cl, bl
jne 0x861600
mov dword [esp + 0x3c], edx
mov dword [esp + 0x28], ebx
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0xb56830]
mov byte [esp + eax + 0x198], cl
inc eax
cmp cl, bl
jne 0x861620
cmp byte [esp + 0x198], bl
je 0x861666
lea eax, [esp + 0x198]
inc eax
cmp byte [eax], bl
jne 0x861642
lea edx, [esp + 0x198]
sub eax, edx
je 0x861666
cmp byte [esp + eax + 0x197], 0x5c
je 0x861666
push 0xaa1564
mov eax, edx
push eax
call esi
lea eax, [esp + 0x198]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x861670
mov ecx, dword [str.proxev1.ev1]
mov edx, dword [0xaacd58]
mov dword [eax], ecx
mov ecx, dword [0xaacd5c]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
push ebx
push ebx
lea edx, [esp + 0x30]
lea ecx, [esp + 0x1a0]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x8616d7
mov edx, dword [esp + 0x28]
cmp edx, 0x6400000
jb 0x8616d7
jmp 0x8616c0
mov cl, byte [esp + eax + 0x198]
mov byte [esp + eax + 0xed0], cl
inc eax
cmp cl, bl
jne 0x8616c0
mov dword [esp + 0x38], edx
mov dword [esp + 0x28], ebx
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0xb56830]
mov byte [esp + eax + 0x198], cl
inc eax
cmp cl, bl
jne 0x8616e0
cmp byte [esp + 0x198], bl
je 0x861726
lea eax, [esp + 0x198]
inc eax
cmp byte [eax], bl
jne 0x861702
lea edx, [esp + 0x198]
sub eax, edx
je 0x861726
cmp byte [esp + eax + 0x197], 0x5c
je 0x861726
push 0xaa1564
mov eax, edx
push eax
call esi
lea eax, [esp + 0x198]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x861730
mov ecx, dword [str.eScan.log]
mov edx, dword [0xaacd64]
mov dword [eax], ecx
mov cx, word [0xaacd68]
mov dword [eax + 4], edx
mov word [eax + 8], cx
push ebx
push ebx
lea edx, [esp + 0x30]
lea ecx, [esp + 0x1a0]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x861797
mov edx, dword [esp + 0x28]
cmp edx, 0x6400000
jb 0x861797
lea esp, [esp]
mov cl, byte [esp + eax + 0x198]
mov byte [esp + eax + 0x10d8], cl
inc eax
cmp cl, bl
jne 0x861780
mov dword [esp + 0x40], edx
xor eax, eax
lea esp, [esp]
mov cl, byte [eax + 0xb55508]
mov byte [esp + eax + 0x14f0], cl
inc eax
cmp cl, bl
jne 0x8617a0
lea esi, [esp + 0x14f0]
call fcn.00960950
cmp edi, ebx
je 0x8618ab
cmp byte [edi], bl
je 0x8618ab
lea edx, [esp + 0x6b0]
mov eax, edi
sub edx, edi
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x8617e0
cmp dword [ebp + 8], ebx
je 0x8619ef
xor eax, eax
jmp 0x861800
mov cl, byte [esp + eax + 0x6b0]
mov byte [esp + eax + 0x198], cl
inc eax
cmp cl, bl
jne 0x861800
lea ecx, [esp + 0x198]
call fcn.00960910
lea edi, [esp + 0x198]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x861827
mov dx, word [0xaabc14]
mov word [edi], dx
lea esi, [esp + 0x58]
lea ecx, [esp + 0x198]
mov edi, 1
call fcn.0094df40
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
je 0x86223a
jmp 0x861860
cmp edi, ebx
je 0x8619cf
test byte [esp + 0x58], 0x10
je 0x8619bb
mov ecx, 0xaacda4
lea eax, [esp + 0x84]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x86194c
cmp dl, bl
je 0x8618a4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x86194c
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x861880
xor eax, eax
jmp 0x861951
push 0xb55f40
push 0x208
push str.Config
lea edi, [esp + 0x6bc]
mov edx, 0xaa1543
mov ecx, str.LogfilePath
call fcn.00970690
add esp, 0xc
cmp byte [esp + 0x6b0], bl
je 0x8618f3
mov ecx, edi
call fcn.0095a450
test eax, eax
je 0x8618f3
mov esi, edi
call fcn.00960950
jmp 0x8617ea
lea edx, [esp + 0x14f0]
push edx
lea eax, [esp + 0x6b4]
push 0xaacd78
push eax
call fcn.00a78f30
