Function at 0x428ff0
Capabilities:
Create thread
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x66ff08
push 0x5dfbd0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x20c4
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x20c8], esi
mov dword [ebp - 4], esi
mov byte [ebp - 0x328], 0
push 0x207
push esi
lea eax, [ebp - 0x327]
push eax
call fcn.005dfd60
mov byte [ebp - 0x1980], 0
push 0x207
push esi
lea ecx, [ebp - 0x197f]
push ecx
call fcn.005dfd60
mov byte [ebp - 0x1778], 0
push 0x207
push esi
lea edx, [ebp - 0x1777]
push edx
call fcn.005dfd60
mov dword [ebp - 0x20cc], esi
call fcn.004dcf50
push esi
push esi
call fcn.004f0f30
add esp, 0x2c
cmp dword [0x752d8c], esi
je 0x4290b1
push str._AVPMAPP__Into_StartMonitor
push esi
call fcn.004f0f30
add esp, 8
call fcn.004d96c0
mov edi, 1
test eax, eax
je 0x4290c5
mov dword [0x6b079c], edi
push str.ClusSVC
call fcn.005110b0
mov dword [0x6b07a0], eax
call fcn.004d9b00
mov dword [0x6b07a4], eax
call fcn.004d9950
mov dword [0x6b07a8], eax
call fcn.004f78e0
mov dword [0x6b07ac], eax
push esi
push esi
call fcn.0045c3b0
mov byte [0x6b07d0], 0
push 0x104
push 0x6b07d0
call fcn.004ebf90
push 0x6b07d0
call fcn.004e24e0
add esp, 0x14
mov byte [0x6b09e0], 0
mov byte [0x6b08d8], 0
push 0x104
push 0x6b08d8
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x6b08d8
call fcn.004e24e0
add esp, 4
cmp dword [0x6b079c], esi
je 0x429176
push 0x6b08d8
push 0x6b09e0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x61b114
push 0x61b108
push 0x6b09e0
call fcn.004e9030
add esp, 0xc
cmp byte [0x6b07d0], 0
je 0x4291b0
push 0x6b07d0
push 0x6b0ae8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x6b0ae8
call fcn.004e24e0
add esp, 4
push str.WinSxS_
push 0x6b0ae8
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
call ebx
jmp 0x4291b6
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x328]
push eax
call fcn.004e7aa0
add esp, 4
mov dword [ebp - 0x20d0], 0x208
lea ecx, [ebp - 0x20d0]
push ecx
lea edx, [ebp - 0x1980]
push edx
push str.MachineID
push 0x6111b8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1980]
push ecx
call fcn.004dd620
add esp, 8
test eax, eax
je 0x429226
lea edx, [ebp - 0x328]
push edx
push str.MachineID
push 0x6111b8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
mov byte [ebp - 0x328], 0
lea eax, [ebp - 0x328]
push eax
call fcn.004ef800
mov dword [0x67e110], eax
push 0x61b0f0
lea ecx, [ebp - 0x328]
push ecx
call fcn.004dd620
add esp, 8
test eax, eax
je 0x42926e
push 0x61b0ec
lea edx, [ebp - 0x328]
push edx
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x429274
mov dword [0x6b07b8], edi
mov dword [ebp - 0x20d0], 0x208
lea eax, [ebp - 0x20d0]
push eax
lea ecx, [ebp - 0x1778]
push ecx
push str.EPID
push 0x613dac
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
lea edx, [ebp - 0x328]
push edx
lea eax, [ebp - 0x1778]
push eax
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4292d5
lea ecx, [ebp - 0x328]
push ecx
push str.EPID
push 0x613dac
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
cmp dword [0x752d8c], esi
je 0x4292eb
push str._AVPMAPP__StartMonitor_1
push esi
call fcn.004f0f30
add esp, 8
push 0x208
push 0x6af4b8
call fcn.004f0410
add esp, 8
cmp eax, edi
je 0x429362
cmp byte [0x6af4b8], 0
jne 0x429362
mov byte [ebp - 0x42c], 0
push 0x103
push esi
lea edx, [ebp - 0x42b]
push edx
call fcn.005dfd60
push str._AVPMAPP__Unable_to_get_eScanInstallDir_
push esi
call fcn.004f0f30
lea eax, [ebp - 0x42c]
push eax
push 0x6af4b8
call fcn.0054c640
lea ecx, [ebp - 0x42c]
push ecx
push str._AVPMAPP__eScan_Not_Present__Err:___s_
push esi
call fcn.004f0f30
add esp, 0x28
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x42b37b
push 0x6af4b8
call fcn.004e24e0
add esp, 4
cmp dword [0x6b079c], esi
je 0x429483
mov ecx, 0x6af4b8
lea edx, [ebp - 0x42c]
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429386
push 0x104
lea edx, [ebp - 0x42c]
push edx
push 0x6af4b8
call fcn.004e82a0
push esi
push 0x61b06c
lea eax, [ebp - 0x42c]
push eax
call fcn.004f5880
add esp, 0x18
cmp eax, 0xffffffff
je 0x429483
mov dword [ebp - 0x20d8], esi
lea ecx, [ebp - 0x42c]
push ecx
lea edx, [ebp - 0x83c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x60c81c
push 0x61b06c
lea eax, [ebp - 0x83c]
push eax
call fcn.004e9030
lea ecx, [ebp - 0x20d8]
push ecx
call fcn.004f77e0
add esp, 0x10
cmp eax, esi
je 0x429483
lea edx, [ebp - 0x83c]
push edx
call fcn.004e24e0
add esp, 4
lea eax, [ebp - 0x83c]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x429420
mov ecx, dword [str.reload.exe]
mov dword [eax], ecx
mov edx, dword [0x61b064]
mov dword [eax + 4], edx
mov cx, word [0x61b068]
mov word [eax + 8], cx
mov dl, byte [0x61b06a]
mov byte [eax + 0xa], dl
push edi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x83c]
push eax
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x429474
lea ecx, [ebp - 0x83c]
push ecx
call fcn.004e0670
add esp, 4
mov edx, dword [ebp - 0x20d8]
push edx
call fcn.004f7860
add esp, 4
cmp dword [0x752d8c], esi
je 0x42949e
push 0x6af4b8
push str._AVPMAPP__StartMonitor__dir___s_
push esi
call fcn.004f0f30
add esp, 0xc
push 0x61b038
lea eax, [ebp - 0x328]
push eax
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4294e6
push 0x61b034
lea ecx, [ebp - 0x328]
push ecx
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4294e6
push 0x61b030
lea edx, [ebp - 0x328]
push edx
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x429542
mov dword [0x67e110], esi
push 0x6af4b8
lea eax, [ebp - 0x328]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x328]
push ecx
call fcn.004e24e0
add esp, 4
push str.Template
lea edx, [ebp - 0x328]
push edx
call ebx
lea eax, [ebp - 0x328]
push eax
call fcn.004ec720
add esp, 4
test eax, eax
jne 0x429542
push 0x60c81c
lea ecx, [ebp - 0x328]
push ecx
call fcn.004e9050
add esp, 8
cmp dword [0x6b07a4], esi
je 0x429690
push 0x6af4b8
lea edx, [ebp - 0x328]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x328]
push eax
call fcn.004e24e0
add esp, 4
push 0x61b02c
lea ecx, [ebp - 0x328]
push ecx
call ebx
push esi
push edi
lea edx, [ebp - 0x328]
push edx
call fcn.004f6110
push 0x6af4b8
lea eax, [ebp - 0x328]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x328]
push ecx
call fcn.004e24e0
add esp, 4
push str.Template
lea edx, [ebp - 0x328]
push edx
call ebx
push esi
push edi
lea eax, [ebp - 0x328]
push eax
call fcn.004f6110
push 0x6b07d0
lea ecx, [ebp - 0x328]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x328]
push edx
call fcn.004e24e0
add esp, 4
push 0x612e88
lea eax, [ebp - 0x328]
push eax
call ebx
push edi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x328]
push ecx
call fcn.004e8950
add esp, 0x18
test eax, eax
je 0x42961e
lea edx, [ebp - 0x328]
push edx
call fcn.004eaae0
add esp, 4
push esi
push edi
lea eax, [ebp - 0x328]
push eax
call fcn.004f6110
push 0x6b07d0
lea ecx, [ebp - 0x328]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x328]
push edx
call fcn.004e24e0
add esp, 4
push str.proxev1.ev1
lea eax, [ebp - 0x328]
push eax
call ebx
push edi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x328]
push ecx
call fcn.004e8950
add esp, 0x18
test eax, eax
je 0x429682
lea edx, [ebp - 0x328]
push edx
call fcn.004eaae0
add esp, 4
push esi
push edi
lea eax, [ebp - 0x328]
push eax
call fcn.004f6110
push 0x208
push 0x6af6c0
push 0x6af4b8
call fcn.004e82a0
push edi
push 0x208
push 0x6aec98
push str.LogPath
call fcn.00430300
add esp, 0x1c
cmp byte [0x6aec98], 0
je 0x429719
push 0x6aec98
call fcn.004ec720
add esp, 4
test eax, eax
je 0x429710
cmp dword [0x6b07a4], esi
je 0x4296f7
push 0x6aec98
call fcn.004e2520
add esp, 4
push esi
push edi
push 0x6aec98
call fcn.004f6110
push 0x6aec98
call fcn.004e24e0
add esp, 4
push 0x61b018
push 0x6aec98
call ebx
cmp byte [0x6aec98], 0
jne 0x429786
push 0x6af4b8
push str._sLOG_
push 0x6aec98
call fcn.005dfb23
push esi
push 0x6aec98
call fcn.004e8c10
add esp, 0x14
cmp eax, edi
jne 0x429774
mov eax, 0x6aec98
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x429745
mov ecx, dword [0x61b018]
mov dword [eax], ecx
mov edx, dword [0x61b01c]
mov dword [eax + 4], edx
mov cx, word [0x61b020]
mov word [eax + 8], cx
mov dl, byte [0x61b022]
mov byte [eax + 0xa], dl
jmp 0x429786
push 0x61b018
push 0x6aec98
call fcn.005dfb23
add esp, 8
cmp dword [0x752d8c], esi
je 0x4297a1
push 0x6aec98
push str._AVPMAPP__MonVirLog___s
push esi
call fcn.004f0f30
add esp, 0xc
mov ecx, 0x6aec98
mov edx, 0x6b0e00
jmp 0x4297b0
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x4297b0
push str.TcpPort.log
push 0x61b018
push 0x6b0e00
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x4297dc
mov byte [0x6b0e00], al
mov ecx, 0x6aec98
mov edx, 0x6b1008
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x4297e6
push str.FScanned.log
push 0x61b018
push 0x6b1008
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x429812
mov byte [0x6b1008], al
mov ecx, 0x6aec98
mov edx, 0x6b1210
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429820
push str.DisInfFL.log
push 0x61b018
push 0x6b1210
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x42984c
mov byte [0x6b1210], al
mov ecx, 0x6aec98
mov edx, 0x6b1418
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429856
push str.eScanMirror.log
push 0x61b018
push 0x6b1418
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x4298a9
mov eax, dword [str.eScanMirror.log]
mov dword [0x6b1418], eax
mov ecx, dword [0x61afbc]
mov dword [0x6b141c], ecx
mov edx, dword [0x61afc0]
mov dword [0x6b1420], edx
mov eax, dword [0x61afc4]
mov dword [0x6b1424], eax
mov ecx, 0x6aec98
mov edx, 0x6b1620
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x4298b3
push str.DirChng.log
push 0x61b018
push 0x6b1620
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x4298df
mov byte [0x6b1620], al
push 0x6b07d0
push 0x6aeea0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x6aeea0
call fcn.004e24e0
add esp, 4
push str.proxev1.ev1
push 0x6aeea0
call ebx
mov ecx, 0x6aec98
mov edx, 0x6b1828
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429912
push str.UAgent.log
push 0x61b018
push 0x6b1828
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x42993e
mov byte [0x6b1828], al
mov ecx, 0x6aec98
mov edx, 0x6b1a30
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429948
push str.DlxCache.log
push 0x61b018
push 0x6b1a30
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x429974
mov byte [0x6b1a30], al
mov ecx, 0x6aec98
mov edx, 0x6b1c38
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429980
push str.SuperCL.log
push 0x61b018
push 0x6b1c38
call fcn.004e9030
add esp, 0xc
test eax, eax
jne 0x4299ac
mov byte [0x6b1c38], al
push edi
push 0x208
push 0x6af0a8
push str.LogPath
call fcn.00430300
add esp, 0x10
cmp byte [0x6af0a8], 0
je 0x429a04
push 0x6af0a8
call fcn.004ec720
add esp, 4
test eax, eax
je 0x4299f7
push 0x6af0a8
call fcn.004e24e0
add esp, 4
push str.FilesMod.log
push 0x6af0a8
call ebx
cmp byte [0x6af0a8], 0
jne 0x429aa0
mov ecx, 0x6af4b8
mov edx, 0x6af0a8
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429a10
push 0x6af0a8
call fcn.004e24e0
add esp, 4
mov eax, 0x6af0a8
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x429a30
mov ecx, dword [0x61af6c]
mov dword [eax], ecx
mov dl, byte [0x61af70]
mov byte [eax + 4], dl
push esi
push 0x6af0a8
call fcn.004e8c10
add esp, 8
cmp eax, edi
jne 0x429a8e
mov eax, 0x6af0a8
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x429a61
mov ecx, dword [str.FilesMod.log]
mov dword [eax], ecx
mov edx, dword [0x61af78]
mov dword [eax + 4], edx
mov ecx, dword [0x61af7c]
mov dword [eax + 8], ecx
mov dl, byte [0x61af80]
mov byte [eax + 0xc], dl
jmp 0x429aa0
push str.FilesMod.log
push 0x6af0a8
call fcn.005dfb23
add esp, 8
push 0x6aec98
push 0x6b0310
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [0x6af2b0], 0
jne 0x429afc
push edi
push 0x208
push 0x6af2b0
push str.DatabasePath
call fcn.00430300
add esp, 0x10
cmp byte [0x6af2b0], 0
jne 0x429afc
cmp byte [0x6af4b8], 0
je 0x429afc
mov ecx, 0x6af4b8
mov edx, 0x6af2b0
lea ecx, [ecx]
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x429af0
call fcn.004f0de0
test eax, eax
je 0x429b13
mov dword [0x6ae144], edi
mov dword [ebp - 0x20cc], edi
jmp 0x429b19
mov dword [ebp - 0x20cc], esi
lea eax, [ebp - 0x20cc]
push eax
push str.IgnoreLSO
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
mov eax, dword [ebp - 0x20cc]
cmp eax, esi
jne 0x429b41
push edi
jmp 0x429b47
cmp eax, 2
jne 0x429b4f
push eax
call fcn.005ca310
add esp, 4
cmp byte [0x6af8c8], 0
jne 0x429b6f
push 0x6af4b8
push str._sVistaeScanMon.lan
push 0x6af8c8
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6afff8], 0
jne 0x429b8f
push 0x6af4b8
push 0x61af28
push 0x6afff8
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6b0100], 0
jne 0x429baf
push 0x6af4b8
push str._sESCANSET.INI
push 0x6b0100
call fcn.005dfb23
add esp, 0xc
cmp byte [0x75f148], 0
jne 0x429bcf
push 0x6af4b8
push str._sNWCONFIG.DAT
push 0x75f148
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6afad0], 0
jne 0x429c3b
mov dword [ebp - 0x20d4], esi
push 0x6af4b8
push str._sCLCACHE.DAT
push 0x6afad0
call fcn.005dfb23
push esi
push esi
push esi
lea ecx, [ebp - 0x20d4]
push ecx
push 0x6afad0
call fcn.004ec5a0
add esp, 0x20
test eax, eax
jne 0x429c3b
mov eax, dword [ebp - 0x20d4]
cmp eax, 0x1400000
jb 0x429c3b
shr eax, 0x14
push eax
push 0x6afad0
push str._AVPMAPP__Clearing__s__size_too_large:__u_MB_
push esi
call fcn.004f0f30
push 0x6afad0
call fcn.004e0670
add esp, 0x14
cmp byte [0x6afbd8], 0
jne 0x429c5b
push 0x6af4b8
push str._sCLINFC.DAT
push 0x6afbd8
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6afce0], 0
jne 0x429c7b
push 0x6af4b8
push str._sCLNFC.DAT
push 0x6afce0
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6afde8], 0
jne 0x429c9b
push 0x6af4b8
push str._sCLPRC.DAT
push 0x6afde8
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6afef0], 0
jne 0x429dbe
mov dword [ebp - 0x20c4], esi
push 0x6af4b8
push 0x61ae90
push 0x6afef0
call fcn.005dfb23
add esp, 0xc
lea edx, [ebp - 0x20c4]
push edx
push str.SSEvalDone
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
test al, al
jne 0x429d07
mov dword [ebp - 0x20c4], edi
push edi
push str.SSEvalDone
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
mov dword [ebp - 0x20c4], esi
jmp 0x429d13
cmp dword [ebp - 0x20c4], esi
jne 0x429dbe
mov byte [ebp - 0x105c], 0
push 0x103
push esi
lea eax, [ebp - 0x105b]
push eax
call fcn.005dfd60
mov byte [ebp - 0xe54], 0
push 0x103
push esi
lea ecx, [ebp - 0xe53]
push ecx
call fcn.005dfd60
add esp, 0x18
push 0x6afef0
push 0x104
lea edx, [ebp - 0xe54]
push edx
push 0x61ae80
push str.SecServerLastValue
push 0x60da74
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call ebx
push 0x6afef0
push 0x104
lea eax, [ebp - 0x105c]
push eax
push 0x612e34
push str.SecServer
push 0x60da74
call ebx
cmp byte [ebp - 0xe54], 0x59
jne 0x429dc4
cmp byte [ebp - 0x105c], 0x30
jne 0x429dc4
push 0x6afef0
push esi
push str.SecServer
push 0x60da74
call fcn.004e0cb0
add esp, 0x10
jmp 0x429dc4
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [0x6b0208], 0
jne 0x429de4
push 0x6af4b8
push str._sESERV.INI
push 0x6b0208
call fcn.005dfb23
add esp, 0xc
cmp byte [0x6afff8], 0
je 0x42a11b
push esi
push esi
push esi
push esi
push 0x6afff8
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x42a11b
call fcn.004d96c0
test eax, eax
je 0x42a11b
mov ecx, dword [str.c:progra1]
mov dword [ebp - 0x1160], ecx
mov edx, dword [0x61ae6c]
mov dword [ebp - 0x115c], edx
mov eax, dword [0x61ae70]
mov dword [ebp - 0x1158], eax
mov ecx, dword [str.c:progra2]
mov dword [ebp - 0xb48], ecx
mov edx, dword [0x61ae60]
mov dword [ebp - 0xb44], edx
mov eax, dword [0x61ae64]
mov dword [ebp - 0xb40], eax
push esi
lea ecx, [ebp - 0x1160]
push ecx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x42a11b
push esi
lea edx, [ebp - 0xb48]
push edx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x42a11b
push esi
push 0x6afff8
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.eScanLogFile
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x429efa
push str.C:PROGRA2_
push str.C:PROGRA1_
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x429efa
push 0x6afff8
lea edx, [ebp - 0x120]
push edx
push str.eScanLogFile
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afff8
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.QuarantineDirectory
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x429f67
push str.C:PROGRA2_
push str.C:PROGRA1_
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x429f67
push 0x6afff8
lea edx, [ebp - 0x120]
push edx
push str.QuarantineDirectory
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afff8
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.ReportDirectory
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x429fd4
push str.C:PROGRA2_
push str.C:PROGRA1_
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x429fd4
push 0x6afff8
lea edx, [ebp - 0x120]
push edx
push str.ReportDirectory
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afff8
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.DestDir
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a041
push str.C:PROGRA2_
push str.C:PROGRA1_
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a041
push 0x6afff8
lea edx, [ebp - 0x120]
push edx
push str.DestDir
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afff8
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.TempDir
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a0ae
push str.C:PROGRA2_
push str.C:PROGRA1_
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a0ae
push 0x6afff8
lea edx, [ebp - 0x120]
push edx
push str.TempDir
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afff8
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.LogfilePath
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a11b
push str.C:PROGRA2_
push str.C:PROGRA1_
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a11b
push 0x6afff8
lea edx, [ebp - 0x120]
push edx
push str.LogfilePath
push str.General
call fcn.004e0cb0
add esp, 0x10
cmp byte [0x6afef0], 0
je 0x42a5ac
push esi
push esi
push esi
push esi
push 0x6afef0
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x42a5ac
call fcn.004d96c0
test eax, eax
je 0x42a39e
mov eax, dword [str.c:progra1]
mov dword [ebp - 0xf58], eax
mov ecx, dword [0x61ae6c]
mov dword [ebp - 0xf54], ecx
mov edx, dword [0x61ae70]
mov dword [ebp - 0xf50], edx
mov eax, dword [str.c:progra2]
mov dword [ebp - 0xd50], eax
mov ecx, dword [0x61ae60]
mov dword [ebp - 0xd4c], ecx
mov edx, dword [0x61ae64]
mov dword [ebp - 0xd48], edx
push esi
lea eax, [ebp - 0xf58]
push eax
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x42a39e
push esi
lea ecx, [ebp - 0xd50]
push ecx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x42a39e
push esi
push 0x6afef0
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.TempDir
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a231
push str.C:PROGRA2_
push str.C:PROGRA1_
lea eax, [ebp - 0x120]
push eax
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a231
push 0x6afef0
lea ecx, [ebp - 0x120]
push ecx
push str.TempDir
push 0x60da74
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afef0
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.LogfilePath
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a29e
push str.C:PROGRA2_
push str.C:PROGRA1_
lea eax, [ebp - 0x120]
push eax
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a29e
push 0x6afef0
lea ecx, [ebp - 0x120]
push ecx
push str.LogfilePath
push 0x60da74
call fcn.004e0cb0
add esp, 0x10
cmp byte [0x6b0208], 0
je 0x42a39e
push esi
push esi
push esi
push esi
push 0x6b0208
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x42a39e
push esi
push 0x6b0208
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.TempDir
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a331
push str.C:PROGRA2_
push str.C:PROGRA1_
lea eax, [ebp - 0x120]
push eax
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a331
push 0x6b0208
lea ecx, [ebp - 0x120]
push ecx
push str.TempDir
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6b0208
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.LogDir
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a39e
push str.C:PROGRA2_
push str.C:PROGRA1_
lea eax, [ebp - 0x120]
push eax
call fcn.004e9030
add esp, 0xc
test eax, eax
je 0x42a39e
push 0x6b0208
lea ecx, [ebp - 0x120]
push ecx
push str.LogDir
push str.General
call fcn.004e0cb0
add esp, 0x10
push esi
push 0x6afef0
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.TempDir
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a3e4
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x42a418
push 0x6af4b8
push str._sFTPTEMP
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push 0x6afef0
lea edx, [ebp - 0x120]
push edx
push str.TempDir
push 0x60da74
call fcn.004e0cb0
add esp, 0x1c
push esi
push 0x6afef0
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.LogfilePath
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a45e
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x42a492
push 0x6af4b8
push str._sLOG
lea edx, [ebp - 0x120]
push edx
call fcn.005dfb23
push 0x6afef0
lea eax, [ebp - 0x120]
push eax
push str.LogfilePath
push 0x60da74
call fcn.004e0cb0
add esp, 0x1c
cmp byte [0x6b0208], 0
je 0x42a5ac
push esi
push esi
push esi
push esi
push 0x6b0208
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x42a5ac
push esi
push 0x6b0208
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0x60c81c
push str.TempDir
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a4fe
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x42a532
push 0x6af4b8
push str._sFTPTEMP
lea eax, [ebp - 0x120]
push eax
call fcn.005dfb23
push 0x6b0208
lea ecx, [ebp - 0x120]
push ecx
push str.TempDir
push str.General
call fcn.004e0cb0
add esp, 0x1c
push esi
push 0x6b0208
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.LogDir
push str.General
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x120], 0
je 0x42a578
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x42a5ac
push 0x6af4b8
push str._sLOG
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push 0x6b0208
lea edx, [ebp - 0x120]
push edx
push str.LogDir
push str.General
call fcn.004e0cb0
add esp, 0x1c
push edi
push esi
push esi
push esi
push esi
push 0x6afef0
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x42a5d5
mov dword [0x6b0764], edi
push 0x6afef0
call fcn.00416060
add esp, 4
cmp dword [0x6ae144], esi
je 0x42a75e
mov byte [ebp - 0x1264], 0
push 0x103
push esi
lea eax, [ebp - 0x1263]
push eax
call fcn.005dfd60
push esi
push 0x104
lea ecx, [ebp - 0x1264]
push ecx
push 0x60c81c
push str.server
push 0x60c810
call fcn.004efe40
add esp, 0x24
cmp byte [ebp - 0x1264], 0x30
jne 0x42a6ad
mov dword [0x6b0768], edi
push 0x6afef0
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x612e34
push str.SecServer
push 0x60da74
call ebx
cmp byte [ebp - 0x120], 0x31
jne 0x42a66c
mov dword [0x6b0774], edi
call fcn.0044ad50
jmp 0x42a80b
mov dword [0x6b0774], esi
push edi
push str.eScanRMM
push 2
push esi
push esi
push str.2219
push 0x66da74
call fcn.005d8ee0
push 2
push str.eScanLiveConnect
push 2
push esi
push esi
push str.8098
push 0x66da74
call fcn.005d8ee0
add esp, 0x38
jmp 0x42a80b
cmp dword [0x6b0764], esi
je 0x42a80b
push 0x6afef0
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.DownloadFromAnotherServer
push 0x60da74
call ebx
cmp byte [ebp - 0x120], 0x31
jne 0x42a80b
mov dword [0x6b0770], edi
push 0x6afef0
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0x60c81c
push str.httphost
push 0x60da74
call ebx
push esi
push str.mwti.
lea edx, [ebp - 0x120]
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x42a80b
push esi
push str.escanav.
lea eax, [ebp - 0x120]
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x42a80b
push esi
push str.microworldsystems.
lea ecx, [ebp - 0x120]
push ecx
jmp 0x42a7f8
cmp dword [0x6b0764], esi
je 0x42a80b
push 0x6afef0
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0x60c81c
push str.DownloadFromAnotherServer
push 0x60da74
call ebx
cmp byte [ebp - 0x120], 0x31
jne 0x42a80b
push 0x6afef0
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0x60c81c
push str.httphost
push 0x60da74
call ebx
push esi
push str.mwti.
lea ecx, [ebp - 0x120]
push ecx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x42a80b
push esi
push str.escanav.
lea edx, [ebp - 0x120]
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x42a80b
push esi
push str.microworldsystems.
lea eax, [ebp - 0x120]
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x42a80b
mov dword [0x6b0768], edi
call fcn.00415960
push 0x6afef0
push 0x208
lea ecx, [ebp - 0x328]
push ecx
push 0x615678
push str.AutomaticDownload
push 0x60da74
call ebx
lea edx, [ebp - 0x328]
push edx
call fcn.005e0909
neg eax
sbb eax, eax
neg eax
mov dword [0x67e104], eax
push 0x740
push esi
push 0x6ae148
call fcn.005dfd60
add esp, 0x10
push 0x6ae148
push 0x6ae888
push 0x6af4b8
call fcn.0051e1d0
cmp eax, edi
jne 0x42a87f
mov dword [0x6ae130], edi
jmp 0x42a967
mov byte [ebp - 0xc4c], 0
push 0x103
push esi
lea eax, [ebp - 0xc4b]
push eax
call fcn.005dfd60
mov byte [ebp - 0x120], 0
push 0x103
push esi
lea ecx, [ebp - 0x11f]
push ecx
call fcn.005dfd60
add esp, 0x18
lea edx, [ebp - 0xc4c]
push edx
call fcn.004ef9d0
cmp eax, edi
jne 0x42a93f
mov byte [ebp - 0x1570], 0
push 0x103
push esi
lea eax, [ebp - 0x156f]
push eax
call fcn.005dfd60
mov byte [ebp - 0x20c0], 0
push 0x103
push esi
lea ecx, [ebp - 0x20bf]
push ecx
call fcn.005dfd60
push 0x63c
push esi
lea edx, [ebp - 0x1fbc]
push edx
call fcn.005dfd60
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x20c0]
push ecx
lea edx, [ebp - 0x1570]
push edx
push 0x60c810
call fcn.00413070
lea ecx, [ebp - 0x120]
push ecx
push eax
push str._AVPMAPP__DBStatus___u___s_
push esi
call fcn.004f0f30
add esp, 0x44
jmp 0x42a967
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0xc4c]
push eax
call fcn.0054c640
lea ecx, [ebp - 0x120]
push ecx
push str._AVPMAPP__eScan_Not_Present___s_
push esi
call fcn.004f0f30
add esp, 0x14
cmp dword [0x752d8c], esi
je 0x42a97d
push str._AVPMAPP__StartMonitor_2
push esi
call fcn.004f0f30
add esp, 8
cmp dword [0x6ae130], edi
jne 0x42a9b7
cmp byte [0x6ae888], 0
jne 0x42a9b7
push esi
push str.eScanBd
push esi
push 0x6ae888
call fcn.0051db00
push esi
push 0x6ae148
push 0x6ae888
call fcn.004ff5f0
test eax, eax
je 0x42b36e
push 0x6ae888
call fcn.004e24e0
add esp, 4
cmp dword [0x6b0764], esi
je 0x42b189
push 0x6af4b8
push str._sURLSQ.DB
lea edx, [ebp - 0x120]
push edx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42aa1e
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42aa1e
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.005010e0
push 0x6af4b8
push str._sURLSQ.DB_SHM
lea eax, [ebp - 0x120]
push eax
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42aa6c
lea edx, [ebp - 0x120]
push edx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42aa6c
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.005010e0
push 0x6af4b8
push str._sURLSQ.DB_WAL
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42aaba
lea eax, [ebp - 0x120]
push eax
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42aaba
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.005010e0
push 0x6af4b8
push str._sPHLISTSQ.DB
lea edx, [ebp - 0x120]
push edx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42ab08
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42ab08
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.005010e0
push 0x6af4b8
push str._sPHLISTSQ.DB_SHM
lea eax, [ebp - 0x120]
push eax
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42ab56
lea edx, [ebp - 0x120]
push edx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42ab56
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.005010e0
push 0x6af4b8
push str._sPHLISTSQ.DB_WAL
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42aba4
lea eax, [ebp - 0x120]
push eax
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42aba4
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.005010e0
push 0x6af4b8
push str._svdb64
lea edx, [ebp - 0x120]
push edx
call fcn.005dfb23
push esi
push esi
push str.BACKUP..avpmapp.exe
lea eax, [ebp - 0x120]
push eax
call fcn.00517250
push 0x6af4b8
push str._svdb32
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push esi
push esi
push str.BACKUP..avpmapp.exe
lea edx, [ebp - 0x120]
push edx
call fcn.00517250
push esi
push esi
push str.phlist.avs
push 0x6af4b8
call fcn.00517250
add esp, 0x48
push esi
push esi
push str.url.avs
push 0x6af4b8
call fcn.00517250
add esp, 0x10
cmp byte [0x6ae888], 0
je 0x42ac5d
push 0x6ae888
call fcn.004ec720
add esp, 4
test eax, eax
je 0x42ac5d
push esi
push esi
push str.phlist.avs
push 0x6ae888
call fcn.00517250
push esi
push esi
push str.url.avs
push 0x6ae888
call fcn.00517250
add esp, 0x20
push str.__ESCANDRIVE__PUBUPDATE
lea eax, [ebp - 0x42c]
push eax
call fcn.005dfb23
add esp, 8
push edi
lea ecx, [ebp - 0x42c]
push ecx
call fcn.00515650
push esi
lea edx, [ebp - 0x42c]
push edx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x42acbb
push esi
push esi
push str.phlist.avs
lea eax, [ebp - 0x42c]
push eax
call fcn.00517250
push esi
push esi
push str.url.avs
lea ecx, [ebp - 0x42c]
push ecx
call fcn.00517250
add esp, 0x20
push str.phnl.avs
push 0x6af4b8
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x42ad37
push str.phnlsq.db
push 0x6af4b8
call fcn.004ec4e0
add esp, 8
test eax, eax
je 0x42ad37
push str.phnl.avs
push 0x6af4b8
call fcn.005c4c60
add esp, 8
test eax, eax
jne 0x42ad37
cmp dword [0x72c248], esi
jne 0x42ad37
mov dword [0x72c248], edi
push esi
push edi
push str._RELOAD__AVS_Notification_Thread_Started_B1_...
push 0x6aec98
call fcn.004311c0
push esi
push esi
push 0x5c84d0
call fcn.005e07ac
push esi
push eax
push str.AVM_1w
call fcn.00411ca0
add esp, 0x28
push str.urnl.avs
push 0x6af4b8
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x42adb3
push str.urnlsq.db
push 0x6af4b8
call fcn.004ec4e0
add esp, 8
test eax, eax
je 0x42adb3
push str.urnl.avs
push 0x6af4b8
call fcn.005c4c60
add esp, 8
test eax, eax
jne 0x42adb3
cmp dword [0x72c248], esi
jne 0x42adb3
mov dword [0x72c248], edi
push esi
push edi
push str._RELOAD__AVS_Notification_Thread_Started_B2_...
push 0x6aec98
call fcn.004311c0
push esi
push esi
push 0x5c84d0
call fcn.005e07ac
push esi
push eax
push str.AVM_1x
call fcn.00411ca0
add esp, 0x28
mov byte [ebp - 0x146c], 0
push 0x207
push esi
lea edx, [ebp - 0x146b]
push edx
call fcn.005dfd60
mov byte [ebp - 0x83c], 0
push 0x207
push esi
lea eax, [ebp - 0x83b]
push eax
call fcn.005dfd60
mov byte [ebp - 0xa44], 0
push 0x207
push esi
lea ecx, [ebp - 0xa43]
push ecx
call fcn.005dfd60
add esp, 0x24
mov dword [ebp - 0x20dc], esi
mov ecx, 0x6af4b8
lea edx, [ebp - 0x83c]
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x42ae12
lea edx, [ebp - 0x83c]
push edx
call fcn.004e24e0
push 0x208
lea eax, [ebp - 0x146c]
push eax
lea ecx, [ebp - 0x83c]
push ecx
call fcn.004e82a0
add esp, 0x10
lea edx, [ebp - 0x146c]
push edx
lea eax, [ebp - 0x83c]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call ebx
lea ecx, [ebp - 0x83c]
push ecx
call fcn.004e24e0
lea edx, [ebp - 0xa44]
push edx
call fcn.004eefa0
add esp, 8
cmp eax, esi
je 0x42aef4
cmp byte [ebp - 0xa44], 0
je 0x42aef4
lea eax, [ebp - 0xa44]
push eax
call fcn.004e24e0
push 0x208
lea ecx, [ebp - 0x146c]
push ecx
lea edx, [ebp - 0xa44]
push edx
call fcn.004e82a0
add esp, 0x10
lea eax, [ebp - 0x146c]
push eax
lea ecx, [ebp - 0xa44]
push ecx
call ebx
lea edx, [ebp - 0xa44]
push edx
call fcn.004e24e0
add esp, 4
cmp byte [ebp - 0xa44], 0
je 0x42aef4
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0x83c]
push ecx
call fcn.004dd620
add esp, 8
test eax, eax
je 0x42aef4
mov dword [ebp - 0x20dc], edi
jmp 0x42aefc
cmp esi, esi
je 0x42b189
mov byte [ebp - 0x634], 0
push 0x207
push esi
lea edx, [ebp - 0x633]
push edx
call fcn.005dfd60
add esp, 0xc
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0x634]
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x42af24
lea eax, [ebp - 0x634]
push eax
call fcn.004e24e0
add esp, 4
lea eax, [ebp - 0x634]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x42af46
mov ecx, dword [str.AVPLite]
mov dword [eax], ecx
mov edx, dword [0x61abf8]
mov dword [eax + 4], edx
push esi
lea eax, [ebp - 0x634]
push eax
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x42b189
push esi
push esi
push str.phlist.avs
lea ecx, [ebp - 0x634]
push ecx
call fcn.00517250
push esi
push esi
push str.url.avs
lea edx, [ebp - 0x634]
push edx
call fcn.00517250
lea eax, [ebp - 0x634]
push eax
call fcn.004e24e0
lea ecx, [ebp - 0x634]
push ecx
push str._sURLSQ.DB
lea edx, [ebp - 0x120]
push edx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e8950
add esp, 0x48
test eax, eax
jne 0x42aff9
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42aff9
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.005010e0
lea eax, [ebp - 0x634]
push eax
push str._sURLSQ.DB_SHM
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42b049
lea eax, [ebp - 0x120]
push eax
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42b049
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.005010e0
lea edx, [ebp - 0x634]
push edx
push str._sURLSQ.DB_WAL
lea eax, [ebp - 0x120]
push eax
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42b099
lea edx, [ebp - 0x120]
push edx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42b099
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.005010e0
lea ecx, [ebp - 0x634]
push ecx
push str._sPHLISTSQ.DB
lea edx, [ebp - 0x120]
push edx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42b0e9
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42b0e9
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.005010e0
lea eax, [ebp - 0x634]
push eax
push str._sPHLISTSQ.DB_SHM
lea ecx, [ebp - 0x120]
push ecx
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea edx, [ebp - 0x120]
push edx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42b139
lea eax, [ebp - 0x120]
push eax
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42b139
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.005010e0
lea edx, [ebp - 0x634]
push edx
push str._sPHLISTSQ.DB_WAL
lea eax, [ebp - 0x120]
push eax
call fcn.005dfb23
push edi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x120]
push ecx
call fcn.004e8950
add esp, 0x24
test eax, eax
jne 0x42b189
lea edx, [ebp - 0x120]
push edx
call fcn.004e0670
add esp, 4
test eax, eax
jne 0x42b189
push esi
lea eax, [ebp - 0x120]
push eax
call fcn.005010e0
mov dword [0x6ae128], esi
mov dword [0x6ae12c], esi
cmp dword [0x752d8c], esi
je 0x42b1ab
push str._AVPMAPP__InitMutex___szMonVirLogMutex
push esi
call fcn.004f0f30
add esp, 8
push 0x67ca44
push esi
push 0x6afcdc
call fcn.005093e0
add esp, 0xc
cmp eax, edi
jne 0x42b341
cmp dword [0x6afcdc], esi
je 0x42b341
cmp dword [0x752d8c], esi
je 0x42b1e8
push str._AVPMAPP__Reading_reg_val...
push esi
call fcn.004f0f30
add esp, 8
push esi
push 4
push esi
push str.Debug
call fcn.00430300
add esp, 0x10
mov dword [0x6ae138], eax
cmp eax, 4
jne 0x42b20f
mov dword [0x72bcb0], edi
mov dword [0x6ae138], esi
push esi
push 4
push esi
push str.DirChangeDebug
call fcn.00430300
mov dword [0x72bcb8], eax
push esi
push 4
push esi
push str.DebugA
call fcn.00430300
mov dword [0x6b0534], eax
push esi
push 4
push esi
push str.DebugX
call fcn.00430300
mov ebx, eax
push esi
push 4
push esi
push str.DebugX1
call fcn.00430300
add esp, 0x40
mov dword [0x6b0538], eax
test bl, 1
je 0x42b266
mov dword [0x72bb6c], edi
test bl, 2
je 0x42b271
mov dword [0x6b0544], edi
test bl, 4
je 0x42b2ab
mov dword [0x72bb78], edi
push esi
push 4
push esi
push str.DebugY
call fcn.00430300
add esp, 0x10
test al, 1
je 0x42b297
mov dword [0x72bb7c], edi
test al, 2
je 0x42b2a1
mov dword [0x72bb80], edi
test al, 4
je 0x42b2ab
mov dword [0x72bb84], edi
test bl, 8
je 0x42b2b6
mov dword [0x6b053c], edi
test bl, 0x10
je 0x42b2c1
mov dword [0x6b077c], edi
test bl, 0x20
je 0x42b2cc
mov dword [0x6b0540], edi
test bl, 0x40
je 0x42b2d7
mov dword [0x6b0548], edi
test bl, bl
jns 0x42b2e1
mov dword [0x6b054c], edi
cmp dword [0x6ae130], esi
je 0x42b2f1
cmp dword [0x6b0530], esi
jne 0x42b310
mov eax, dword [0x6940e4]
mov ecx, eax
add eax, edi
mov dword [0x6940e4], eax
push ecx
push 0x2710
push esi
push 2
call fcn.0052e1c0
add esp, 0x10
cmp dword [0x752d8c], esi
je 0x42b326
push str._AVPMAPP__InitService__
push esi
call fcn.004f0f30
add esp, 8
call fcn.00426c10
mov dword [ebp - 0x20c8], eax
cmp dword [0x752d8c], esi
je 0x42b36e
push str._AVPMAPP__Out_of_InitService__
push esi
jmp 0x42b366
push 0x67ca44
push str._AVPMAPP__Unable_to_InitMutex___s__
push esi
call fcn.004f0f30
add esp, 0xc
jmp 0x42b36e
call fcn.004f0f30
add esp, 8
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x20c8]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret