Function at 0x8b7650
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0xb140c8
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x10ef4
call fcn.00a91950
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, ecx
mov dword [ebp - 0x10e74], edi
xor ebx, ebx
mov dword [ebp - 0x10ef4], ebx
mov dword [ebp - 4], ebx
xor esi, esi
mov dword [ebp - 0x10ea8], esi
mov byte [ebp - 0x10e68], 0
push 0xf9ff
push ebx
lea eax, [ebp - 0x10e67]
push eax
call fcn.00a7ffb0
mov dword [ebp - 0x10e7c], ebx
mov byte [ebp - 0x12c], 0
push 0x103
push ebx
lea ecx, [ebp - 0x12b]
push ecx
call fcn.00a7ffb0
mov dword [ebp - 0x10ef8], ebx
mov byte [ebp - 0x438], 0
push 0x103
push ebx
lea edx, [ebp - 0x437]
push edx
call fcn.00a7ffb0
add esp, 0x24
push 0xb55508
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x12c]
call fcn.00960910
push str.eSetting.INI
lea ecx, [ebp - 0x12c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0xb8da58], eax
cmp byte [str.C:PROGRA3MICROW1eScanBD_avpMCfg.klr], 0
je 0x8b9754
push ebx
push 1
push str.Reading_Configuration_File._Config_File_Mutex_Getting_Locked
push 0xb54ce8
call fcn.008808e0
add esp, 0x10
cmp dword [0xb8dbe0], ebx
je 0x8b777b
mov eax, 0xb8dbe0
call fcn.0096ffb0
mov esi, eax
mov dword [ebp - 0x10ea8], esi
cmp esi, 1
jne 0x8b971f
push esi
push ebx
xor edx, edx
lea ecx, [ebp - 0x12c]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x8b7836
lea edx, [ebp - 0x12c]
push edx
push 0x104
lea eax, [ebp - 0x438]
push eax
push 0xaa1543
push str.ESettingProcessed
push str.FileAV
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0x438], 0x31
je 0x8b7836
push str.FileAV
lea esi, [ebp - 0x12c]
mov eax, 0xaae0f8
mov ebx, str.ESettingProcessed
call fcn.009584b0
add esp, 4
mov eax, str.C:PROGRA3MICROW1eScanBD_avpMCfg.klr
call fcn.0094dd20
mov dword [ebp - 0x10ef8], 1
push 0
push 1
push str.PROCESSING_ESETTING.INI...
push 0xb54ce8
call fcn.008808e0
add esp, 0x10
xor ebx, ebx
push ebx
push ebx
xor edx, edx
mov ecx, str.C:PROGRA3MICROW1eScanBD_avpMCfg.klr
call fcn.0095a0f0
add esp, 8
test eax, eax
je 0x8b783f
lea ecx, [ebp - 0x12c]
push ecx
jmp 0x8b7857
mov byte [ebp - 0x12c], 0
jmp 0x8b7818
mov ecx, str.C:PROGRA3MICROW1eScanBD_avpMCfg.klr
call fcn.0095a310
cmp eax, 0x33fb8
jae 0x8b785f
lea edx, [ebp - 0x12c]
push edx
call fcn.008b99b0
add esp, 4
mov esi, edi
call fcn.008ba700
mov ebx, eax
mov dword [ebp - 0x10ea8], ebx
test ebx, ebx
je 0x8b96bd
push 4
push 0
xor edi, edi
mov esi, str.DisableNetworkScan
call fcn.008807d0
add esp, 8
cmp eax, 1
jne 0x8b7908
cmp dword [0xb8e22c], edi
je 0x8b7908
mov dword [ebp - 0x10ef0], edi
lea eax, [ebp - 0x10ef0]
push eax
push str.NWScanSetInKlr
mov ecx, 0xaa21e4
mov edx, 0x80000002
call fcn.0094c0d0
test al, al
jne 0x8b7908
mov eax, 1
mov dword [ebp - 0x10ef0], eax
mov esi, str.NWScanSetInKlr
mov ebx, 0xaa21e4
mov ecx, 0x80000002
call fcn.0094be90
push 0x33fb8
push edi
mov esi, dword [ebp - 0x10e74]
push esi
call fcn.00a7ffb0
lea ecx, [ebp - 0x12c]
push ecx
call fcn.008b99b0
add esp, 0x10
call fcn.008ba700
mov ebx, eax
mov dword [ebp - 0x10ea8], ebx
test ebx, ebx
je 0x8b96bd
mov ecx, dword [ebp - 0x10e74]
mov eax, dword [ecx]
mov dword [0xb8dae4], eax
cmp eax, 3
jne 0x8b792a
mov eax, dword [ecx + 8]
mov dword [0xb8dae4], eax
mov ecx, 1
cmp eax, ecx
jne 0x8b793b
mov dword [0xb8dae8], ecx
jmp 0x8b7989
cmp eax, 2
jne 0x8b7948
mov dword [0xb8dae8], ecx
jmp 0x8b7989
cmp eax, 6
jne 0x8b7955
mov dword [0xb8dae8], ecx
jmp 0x8b7989
cmp eax, 4
jne 0x8b7966
mov dword [0xb8dae8], 0xa
jmp 0x8b7989
cmp eax, 7
jne 0x8b7977
mov dword [0xb8dae8], 0xa
jmp 0x8b7989
sub eax, 3
neg eax
sbb eax, eax
and eax, 0xfffffff7
add eax, 0xa
mov dword [0xb8dae8], eax
push 4
xor ebx, ebx
push ebx
xor edi, edi
mov esi, str.ScanTimeoutSeconds
call fcn.008807d0
add esp, 8
mov dword [0xb38434], eax
cmp eax, ebx
jne 0x8b79b0
mov dword [0xb38434], 0xa
mov esi, dword [ebp - 0x10e74]
mov eax, dword [esi + 0x33f74]
xor edx, edx
cmp eax, 2
sete dl
mov dword [0xb52498], edx
mov dword [0xb52424], ebx
cmp dword [0xb54184], 9
jae 0x8b7e9c
cmp dword [esi + 0x33f70], ebx
je 0x8b7b3c
cmp eax, 2
jne 0x8b7b3c
mov dword [0xb52424], 0x20400
mov edi, 1
mov dword [0xbc2804], edi
xor esi, esi
mov dword [ebp - 0x10f04], esi
cmp esi, 0xb
jge 0x8b7c22
cmp dword [esi*4 + 0xbc280c], ebx
je 0x8b7b35
cmp dword [0xbc27fc], ebx
je 0x8b7a74
mov byte [ebp - 0x640], 0
push 0x103
push ebx
lea eax, [ebp - 0x63f]
push eax
call fcn.00a7ffb0
push esi
push str._ARCH___b__SETTING_Archive_Scan_on_ScanInstance__d_
lea ecx, [ebp - 0x640]
push ecx
call fcn.00a78f30
push ebx
mov edx, dword [0xbc27fc]
push edx
lea eax, [ebp - 0x640]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x28
push edi
push 0x1a
mov ecx, dword [esi*4 + 0xbc280c]
push ecx
call dword [0xb8da8c]
push edi
push 0x1b
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push edi
push 0xff0
mov eax, dword [esi*4 + 0xbc280c]
push eax
call dword [0xb8da8c]
mov ecx, dword [0xb392ac]
push ecx
push 0x28
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push edi
push 0x1a
mov eax, dword [esi*4 + 0xbc2838]
push eax
call dword [0xb8da8c]
push edi
push 0x1b
mov ecx, dword [esi*4 + 0xbc2838]
push ecx
call dword [0xb8da8c]
add esp, 0x48
push edi
push 0xff0
mov edx, dword [esi*4 + 0xbc2838]
push edx
call dword [0xb8da8c]
mov eax, dword [0xb392ac]
push eax
push 0x28
mov ecx, dword [esi*4 + 0xbc2838]
push ecx
call dword [0xb8da8c]
push edi
push 0x57
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push edi
push 0x57
mov eax, dword [esi*4 + 0xbc2838]
push eax
call dword [0xb8da8c]
add esp, 0x30
add esi, edi
jmp 0x8b7a09
mov dword [0xbc2804], ebx
xor esi, esi
mov dword [ebp - 0x10f0c], esi
cmp esi, 0xb
jge 0x8b7c1d
cmp dword [esi*4 + 0xbc280c], ebx
je 0x8b7c17
cmp dword [0xbc27fc], ebx
je 0x8b7bae
mov byte [ebp - 0x53c], 0
push 0x103
push ebx
lea ecx, [ebp - 0x53b]
push ecx
call fcn.00a7ffb0
push esi
push str._ARCH___b__RESETTING_Archive_Scan_on_ScanInstance__d_
lea edx, [ebp - 0x53c]
push edx
call fcn.00a78f30
push ebx
mov eax, dword [0xbc27fc]
push eax
lea ecx, [ebp - 0x53c]
push ecx
push 0xb54ce8
call fcn.008808e0
add esp, 0x28
push ebx
push 0x1a
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push ebx
push 0x1a
mov eax, dword [esi*4 + 0xbc2838]
push eax
call dword [0xb8da8c]
push ebx
push 0x1b
mov ecx, dword [esi*4 + 0xbc280c]
push ecx
call dword [0xb8da8c]
push ebx
push 0x1b
mov edx, dword [esi*4 + 0xbc2838]
push edx
call dword [0xb8da8c]
push ebx
push 0x57
mov eax, dword [esi*4 + 0xbc280c]
push eax
call dword [0xb8da8c]
push ebx
push 0x57
mov ecx, dword [esi*4 + 0xbc2838]
push ecx
call dword [0xb8da8c]
add esp, 0x48
inc esi
jmp 0x8b7b44
mov edi, 1
mov eax, dword [ebp - 0x10e74]
cmp dword [eax + 0x33f70], ebx
je 0x8b7d73
cmp dword [eax + 0x33f78], ebx
je 0x8b7d73
add dword [0xb52424], 0x10000
mov dword [0xbc2808], edi
xor esi, esi
mov dword [ebp - 0x10f00], esi
cmp esi, 0xb
jge 0x8b7ea1
mov eax, dword [esi*4 + 0xbc280c]
cmp eax, ebx
je 0x8b7d6c
cmp dword [0xbd06a0], ebx
je 0x8b7c7b
push edi
jmp 0x8b7c7c
push ebx
push 0xfee
push eax
call dword [0xb8da8c]
add esp, 0xc
cmp dword [0xb3ddc0], edi
jne 0x8b7cb1
push ebx
push 0x73
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push ebx
push 0x73
mov eax, dword [esi*4 + 0xbc2838]
push eax
jmp 0x8b7ccd
push edi
push 0x73
mov ecx, dword [esi*4 + 0xbc280c]
push ecx
call dword [0xb8da8c]
push edi
push 0x73
mov edx, dword [esi*4 + 0xbc2838]
push edx
call dword [0xb8da8c]
add esp, 0x18
push edi
push 0x1771
mov eax, dword [esi*4 + 0xbc280c]
push eax
call dword [0xb8da8c]
push edi
push 0x1771
mov ecx, dword [esi*4 + 0xbc2838]
push ecx
call dword [0xb8da8c]
push edi
push 0x19
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push edi
push 0x19
mov eax, dword [esi*4 + 0xbc2838]
push eax
call dword [0xb8da8c]
push ebx
push 0x6b
mov ecx, dword [esi*4 + 0xbc280c]
push ecx
call dword [0xb8da8c]
add esp, 0x3c
cmp dword [0xb8dae8], 0xa
jne 0x8b7d58
push edi
push 0x6b
mov edx, dword [esi*4 + 0xbc2838]
push edx
call dword [0xb8da8c]
add esp, 0xc
add esi, edi
jmp 0x8b7c52
push ebx
push 0x6b
mov eax, dword [esi*4 + 0xbc2838]
push eax
call dword [0xb8da8c]
add esp, 0xc
add esi, edi
jmp 0x8b7c52
mov dword [0xbc2808], ebx
xor esi, esi
mov dword [ebp - 0x10f08], esi
cmp esi, 0xb
jge 0x8b7ea1
mov eax, dword [esi*4 + 0xbc280c]
cmp eax, ebx
je 0x8b7e95
cmp dword [0xbd06a0], ebx
je 0x8b7da4
push edi
jmp 0x8b7da5
push ebx
push 0xfee
push eax
call dword [0xb8da8c]
add esp, 0xc
cmp dword [0xb3ddc0], edi
jne 0x8b7dda
push ebx
push 0x73
mov ecx, dword [esi*4 + 0xbc280c]
push ecx
call dword [0xb8da8c]
push ebx
push 0x73
mov edx, dword [esi*4 + 0xbc2838]
push edx
jmp 0x8b7df6
push edi
push 0x73
mov eax, dword [esi*4 + 0xbc280c]
push eax
call dword [0xb8da8c]
push edi
push 0x73
mov ecx, dword [esi*4 + 0xbc2838]
push ecx
call dword [0xb8da8c]
add esp, 0x18
push edi
push 0x1771