add esp, 0xc
xor ecx, ecx
lea edi, [esp + 0x6b0]
call fcn.0095a6d0
test eax, eax
jne 0x8617ea
mov ecx, edi
push ecx
push str._AVPMAPP__LOG_folder___s__absent_
push ebx
call fcn.0096a780
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x16f0]
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x8619bb
mov ecx, 0xaacda8
lea eax, [esp + 0x84]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x861981
cmp dl, bl
je 0x86197d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x861981
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x861961
xor eax, eax
jmp 0x861986
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x8619bb
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x6b4]
push ecx
lea edx, [esp + 0x8c0]
push 0xaac2e4
push edx
call fcn.00a78f30
add esp, 0x10
lea ecx, [esp + 0x8b8]
call fcn.00861080
mov ecx, dword [esp + 0x28]
lea esi, [esp + 0x58]
call fcn.0094e160
mov edi, eax
jmp 0x861860
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x16f0]
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x6b0]
push ecx
call fcn.00860a00
add esp, 4
test eax, eax
jne 0x861a19
cmp dword [esp + 0x3c], ebx
jne 0x861a19
cmp dword [esp + 0x40], ebx
jne 0x861a19
cmp dword [esp + 0x38], ebx
je 0x86223a
cmp dword [0xb54194], ebx
jne 0x861a2e
cmp dword [0xb3de7c], 2
jne 0x861b9f
push 0x103
lea edx, [esp + 0x12e5]
push ebx
push edx
mov byte [esp + 0x12ec], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x103
lea eax, [esp + 0xac5]
push ebx
push eax
mov byte [esp + 0xacc], bl
call fcn.00a7ffb0
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0xc
push 0xb55f40
push 0x104
lea ecx, [esp + 0x12e8]
push ecx
push 0xaacdac
push str.SecServer
push str.Config
call esi
push 0xb55f40
push 0x104
lea edx, [esp + 0xac8]
push edx
push 0xaa1543
push str.DownloadFromAnotherServer
push str.Config
call esi
cmp dword [0xb567cc], ebx
je 0x861add
mov al, 0x31
cmp byte [esp + 0x12e0], al
je 0x861add
cmp byte [esp + 0xac0], al
je 0x861add
cmp dword [0xb3de7c], 2
jne 0x861b9f
lea eax, [esp + 0x13e8]
push eax
lea ecx, [esp + 0x6b4]
push ecx
lea edx, [esp + 0x4b0]
push 0xaac2e4
push edx
mov dword [esp + 0x54], ebx
call fcn.00a78f30
add esp, 0x10
lea ecx, [esp + 0x4a8]
call fcn.0095a450
test eax, eax
jne 0x861b9f
mov ecx, 0xaa1543
lea esi, [esp + 0x4a8]
call fcn.0095e7e0
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0x4a8]
mov esi, eax
call fcn.0095a450
test eax, eax
jne 0x861b89
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x3a4]
call fcn.00960a40
add esp, 4
mov eax, esi
push eax
lea ecx, [esp + 0x4ac]
push ecx
push str._AVPMAPP__Log_Rotate_folder___s__creation_failed__Reason:__s
push ebx
call fcn.0096a780
add esp, 0x10
mov dword [esp + 0x44], 1
jmp 0x861b9f
lea edx, [esp + 0x4a8]
push edx
push str._AVPMAPP__Log_Rotate_folder___s_
push ebx
call fcn.0096a780
add esp, 0xc
xor eax, eax
mov cl, byte [esp + eax + 0x6b0]
mov byte [esp + eax + 0x198], cl
inc eax
cmp cl, bl
jne 0x861ba1
lea ecx, [esp + 0x198]
call fcn.00960910
lea edi, [esp + 0x198]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x861bc8
mov ax, word [0xaabc14]
mov word [edi], ax
lea esi, [esp + 0x58]
lea ecx, [esp + 0x198]
mov edi, 1
call fcn.0094df40
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
je 0x86210f
jmp 0x861c00
cmp edi, ebx
je 0x8620e0
test byte [esp + 0x58], 0x10
jne 0x861e8c
mov eax, str.report.txt
lea ecx, [esp + 0x84]
call fcn.0094c330
test eax, eax
je 0x861e8c
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x6b4]
push edx
lea eax, [esp + 0x8c0]
push 0xaac2e4
push eax
call fcn.00a78f30
add esp, 0x10
cmp dword [esp + 0x44], ebx
jne 0x861ebe
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x4ac]
push edx
lea eax, [esp + 0xac8]
push 0xaac2e4
push eax
call fcn.00a78f30
add esp, 0x10
lea edi, [esp + 0xac0]
lea ebx, [esp + 0x8b8]
call fcn.009626c0
test eax, eax
jne 0x861cd9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x3a4]
call fcn.00960a40
add esp, 4
mov ecx, esi
push ecx
lea edx, [esp + 0xac4]
push edx
mov eax, ebx
push eax
push str._AVPMAPP__A__Unable_to_move___s__to___s___Reason:__s
push 0
call fcn.0096a780
add esp, 0x14
mov eax, ebx
call fcn.0094dd20
jmp 0x861ce1
mov dword [esp + 0x30], 1
cmp dword [esp + 0x34], 0
jne 0x861e8a
cmp byte [esp + 0xcc8], 0
mov dword [esp + 0x34], 1
je 0x861d80
lea ecx, [esp + 0x4a8]
push ecx
lea edx, [esp + 0xac4]
push str._sgeneral.log
push edx
call fcn.00a78f30
add esp, 0xc
lea edi, [esp + 0xac0]
lea ebx, [esp + 0xcc8]
call fcn.009626c0
test eax, eax
jne 0x861d78
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x3a4]
call fcn.00960a40
add esp, 4
mov eax, esi
push eax
lea ecx, [esp + 0xac4]
push ecx
mov edx, ebx
push edx
push str._AVPMAPP__B__Unable_to_move___s__to___s___Reason:__s
push 0
call fcn.0096a780
add esp, 0x14
mov eax, ebx
call fcn.0094dd20
jmp 0x861d80
mov dword [esp + 0x30], 2
cmp byte [esp + 0xed0], 0
je 0x861e0c
lea eax, [esp + 0x4a8]
push eax
lea ecx, [esp + 0xac4]
push str._sproxev1.ev1
push ecx
call fcn.00a78f30
add esp, 0xc
lea edi, [esp + 0xac0]
lea ebx, [esp + 0xed0]
call fcn.009626c0
test eax, eax
jne 0x861e04
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x3a4]
call fcn.00960a40
add esp, 4
mov edx, esi
push edx
lea eax, [esp + 0xac4]
push eax
mov ecx, ebx
push ecx
push str._AVPMAPP__C__Unable_to_move___s__to___s___Reason:__s
push 0
call fcn.0096a780
add esp, 0x14
mov eax, ebx
call fcn.0094dd20
jmp 0x861e0c
mov dword [esp + 0x30], 4
cmp byte [esp + 0x10d8], 0
je 0x861e8a
lea edx, [esp + 0x4a8]
push edx
lea eax, [esp + 0xac4]
push str._seScan.log
push eax
call fcn.00a78f30
add esp, 0xc
lea edi, [esp + 0xac0]
lea ebx, [esp + 0x10d8]
call fcn.009626c0
test eax, eax
jne 0x861ea0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x3a4]
call fcn.00960a40
add esp, 4
mov ecx, esi
push ecx
lea edx, [esp + 0xac4]
push edx
mov eax, ebx
push eax
push str._AVPMAPP__D__Unable_to_move___s__to___s___Reason:__s
push 0
call fcn.0096a780
add esp, 0x14
mov eax, ebx
call fcn.0094dd20
xor ebx, ebx
mov ecx, dword [esp + 0x28]
lea esi, [esp + 0x58]
call fcn.0094e160
mov edi, eax
jmp 0x861c00
mov ecx, dword [esp + 0x28]
lea esi, [esp + 0x58]
mov dword [esp + 0x30], 5
xor ebx, ebx
call fcn.0094e160
mov edi, eax
jmp 0x861c00
mov eax, dword [esp + 0x74]
cmp eax, ebx
ja 0x861eda
jne 0x861fcb
cmp dword [esp + 0x78], 0x6400000
jb 0x861fcb
lea eax, [esp + 0x8b8]
call fcn.0094dd20
test eax, eax
je 0x861f96
cmp dword [esp + 0x74], ebx
jbe 0x861f27
lea ecx, [esp + 0x8b8]
push ecx
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__FSHigh___0_
push ebx
call fcn.0096a780
add esp, 0xc
lea edx, [esp + 0x8b8]
push edx
mov eax, edx
push str._DELETE__Log_File___s__deleted_by_monitor_as_size_too_high__FSHigh___0_
push eax
call fcn.0096a780
add esp, 0xc
jmp 0x861fcb
mov ecx, dword [esp + 0x78]
fild dword [esp + 0x78]
test ecx, ecx
jge 0x861f39
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea edx, [esp + 0x8c0]
fstp qword [esp]
push edx
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
fild dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
test eax, eax
jge 0x861f70
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
add esp, 0xc
lea ecx, [esp + 0x8c0]
mov edx, ecx
fstp qword [esp]
push ecx
push str._DELETE__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push edx
call fcn.0096a780
add esp, 0x14
jmp 0x861fcb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x3a4]
call fcn.00960a40
add esp, 4
mov eax, esi
push eax
lea ecx, [esp + 0x8bc]
push ecx
push str._AVPMAPP__Log_File___s__deletion_by_monitor_as_size_too_high_NOT_SUCCESSFUL__Err:__s
push ebx
call fcn.0096a780
add esp, 0x10
cmp dword [esp + 0x34], ebx
jne 0x861e8c
mov dword [esp + 0x34], 1
cmp byte [esp + 0xcc8], bl
je 0x86202a
lea eax, [esp + 0xcc8]
call fcn.0094dd20
test eax, eax
je 0x86202a
mov edx, dword [esp + 0x3c]
fild dword [esp + 0x3c]
test edx, edx
jge 0x862008
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea eax, [esp + 0xcd0]
fstp qword [esp]
push eax
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
add esp, 0x14
cmp byte [esp + 0x10d8], bl
je 0x862077
lea eax, [esp + 0x10d8]
call fcn.0094dd20
test eax, eax
je 0x862077
mov ecx, dword [esp + 0x40]
fild dword [esp + 0x40]
test ecx, ecx
jge 0x862055
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea edx, [esp + 0x10e0]
fstp qword [esp]
push edx
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
add esp, 0x14
cmp byte [esp + 0xed0], bl
je 0x861e8c
lea eax, [esp + 0xed0]
call fcn.0094dd20
test eax, eax
je 0x861e8c
mov eax, dword [esp + 0x38]
fild dword [esp + 0x38]
test eax, eax
jge 0x8620aa
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea ecx, [esp + 0xed8]
fstp qword [esp]
push ecx
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
mov ecx, dword [esp + 0x3c]
add esp, 0x14
lea esi, [esp + 0x58]
call fcn.0094e160
mov edi, eax
jmp 0x861c00
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esp + 0x30], ebx
je 0x86210f
lea ecx, [esp + 0x4a8]
call fcn.0095a450
test eax, eax
je 0x862149
lea ecx, [esp + 0x4a8]
call fcn.00861080
jmp 0x862149
lea ecx, [esp + 0x4a8]
call fcn.0095a450
test eax, eax
je 0x862149
cmp byte [esp + 0x4a8], bl
je 0x862149
push 0x80
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x4a8]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
cmp dword [esp + 0x34], ebx
jne 0x86223a
cmp byte [esp + 0xcc8], bl
je 0x8621a0
lea eax, [esp + 0xcc8]
call fcn.0094dd20
test eax, eax
je 0x8621a0
mov edx, dword [esp + 0x3c]
fild dword [esp + 0x3c]
test edx, edx
jge 0x86217e
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea eax, [esp + 0xcd0]
fstp qword [esp]
push eax
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
add esp, 0x14
cmp byte [esp + 0x10d8], bl
je 0x8621ed
lea eax, [esp + 0x10d8]
call fcn.0094dd20
test eax, eax
je 0x8621ed
mov ecx, dword [esp + 0x40]
fild dword [esp + 0x40]
test ecx, ecx
jge 0x8621cb
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea edx, [esp + 0x10e0]
fstp qword [esp]
push edx
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
add esp, 0x14
cmp byte [esp + 0xed0], bl
je 0x86223a
lea eax, [esp + 0xed0]
call fcn.0094dd20
test eax, eax
je 0x86223a
mov eax, dword [esp + 0x38]
fild dword [esp + 0x38]
test eax, eax
jge 0x862218
fadd qword [0xb0baa8]
fmul qword [0xb0bb38]
sub esp, 8
lea ecx, [esp + 0xed8]
fstp qword [esp]
push ecx
push str._AVPMAPP__Log_File___s__deleted_by_monitor_as_size_too_high__Size:__.2f_MB_
push ebx
call fcn.0096a780
add esp, 0x14
mov ecx, dword [esp + 0x16fc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret