Function at 0x164fb3e10
Capabilities:
Reference http user-agent string

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rax, qword [0x16514b200]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rdi, qword [rbp + 0x67]
mov qword [rbp + 0x1f], rdi
mov dword [rbp + 0x17], 0
xor sil, sil
xor r15b, r15b
xor r12b, r12b
xor r14b, r14b
call fcn.164ee4ab0
mov ebx, eax
cmp eax, 0xffffffff
je 0x164fb3e9d
mov ecx, eax
call fcn.164ee7210
movzx esi, al
mov ecx, ebx
call fcn.164fbbe60
movzx r15d, al
mov ecx, ebx
call fcn.164ee7230
movzx r12d, al
mov ecx, ebx
call fcn.164fbbe40
movzx r14d, al
xor r14b, 1
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov rcx, rdi
call fcn.164fbb4e0
mov dword [rbp + 0x17], 1
mov rbx, qword [rdi]
lea r13, [0x1650b11c0]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_ScanMessagesOnAccess
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_ScanMessagesInBackground
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_EnableProactiveScanning
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_ScanAtTransportLevel
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_ScanRTFBodies
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_TryToCleanInfectedObjects
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_InfectedItemsAction
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_InfectedItemsNotifyMessageSender
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_InfectedItemsNotifyMessageRecipients
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_InfectedItemsNotifyOtherPeople
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_InfectedItemsChangeObjectIcon
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_UntestableItemsAction
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_UntestableItemsNotifyMessageSender
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_UntestableItemsNotifyMessageRecipients
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_UntestableItemsNotifyOtherPeople
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_UntestableItemsChangeObjectIcon
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__ExchangeShield_Exchange_LoggingLevel
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650a825c]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_AddressesOtherPeople
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, str.avast_ex
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_NotificationsSender
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, str.avast__Alert
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_NotificationsSubject
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_EnableAttachmentBlockingByName
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650a825c]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__ExchangeShield_Exchange_BlockingNames
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
call fcn.164f79400
mov rcx, rdi
cmp dword [rax + 0x20], 2
jne 0x164fb43eb
call fcn.164e57600
mov rcx, rax
lea r8, str.Blocked_by_AVG.txt
lea rdx, str.avcfg:__ExchangeShield_Exchange_BlockingFilenameReplacement
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
lea r8, str.AVG_blocked_the_content._For_more_information__please_contact_your_system_administrator.
jmp 0x164fb4415
call fcn.164e57600
mov rcx, rax
lea r8, str.Blocked_by_avast.txt
lea rdx, str.avcfg:__ExchangeShield_Exchange_BlockingFilenameReplacement
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
lea r8, str.avast__blocked_the_content._For_more_information__please_contact_your_system_administrator.
lea rdx, str.avcfg:__ExchangeShield_Exchange_BlockingReplaceWith
mov rcx, rax
call fcn.164fbb3e0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnExecute
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanDLLOnLoad
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanScriptsOnExecute
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnOpenDocuments
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnOpenCustomExtensions
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650a825c]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnOpenCustomExtensionsList
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnOpenAllFiles
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnWriteDefault
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnWriteCustomExtensions
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650a825c]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnWriteCustomExtensionsList
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnWriteAllFiles
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnWriteNoRemote
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanOnWriteNoRemovable
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanDiskette
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanAutorun
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650a825c]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ScanExceptions
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_SkipSystemDlls
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_UseTransientCache
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_UsePersistentCache
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_OptimizeCopyFile
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_HIPSMonitorMalwareLikeBehavior
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_HIPSMonitorUnauthorizedModifications
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_HIPSMonitorUnauthorizedModificationsLevel
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_EngineLdrModuleFlags
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_FeatureIW
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r13
lea rdx, str.avcfg:__FileSystemShield_FileSystem_ShutdownScanning
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650b1258]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_NoLazyScanning
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, str.10000
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__FileSystemShield_FileSystem_BootWaitTimeoutMs
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov edx, 8
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov dword [rbp + 0x17], 9
mov rbx, qword [rdi]
lea rdx, str.avcfg:__StreamFilter_Common_DebugLogLevel
lea rcx, [rbp - 0x39]
call fcn.164e48590
nop
lea r9, [rbp - 9]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb800
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
mov edx, 2
lea rcx, [rbp - 0x39]
call fcn.164ebebf0
mov dword [rbp + 0x17], 0x19
mov rbx, qword [rdi]
lea rdx, str.avcfg:__StreamFilter_Common_FileLogLevel
lea rcx, [rbp - 9]
call fcn.164e48590
nop
lea r9, [rbp - 0x39]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb800
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
lea r8, str.36864
lea rdx, str.avcfg:__StreamFilter_Common_FilterEngineLog
mov rcx, qword [rdi]
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rbx, [0x1650b1258]
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_FilterEngineInCaptureFlags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_FilterEngineOutCaptureFlags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_FilterEngineElavatorCaptureFlags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_CrashOnFatal
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d42d8]
lea rdx, str.avcfg:__StreamFilter_Common_ForceCrashAfterSeconds
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_FilterEngineTraceFilterBuffersFlags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_SecureDnsLog
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d4708]
lea rdx, str.avcfg:__StreamFilter_Common_FileLogMaxSize
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_ProcessingThreads
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_RecordInput
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_RecordOutput
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_RecordVps
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_RecordAntiphishing
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_RunningFile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Common_CaptureGoogleStore
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.SConnect_UserAgent
lea rdx, str.avcfg:__StreamFilter_Common_ExcludedAgents
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Common_FilterTcp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Common_FilterUdp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Common_RecordTcp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Common_RecordUdp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__StreamFilter_Common_ScannerFailedPath
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__StreamFilter_Common_InfectedPath
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Common_SignaturesAlways
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.1048576
lea rdx, str.avcfg:__StreamFilter_Scanner_MemoryContentMaxSize
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Scanner_DownloadUpTo
call fcn.164fbb3e0
mov edx, 0x15180
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_DnsCache_MaxTime
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 0x2710
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_DnsCache_Records
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_DnsNotifier_Enabled
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Ignore_ServiceProcess
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Ignore_Incoming
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d4e18]
lea rdx, str.avdef:__config_StreamFilter_MaxCachedInfectedUrls
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3230]
lea rdx, str.avdef:__config_StreamFilter_CachedInfectedUrlTtl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_InnerDump
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_OuterDump
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Http1x
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Http2x
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Spdy
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Connect
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Ssl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_SslCertRep
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_SecureDns
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_DnsCache
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_TinyFw
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Rdp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_DataTheft
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_TcpFilter_Websocket
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_UdpFilter_SecureDns
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_UdpFilter_Quic
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_UdpFilter_Antiphishing
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_UdpFilter_DnsCache
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_ServiceFilter_ConnectionBlocker
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__StreamFilter_ServiceFilter_TinyFW
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rbx, [0x1650b1258]
mov r8, rbx
lea rdx, str.avdef:__config_StreamFilter_TcpInnerDump
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avdef:__config_StreamFilter_TcpOuterDump
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpHttp1x
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpHttp2x
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpSpdy
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpConnect
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpSsl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpSslCertRep
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpSecureDns
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3b4c]
lea rdx, str.avdef:__config_StreamFilter_TcpDnsCache
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpTinyFw
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpRdp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_TcpWebsocket
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_UdpSecureDns
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_UdpQuic
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_UdpAntiphishing
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_ServiceConnectionBlocker
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_ServiceTinyFW
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3b4c]
lea rdx, str.avdef:__config_StreamFilter_UdpDnsCache
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_EncodingBrotli
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_StreamFilter_EncodingZStandard
call fcn.164fbb3e0
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_Scanner
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_UrlBlocker
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_LicenseDownloader
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_AvastHeaders
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_AvastInfo
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_Family
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_Signature
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_UrlPatternDetector
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SslRedirector
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_Pinning
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_IdpReport
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_Doh
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 2
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_SecDns_PrivateMode
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_SecDns_PublicMode
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 1
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_SecDns_TrafficScanning
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_AvastInfoCartRequestUrls
call fcn.164fbb3e0
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsEnableHttp1
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsEnableHttp2
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsEnableHttp3
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsEnableChrome
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsEnableFirefox
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsEnableOtherBrowsers
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsResourceDir
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.browserDetectionWindow.html
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BrowserDetectionsHtmlFilename
call fcn.164fbb3e0
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SmbWebControlEnable
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Blocked.htm
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_BlockedUrlUserHtmlFilename
call fcn.164fbb3e0
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SegEnabled
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 0x64
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SegDomainThreshold
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 0xe10
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SegTimeThreshold
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov edx, 0x127500
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SegTimePeriod
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avdef:__config_StreamFilter_SegSetting
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_RestrictUiCommands
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Mozilla_5.0_AppleWebKit_503.36__KHTML__like_Gecko__Chrome_69.3.3626.1895_Safari_503.36
lea rdx, str.avdef:__config_Common_LegacyUserAgent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.15_24_0_12_24_0_9_24_0_7_24_1_6_24_1_5_24_1_4_24_1_3_12_1_2_12_1_1_12_1_0_12_1__1_12_1__2_24_1__3_24_1__7_24_1__9_24_1__11_24_1__13_24_1__15_24_1
lea rdx, str.avdef:__config_Common_BLExpToasterTiming
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d6a18]
lea rdx, str.avcfg:__StreamFilter_Spdy_ZlibLevel
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d69c8]
lea rdx, str.avcfg:__StreamFilter_Spdy_ZlibBits
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Spdy_ZlibMemLevel
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Antiphishing_CheckRequest
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rbx, [0x1650b1258]
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_Antiphishing_CheckResponse
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.1024
lea rdx, str.avcfg:__StreamFilter_ContentScanner_SniMaxNumber
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.86400
lea rdx, str.avcfg:__StreamFilter_ContentScanner_SniExpirationSeconds
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_webcerts_WhitelistFraction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_GmailEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_GmailEnabledFF
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_GmailEnabledIE
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_GmailEnabledChrome
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.mail.google.com
lea rdx, str.avdef:__config_WebmailSignature_GmailUrlSearchList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_OutlookEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_OutlookEnabledFF
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_OutlookEnabledIE
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_OutlookEnabledChrome
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.mail.live.com
lea rdx, str.avdef:__config_WebmailSignature_OutlookUrlSearchList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.outlook.live.com
lea rdx, str.avdef:__config_WebmailSignature_OutlookJsonUrlSearchList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_YahooEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_YahooEnabledFF
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_YahooEnabledIE
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_WebmailSignature_YahooEnabledChrome
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.mail.yahoo.com_mail.yahoo.co.jp
lea rdx, str.avdef:__config_WebmailSignature_YahooUrlSearchList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.65536
lea rdx, str.avdef:__config_WebmailSignature_MaxRequestSize
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.1209600
lea rdx, str.avdef:__config_WebmailSignature_MaxAutoDisabledSeconds
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_HttpPlugin_SignatureToasterShown
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Test_AddHeaderHttp1x
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Test_AddHeaderHttp2x
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_Test_AddHeaderSpdy
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d7920]
lea rdx, str.avcfg:__StreamFilter_FilterManager_MaxBufferSizeToMerge
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d78a0]
lea rdx, str.avcfg:__StreamFilter_FilterManager_MaxMergedBufferSize
call fcn.164fbb3e0
mov edx, 0x60
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_FilterManager_StorageCacheSize
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rbx, [0x1650b1258]
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_VerboseLog
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_LogAnenMessages
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_UseNetworkAskMode
call fcn.164fbb3e0
call fcn.164f795a0
mov rcx, rdi
cmp eax, 2
jne 0x164fb5dbe
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_DrivenByNLA
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
jmp 0x164fb5de0
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_DrivenByNLA
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_SupressNLAQuery
mov rcx, rax
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_AppFirewallNetworkDetected
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_DrivenByBusiness
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_GetNetworkClass
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.30000
lea rdx, str.avcfg:__FwSettings_Firewall_GetNetworkClassTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_ForceDefaultProfile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_UseWindowsMode
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_UseFirstWindowsMode
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__FwSettings_Firewall_FirstNetworkGuid
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_ModeCheckActiveRdp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Firewall_SupressNetTypeToaster
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_SetFwProfileUsingHnsScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3230]
lea rdx, str.avcfg:__FwSettings_Firewall_SetFwProfileUsingHnsScanDelay
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Firewall_BroadcastPublicNetworks
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.https:__ipm.avcdn.net_api__action2p_elm136
lea rdx, str.avdef:__config_WebShieldUrlCaptures_RedirectLicenseUrl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.https:__ipm.avcdn.net_api__action2p_elm137
lea rdx, str.avdef:__config_WebShieldUrlCaptures_RedirectLicenseVpnUrl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.https:__ipm.avcdn.net_api__action2p_elm136
lea rdx, str.avdef:__config_WebShieldUrlCaptures_RefreshLicenseUrl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.https:__id.avast.com_inAvastium
lea rdx, str.avdef:__config_WebShieldUrlCaptures_RedirectMyAvastUrl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TinyFw_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TinyFw_ReportingThreats
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TinyFw_BlockingThreats
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_TinyFw_FwNetwideVulnsReporting
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b244c]
lea rdx, str.avcfg:__settings_TinyFw_AnenDetectionMaxCount
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_Public
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_Private
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_TCP
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_UDP
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.3_2_1
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_TCP_RiskScore_Port
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.2_1_0
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_TCP_RiskScore_Time
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b16e4]
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_TCP_Threshold
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.259200
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_TCP_Record_Expiration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.3_2_1
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_UDP_RiskScore_Port
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.2_1_0
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_UDP_RiskScore_Time
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b16e4]
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_UDP_Threshold
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.259200
lea rdx, str.avcfg:__settings_TinyFw_PortScanDetection_UDP_Record_Expiration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TinyFw_ArpSpoofDetection_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TinyFw_ArpSpoofDetection_Public
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TinyFw_ArpSpoofDetection_Private
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Switch_PortScanDetectionEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Switch_ArpSpoofDetectionEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Switch_LeakProtectionEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__FwSettings_Common_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__FwSettings_Common_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_CatchAllRuleReply
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_CatchAllRuleReputation
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_CatchAllRuleReputationReply
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_NotificationNewAllowRule
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_DefaultClosedNetworkProfile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_DefaultRoutedNetworkProfile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_NotificationNewBlockRule
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_InternetSharingMode
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__Firewall_Policies_UseFastChecksums
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_DataTheft_OutgoingSmb_Report
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_DataTheft_OutgoingSmb_Block
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__settings_DataTheft_OutgoingSmb_IgnoredProcesses
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9400]
lea rdx, str.avcfg:__WebShield_SSL_BlockingDuration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_SSL_PassthruEV
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9350]
lea rdx, str.avcfg:__WebShield_SSL_PassthruDuration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_SSL_QueryCert
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_SSL_PassthruBank
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_SSL_SupportALPN
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_SSL_SupportSSL3
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_SSL_CertCheckOnlineRevokeList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b26f8]
lea rdx, str.avcfg:__WebShield_SSL_CertOnlineCheckTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9580]
lea rdx, str.avcfg:__WebShield_SSL_MinDHE
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_ScanSSL_UseMasterSecretSZB
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_ScanSSL_UseMasterSecretNSS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_ScanSSL_Pinning
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_SSL_SupportTls13Mitm
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_SSL_SupportTls13Ms
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_SSL_SslKeyLog
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_SSL_ImportToFF
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_SSL_ImportRootsToFF
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__StreamFilter_SSL_EchMitm
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_SSL_EchMs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__StreamFilter_SSL_EarlyDataMs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__NetworkShield_NetworkShield_ShowMessage
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__NetworkShield_NetworkShield_Logging
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__NetworkShield_NetworkShield_SendBlockedUrlStats
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__NetworkShield_NetworkShield_ShowPopup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__BehaviorShield_BehaviorShield_MonitorLowLevelRootkits
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__BehaviorShield_BehaviorShield_MonitorMalwareLikeBehavior
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__BehaviorShield_BehaviorShield_MonitorUnauthorizedModifications
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d4708]
lea rdx, str.avcfg:__BehaviorShield_BehaviorShield_Action
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__BehaviorShield_BehaviorShield_TrustedProcessed
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__SharepointShield_Sharepoint_LoggingLevel
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__SharepointShield_Sharepoint_UncleanableItemsAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ScriptShield_ScriptShield_ShowSplashScreen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__ScriptShield_Common_ExcludedURLs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__ScriptShield_Common_ExcludedURLsList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ScriptShield_Common_InternetExplorer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ScriptShield_Common_MozillaFirefox
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ScriptShield_Common_GoogleChrome
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ScriptShield_Common_AdobeAcrobatReader
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ScriptShield_Common_OtherApplications
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_WebScanning
call fcn.164fbb3e0
call fcn.164eee490
test al, al
cmovne rbx, r13
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_HttpsScanning
mov rcx, rax
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_HttpsScanOnlyBrowsers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.opera.exe_chrome.exe_iexplore.exe_waterfox.exe_seamonkey.exe_SafeZoneBrowser.exe_AvastSZB.exe_SZBrowser.exe_MicrosoftEdge.exe_MicrosoftEdgeCP.exe_AvastBrowser.exe_HeroBrowser.exe_AVGBrowser.exe_firefox.exe_msedge.exe_CCleanerBrowser.exe_qqbrowser.exe_browser.exe_UCBrowser.exe_spark.exe_Maxthon.exe_vivaldi.exe_brave.exe_SogouExplorer.exe
lea rdx, str.avcfg:__WebShield_WebScanner_BrowsersList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.powershell.exe_cscript.exe_wscript.exe_mshta.exe_msiexec.exe_regsvr32.exe_certutil.exe_winword.exe_powerpnt.exe_excel.exe_eqnedt32.exe_curl.exe_HxOutlook.exe_fontdrvhost.exe_wermgr.exe_ctfmon.exe_calc.exe_grpconv.exe_gpupdate.exe_dllhost.exe_notepad.exe_wget.exe_onenoteim.exe_onenotem.exe_onenote.exe
lea rdx, str.avcfg:__WebShield_WebScanner_TlsProcessesList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_NetworkShield
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_ScriptScaning
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rbx, [0x1650b1258]
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_SecureDns
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_IntelligentStreamScanning
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_DoNotScanTrustedSites
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_HttpScanParamFlag
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_HttpScanParamExtensions
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_WebScanner_HttpScanParamExtensionsList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_HttpScanParamType
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_WebScanner_HttpScanParamTypeList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_URLBlocking
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_WebScanner_BlockedURLs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_ExcludedURLs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.http:__.ff.avast.com__https:__.ff.avast.com__https:__.mozilla.org__https:__.cdn.yandex.net__https:__.agilebits.com__https:__lastpass.com__https:__.lastpass.com__https:__chess24.com__https:__.chess24.com__https:__www.sharelatex.com__https:__.gpsecure.com__https:__.spplus.net__https:__.yimg.com__https:__.staticflickr.com__https:__.flickr.com__https:__.paybox.com__https:__.jimini.fr__https:__.e_transactions.fr__https:__support.google.com__https:__accounts.google.com__https:__ssl.gstatic.com__https:__clients6.google.com__https:__.googleapis.com__https:__storage.cloud.google.com__https:__services.google.com__https:__lh.ggpht.com__https:__lh.googleusercontent.com__https:__lh.google.com__https:__.gemalto.com__https:__.qmagico.com.br__https:__api.surfeasy.com__https:__.opera_proxy.net__https:__app.logmein.com__https:__quickbooksratable.api.intuit.com__https:__s_install.avcdn.net__https:__.avgbrowser.com__https:__.avastbrowser.com__https:__.ccleanerbrowser.com__https:__.ucweb.com__https:__wow_upgrade.uc.cn__https:__.browser.qq.com__https:__stdl.qq.com__https:__.sogoucdn.com__https:__.smartscreen.microsoft.com__https:__.smartscreen_prod.microsoft.com__https:__.data.microsoft.com__https:__edge.microsoft.com__https:__.services.mozilla.com__https:__.cdn.mozilla.net__https:__.opera.com__https:__.opera_api.com__https:__.operacdn.com__https:__onlinebanking.securetrustbank.com__https:__.revenuemonster.my__https:__.revenuemonster.com.my_
lea rdx, str.avcfg:__WebShield_WebScanner_ExcludedURLsList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_NeverExcludedURLs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.https:__mail.google.com__https:__mail.live.com_
lea rdx, str.avcfg:__WebShield_WebScanner_NeverExcludedURLsList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_ExcludedTypes
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_WebScanner_ExcludedTypesList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_IgnoreProcessChecked
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_WebScanner_IgnoreProcess
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_DisableScanner
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_OnCloseScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.static.avast.com_client.js
lea rdx, str.avcfg:__WebShield_WebScanner_AvastInfoJs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str..avast.com_.avast.ru_.avast.ua_.avast.co.jp_.avast.cn_store.digitalriver.com_avast.pepitastore.com_.avg.com
lea rdx, str.avcfg:__WebShield_WebScanner_AvastInfoReferrers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_WebScanner_ForbiddenSslCiphers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_VpsFileRep
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_WebScanner_VpsFileRepScanAllPorts
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_Common_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_Common_ProviderEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_Quic_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b26f8]
lea rdx, str.avcfg:__WebShield_Quic_Block
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_Quic_Statistics
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_Quic_Flags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__WebShield_Quic_BlockedSniList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebSocket_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_ChromePolicy_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_ChromePolicy_QuicBlock
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_FirefoxPolicy_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_FirefoxPolicy_EnterpriseRoots
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rdx, str.avcfg:__WebShield_ConnectionBlocker_BotnetBlocker
test sil, sil
mov r8, rbx
jne 0x164fb6cfc
mov r8, r13
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_ConnectionBlocker_PidBlocker
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__WebShield_ConnectionBlocker_BotnetBlockerSilent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ScanInbound
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ScanOutbound
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ScanNews
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_MarkSubjectForVirusMsg
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str._VIRUS_
lea rdx, str.avcfg:__EmailShield_EmailScanner_SubjectForVirusMsg
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_InsertNoteCleanMsgIn
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_InsertNoteInfectedMsgIn
call fcn.164fbb3e0
mov rbx, r13
test r12b, r12b
lea r12, [0x1650b1258]
cmovne rbx, r12
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_InsertNoteCleanMsgOut
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_InsertNoteInfectedMsgOut
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_ShowSplashScreenMSO
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ScanAttachmentDuringAttachingMSO
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_ScanArchivedMessagesMSO
call fcn.164fbb3e0
call fcn.164eee490
mov rbx, r12
test al, al
cmovne rbx, r13
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_ScanSSL
mov rcx, rax
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_UseDefaultSmtp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650a825c]
lea rdx, str.avcfg:__EmailShield_EmailScanner_Trust
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_UseWSAAccept
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_ReuseAddr
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ExclusiveAddr
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b36e0]
lea rdx, str.avcfg:__EmailShield_EmailScanner_MaxConnections
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_SendAhead
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dd230]
lea rdx, str.avcfg:__EmailShield_EmailScanner_PreventTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ModifyVistaSocketAutoTuning
call fcn.164fbb3e0
mov edx, 0x6000000
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_VistaSocketAutoTunningValue
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rbx, [0x1650a825c]
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_IgnoreProcess
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_Timeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_ConnectTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_DisableTLSv11
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_DisableTLSv12
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_TransparentSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_CertRevocationCheck
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b26f8]
lea rdx, str.avcfg:__EmailShield_EmailScanner_CertRevocationTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_CertAllowAccept
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_SupportSSL3
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_DontAddHeaders
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_SaveMail
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_StartPop
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_DefaultPopServer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12110
lea rdx, str.avcfg:__EmailShield_EmailScanner_PopListen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12995
lea rdx, str.avcfg:__EmailShield_EmailScanner_PopListenSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_StartSmtp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_DefaultSmtpServer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12025
lea rdx, str.avcfg:__EmailShield_EmailScanner_SmtpListen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12465
lea rdx, str.avcfg:__EmailShield_EmailScanner_SmtpListenSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_StartImap
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_DefaultImapServer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12143
lea rdx, str.avcfg:__EmailShield_EmailScanner_ImapListen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12993
lea rdx, str.avcfg:__EmailShield_EmailScanner_ImapListenSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_StartNntp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_DefaultNntpServer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12119
lea rdx, str.avcfg:__EmailShield_EmailScanner_NntpListen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12563
lea rdx, str.avcfg:__EmailShield_EmailScanner_NntpListenSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__EmailShield_EmailScanner_Log
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_ExclusiveAddr
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_AutoRedirect
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_IgnoreLocalhost
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__EmailShield_EmailScanner_AutoRedirect
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.212.26.219.158:119_70.86.176.98:119_75.126.149.157:119_199.187.125.171:119
lea rdx, str.avcfg:__EmailShield_EmailScanner_IgnoreAddress
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650ddca8]
lea rdx, str.avcfg:__EmailShield_EmailScanner_PopRedirectPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.25_587
lea rdx, str.avcfg:__EmailShield_EmailScanner_SmtpRedirectPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650de028]
lea rdx, str.avcfg:__EmailShield_EmailScanner_ImapRedirectPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650ddfb8]
lea rdx, str.avcfg:__EmailShield_EmailScanner_NntpRedirectPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650ddf48]
lea rdx, str.avcfg:__EmailShield_EmailScanner_PopRedirectPortSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dded0]
lea rdx, str.avcfg:__EmailShield_EmailScanner_SmtpRedirectPortSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650de2b0]
lea rdx, str.avcfg:__EmailShield_EmailScanner_ImapRedirectPortSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650de230]
lea rdx, str.avcfg:__EmailShield_EmailScanner_NntpRedirectPortSSL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_Accounts
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__EmailShield_EmailScanner_MSIgnoreLSP
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3b4c]
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_Threshold
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_MarkSubject
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_MarkSubjectPhish
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str._PHISHING_
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_SubjectForPhishMsg
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str._SPAM_
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_SubjectForSpamMsg
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_AddRecipientsAutomatically
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_AddRecipientsOnlyDomain
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_MoveToJunkFolder
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_RuleUpdate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9350]
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_RuleUpdatePeriod
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_LiveFeed
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_CustomThresholdValue
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__AntiSpamShield_AntiSpam_AddAddressBookToWhitelist
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__AntiSpamShield_Exchange_DeleteSpamMsg
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650de608]
lea rdx, str.avcfg:__settings_Communication_SMTPPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Communication_SMTPServer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Communication_SMTPFrom
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Communication_SMTPAuth
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Communication_SMTPUserName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Communication_SMTPUserPassword
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_NetAlert
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_MAPIProfile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_MAPIPassword
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_Exclude
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Global_ExcludeFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_OnDemand_ExcludeFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Global_ExcludeUrls
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Global_NeverExcludeUrls
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Global_ExcludeHashes
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Global_ExcludeCommandLine
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_AutoSandboxShowProgress
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Autosandbox_ExcludedFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_Autosandbox_ExcludedHashes
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avcfg:__settings_Common_LoggingLevelAswLog
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm0
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm1
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm2
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm3
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm4
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm5
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm6
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm7
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm8
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm9
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm10
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm11
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm12
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm13
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm14
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm15
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm16
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm17
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm18
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm19
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Confirmation_Confirm20
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.5120
lea rdx, str.avcfg:__settings_Chest_MaxSize
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.16384
lea rdx, str.avcfg:__settings_Communication_MaximumSendSize
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.ListenPort
lea rdx, str.avcfg:__settings_Chest_ListenPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.16108
lea rdx, str.avcfg:__settings_Chest_SystemFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Chest_CheckPassword
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_UserInterface_ShowSpecialTasks
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9400]
lea rdx, str.avcfg:__settings_UserInterface_AutoDelete
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AAVM_ShowTaskbarIcon
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_UserInterface_HideTrayIcon
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_UserInterface_AnimateIcon
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650bb098]
lea rdx, str.avcfg:__settings_UserInterface_SupressedToasters
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rdx, str.avcfg:__settings_InetWD_UpdatePeriod
test r14b, r14b
lea r8, [0x1650b16e4]
jne 0x164fb7ba5
lea r8, [0x1650dfcb0]
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea rdx, str.avcfg:__settings_Common_ExternalDriveScanOffer
test sil, sil
mov r8, r12
jne 0x164fb7bc7
mov r8, r13
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Quick_ShowResults
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_UserInterface_ShellExtensionIcon
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_BootVpsInstallTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.80_81_82_8080_8091_8081_8008_8888_3124_3127_3128
lea rdx, str.avcfg:__WebShield_WebScanner_HttpRedirectPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.212.26.219.158:119_70.86.176.98:119_75.126.149.157:119_199.187.125.171:119
lea rdx, str.avcfg:__WebShield_WebScanner_IgnoreAddress
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_IgnoreLocalhost
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_AutoRedirect
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.12080
lea rdx, str.avcfg:__WebShield_WebScanner_Port
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__WebShield_WebScanner_ScanOnlyBrowsers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__WebShield_WebScanner_WarnFileRep
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__WebShield_WebScanner_DontUnpackSignedArchives
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__WebShield_AntiPhishing_ControlFlags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b7728]
lea rdx, str.avcfg:__WebShield_AntiPhishing_PhishingProcessList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avdef:__config_AntiPhishing_Fraction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_AntiPhishing_ControlFlags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b7728]
lea rdx, str.avdef:__config_AntiPhishing_PhishingProcessList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3230]
lea rdx, str.avdef:__config_AntiPhishing_CacheLifetime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.4096
lea rdx, str.avdef:__config_AntiPhishing_SendStatsCounter
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PropertySilent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertySilentFullscreen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LimitedModePopup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowDetectionsInSilent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3b4c]
lea rdx, str.avcfg:__settings_Common_PropertyDataSharing
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarFS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarMail
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarWeb
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarP2P
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarIM
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarNS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarSS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarBehav
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarDefsVer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarProgVer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarAutoUpdate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarFirewall
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarAntiSpam
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarSharepoint
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyPowerbarExchange
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_fsshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_mailshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_webshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_behavshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_antiransomwareshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_sharpointshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_exchangeshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_antiexploit_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_arpot_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_datascan_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_webcamshield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_remote_access_shield_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_shields_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_version_outdated
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_autoupdate_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_firewall_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_defs_out_of_date
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_reboot_required
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ignore_self_defense_off
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PasswordMask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_PasswordHash
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsVoiceover
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsVirus
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsSuspic
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsPUP
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsUpdate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SoundsFirewall
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_ReputationServices
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_AutoDeleteSessions
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_CleanUpScanLogs
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_CleanUpScanLogsTemp
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_UnderlyingScreensaver
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_LoopScanning
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avcfg:__settings_Common_WindowMovementSpeed
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b26f8]
lea rdx, str.avcfg:__settings_Common_DelayedScreensaver
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LastScreensaverScanDone
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ScreensaverDoNotStartScanOnBatteries
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ScreensaverPauseScanOnBatteries
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowChrome
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowPElmAtStartup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowUiAtStartup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_DisableIaccessible
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SubmitFileToViruslab
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_AppearanceRemoteContent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_AutomaticLangChange
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_ConnectorGUID
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_SBCServerName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SBCServerPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_SBCLastContact
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_desktopicon
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyCommunity
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
test sil, sil
je 0x164fb864b
test r15b, r15b
jne 0x164fb85f4
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyCommunityBusiness
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_AllowOfferPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AllowUsageData
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_Allow3rdPartyOfferPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyDataSharingGa
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyDataSharingGaBusiness
mov rcx, rax
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov r8, r12
jmp 0x164fb86b3
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AllowOfferPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AllowUsageData
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_Allow3rdPartyOfferPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PropertyDataSharingGa
jmp 0x164fb85dc
mov r8, r13
lea rdx, str.avcfg:__settings_Common_AllowOfferPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_AllowUsageData
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_Allow3rdPartyOfferPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_PropertyDataSharingGa
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov r8, r13
lea rdx, str.avcfg:__settings_Custody_AutomaticallySendForAnalysis
mov rcx, rax
call fcn.164fbb3e0
call fcn.164f795a0
cmp eax, 6
jne 0x164fb87ba
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_RemoteManagement_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_Features_UseEntitlementPolicy
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_autofilefilter
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_sensitiveFileScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_backupContacts
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_backupNotes
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_dailyAutoSynchronization
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_contextMenuEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__Backup_BackupSettings_localbackupenabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_DisablePersonalization
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Custody_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_Custody_QA_ToasterReturnValue
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Custody_AllowUserRunSuspicious
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e2520]
lea rdx, str.avdef:__config_CyberCapture_BlockingGuiTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b16e4]
lea rdx, str.avdef:__config_CyberCapture_SyncTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_DontShowAndroidAd
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LastMonthlyReport
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b16e4]
lea rdx, str.avcfg:__settings_Common_SBCRefreshPeriodForINIChange
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dd230]
lea rdx, str.avcfg:__settings_Common_SBCRefreshPeriodForScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b16e4]
lea rdx, str.avcfg:__settings_Common_SBCRefreshPeriodForReconnect
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dd230]
lea rdx, str.avcfg:__settings_Common_SBCRefreshPeriodForProviderStatus
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_WebRepLogging
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_WebRepAutoInstall
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_WebRepControl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_WebRepPhishingFilter
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_WebRepSafeZone
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_WebRepNoPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowChromeWebRepInstallOffer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_ShowOldIEWarningToaster
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowWelcomeScreen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowWelcomePage
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SafeZoneFwRule
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowWelcomeMessageOnBoot
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_ShowRecommendationFeatures
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_UseSocialNetworkingFeatures
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowSetupOutro
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ShowPis
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_OriginalLauncher
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_InstallTree
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_EncKey
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_DontShowWrongTimeToaster
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_DailyReportSent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_FreeRegGUID
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeActivation
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeProgramExpiration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeUpdateExpiration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_FreeRegGUIDDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeActivationDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeProgramExpirationDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeUpdateExpirationDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_FreeRegistrationOffState
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_ReallyUninstall
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_CustomLogo
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ProgramUpdateAvailable
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_VPSUpdateAvailable
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9400]
lea rdx, str.avdef:__config_Common_CheckYellow_Licensed
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avdef:__config_Common_CheckYellow_SoftTrial
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e3780]
lea rdx, str.avdef:__config_Common_CheckRed_Licensed
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avdef:__config_Common_CheckRed_SoftTrial
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_PairRegistration
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ChromeInstallStarted
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_CompatibleInstall
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LaunchQuickScanAtStartup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_Common_FreeInBusiness
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_HomePageTiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_GeoIPCountryShort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_GeoIPTimeZone
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_GeoIPContinent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_GeoIPSubDiv
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_GeoIPCity
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_Common_WinSatSystem
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_Common_WinSatCPU
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_WinSatLastCheck
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_CanInstallMobileSecurity
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AvastComCookiesStored
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_AvastComCookies
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_ShowChromeToasterInstallOffer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LastTimeIELaunched
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LastTimeNitroToasterShow
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AutoregisterCount
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AutoRegisterFor
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_MarkS1
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_RouterChangedDelay
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_UseNewNetworkChanged
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.268436016
lea rdx, str.avcfg:__settings_Hns_PostInstantScanMask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_ArpSpoofing
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_ReportJsonType
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.86400
lea rdx, str.avcfg:__settings_Common_DelayNewNetworkToaster
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_Record
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Hns_FirstNetworkGuid
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_ReportVulnerabilitiesToAnen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_ReportSslMitm
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_ReportSslStrip
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_ReportContentTampering
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_ReportDnsSpoofing
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Business_CompanyName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_DeviceWatcherEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9400]
lea rdx, str.avcfg:__settings_Hns_DeviceWatcherStartDelay
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_DataScan_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Webcam_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AntiExploit_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AntiRootkit_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_DataScan_ScanModifiedDocuments
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_DataScan_RestrictAccess
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_DataScan_ProtectWithEFS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.PDF_DOC_DOCX_DOCM_XLS_XLSX_XLSM_PPT_PPTX_PPTM_ODT_ODS_ODP_TAX20
lea rdx, str.avcfg:__settings_DataScan_ExtensionsList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_DataScan_AskDialogEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_DataScan_ScanModifiedDocumentsPromo
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Webcam_Mode
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Webcam_MicFiltering
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_SecureLine_UseStandalone
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_VirusesEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_UpdatesEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_HnsEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_GrimeFighterEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_TuneupEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_BCL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_PasswordsEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SmartScan_CompatibilityEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_SmartScan_LastRun
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_UserInterface_NextPostUpdateScreen
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_UserInterface_PostUpdateScreenEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_SmartScan_DataScanEnabled2
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_UserInterface_streaming
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LastScanTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_PendingUnresolvedScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_CheckBootTimeScanResults
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.stable
lea rdx, str.avcfg:__settings_Common_VersionSwitch
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Sandbox_LastDirectory
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_BusinessManaged
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SmartVPNHintsEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SmartVPNHintsBanking
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SmartVPNHintsShopping
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SmartVPNHintsSocial
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SmartVPNHintsSensitive
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SmartVPNHintsCredentials
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_LoyaltyEventSentTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.1000
lea rdx, str.avcfg:__settings_Common_GamificationScannedEvent
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_ScannedCount
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_SafeZone_UserPath
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SafeZone_UsePredefinedBanking
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Pap_BrowserProtectionAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__IDP_Setting_enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b26f8]
lea rdx, str.avcfg:__settings_IDP_DetectedAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_IDP_ExcludedFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__exclusions_IDP_ExcludedHashes
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_SecureDNS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_SecureDNSstate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_LastManualScanTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.home
lea rdx, str.avcfg:__settings_Hns_NetworkType
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.86400
lea rdx, str.avcfg:__settings_Hns_MinTimeBetweenScans
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_HnsMinTimeBetweenPreScans
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avcfg:__settings_Hns_HnsPreScansConst
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Hns_HnsShowNewNetworkScanProgress
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d4e18]
lea rdx, str.avcfg:__settings_Hns_HnsArpSpoofingPreCount
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b244c]
lea rdx, str.avcfg:__settings_Hns_HnsArpSpoofingPreTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9350]
lea rdx, str.avcfg:__settings_Hns_HnsArpSpoofingCheckTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.1000
lea rdx, str.avcfg:__settings_Hns_HnsArpSpoofingPingTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.ping.avast.com
lea rdx, str.avcfg:__settings_Hns_HnsArpSpoofingPingName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Hns_HnsArpSpoofingBidirectional
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Common_AutorenewalNextQuery
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_Common_InitialScanNOV
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e5ca0]
lea rdx, str.avcfg:__settings_TaskGUID_Label
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_Comment
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Scan
lea rdx, str.avcfg:__settings_TaskGUID_Job
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.AllHarddisks
lea rdx, str.avcfg:__settings_TaskGUID_ScanAreas
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Default
lea rdx, str.avcfg:__settings_TaskGUID_ScanTypes
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Content
lea rdx, str.avcfg:__settings_TaskGUID_ScanType
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_ScanFullFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_ScanIgnoreTargeting
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_ScanExclusions
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e5d08]
lea rdx, str.avcfg:__settings_TaskGUID_VirusAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_SuspiciousAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_PUPAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_ToolAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.EXE_WinExec_Streams_Drop
lea rdx, str.avcfg:__settings_TaskGUID_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_Priority
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Standard_Polymorphic_Macro
lea rdx, str.avcfg:__settings_TaskGUID_ScanFor
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Infected_HardErrors_Excluded
lea rdx, str.avcfg:__settings_TaskGUID_ScanResults
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_StoreResults
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.None
lea rdx, str.avcfg:__settings_TaskGUID_Report
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b7728]
lea rdx, str.avcfg:__settings_TaskGUID_ReportName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Start_Stop_Infected_HardErrors
lea rdx, str.avcfg:__settings_TaskGUID_ReportRecords
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_OverwriteReport
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_NetAlert
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_LocalizedLabel
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Weekly
lea rdx, str.avcfg:__settings_TaskGUID_SchedType
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_SchedTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b5180]
lea rdx, str.avcfg:__settings_TaskGUID_SchedDays
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_SchedulerEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_DoNotStartOnBatteries
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_PauseOnBatteries
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_WakeUpMachine
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_ShutDownMachine
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_TempShutDownMachine
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_SchedUseGMT
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_LastScanPath
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_Deleted
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e6740]
lea rdx, str.avcfg:__settings_TaskGUID_TaskSensitivity
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_UseCodeEmulation
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_ScanPUP
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_PerformActionOnStartup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_DefaultTask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_SpecialTask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_TemporaryTask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.onlyfile
lea rdx, str.avcfg:__settings_TaskGUID_ActionOnPackedFile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.custom
lea rdx, str.avcfg:__settings_TaskGUID_TaskImage
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_ConsultUsn
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_PopulateUsn
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_StoreLastScannedItem
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_AutomaticallyApplyActionsDuringScan
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_ScanLinks
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_ServerTask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.windows
lea rdx, str.avcfg:__settings_TaskGUID_Execution
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_ScanFilesOrdered
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_BccTask
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_LastRun
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_BasedOn
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_AttachOS
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_UseThreads
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__ProviderINI_Common_NetAlert
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.EXE_WinExec_Streams_Drop
lea rdx, str.avcfg:__ProviderINI_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.None
lea rdx, str.avcfg:__AntiSpamShield_Common_Report
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__WebShield_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__EmailShield_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__P2PShield_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__IMShield_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__ExchangeShield_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__SharepointShield_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7340]
lea rdx, str.avcfg:__SafeBrowser_Common_ScanPackers
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.abort
lea rdx, str.avcfg:__WebShield_Common_VirusAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.abort
lea rdx, str.avcfg:__ScriptShield_Common_VirusAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__SafeBrowser_Common_VirusAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.abort
lea rdx, str.avcfg:__WebShield_Common_SuspiciousAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.abort
lea rdx, str.avcfg:__ScriptShield_Common_SuspiciousAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__SafeBrowser_Common_SuspiciousAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.abort
lea rdx, str.avcfg:__WebShield_Common_PUPAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.abort
lea rdx, str.avcfg:__ScriptShield_Common_PUPAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__SafeBrowser_Common_PUPAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e7770]
lea rdx, str.avcfg:__ProviderINI_Common_Report
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b7728]
lea rdx, str.avcfg:__ProviderINI_Common_ReportName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.Start_Stop_Infected_HardErrors
lea rdx, str.avcfg:__ProviderINI_Common_ReportRecords
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__ProviderINI_Common_OverwriteReport
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__ProviderINI_Common_ShowInfo
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e5d08]
lea rdx, str.avcfg:__ProviderINI_Common_VirusAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e5d08]
lea rdx, str.avcfg:__ProviderINI_Common_SuspiciousAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e5d08]
lea rdx, str.avcfg:__ProviderINI_Common_PUPAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.interactive
lea rdx, str.avcfg:__ProviderINI_Common_ToolAction
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ProviderINI_Common_ProviderEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__ProviderINI_Common_TemporaryDisabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ProviderINI_Common_ShowAppliedActionNotification
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__SafeBrowser_Common_ShowAppliedActionNotification
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ProviderINI_Common_PerformActionOnStartup
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__ProviderINI_Common_ScanIgnoreTargeting
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__ProviderINI_Common_ScanFullFiles
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e6740]
lea rdx, str.avcfg:__ProviderINI_Common_TaskSensitivity
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__ProviderINI_Common_UseCodeEmulation
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__ProviderINI_Common_ScanPUP
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.onlyfile
lea rdx, str.avcfg:__ProviderINI_Common_ActionOnPackedFile
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_Common_UnpackersZoneId
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.PopOnly
lea rdx, str.avcfg:__settings_AdnmSettings_CommScenario
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3230]
lea rdx, str.avcfg:__settings_AdnmSettings_PopTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9350]
lea rdx, str.avcfg:__settings_AdnmSettings_PopTimeoutDiff
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.avast
lea rdx, str.avcfg:__settings_AdnmSettings_ServerAddress
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AdnmSettings_SMTPServer
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e6740]
lea rdx, str.avcfg:__settings_AdnmSettings_SMTPPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AdnmSettings_SMTPFrom
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AdnmSettings_SMTPAuth
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AdnmSettings_SMTPUser
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AdnmSettings_SMTPPassword
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_CheckService
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dd230]
lea rdx, str.avcfg:__settings_AdnmSettings_CheckServiceTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_StartService
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_OverwriteSettings
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dd230]
lea rdx, str.avcfg:__settings_AdnmSettings_OverwriteTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_EnableResPwd
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AdnmSettings_ResPwd
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.error
lea rdx, str.avcfg:__settings_AdnmSettings_LoggingLevel
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_HideOnAccess
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordGeneral
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordSettings
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordProtectionControl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordProtectionSettings
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordScanControl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordScanSettings
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordUpdateControl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AdnmSettings_PasswordChestControl
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Lan_WindowsDevices
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Lan_MacDevices
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Lan_AndroidDevices
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b414c]
lea rdx, str.avcfg:__settings_Lan_ComputersInAD
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_Lan_ComputersInADLastTime
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Lan_USBDeviceName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.PopOnly
lea rdx, str.avcfg:__settings_Communication_CommScenario
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3230]
lea rdx, str.avcfg:__settings_Communication_PopTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9350]
lea rdx, str.avcfg:__settings_Communication_PopTimeoutDiff
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.avast
lea rdx, str.avcfg:__settings_Communication_ServerAddress
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_adnm_OverwriteSettings
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650dd230]
lea rdx, str.avcfg:__settings_adnm_OverwriteTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_Present
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_TaskGUID_Result
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_ObjectId
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650e92d0]
lea rdx, str.avcfg:__settings_TaskGUID_Update
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.intimeout
lea rdx, str.avcfg:__settings_TaskGUID_Reboot
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_TaskGUID_RestoreClean
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_DeleteRestored
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_TaskGUID_DeleteAll
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_RemoteAssistance_DontUseDNSFromKeys
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.rh.ara.avast.com
lea rdx, str.avcfg:__settings_RemoteAssistance_RemoteHost
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.8010
lea rdx, str.avcfg:__settings_RemoteAssistance_RemotePort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.127.0.0.1
lea rdx, str.avcfg:__settings_RemoteAssistance_ConnectionHost
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.5901
lea rdx, str.avcfg:__settings_RemoteAssistance_ConnectionPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.8011
lea rdx, str.avcfg:__settings_RemoteAssistance_DataPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.5901
lea rdx, str.avcfg:__settings_RemoteAssistance_ListenPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_RemoteAssistance_Speed
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.certs
lea rdx, str.avcfg:__settings_RemoteAssistance_CertDirPath
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.aralog.log
lea rdx, str.avcfg:__settings_RemoteAssistance_LogFilePath
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SoftwareHealth_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SoftwareHealth_AutoDownload
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_SoftwareHealth_AutoUpdate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_SoftwareHealth_IgnoreList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_SoftwareHealth_SystemUpdatesForAdminOnly
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SoftwareHealth_ShowUpToDate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.86400
lea rdx, str.avcfg:__settings_SoftwareHealth_PopupInterval
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_SoftwareHealth_ShowPopups
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_SoftwareHealth_WindowsUpdate
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b3f18]
lea rdx, str.avcfg:__settings_tutorial_ExpirationDays
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_tutorial_PageLastShownVersion
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_tutorial_ToasterLastShownVersion
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_BussinessConsole_SeenMagicBusinessPattern
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_Server
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LoginName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LoginNameCoded
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LoginPassword
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LoginPasswordCoded
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.4158
lea rdx, str.avcfg:__settings_AvAdminClient_Port
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.6051
lea rdx, str.avcfg:__settings_AvAdminClient_ListeningPort
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_License
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AvAdminClient_LicenseType
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LicenseNumberVisible
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LicenseNumber
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_AvAdminClient_LicenseNumberCoded
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.300000
lea rdx, str.avcfg:__settings_AvAdminClient_MessagePeriod
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.3600000
lea rdx, str.avcfg:__settings_AvAdminClient_SynchroPeriod
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.300000
lea rdx, str.avcfg:__settings_AvAdminClient_BacklogPeriod
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AvAdminClient_FwSyncEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AvAdminClient_FwUserAppSyncEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__smbupd_mirror_enable
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__smbupd_mirror_allow_fallback
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__smbupd_servers_count
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__smbupd_servers_maintenance
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_Smb_JsonPolicySupport
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.securedns_ld.ff.avast.com
lea rdx, str.avcfg:__settings_SecDns_ServerName
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_ANEN_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.65536
lea rdx, str.avcfg:__settings_AMSI_BufferSize
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_AMSI_Flags
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_AMSI_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avdef:__config_GDPR_Host
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_GDPR_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_GDPR_AlreadyReported
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_GDPR_ResendRequest
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_Common_CefSettings
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_Common_PUSTrigerFromSvc
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.device_control.ff.avast.com_v1_receiver
lea rdx, str.avcfg:__settings_Common_DeviceControlURL
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_Common_ShowAvastBrowserAfterCloseEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__settings_Common_UITheme
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avdef:__config_MyWin_Host
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_Detection_RdpEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_Detection_SmbEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_Detection_NotificationEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_Detection_BruteForceEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_Detection_ExploitEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_Detection_BlacklistEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__RemoteAccessShield_RdpAccess_AllowedIpEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__RemoteAccessShield_RdpAccess_AllowedIpList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__RemoteAccessShield_RdpAccess_ExceptionsEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, rbx
lea rdx, str.avcfg:__RemoteAccessShield_RdpAccess_ExceptionsList
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, [0x1650eaec0]
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650eaebc]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_BruteForceMaxAttemptsPerTenSeconds
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650eae24]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_BruteForceMaxAttemptsPerMinute
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b244c]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_BruteForceMaxAttemptsPerHour
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9400]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_BruteForceMaxAttemptsPerDay
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650eb2c4]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_Smb_BruteForceMaxAttemptsPerTenSeconds
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650d9400]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_Smb_BruteForceMaxAttemptsPerMinute
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650eb198]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_Smb_BruteForceMaxAttemptsPerHour
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b16e4]
lea rdx, str.avcfg:__RemoteAccessShield_Setting_Smb_BruteForceMaxAttemptsPerDay
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650b26f8]
lea rdx, str.avcfg:__settings_SearchEngSuggester_HitsThreshold
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.86400
lea rdx, str.avcfg:__settings_SearchEngSuggester_HitsTimeout
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.http_s__:____:www.__google..2_7_search
lea rdx, str.avcfg:__settings_SearchEngSuggester_SearchRegex
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.monthly
lea rdx, str.avcfg:__settings_CHS_EngagementToasterFrequency
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_GamingMode_SetAffinityForSystemProcesses
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_GamingMode_SuspendProcesses
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, [0x1650eb350]
lea rdx, str.avcfg:__settings_GamingMode_MaxTimeRunning
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_GamingMode_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avcfg:__settings_GamingMode_ProviderEnabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avcfg:__settings_GamingMode_SwcuTest
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_GamingMode_DetectOnlyGames
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_GamingMode_ActivateGameAfterDetection
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r13
lea rdx, str.avdef:__config_GamingMode_ShowDetectionToaster
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_GamingMode_UseLauncherForDetection
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_GamingMode_MinLogicalProcessorsCount
call fcn.164fbb3e0
mov rbx, qword [rdi]
lea rax, [0x1650d78a0]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__settings_CrashGuard_FullDumpFraction
lea rcx, [rbp - 9]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
mov rbx, qword [rdi]
mov qword [rbp + 0x27], r12
lea rdx, str.avcfg:__settings_CrashGuard_DumpFirstChance
lea rcx, [rbp - 9]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, str.https:__stream_production.avcdn.net
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__settings_StreamingUpdates_CdnUrl
lea rcx, [rbp - 9]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
mov rbx, qword [rdi]
lea rax, [0x1650a825c]
mov qword [rbp + 0x27], rax
lea rdx, str.avcfg:__settings_StreamingUpdates_ManagedMirrorUrl
lea rcx, [rbp - 9]
call fcn.164e48590
nop
lea r9, [rbp + 0x27]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb5e0
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
mov edx, 1
lea rcx, [rbp - 0x39]
call fcn.164ebebf0
mov dword [rbp + 0x17], 0x1d
mov rbx, qword [rdi]
lea rdx, str.avcfg:__settings_StreamingUpdates_VpsVariant
lea rcx, [rbp - 9]
call fcn.164e48590
nop
lea r9, [rbp - 0x39]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.164fbb800
nop
lea rcx, [rbp - 9]
call fcn.164e54bf0
nop
lea rcx, [rbp - 0x39]
call fcn.164e54bf0
mov edx, 0x708
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_StreamingUpdates_PollPeriod
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_StreamingUpdates_LastProcessedVps
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_StreamingUpdates_LastProcessedStream
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
xor edx, edx
lea rcx, [rbp - 9]
call fcn.164ebebf0
mov rbx, rax
mov rcx, rdi
call fcn.164e57600
mov r8, rbx
lea rdx, str.avcfg:__settings_StreamingUpdates_LastReceivedStream
mov rcx, rax
call fcn.164fbb470
nop
lea rcx, [rbp - 9]
call fcn.164e48530
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
mov r8, r12
lea rdx, str.avdef:__config_EventLogger_Enabled
call fcn.164fbb3e0
mov rcx, rdi
call fcn.164e57600
mov rcx, rax
lea r8, str.normal
lea rdx, str.avcfg:__settings_oem_eulatype
call fcn.164fbb3e0
mov rax, rdi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.165001080
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret