Function at 0x572fc0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fc68f
mov eax, dword fs:[0]
push eax
sub esp, 0x474
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x434], ebx
mov eax, dword [ebx + 0x10]
push ecx
mov dword [ebp - 0x478], eax
call fcn.0057c7a0
mov edi, dword [sym.imp.USER32.dll_IsWindowVisible]
mov esi, eax
push esi
call edi
mov ecx, dword [ebx + 0xcc]
neg eax
sbb eax, eax
and eax, esi
mov dword [ebp - 0x47c], eax
test ecx, ecx
je 0x573048
call fcn.005b6bd0
push eax
call edi
test eax, eax
je 0x573048
mov ecx, dword [ebx + 0xcc]
push 1
mov byte [ebp - 0x419], 1
call fcn.005b6250
jmp 0x573050
mov byte [ebp - 0x419], 0
nop
push 0x270
lea eax, [ebp - 0x410]
mov dword [ebp - 0x448], 1
push 0
push eax
call fcn.00420090
mov esi, dword [ebp - 0x47c]
lea ecx, [ebp - 0x410]
add esp, 8
push esi
push 0xffffffffffffffff
push SysReAllocString
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1c2
push 0x28a
push str.Execute_SFC_scan
push str.UVK_DLG_CLASS
push dword [ebx + 0xc]
call fcn.005c6220
push 4
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0x1c2
push 0x28a
lea ecx, [ebp - 0x410]
mov dword [ebp - 4], 0
call fcn.005b9530
push 0
lea ecx, [ebp - 0x410]
call fcn.005c5730
mov dword [ebp - 0x450], eax
test esi, esi
je 0x5730f0
mov ecx, dword [ebp - 0x478]
push eax
call fcn.005c6150
push 0
lea ecx, [ebp - 0x410]
call fcn.005c44a0
push 0xffffff
call fcn.005c44b0
push ecx
push 0x20
push 0x20
push dword [ebx + 0x20]
mov ecx, 0x9c
call fcn.005c66c0
mov esi, eax
mov dword [ebp - 0x418], esi
push ecx
push 0x20
push 0x20
mov byte [ebp - 4], 1
mov ecx, 0xfb
push dword [ebx + 0x20]
call fcn.005c66c0
mov edi, eax
mov dword [ebp - 0x414], edi
push 0
push str.Arial
push 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x410]
movsd xmm1, qword [0x6edb28]
push 0x320
call fcn.005c42b0
push ecx
push 0xffffffffffffffff
push 0x20
push 0x20
push 0xa
push 0xa
push esi
lea ecx, [ebp - 0x410]
call fcn.005c0240
push 0xffffffffffffffff
push 0x10000301
push 0x2d
push 0x214
push 5
push 0x2a
push str.Execute_SFC_scan
lea ecx, [ebp - 0x410]
call fcn.005c0890
push 0x1000
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
call fcn.005bda80
push ecx
push 0xffffffffffffffff
push 0x18
push 0x18
push 9
push 0x246
push edi
lea ecx, [ebp - 0x410]
call fcn.005c0240
push 0x186a0
push ecx
push str.Refresh_the_device_list_and_reset_all_fields
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x460], eax
call fcn.005bcaf0
push 0x7f89
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
call fcn.005bebd0
push 0xff000000
push 0x18
push 0x18
push 0xa
push 0x268
lea ecx, [ebp - 0x410]
call fcn.005c1810
movsd xmm1, qword [0x6edb08]
lea ecx, [ebp - 0x410]
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x45c], eax
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x258
push 0x3c
push 0x14
push str.This_feature_lets_you_run_a_customized_SFC_scan._Select_the_desired_options_below.
lea ecx, [ebp - 0x410]
call fcn.005c0890
sub esp, 8
lea ecx, [ebp - 0x410]
push 0x5a
push 0x276
push 0x5a
push 0xa
push str.What_to_scan
call fcn.005c0950
sub esp, 0xc
lea eax, [ebp - 0x410]
push eax
push 0x62439c
push 1
push ecx
push 0x258
push 0x78
push 0x14
push str._Scan_the_integrity_of_all_protected_Windows_files
mov ecx, ebx
call fcn.005491c0
sub esp, 0xc
mov dword [ebp - 0x458], eax
lea eax, [ebp - 0x410]
push eax
push 0x62439c
push 0
push ecx
push 0x8c
push 0x96
push 0x14
push str._Scan_just_one_file:
mov ecx, ebx
call fcn.005491c0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x19a
push 0x96
push 0xa0
push 0
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x464], eax
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x15
push 0x3c
push 0x95
push 0x23f
push str.Browse
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x42c], eax
call fcn.005c1a50
push 0x40
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x44c], eax
call fcn.005bd3f0
sub esp, 8
push 0x37
push 0x276
push 0xbe
push 0xa
push str.Repair_options
lea ecx, [ebp - 0x410]
call fcn.005c0950
sub esp, 0xc
lea eax, [ebp - 0x410]
push eax
push 0
push 1
push ecx
push 0x8c
push 0xdc
push 0x14
push str._Scan_and_repair
mov ecx, ebx
call fcn.005491c0
sub esp, 0xc
mov dword [ebp - 0x43c], eax
lea eax, [ebp - 0x410]
push eax
push 0
push 0
push ecx
push 0x64
push 0xdc
push 0xc8
push str._Scan_only
mov ecx, ebx
call fcn.005491c0
sub esp, 8
mov dword [ebp - 0x468], eax
lea ecx, [ebp - 0x410]
push 0x5a
push 0x276
push 0xff
push 0xa
push str.Offline_options_which_let_you_scan_and_repair_an_offline_system
call fcn.005c0950
sub esp, 0xc
lea eax, [ebp - 0x410]
push eax
push 0
push 0
push ecx
push 0xdc
push 0x11d
push 0x14
push str._Indicate_offline_Windows_dir:
mov ecx, ebx
call fcn.00549240
sub esp, 8
mov dword [ebp - 0x430], eax
lea ecx, [ebp - 0x410]
push 0xffffffffffffffff
push 0x19
push 0x96
push 0x11b
push 0xf0
push 0
call fcn.005c1650
push ecx
push 0xffffffffffffffff
push 0x1a
push 0x3c
push 0x11a
push 0x18b
push str.Browse
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x428], eax
call fcn.005c1a50
push 0x40
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x440], eax
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x46
push 0x11e
push 0x1e0
push str.Boot_dir:
lea ecx, [ebp - 0x410]
call fcn.005c0890
sub esp, 8
lea ecx, [ebp - 0x410]
push 0xffffffffffffffff
push 0x14
push 0x50
push 0x11b
push 0x226
push 0
call fcn.005c1650
sub esp, 0xc
mov dword [ebp - 0x424], eax
lea eax, [ebp - 0x410]
push eax
push 0
push 0
push ecx
push 0xc8
push 0x13b
push 0x14
push str._Indicate_an_offline_log_file:
mov ecx, ebx
call fcn.00549240
movsd xmm0, qword [0x6edab0]
comisd xmm0, xmmword [ebx]
mov dword [ebp - 0x46c], eax
jbe 0x5734f6
push 0x40
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x15e
push 0x13b
push 0xdc
push 0
lea ecx, [ebp - 0x410]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x15
push 0x3c
push 0x13a
push 0x23f
push str.Browse
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x438], eax
call fcn.005c1a50
push 0x40
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x454], eax
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x50
push 0x16a
push 0x14
push str.SFC.EXE
lea ecx, [ebp - 0x410]
call fcn.005c0890
movsd xmm0, qword [0x6edb08]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
lea ecx, [ebp - 0x410]
call fcn.005beb10
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x158], 0
push str._ScanNow
lea ecx, [ebp - 0x160]
movq qword [ebp - 0x160], xmm0
call fcn.005dc570
xorps xmm0, xmm0
mov dword [ebp - 0x170], 0
lea ecx, [ebp - 0x178]
movq qword [ebp - 0x178], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x164], 0
lea ecx, [ebp - 0x16c]