mov edx, dword [esi*4 + 0xbc280c]
push edx
call dword [0xb8da8c]
push edi
push 0x1771
mov eax, dword [esi*4 + 0xbc2838]
push eax
call dword [0xb8da8c]
push ebx
push 0x19
mov ecx, dword [esi*4 + 0xbc280c]
push ecx
call dword [0xb8da8c]
push ebx
push 0x19
mov edx, dword [esi*4 + 0xbc2838]
push edx
call dword [0xb8da8c]
push ebx
push 0x6b
mov eax, dword [esi*4 + 0xbc280c]
push eax
call dword [0xb8da8c]
add esp, 0x3c
cmp dword [0xb8dae8], 0xa
jne 0x8b7e81
push edi
push 0x6b
mov ecx, dword [esi*4 + 0xbc2838]
push ecx
call dword [0xb8da8c]
add esp, 0xc
add esi, edi
jmp 0x8b7d7b
push ebx
push 0x6b
mov edx, dword [esi*4 + 0xbc2838]
push edx
call dword [0xb8da8c]
add esp, 0xc
add esi, edi
jmp 0x8b7d7b
mov edi, 1
mov dword [ebp - 0x10e78], ebx
mov dword [ebp - 0x10e6c], ebx
mov dword [ebp - 0x10ec4], ebx
mov dword [ebp - 0x10ebc], ebx
mov dword [ebp - 0x10eb4], ebx
mov dword [ebp - 0x10eac], ebx
mov dword [ebp - 0x10ea4], ebx
mov dword [ebp - 0x10e90], ebx
mov dword [ebp - 0x10eec], ebx
mov dword [ebp - 0x10ee4], ebx
mov dword [ebp - 0x10ed4], ebx
mov dword [ebp - 0x10ecc], ebx
mov dword [ebp - 0x10ec0], ebx
mov dword [ebp - 0x10e94], ebx
mov dword [ebp - 0x10e8c], ebx
mov dword [ebp - 0x10e9c], ebx
mov dword [ebp - 0x10e88], ebx
mov dword [ebp - 0x10ee8], ebx
mov dword [ebp - 0x10eb0], ebx
mov dword [ebp - 0x10ea0], ebx
mov dword [ebp - 0x10ed8], ebx
mov dword [ebp - 0x10e98], ebx
mov dword [ebp - 0x10edc], ebx
mov dword [ebp - 0x10e80], ebx
mov dword [ebp - 0x10ec8], ebx
mov eax, dword [ebp - 0x10e74]
mov eax, dword [eax + 0x18]
cmp eax, edi
jne 0x8b8257
mov ebx, 0xb1
xor esi, esi
mov dword [ebp - 0x10e78], esi
cmp esi, ebx
jge 0x8b8273
mov ecx, dword [esi*4 + 0xb3c618]
cmp byte [ecx], 0
je 0x8b8273
mov eax, 0xaab6d4
call fcn.0094c330
test eax, eax
jne 0x8b7f86
mov dword [ebp - 0x10ea4], edi
jmp 0x8b8235
mov eax, 0xaab6cc
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b7fa6
mov dword [ebp - 0x10eac], edi
jmp 0x8b8235
mov eax, 0xaab6c4
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b7fc6
mov dword [ebp - 0x10eb4], edi
jmp 0x8b8235
mov eax, 0xaab708
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b7fe6
mov dword [ebp - 0x10ebc], edi
jmp 0x8b8235
mov eax, 0xaab6bc
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8006
mov dword [ebp - 0x10ec4], edi
jmp 0x8b8235
mov eax, 0xaab6b4
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8026
mov dword [ebp - 0x10ecc], edi
jmp 0x8b8235
mov eax, 0xaab6ac
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8046
mov dword [ebp - 0x10ed4], edi
jmp 0x8b8235
mov eax, str..jpeg
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8066
mov dword [ebp - 0x10edc], edi
jmp 0x8b8235
mov eax, 0xaab6a4
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8086
mov dword [ebp - 0x10ee4], edi
jmp 0x8b8235
mov eax, 0xaab69c
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b80a6
mov dword [ebp - 0x10eec], edi
jmp 0x8b8235
mov eax, 0xac7c74
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b80c6
mov dword [ebp - 0x10e90], edi
jmp 0x8b8235
mov eax, str..dex
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b80e6
mov dword [ebp - 0x10e88], edi
jmp 0x8b8235
mov eax, str..apk
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8106
mov dword [ebp - 0x10e9c], edi
jmp 0x8b8235
mov eax, str..msg
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8126
mov dword [ebp - 0x10e8c], edi
jmp 0x8b8235
mov eax, 0xac7c94
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8146
mov dword [ebp - 0x10e94], edi
jmp 0x8b8235
mov eax, str..elf
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8166
mov dword [ebp - 0x10ec0], edi
jmp 0x8b8235
mov eax, 0xaab654
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8186
mov dword [ebp - 0x10e98], edi
jmp 0x8b8235
mov eax, 0xac7ca4
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b81a6
mov dword [ebp - 0x10ed8], edi
jmp 0x8b8235
mov eax, str..ps1
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b81c3
mov dword [ebp - 0x10ea0], edi
jmp 0x8b8235
mov eax, str..img
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b81e0
mov dword [ebp - 0x10ec8], edi
jmp 0x8b8235
mov eax, 0xac7cbc
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b81fd
mov dword [ebp - 0x10e80], edi
jmp 0x8b8235
mov eax, str..iso
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b821a
mov dword [ebp - 0x10ee8], edi
jmp 0x8b8235
mov eax, 0xac7ccc
mov ecx, dword [esi*4 + 0xb3c618]
call fcn.0094c330
test eax, eax
jne 0x8b8235
mov dword [ebp - 0x10eb0], edi
push 0
push 0x2c
mov ecx, dword [esi*4 + 0xb3c618]
push ecx
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc esi
mov edi, 1
jmp 0x8b7f4f
cmp eax, 2
jne 0x8b8536
push ebx
push 0x2c
push 0xaabc14
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
xor ebx, ebx
cmp dword [ebp - 0x10ea4], ebx
jne 0x8b8290
push ebx
push 0x2c
push 0xaab6d4
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10eac], ebx
jne 0x8b82ab
push ebx
push 0x2c
push 0xaab6cc
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10eb4], ebx
jne 0x8b82c6
push ebx
push 0x2c
push 0xaab6c4
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ebc], ebx
jne 0x8b82e1
push ebx
push 0x2c
push 0xaab708
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ec4], ebx
jne 0x8b82fc
push ebx
push 0x2c
push 0xaab6bc
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ecc], ebx
jne 0x8b8317
push ebx
push 0x2c
push 0xaab6b4
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ed4], ebx
jne 0x8b8332
push ebx
push 0x2c
push 0xaab6ac
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10edc], ebx
jne 0x8b834d
push ebx
push 0x2c
push str..jpeg
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ee4], ebx
jne 0x8b8368
push ebx
push 0x2c
push 0xaab6a4
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10eec], ebx
jne 0x8b8383
push ebx
push 0x2c
push 0xaab69c
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e90], ebx
jne 0x8b839e
push ebx
push 0x2c
push 0xac7c74
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e88], ebx
jne 0x8b83b9
push ebx
push 0x2c
push str..dex
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e9c], ebx
jne 0x8b83d4
push ebx
push 0x2c
push str..apk
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e8c], ebx
jne 0x8b83ef
push ebx
push 0x2c
push str..msg
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e94], ebx
jne 0x8b840a
push ebx
push 0x2c
push 0xac7c94
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ec0], ebx
jne 0x8b8425
push ebx
push 0x2c
push str..elf
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e98], ebx
jne 0x8b8440
push ebx
push 0x2c
push 0xaab654
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ed8], ebx
jne 0x8b845b
push ebx
push 0x2c
push 0xac7ca4
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ea0], ebx
jne 0x8b8476
push ebx
push 0x2c
push str..ps1
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ec8], ebx
jne 0x8b8491
push ebx
push 0x2c
push str..img
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10e80], ebx
jne 0x8b84ac
push ebx
push 0x2c
push 0xac7cbc
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10ee8], ebx
jne 0x8b84c7
push ebx
push 0x2c
push str..iso
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
cmp dword [ebp - 0x10eb0], ebx
jne 0x8b84e2
push ebx
push 0x2c
push 0xac7ccc
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
push 0x2c
mov esi, dword [ebp - 0x10e6c]
push esi
mov ecx, 0xaaba8c
call fcn.0098d4d0
push 1
xor ecx, ecx
call fcn.008bb9e0
add esp, 4
cmp esi, ebx
je 0x8b8a0d
cmp dword [0xbc27fc], ebx
je 0x8b89d7
push esi
cmp eax, ebx
jne 0x8b8991
push str.Include_Lists:__s
push 0xffffffffffffffff
push 0xfa00
lea ecx, [ebp - 0x10e68]
push ecx
jmp 0x8b89a4
cmp eax, 3
jne 0x8b8273
xor ebx, ebx
mov dword [ebp - 0x10e78], ebx
lea edx, [ebx + ebx*4]
mov eax, dword [ebp - 0x10e74]
lea esi, [eax + edx*4 + 0x1c]
cmp byte [esi], 0
je 0x8b8273
mov eax, 0xaab6d4
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8589
mov dword [ebp - 0x10ea4], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab6cc
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b85b5
mov dword [ebp - 0x10eac], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab6c4
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b85e4
mov dword [ebp - 0x10eb4], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab708
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8613
mov dword [ebp - 0x10ebc], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab6bc
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8642
mov dword [ebp - 0x10ec4], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab6b4
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8671
mov dword [ebp - 0x10ecc], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab6ac
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b86a0
mov dword [ebp - 0x10ed4], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..jpeg
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b86cf
mov dword [ebp - 0x10edc], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab6a4
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b86fe
mov dword [ebp - 0x10ee4], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab69c
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b872d
mov dword [ebp - 0x10eec], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xac7c74
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b875c
mov dword [ebp - 0x10e90], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..dex
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b878b
mov dword [ebp - 0x10e88], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..apk
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b87ba
mov dword [ebp - 0x10e9c], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..msg
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b87e9
mov dword [ebp - 0x10e8c], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xac7c94
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8818
mov dword [ebp - 0x10e94], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..elf
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8847
mov dword [ebp - 0x10ec0], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xaab654
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8876
mov dword [ebp - 0x10e98], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xac7ca4
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b88a5
mov dword [ebp - 0x10ed8], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..ps1
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b88d4
mov dword [ebp - 0x10ea0], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..img
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8903
mov dword [ebp - 0x10ec8], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xac7cbc
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8932
mov dword [ebp - 0x10e80], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, str..iso
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b8961
mov dword [ebp - 0x10ee8], 1
push eax
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
mov eax, 0xac7ccc
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x8b897b
mov dword [ebp - 0x10eb0], 1
push 0
push 0x2c
push esi
lea edi, [ebp - 0x10e6c]
call fcn.0098d640
inc ebx
jmp 0x8b8541
push str.Include_Lists:__s__ALL_FILES_MODE_
push 0xffffffffffffffff
push 0xfa00
lea edx, [ebp - 0x10e68]
push edx
call fcn.00a78fcb
add esp, 0x14
push ebx
push 1
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
push ebx
push 1
push 0xaaad80
push 0xb54ce8
call fcn.008808e0
add esp, 0x20
jmp 0x8b89f0
cmp eax, ebx
je 0x8b89f0
push ebx
push 1
push str.ALL_FILES_MODE
push 0xb54ce8
call fcn.008808e0
add esp, 0x10
mov ecx, dword [0xbc27fc]
push ecx
mov ecx, esi
call fcn.008c1a30
push esi
call fcn.00a78fec
add esp, 8
mov dword [ebp - 0x10e6c], ebx
xor esi, esi
mov dword [ebp - 0x10e70], esi
mov edx, dword [ebp - 0x10e74]
cmp dword [edx + 0x1f5c], ebx
je 0x8b8de0
xor ebx, ebx
mov dword [ebp - 0x10e78], ebx
lea ecx, [ebx + ebx*4]
mov eax, dword [ebp - 0x10e74]
lea edi, [eax + ecx*4 + 0xfbc]
cmp byte [edi], 0
je 0x8b8a93
mov ecx, edi
call fcn.0097fa60
cmp eax, 1
jne 0x8b8a62
push 0
push 0x2c
push edi
mov edi, 0xb8e210
call fcn.0098d640
inc ebx
jmp 0x8b8a29
mov edx, edi
call fcn.008bb420
push 0
cmp eax, 1
je 0x8b8a82
xor esi, esi
mov ecx, edi
call fcn.008bb9e0
add esp, 4
cmp eax, 1
jne 0x8b8a90
push esi
push 0x2c
push edi
lea edi, [ebp - 0x10e70]
call fcn.0098d640
inc ebx
jmp 0x8b8a29
push 0
mov edi, 0xb8e210
push 0x2c
cmp dword [eax + 0x33f68], 7
jge 0x8b8d21
push 0xaab4cc
call fcn.0098d640
push 0
push 0x2c
push 0xaab4c4
call fcn.0098d640
push 0
push 0x2c
push 0xaab4bc
call fcn.0098d640
push 0
push 0x2c
push 0xaab884
call fcn.0098d640
push 0
push 0x2c
push 0xaab4b4
call fcn.0098d640
push 0
push 0x2c
push 0xaab4ac
call fcn.0098d640
push 0
push 0x2c
push 0xaab490
call fcn.0098d640
push 0
push 0x2c
push 0xaab484
call fcn.0098d640
push 0
push 0x2c
push 0xaab604
call fcn.0098d640
push 0
push 0x2c
push 0xaab47c
call fcn.0098d640
push 0
push 0x2c
push 0xaab5f4
call fcn.0098d640
push 0
push 0x2c
push 0xaab474
call fcn.0098d640
push 0
push 0x2c
push 0xaab46c
call fcn.0098d640
push 0
push 0x2c
push 0xaab454
call fcn.0098d640
push 0
push 0x2c
push 0xaab734
call fcn.0098d640
push 0
push 0x2c
push 0xaabb3c
call fcn.0098d640
push 0
push 0x2c
push 0xaab44c
call fcn.0098d640
push 0
push 0x2c
push 0xaab444
call fcn.0098d640
push 0
push 0x2c
push 0xaab43c
call fcn.0098d640
push 0
push 0x2c
push 0xaab434
call fcn.0098d640
push 0
push 0x2c
push 0xaab42c
call fcn.0098d640
push 0
push 0x2c
push 0xaab424
call fcn.0098d640
push 0
push 0x2c
push 0xaaba8c
call fcn.0098d640
push 0
push 0x2c
push str..bak
call fcn.0098d640
push 0
push 0x2c
push str..dwl
call fcn.0098d640
push 0
push 0x2c
push str..dwl2
call fcn.0098d640
push 0
push 0x2c
push str..vsv
call fcn.0098d640
push 0
push 0x2c
push str..ev1
call fcn.0098d640
push 0
push 0x2c
push str..vhd
call fcn.0098d640
push 0
push 0x2c
push str..vhdx
call fcn.0098d640
push 0
push 0x2c
push str..avhd
call fcn.0098d640
push 0
push 0x2c
push str..avhdx
call fcn.0098d640
push 0
push 0x2c
push str..vbox
call fcn.0098d640
push 0
push 0x2c
push str..dws
call fcn.0098d640
push 0
push 0x2c
push str..dwt
call fcn.0098d640
push 0
push 0x2c
push str..sv_
call fcn.0098d640
push 0
push 0x2c
push 0xaab41c
call fcn.0098d640
push 0
push 0x2c
push str..ms_
call fcn.0098d640
push 0
push 0x2c
push str..msq
call fcn.0098d640
push 0
push 0x2c
push 0xac7da8
call fcn.0098d640
push 0
push 0x2c
push 0xaab45c
lea edi, [ebp - 0x10e70]
call fcn.0098d640
push 0
push 0x2c
push 0xaab49c
call fcn.0098d640
push 0
push 0x2c
push 0xaab410
call fcn.0098d640
push 0
push 0x2c
push str.updll.dll3
call fcn.0098d640
push 0
push 0x2c
push 0xaab404
jmp 0x8b8dd3
push str..bak
call fcn.0098d640
push 0
push 0x2c
push str..dwl
mov edi, 0xb8e210
call fcn.0098d640
push 0
push 0x2c
push str..dwl2
call fcn.0098d640
push 0
push 0x2c
push str..vsv
call fcn.0098d640
push 0
push 0x2c
push str..ev1
call fcn.0098d640
push 0
push 0x2c
push str..vhd
call fcn.0098d640
push 0
push 0x2c
push str..vhdx
call fcn.0098d640
push 0
push 0x2c
push str..avhd
call fcn.0098d640
push 0
push 0x2c
push str..avhdx
call fcn.0098d640
push 0
push 0x2c
push str..vbox
call fcn.0098d640
push 0
push 0x2c
push str..dws
call fcn.0098d640
push 0
push 0x2c
push str..dwt
call fcn.0098d640
push 0
push 0x2c
push str..sv_
call fcn.0098d640
xor ebx, ebx
mov esi, dword [ebp - 0x10e70]
push 0x2c
mov edx, dword [0xb8e210]
push edx
mov ecx, 0xac7db8
call fcn.0098d4d0
push 0x2c
mov eax, dword [0xb8e210]
push eax
mov ecx, 0xaab69c
call fcn.0098d4d0
push 0x2c
mov ecx, dword [0xb8e210]
push ecx
mov ecx, str..dat
call fcn.0098d4d0
push 0x2c
mov edx, dword [0xb8e210]
push edx
mov ecx, 0xaabb1c
call fcn.0098d4d0
push 0x2c
mov eax, dword [0xb8e210]
push eax
mov ecx, 0xaab5cc
call fcn.0098d4d0
push 0x2c
mov ecx, dword [0xb8e210]
push ecx
mov ecx, 0xaab734
call fcn.0098d4d0
push 0x2c
mov edx, dword [0xb8e210]
push edx
mov ecx, 0xaab64c
call fcn.0098d4d0
push 0x2c
mov eax, dword [0xb8e210]
push eax
mov ecx, 0xaab654
call fcn.0098d4d0
push 0x2c
push esi
mov ecx, 0xaab4f8
call fcn.0098d4d0
push 0x2c
push esi
mov ecx, 0xaab690
call fcn.0098d4d0
push 0x2c
push esi
mov ecx, str.._DF
call fcn.0098d4d0
push ebx
push 0x2c
push str.ack.tmp
lea edi, [ebp - 0x10e70]
call fcn.0098d640
push ebx
push 0x2c
push str.metabase.xml
call fcn.0098d640
push 1
mov esi, dword [ebp - 0x10e70]
xor ecx, ecx
call fcn.008bbb80
add esp, 4
cmp esi, ebx
je 0x8b8f24
cmp dword [0xbc27fc], ebx
je 0x8b8f15
push esi
push str.Strong_Exclude_List:__s
lea ecx, [ebp - 0x10e68]
push ecx
call fcn.00a78f30
push ebx
push 1
lea edx, [ebp - 0x10e68]
push edx
push 0xb54ce8
call fcn.008808e0
push ebx
push 1
push 0xaaad80
push 0xb54ce8
call fcn.008808e0
add esp, 0x2c
push esi
call fcn.00a78fec
add esp, 4
mov dword [ebp - 0x10e70], ebx
mov eax, dword [0xb8e210]
cmp eax, ebx
je 0x8b8fb8
cmp dword [0xb8db58], ebx
jne 0x8b8f94
cmp dword [0xbc27fc], ebx
je 0x8b8fb8
push eax
mov eax, dword [ebp - 0x10e74]
mov ecx, dword [eax + 0x33f68]
push ecx
push str.Driver_Exclude_Extensions_List__d_:__s
lea edx, [ebp - 0x10e68]
push edx
call fcn.00a78f30
push ebx
mov eax, dword [0xbc27fc]
push eax
lea ecx, [ebp - 0x10e68]
push ecx
push 0xb54ce8
call fcn.008808e0
push ebx
mov edx, dword [0xbc27fc]
push edx
push 0xaaad80
push 0xb54ce8
call fcn.008808e0
add esp, 0x30
jmp 0x8b8fb8
push ebx
push 1
cmp dword [0xb3a52c], ebx
je 0x8b8fa6
push str.Pre_Extensions_excluded_in_driver_2a___LOG_FILE_TXFERS_TO_USB_.
jmp 0x8b8fab
push str.No_Extensions_excluded_in_driver_2a___LOG_FILE_TXFERS_TO_USB_.
push 0xb54ce8
call fcn.008808e0
add esp, 0x10
call fcn.00917ce0
mov eax, dword [0xb8dbf4]
cmp eax, ebx
je 0x8b8fd5
push eax
call fcn.00a78fec
add esp, 4
mov dword [0xb8dbf4], ebx
xor esi, esi
mov eax, dword [ebp - 0x10e74]
mov ecx, dword [eax + 0x1af60]
mov dword [0xb38224], ecx
mov dword [ebp - 0x10e78], esi
mov edx, esi
shl edx, 9
mov edi, dword [ebp - 0x10e74]
lea eax, [edx + edi + 0x1f60]
cmp byte [eax], 0
je 0x8b9017
push ebx
push 0x2c
push eax
mov edi, 0xb8dbf4
call fcn.0098d640
inc esi
jmp 0x8b8fe9
mov eax, dword [0xb8e204]
cmp eax, ebx
je 0x8b902f
push eax
call fcn.00a78fec
add esp, 4
mov dword [0xb8e204], ebx
mov eax, dword [0xb8e208]
cmp eax, ebx
je 0x8b9047
push eax
call fcn.00a78fec
add esp, 4
mov dword [0xb8e208], ebx
mov eax, dword [edi + 0x33f64]
mov dword [0xb8daf4], eax
cmp dword [0xb45d94], ebx
je 0x8b912d
call fcn.00940180
xor edi, edi
mov dword [ebp - 0x10efc], edi
lea edx, [ebp - 0x10efc]
push edx
push str.NWSwiftScan
mov ecx, str.SoftwareMicroWorldeScan_For_WindowsMwMonitor
mov edx, 0x80000002
call fcn.0094c0d0
cmp al, 1
jne 0x8b91e0
mov dword [ebp - 0x10ee0], edi
lea eax, [ebp - 0x10ee0]
push eax
call 0x8bf140
add esp, 4
mov esi, dword [ebp - 0x10ee0]
cmp esi, edi
je 0x8b91e0
cmp byte [esi], 0
je 0x8b91cb
mov byte [ebp - 0x1068], 0
push 0x40f
push edi
lea ecx, [ebp - 0x1067]
push ecx
call fcn.00a7ffb0
mov dword [ebp - 0x10eb8], edi
lea edx, [ebp - 0x10eb8]
push edx
push esi
mov bl, 0x2c
lea edi, [ebp - 0x1068]
call fcn.0095ae80
add esp, 0x14
cmp dword [ebp - 0x10eb8], 0xffffffff
je 0x8b91cb
push 0
push 0x2c
lea eax, [ebp - 0x1068]
push eax
mov edi, 0xb8e208
call fcn.0098d640
lea ecx, [ebp - 0x10eb8]
push ecx
push esi
mov bl, 0x2c
lea edi, [ebp - 0x1068]
call fcn.0095ae80
add esp, 8
jmp 0x8b90f1
mov byte [ebp - 0x1468], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x1467]
push ecx
call fcn.00a7ffb0
mov dword [ebp - 0x10ed0], 0
push 1
lea esi, [ebp - 0x1468]
call fcn.00966970
lea edx, [ebp - 0x10ed0]
push edx
mov eax, esi
push eax
mov bl, 0x2c
lea edi, [ebp - 0x28]
call fcn.0095ae80
add esp, 0x18
jmp 0x8b9180
cmp dword [ebp - 0x10ed0], 0xffffffff
je 0x8b9063
push 0xaa1564
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push 0x2c
lea edx, [ebp - 0x28]
push edx
mov edi, 0xb8e204
call fcn.0098d640
lea eax, [ebp - 0x10ed0]
push eax
lea ecx, [ebp - 0x1468]
push ecx
mov bl, 0x2c
lea edi, [ebp - 0x28]
call fcn.0095ae80
add esp, 8
jmp 0x8b9180
push esi
call fcn.00a78fec
add esp, 4
mov dword [ebp - 0x10ee0], 0
xor edi, edi
push 1
xor ecx, ecx
call fcn.00940740
lea edx, [ebp - 0x10e7c]
push edx
call fcn.008c0640
push 1
mov esi, dword [ebp - 0x10e7c]
xor ecx, ecx
call fcn.008bb630
add esp, 0xc
mov eax, dword [0xb8e20c]
cmp eax, edi
je 0x8b921f
push eax
call fcn.00a78fec
add esp, 4
mov dword [0xb8e20c], edi
mov byte [ebp - 0x848], 0
push 0x207
push edi
lea eax, [ebp - 0x847]
push eax
call fcn.00a7ffb0
mov byte [ebp - 0xa50], 0
push 0x207
push edi
lea ecx, [ebp - 0xa4f]
push ecx
call fcn.00a7ffb0
mov byte [ebp - 0xc58], 0
push 0x207
push edi
lea edx, [ebp - 0xc57]
push edx
call fcn.00a7ffb0
add esp, 0x24
mov dword [ebp - 0x10e84], edi
mov ecx, 0xb56938
lea edx, [ebp - 0xa50]
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x8b9280
mov edi, 0x208
lea ecx, [ebp - 0xc58]
call fcn.00958630
cmp byte [ebp - 0xa50], 0
je 0x8b942c
cmp byte [ebp - 0xc58], 0
je 0x8b942c
lea eax, [ebp - 0x10e84]
push eax
push str.services.exe__winlogon.exe__lsass.exe__rpcss.exe___t_t_t_t_t_t_t_t_t_tspoolss.exe__svchost.exe__spoolsv.exe__userinit.exe___t_t_t_t_t_t_t_t_t_texplorer.exe__ws2_32.dll__mswsock.dll__comres.dll___t_t_t_t_t_t_t_t_t_tntfs.sys
mov bl, 0x2c
lea edi, [ebp - 0x848]
call fcn.0095ae80
add esp, 8
cmp dword [ebp - 0x10e84], 0xffffffff
je 0x8b9426
mov byte [ebp - 0x334], 0
push 0x207
push 0
lea ecx, [ebp - 0x333]
push ecx
call fcn.00a7ffb0
push str.explorer.exe
mov edx, edi
push edx
call fcn.00a7b8e4
add esp, 0x14
test eax, eax
jne 0x8b9351
lea ecx, [ebp - 0xc58]
lea edx, [ebp - 0x334]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x8b9317
lea ecx, [ebp - 0x334]
call fcn.00960910
lea eax, [ebp - 0x848]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x8b9334
sub eax, edx
lea edi, [ebp - 0x334]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x8b9344
jmp 0x8b93fc
push str.ntfs.sys
lea eax, [ebp - 0x848]
push eax
call fcn.00a7b8e4
add esp, 8
lea ecx, [ebp - 0xa50]
lea edx, [ebp - 0x334]
test eax, eax
jne 0x8b93c7
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x8b9375
lea ecx, [ebp - 0x334]
call fcn.00960910
lea eax, [ebp - 0x334]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x8b9391
mov ecx, dword [str.drivers_ntfs.sys]
mov dword [eax], ecx
mov edx, dword [0xac83b8]
mov dword [eax + 4], edx
mov ecx, dword [0xac83bc]
mov dword [eax + 8], ecx
mov edx, dword [0xac83c0]
mov dword [eax + 0xc], edx
mov cl, byte [0xac83c4]
mov byte [eax + 0x10], cl
jmp 0x8b940c
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x8b93c7
lea ecx, [ebp - 0x334]
call fcn.00960910
lea eax, [ebp - 0x848]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x8b93e4
sub eax, edx
lea edi, [ebp - 0x334]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x8b93f4
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0
push 0x2c
lea edx, [ebp - 0x334]
push edx
mov edi, 0xb8e20c
call fcn.0098d640
jmp 0x8b92b4
mov esi, dword [ebp - 0x10e7c]
cmp dword [0xbc27fc], 0
je 0x8b96b1
mov ecx, dword [ebp - 0x10e74]
mov edx, dword [ecx + 0x33f68]
push edx
push str.Config_File_Version__avpmCfg.klr__:__d
lea eax, [ebp - 0x10e68]
push eax
call fcn.00a78f30
push 0
push 1
lea ecx, [ebp - 0x10e68]
push ecx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov eax, dword [0xb8e204]
test eax, eax
je 0x8b94a2
push eax
push str.Exclude_Folder_List:__s
lea edx, [ebp - 0x10e68]
push edx
call fcn.00a78f30
push 0
push 1
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov eax, dword [0xb8e208]
test eax, eax
je 0x8b94d5
push eax
push str.Exclude_Drives_List:__s
lea ecx, [ebp - 0x10e68]
push ecx
call fcn.00a78f30
push 0
push 1
lea edx, [ebp - 0x10e68]
push edx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov eax, dword [0xb8dbf4]
test eax, eax
je 0x8b9508
push eax
push str.Not_A_Virus_GUI_List:__s
lea eax, [ebp - 0x10e68]
push eax
call fcn.00a78f30
push 0
push 1
lea ecx, [ebp - 0x10e68]
push ecx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov eax, dword [0xb8e200]
test eax, eax
je 0x8b953b
push eax
push str.Not_A_Virus_AVS_List:__s
lea edx, [ebp - 0x10e68]
push edx
call fcn.00a78f30
push 0
push 1
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
test esi, esi
je 0x8b9569
push esi
push str.Exclude_Proc_List:__s
lea ecx, [ebp - 0x10e68]
push ecx
call fcn.00a78f30
push 0
push 1
lea edx, [ebp - 0x10e68]
push edx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov eax, dword [0xb8e20c]
test eax, eax
je 0x8b959c
push eax
push str.Critical_Processes_List:__s
lea eax, [ebp - 0x10e68]
push eax
call fcn.00a78f30
push 0
push 1
lea ecx, [ebp - 0x10e68]
push ecx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov edx, dword [0xb52424]
test edx, edx
je 0x8b9681
mov eax, dword [str.Scanning_Modes:]
mov dword [ebp - 0x10e68], eax
mov ecx, dword [0xac8450]
mov dword [ebp - 0x10e64], ecx
mov eax, dword [0xac8454]
mov dword [ebp - 0x10e60], eax
mov ecx, dword [0xac8458]
mov dword [ebp - 0x10e5c], ecx
mov al, byte [0xac845c]
mov byte [ebp - 0x10e58], al
test edx, 0x10000
je 0x8b9626
lea eax, [ebp - 0x10e68]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x8b95f2
mov ecx, dword [str.MSV_O_M_PACKED_]
mov dword [eax], ecx
mov ecx, dword [0xac8464]
mov dword [eax + 4], ecx
mov ecx, dword [0xac8468]
mov dword [eax + 8], ecx
mov ecx, dword [0xac846c]
mov dword [eax + 0xc], ecx
mov cl, byte [0xac8470]
mov byte [eax + 0x10], cl
test edx, 0x20400
je 0x8b9669
lea eax, [ebp - 0x10e68]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x8b9635
mov edx, dword [str.MSV_O_M_ARCHIVED]
mov dword [eax], edx
mov ecx, dword [0xac8478]
mov dword [eax + 4], ecx
mov edx, dword [0xac847c]
mov dword [eax + 8], edx
mov ecx, dword [0xac8480]
mov dword [eax + 0xc], ecx
mov dl, byte [0xac8484]
mov byte [eax + 0x10], dl
push 0
push 1
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x10
mov ecx, dword [0xb8dae4]
push ecx
push str.Cleaning_Modes:__d
lea edx, [ebp - 0x10e68]
push edx
call fcn.00a78f30
push 0
push 1
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
mov dword [ebp - 0x10ef4], 1
jmp 0x8b96f4
cmp dword [0xbc27fc], 0
je 0x8b96f4
push str.ReadBdSettingsStructures_Failed_
lea ecx, [ebp - 0x10e68]
push ecx
call fcn.00a78f30
push 0
mov edx, dword [0xbc27fc]
push edx
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x18
push 0
push 1
push str.Config_File_Read._Settings_File_Mutex_Getting_Released
push 0xb54ce8
call fcn.008808e0
add esp, 0x10
cmp dword [0xb8dbe0], 0
je 0x8b9754
mov eax, 0xb8dbe0
call fcn.00970000
jmp 0x8b9754
cmp dword [0xbc27fc], ebx
je 0x8b9754
push str.Unable_to_lock_mutex_
lea ecx, [ebp - 0x10e68]
push ecx
call fcn.00a78f30
push ebx
mov edx, dword [0xbc27fc]
push edx
lea eax, [ebp - 0x10e68]
push eax
push 0xb54ce8
call fcn.008808e0
add esp, 0x18
mov eax, dword [ebp - 0x10e7c]
test eax, eax
je 0x8b9792
push eax
call fcn.00a78fec
add esp, 4
mov dword [ebp - 0x10e7c], 0
jmp 0x8b9792
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x10ef4]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret