Function at 0x43f3c0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x513db0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x48
mov eax, dword [0x55f2b4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 3
push 0x5411d8
lea ecx, [esi + 8]
call fcn.00414320
push 0xd
push str.AVG_Antivirus
lea ecx, [esi + 0x20]
call fcn.00414320
push 0xa
push str.AVGSvc.exe
lea ecx, [esi + 0x38]
call fcn.00414320
push 0xc
push str.settings.ini
lea ecx, [esi + 0x50]
call fcn.00414320
push 0x16
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.SOFTWAREAVGAntivirus
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
push dword [ebp - 0x58]
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x3c]
lea ecx, [esi + 0x68]
push eax
call fcn.00447090
push fcn.00413f40
push 1
push 0x18
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.004d0942
push 0x14
push str.AvgPersistentStorage
lea ecx, [esi + 0x74]
call fcn.00414320
push 0xd
push str.AVGAntivirus
lea ecx, [esi + 0x8c]
call fcn.00414320
xorps xmm0, xmm0
lea ecx, [ebp - 0x24]
movups xmmword [ebp - 0x24], xmm0
call fcn.0041b530
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x54]
push 6
xor eax, eax
mov dword [ebp - 0x44], 0
push str._1000
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
push 5
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Label
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43f56c
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f562
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443dff
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43f5be
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f5b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443dff
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 6
xor eax, eax
mov dword [ebp - 0x44], 0
push str._1001
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c]
push 7
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Comment
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43f661
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f657
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e04
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43f6b3
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f6a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e04
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 4
xor eax, eax
mov dword [ebp - 0x44], 0
push str.Scan
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c]
push 3
xor eax, eax
mov dword [ebp - 0x2c], 0
push 0x541ac0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43f756
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f74c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e09
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43f7a8
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f79e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e09
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x53f67c
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3c]
push 8
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Priority
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43f84b
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f841
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e0e
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43f89d
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f893
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e0e
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 0xa
xor eax, eax
mov dword [ebp - 0x44], 0
push str.Extensions
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3c]
push 8
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.ScanType
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43f940
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f936
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e13
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43f992
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43f988
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e13
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 7
xor eax, eax
mov dword [ebp - 0x44], 0
push str.Default
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3c]
push 9
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.ScanTypes
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fa35
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fa2b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e18
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43fa87
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fa7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e18
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 0x27
xor eax, eax
mov dword [ebp - 0x44], 0
push str.SystemDisk_RTK_SUPERQUICK_QuickStartup
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x3c]
push 9
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.ScanAreas
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fb2a
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fb20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e1d
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43fb7c
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fb72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e1d
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 4
xor eax, eax
mov dword [ebp - 0x44], 0
push str.None
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3c]
push 6
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Report
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fc1f
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fc15
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e22
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43fc71
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fc67
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e22
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 2
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x541bb0
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3c]
push 0xf
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.TaskSensitivity
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fd14
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fd0a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e27
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43fd66
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fd5c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e27
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x53f678
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3c]
push 0x10
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.UseCodeEmulation
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fe09
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fdff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e2c
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43fe5b
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fe51
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e2c
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x53f678
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x3c]
push 7
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.ScanPUP
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fefe
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fef4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e31
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x43ff50
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43ff46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e31
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 5
xor eax, eax
mov dword [ebp - 0x44], 0
push str.quick
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3c]
push 9
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.TaskImage
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x43fff3
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43ffe9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e36
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440045
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44003b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e36
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x53f67c
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x3c]
push 0xb
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.DefaultTask
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4400e8
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4400de
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e3b
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x44013a
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440130
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e3b
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x53f67c
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3c]
push 0x23
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.AutomaticallyApplyActionsDuringScan
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4401dd
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4401d3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e40
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x44022f
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440225
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e40
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 3
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x542410
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3c]
push 9
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.PUPAction
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4402d2
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4402c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e45
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440324
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44031a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e45
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x53f67c
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x3c]
push 0x16
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.PerformActionOnStartup
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4403c7
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4403bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e4a
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440419
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44040f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e4a
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 3
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x542410
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3c]
push 0x10
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.SuspiciousAction
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4404bc
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4404b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e4f
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x44050e
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440504
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e4f
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 3
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x542410
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3c]
push 0xb
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.VirusAction
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4405b1
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4405a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e54
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440603
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4405f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e54
push edx
push ecx
call fcn.004d06e3
add esp, 8
lea eax, [ebp - 0x24]
push eax
lea edi, [esi + 0xa4]
push str.EC4ECEDA_3E3B_4027_ABFE_29A5122D64D6
mov ecx, edi
call fcn.0043f300
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 0x24]
mov ecx, eax
push dword [esi + 4]
push eax
call fcn.00417e00
mov dword [esi + 4], esi
lea eax, [ebp - 0x1c]
mov dword [esi], esi
mov ecx, eax
mov dword [esi + 8], esi
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push dword [esi + 4]
push eax
call fcn.00417db0
push 6
xor eax, eax
mov dword [esi + 4], esi
mov dword [esi], esi
lea ecx, [ebp - 0x54]
mov dword [esi + 8], esi
push str._1002
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3c]
push 5
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Label
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4406fc
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4406f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e59
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x44074e
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440744
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e59
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 6
xor eax, eax
mov dword [ebp - 0x44], 0
push str._1003
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x3c]
push 7
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Comment
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4407f1
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4407e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e5e
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440843
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440839
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e5e
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 4
xor eax, eax
mov dword [ebp - 0x44], 0
push str.Scan
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x3c]
push 3
xor eax, eax
mov dword [ebp - 0x2c], 0
push 0x541ac0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4408e6
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4408dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e63
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440938
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44092e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e63
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x541cb8
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3c]
push 8
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Priority
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x4409db
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4409d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e68
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440a2d
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440a23
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e68
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 7
xor eax, eax
mov dword [ebp - 0x44], 0
push 0x541cbc
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3c]
push 8
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.ScanType
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x440ad0
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440ac6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e6d
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440b22
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440b18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e6d
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 0x2f
xor eax, eax
mov dword [ebp - 0x44], 0
push str.AllHarddisks_AllMedia_RTK_FULL_QuickStartupMem
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x3c]
push 9
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.ScanAreas
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00419b80
mov ecx, eax
call fcn.00419190
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x440bc5
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440bbb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e72
push edx
push ecx
call fcn.004d06e3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp edx, 8
jb 0x440c17
mov ecx, dword [ebp - 0x54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x440c0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443e72
push edx
push ecx
call fcn.004d06e3
add esp, 8
push 0x20
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.EXE_WinExec_Drop_Install_Streams
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00414320
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x54]
push 0xb
xor eax, eax
mov dword [ebp - 0x44], 0
push str.ScanPackers
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
call fcn.00414320
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541d8c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x34
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x36
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPUP
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x38
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.full
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x3a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ConsultUsn
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x3c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PopulateUsn
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x3e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov byte [ebp - 4], 0x40
push str.ScanLinks
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x42
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x44
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x46
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x48
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.7C4966F0_D502_412D_A636_ACCC39A24BB2
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1004
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str._1005
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x50
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.AllMedia
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x52
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x54
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541e6c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPackers
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x56
call fcn.00414440
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53fd1c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanExclusions
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x58
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.None
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Report
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x5a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x5b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f614
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ReportName
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x5c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.Infected_HardErrors
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x54]
push str.ReportRecords
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x5f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.OverwriteReport
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x60
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x61
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541cb8
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x62
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x63
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541d8c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x64
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x65
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x66
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x67
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPUP
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x68
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x69
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.media
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x6a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x6b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanLinks
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x6c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x6d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x6e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x6f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x70
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x71
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x72
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x73
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x74
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x75
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x76
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x77
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x78
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.A9682249_08E7_4BBF_B870_EFBC63AA2888
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1006
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x7a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x7b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str._1007
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x7c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x7d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x7e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x7f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.Interactive
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x80
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x81
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.AllFiles
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanTypes
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x82
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x83
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov byte [ebp - 4], 0x84
push str.ScanType
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x85
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541e6c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPackers
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x86
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x87
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541d8c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x88
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x89
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x8a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x8b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPUP
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x8c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x8d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.folder
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x8e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x8f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x90
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x91
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x92
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x93
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x94
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x95
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x96
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x97
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x98
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x99
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x9a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x9b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.C6156735_F7A2_4387_94A7_0479004A7310
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1008
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x9c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x9d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str._1009
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x9e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x9f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
push 0x541ac0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xa0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xa1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53fd1c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xa2
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xa3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.AllFiles
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanTypes
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xa4
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xa5
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xa6
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xa7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541e6c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPackers
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xa8
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xa9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov byte [ebp - 4], 0xaa
push str.ScanFullFiles
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xab
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541cb8
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xac
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xad
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x54205c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xae
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xaf
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPUP
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb2
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.menu
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb4
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb5
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb6
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SpecialTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb8
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xba
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xbb
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xbc
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xbd
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xbe
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xbf
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xc0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xc1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xc2
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xc3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.2243A056_84B3_4327_8E46_5FE41F72EE91
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1010
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xc4
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xc5
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str._1011
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xc6
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xc7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0x54]
push 0x541ac0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xc9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.AllHarddisks
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xca
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xcb
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xcc
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xcd
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xce
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xcf
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x541d8c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xd0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xd2
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.screensaver
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xd4
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd5
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xd6
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SpecialTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xd8
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.StoreLastScannedItem
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xda
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xdb
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanFilesOrdered
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xdc
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xdd
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xde
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xdf
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xe1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe2
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xe3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe4
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xe5
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe6
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xe7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.CB6AE6F8_D9A8_4794_B2BF_53A84058C58F
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1012
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe8
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xe9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
push 0x541ac0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xea
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xeb
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xec
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xed
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov byte [ebp - 4], 0xee
push str.SpecialTask
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xef
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf0
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf2
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf4
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf5
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf6
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf8
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.CC13CA7D_229B_4D0A_8D27_E26129CDDF10
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1013
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xfa
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xfb
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str._1014
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xfc
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xfd
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
push 0x541ac0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xfe
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xff
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x100
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x102
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.QuickStartupMem
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x104
call fcn.00414440
mov byte [ebp - 4], 5
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541d8c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x106
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x108
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPUP
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x10a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PopulateUsn
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x10c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.quick
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x10e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x110
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SpecialTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x112
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov dword [ebp - 4], 0x114
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x116
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x118
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x11a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x11c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.93876F24_B4F5_4DBC_97B9_762CD8066719
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1015
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x11e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str._1016
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x120
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
push 0x541ac0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x122
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x124
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x126
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.Default
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanTypes
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x128
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.RTK_SUPERQUICK_QuickStartup_QuickMemory
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x12a
call fcn.00414440
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.None
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Report
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x12c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541bb0
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x12e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x130
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov dword [ebp - 4], 0x132
lea ecx, [ebp - 0x54]
push str.ScanPUP
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.quick
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x134
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x136
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SpecialTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x138
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x13a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x13c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x13e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x140
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x142
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.D93EF81A_B92F_27FE_AF54_9278EA8BF910
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1000
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x144
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str._1001
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x146
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
push 0x541ac0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x148
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x14a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.Extensions
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x14c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.Default
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanTypes
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x14e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.SystemDisk_RTK_SUPERQUICK_QuickStartup
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], pe_nt_image_headers32
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.None
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Report
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x152
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541bb0
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x154
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x156
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov dword [ebp - 4], 0x158
push str.ScanPUP
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.quick
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x15a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x5b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x15c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SpecialTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x15e
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x5f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.filearchive
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ActionOnPackedFile
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x160
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x61
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.AutomaticallyApplyActionsDuringScan
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x162
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x63
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PUPAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x164
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x65
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.PerformActionOnStartup
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x166
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x67
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SuspiciousAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x168
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x69
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x542410
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.VirusAction
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x16a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x6b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.FDC844BC_62CE_4A58_A28B_77AA70274062
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
push str._1008
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Label
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x16c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x6d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str._1009
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Comment
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x16e
call fcn.00414440
mov byte [ebp - 4], 0x6f
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.Scan
lea ecx, [ebp - 0x3c]
call fcn.00414440
push 0x541ac0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x170
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x71
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53fd1c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanAreas
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x172
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x73
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.AllFiles
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanTypes
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x174
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x75
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541cbc
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanType
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x176
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x77
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x541e6c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPackers
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x178
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanFullFiles
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x17a
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x7b
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.Priority
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x17c
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x7d
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x54205c
lea ecx, [ebp - 0x3c]
call fcn.00414440
mov dword [ebp - 4], 0x17e
push str.TaskSensitivity
lea ecx, [ebp - 0x54]
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x7f
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.UseCodeEmulation
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x180
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x81
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.ScanPUP
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x182
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x83
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push str.chest
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.TaskImage
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x184
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x85
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f67c
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.DefaultTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x186
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x87
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
push 0x53f678
lea ecx, [ebp - 0x3c]
call fcn.00414440
push str.SpecialTask
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x188
call fcn.00414440
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x89
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.00419220
lea ecx, [ebp - 0x54]
call fcn.00413f40
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
call fcn.00413f40
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
push str.19EA8BF0_A12F_1AF0_FB25_293AD7155932
call fcn.0043f300
lea ecx, [ebp - 0x24]
call fcn.0041b760
lea ecx, [ebp - 0x24]
call fcn.00414d50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d0675
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
call fcn.004ebf29
int3