movq qword [ebp - 0x16c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x184]
movq qword [ebp - 0x184], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x14c], 0
lea ecx, [ebp - 0x154]
movq qword [ebp - 0x154], xmm0
call fcn.005dc5e0
sub esp, 8
mov byte [ebp - 4], 7
xorps xmm0, xmm0
mov dword [ebp - 0x188], 0
movq qword [ebp - 0x190], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x184]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x178]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x160]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x190]
call fcn.005dc520
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x226
push 0x168
push 0x5a
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 8
call fcn.005dc190
push eax
lea ecx, [ebp - 0x410]
call fcn.005c0a40
sub esp, 0xc
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x410]
push eax
push 0
push 1
push ecx
push 0x14a
push 0x1a4
push 0x5a
push str._Close_this_dialog_box_after_running_the_command
mov ecx, ebx
call fcn.00549240
movsd xmm1, qword [0x6edb20]
lea ecx, [ebp - 0x410]
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x474], eax
call fcn.005c42b0
push ecx
push 0xffffffffffffffff
push 0x1e
push 0xc8
push 0x19a
push 0x1ae
push str.Run_command
lea ecx, [ebp - 0x410]
call fcn.005c1a50
push fcn.005dc430
push fcn.005dc5e0
push 0x1a
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0x148]
push 0xc
push eax
call fcn.0041e804
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0
lea ecx, [ebp - 0x19c]
movq qword [ebp - 0x19c], xmm0
call fcn.005dc5e0
push 0
mov edx, 3
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x148]
call fcn.00598220
mov dword [ebp - 0x444], eax
test eax, eax
jle 0x573876
mov esi, dword [ebp - 0x434]
lea ebx, [ebp - 0x148]
mov edi, eax
nop word [eax + eax]
push 0
push 1
push 1
push 0
push ecx
mov ecx, esi
call fcn.0057c4e0
push eax
mov ecx, ebx
call fcn.005daa70
test eax, eax
jne 0x573858
push 1
mov ecx, ebx
call fcn.005dc190
push eax
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Windows
mov ecx, ebx
call fcn.005dc190
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc200
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x573858
push 1
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
add ebx, 0xc
sub edi, 1
jne 0x5737c0
mov esi, dword [ebp - 0x418]
mov edi, dword [ebp - 0x414]
mov ebx, dword [ebp - 0x434]
push 1
push 1
lea ecx, [ebp - 0x410]
call fcn.005c3f80
push 0
mov ecx, ebx
call fcn.0057b640
test eax, eax
je 0x5746ca
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx]
cmp eax, 0xfffffffa
je 0x5746ca
lea edx, [ebp - 0x410]
cmp dword [ecx + 0x30], edx
jne 0x574697
cmp eax, dword [ebp - 0x45c]
je 0x5746ca
cmp eax, dword [ebp - 0x460]
je 0x5746aa
mov edx, dword [ebp - 0x458]
cmp eax, edx
jne 0x57391b
push 0x40
push dword [ebp - 0x44c]
lea ecx, [ebp - 0x410]
call fcn.005bd3f0
push 4
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
mov ecx, str._ScanNow
mov eax, str._VerifyOnly
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.005dc510
jmp 0x574631
cmp eax, dword [ebp - 0x464]
je 0x574551
cmp eax, 0xffffffb4
jne 0x573941
mov edx, dword [ebp - 0x42c]
cmp dword [ecx + 0xc], edx
je 0x574551
mov edx, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x44c]
jne 0x573998
push dword [ebp - 0x450]
mov edx, str.Select_protected_file_to_scan
lea ecx, [ebp - 0x154]
push 0
push 0
push 0x1008
push 0
push 0
call fcn.005e1e60
test al, al
je 0x574697
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
jmp 0x574581
cmp eax, dword [ebp - 0x43c]
jne 0x573a72
push 4
push edx
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
je 0x5739cd
push 1
push str._ScanNow
lea ecx, [ebp - 0x160]
call fcn.005dc260
jmp 0x574631
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
jne 0x573a15
lea ecx, [ebp - 0x154]
call fcn.005dbeb0
test al, al
je 0x573a48
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str._ScanFile
jmp 0x574626
cmp eax, dword [ebp - 0x468]
jne 0x573b4c
push 4
push edx
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
je 0x573aa7
push 1
push str._VerifyOnly
lea ecx, [ebp - 0x160]
call fcn.005dc260
jmp 0x574631
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
jne 0x573aef
lea ecx, [ebp - 0x154]
call fcn.005dbeb0
test al, al
je 0x573b22
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str._VerifyFile
jmp 0x574626
mov edx, dword [ebp - 0x430]
cmp eax, edx
jne 0x573da0
push 4
push edx
lea ecx, [ebp - 0x410]
call fcn.005bc500
mov bl, al
mov ecx, 0x20
test bl, bl
mov eax, 0x40
cmovne eax, ecx
lea ecx, [ebp - 0x410]
push eax
push dword [ebp - 0x440]
mov dword [ebp - 0x444], eax
call fcn.005bd3f0
test bl, bl
jne 0x573bb0
lea ecx, [ebp - 0x178]
call fcn.005dc400
lea ecx, [ebp - 0x16c]
call fcn.005dc400
jmp 0x573d18
mov ebx, dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
push ebx
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
je 0x573c1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str.__OffWinDir
lea ecx, [ebp - 0x178]
call fcn.005dc200
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
je 0x573cb9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str.__OffBootDir
lea ecx, [ebp - 0x16c]
call fcn.005dc200
push 0
push 0
push 0x146
push ebx
lea ecx, [ebp - 0x410]
call fcn.005befd0
cmp eax, 1
jle 0x573d18
push 0
push 1
push 0x14f
push ebx
lea ecx, [ebp - 0x410]
call fcn.005befd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x184]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x178]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x160]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x190]
call fcn.005dc200
mov ecx, eax
call fcn.005dc190
push eax
push dword [ebp - 0x420]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
push dword [ebp - 0x444]
lea ecx, [ebp - 0x410]
push dword [ebp - 0x440]
call fcn.005bd3f0
mov ebx, dword [ebp - 0x434]
jmp 0x574697
cmp eax, 0xffffffba
je 0x573dae
cmp eax, 0xffffffbf
jne 0x573f43
mov edx, dword [ebp - 0x428]
cmp dword [ecx + 0xc], edx
jne 0x573f3d
mov eax, dword [ebp - 0x430]
lea ecx, [ebp - 0x410]
push 4
push eax
call fcn.005bc500
test eax, eax
je 0x574697
push dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 2
push 2
push 1
push 1
push 0x624518
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
je 0x573e8e
push 3
push 1
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x19c]
call fcn.005d9d20
lea ecx, [ebp - 0x19c]
call fcn.005dc190
push eax
push 0xffffffffffffffff
push 0x14d
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005befd0
cmp eax, 0xffffffff
jne 0x573e75
lea ecx, [ebp - 0x19c]
call fcn.005dc190
push eax
push 0
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005b9960
push 0
push eax
push 0x14e
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005befd0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
je 0x573edd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str.__OffWinDir
lea ecx, [ebp - 0x178]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x19c]
call fcn.005dc190
push eax
push str.__OffBootDir
lea ecx, [ebp - 0x16c]
jmp 0x57462c
mov edx, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x440]
jne 0x5740ba
push 4
push edx
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
je 0x574697
push dword [ebp - 0x450]
push 0
push 1
push ecx
lea ecx, [ebp - 0x154]
call fcn.005dc400
mov edx, str.Select_offline_Windows_directory
mov ecx, eax
call fcn.005e1b00
test al, al
je 0x574697
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0xffffffffffffffff
push 0x14d
push dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
call fcn.005befd0
cmp eax, 0xffffffff
jne 0x573fd7
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0
push dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
call fcn.005b9960
push 0
push eax
push 0x14e
push dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
call fcn.005befd0
push 2
push 2
push 1
push 1
push 0x624518
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
je 0x574088
push 3
push 1
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x19c]
call fcn.005d9d20
lea ecx, [ebp - 0x19c]
call fcn.005dc190
push eax
push 0xffffffffffffffff
push 0x14d
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005befd0
cmp eax, 0xffffffff
jne 0x57406f
lea ecx, [ebp - 0x19c]
call fcn.005dc190
push eax
push 0
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005b9960
push 0
push eax
push 0x14e
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005befd0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
jne 0x573eaa
lea ecx, [ebp - 0x154]
call fcn.005dbeb0
test al, al
jmp 0x573ea8
cmp eax, 0xffffffba
je 0x5740c8
cmp eax, 0xffffffbf
jne 0x574163
mov edx, dword [ebp - 0x424]
cmp dword [ecx + 0xc], edx
jne 0x574163
mov eax, dword [ebp - 0x430]
lea ecx, [ebp - 0x410]
push 4
push eax
call fcn.005bc500
test eax, eax
je 0x574697
push dword [ebp - 0x424]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x19c]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x19c]
call fcn.005daa70
test eax, eax
je 0x573f0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x19c]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x19c]
jmp 0x573f08
mov ecx, dword [ebp - 0x46c]
cmp eax, ecx
jne 0x5742c3
push 4
push ecx
lea ecx, [ebp - 0x410]
call fcn.005bc500
mov bl, al
mov ecx, 0x40
test bl, bl
mov eax, 0x20
cmovne ecx, eax
push ecx
push dword [ebp - 0x454]
lea ecx, [ebp - 0x410]
call fcn.005bd3f0
test bl, bl
jne 0x5741b6
lea ecx, [ebp - 0x184]
call fcn.005dc400
jmp 0x574252
push dword [ebp - 0x438]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
je 0x574222
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str.__OffLogFile
lea ecx, [ebp - 0x184]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x184]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x178]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x160]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x190]
call fcn.005dc200
mov ecx, eax
call fcn.005dc190
push eax
push dword [ebp - 0x420]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
mov ebx, dword [ebp - 0x434]
jmp 0x574697
cmp eax, 0xffffffb4
jne 0x57439f
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x438]
cmp dword [eax + 0xc], edx
jne 0x57439f
push 4
push ecx
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
je 0x574697
push dword [ebp - 0x438]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
jne 0x57433c
lea ecx, [ebp - 0x154]
call fcn.005dbeb0
test al, al
je 0x57436f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push str.__OffLogFile
lea ecx, [ebp - 0x184]
jmp 0x57462c
mov eax, dword [ebx + 0xc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x454]
jne 0x57440e
push 4
push ecx
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
je 0x574697
push dword [ebp - 0x450]
mov edx, str.Indicate_log_file_for_offline_SFC_scan
lea ecx, [ebp - 0x154]
push 0
push 0
push 8
push 0
push 0
call fcn.005e1e60
test al, al
je 0x574697
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push dword [ebp - 0x438]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
jmp 0x574311
cmp eax, dword [ebp - 0x470]
jne 0x574697
cmp byte [ebp - 0x419], 0
jne 0x57446e
mov ecx, dword [ebx + 0xcc]
test ecx, ecx
je 0x57446e
push 1
push str.Cancel
push str.Running_a_custom_SFC_scan...
push 0xffffffffffffffba
sub esp, 8
push 0x46
push 0x1c2
push dword [ebx + 0x10]
push 0
call fcn.005b6bf0
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
push 0
push 0
lea ecx, [ebp - 0x410]
call fcn.005c3f80
jmp 0x574494
push 0
push 0
lea ecx, [ebp - 0x410]
call fcn.005c3f80
cmp byte [ebp - 0x419], 0
je 0x574494
mov ecx, dword [ebx + 0xcc]
sub esp, 8
call fcn.005b62b0
push dword [ebp - 0x420]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x190]
call fcn.005dc1c0
sub esp, 0xc
lea ecx, [ebp - 0x190]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.cmd.exe__k_SFC.exe
push dword [ebx + 0x44]
call fcn.005da510
push 5
push dword [ebx + 0x44]
lea ecx, [ebp - 0x190]
call fcn.005dc190
push eax
mov ecx, ebx
call fcn.0057b4f0
cmp byte [ebp - 0x419], 0
mov dword [ebp - 0x448], eax
jne 0x57450d
mov ecx, dword [ebx + 0xcc]
test ecx, ecx
je 0x57450d
push 2
call fcn.005b6250
push 4
push dword [ebp - 0x474]
lea ecx, [ebp - 0x410]
call fcn.005bc500
test eax, eax
jne 0x5746ca
cmp byte [ebp - 0x419], al
je 0x57453d
mov ecx, dword [ebx + 0xcc]
push 1
call fcn.005b6250
push 0
push 5
lea ecx, [ebp - 0x410]
call fcn.005c3f80
jmp 0x574697
push 0x20
push dword [ebp - 0x44c]
lea ecx, [ebp - 0x410]
call fcn.005bd3f0
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x410]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x154]
call fcn.005dc1c0
push 0
push 1
push 1
push 0
push 0x62438c
lea ecx, [ebp - 0x154]
call fcn.005daa70
test eax, eax
jne 0x5745ac
lea ecx, [ebp - 0x154]
call fcn.005dbeb0
test al, al
je 0x5745df
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push 0x624388
lea ecx, [ebp - 0x154]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x154]
call fcn.005dc190
push eax
push ecx
push 4
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x410]
call fcn.005bc500
add esp, 4
mov ecx, str._ScanFile
test eax, eax
mov eax, str._VerifyFile
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x184]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x178]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x160]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x190]
call fcn.005dc200
mov ecx, eax
call fcn.005dc190
push eax
push dword [ebp - 0x420]
lea ecx, [ebp - 0x410]
call fcn.005bcd30
push 0
mov ecx, ebx
call fcn.0057b640
test eax, eax
jne 0x573896
jmp 0x5746ca
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x448], 2
call fcn.005c5b30
push 0
push 1
mov ecx, ebx
call fcn.005494d0
lea ecx, [ebp - 0x19c]
call fcn.005dc430
push fcn.005dc430
push 0x1a
push 0xc
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 8
push eax
call fcn.0041e45b
lea ecx, [ebp - 0x190]
call fcn.005dc430
lea ecx, [ebp - 0x154]
call fcn.005dc430
lea ecx, [ebp - 0x184]
call fcn.005dc430
lea ecx, [ebp - 0x16c]
call fcn.005dc430
lea ecx, [ebp - 0x178]
call fcn.005dc430
lea ecx, [ebp - 0x160]
call fcn.005dc430
test edi, edi
je 0x57473c
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax]
test esi, esi
je 0x574748
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
lea ecx, [ebp - 0x410]
mov dword [ebp - 4], 0xffffffff
call fcn.005c1c60
mov esi, dword [ebp - 0x448]
cmp esi, 2
je 0x573050
cmp esi, 1
jne 0x57477b
push 0
push 0
push 0
push str.SFC_scan_GUI_was_successfully_executed
jmp 0x574787
test esi, esi
jne 0x57478e
push esi
push esi
push esi
push str.SFC_scan_GUI_could_not_execute_the_SFC_command
mov ecx, ebx
call fcn.0057b7e0
cmp byte [ebp - 0x419], 0
je 0x5747a5
mov ecx, dword [ebx + 0xcc]
sub esp, 8
call fcn.005b62b0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret