Function at 0x4f0b60
Capabilities:
Check if file exists

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f50ac
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x40
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x44], edi
mov eax, dword [ebx + 0x14]
mov esi, dword [ebx + 8]
mov ecx, esi
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx + 0x10]
push str._MBAMScan_
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x4c], eax
call fcn.005dc4c0
test al, al
je 0x4f0c2a
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 3
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, dword [ebp - 0x40]
push 0xa
push 1
push 1
push 0
push str._StartOnly
call fcn.005daa70
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00437430
jmp 0x4f245a
push str._SASScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0d3c
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 0
push 0x682548
push 3
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
push 0
push 0x62439c
mov ecx, esi
movq qword [ebp - 0x20], xmm0
movups xmmword [ebp - 0x30], xmm0
call fcn.005dc190
mov esi, dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, eax
call fcn.005dc190
push eax
lea ecx, [ebp - 0x30]
call fcn.005d92a0
xor edx, edx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x4c], edx
call fcn.005d9210
test eax, eax
je 0x4f0d25
xor edi, edi
nop dword [eax + eax]
push edx
lea ecx, [ebp - 0x30]
call fcn.005d9220
push eax
mov ecx, esi
call fcn.005dc510
push 0x62a118
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f0d09
push str._full
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f0d09
push str._StartOnly
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0d0c
or edi, 0x800
jmp 0x4f0d0c
or edi, 1
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x30]
inc edx
mov dword [ebp - 0x4c], edx
call fcn.005d9210
cmp edx, eax
jb 0x4f0cc0
mov dword [ebp - 0x48], edi
mov edi, dword [ebp - 0x44]
push dword [ebp - 0x48]
mov ecx, edi
call fcn.00437220
lea ecx, [ebp - 0x30]
call fcn.005d9280
jmp 0x4f245a
push str._TDSSKillerScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0dab
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 3
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, dword [ebp - 0x40]
push 0xa
push 1
push 1
push 0
push str._StartOnly
call fcn.005daa70
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00437120
jmp 0x4f245a
push str._PatchMyPC_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0e9f
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 0
push 0x682548
push 3
push 0
xorps xmm0, xmm0
mov ecx, esi
push 0
push 0x62439c
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.005dc190
mov esi, dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, eax
call fcn.005dc190
push eax
lea ecx, [ebp - 0x30]
call fcn.005d92a0
xor edx, edx
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x48], edx
call fcn.005d9210
test eax, eax
je 0x4f0e8a
xor edi, edi
push edx
lea ecx, [ebp - 0x30]
call fcn.005d9220
push eax
mov ecx, esi
call fcn.005dc510
push str._auto
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0e58
or edi, 2
jmp 0x4f0e6e
push str._StartOnly
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0e6e
or edi, 0x800
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x30]
inc edx
mov dword [ebp - 0x48], edx
call fcn.005d9210
cmp edx, eax
jb 0x4f0e32
mov dword [ebp - 0x48], edi
mov edi, dword [ebp - 0x44]
mov edx, dword [ebp - 0x48]
push edx
mov ecx, edi
call fcn.00437030
lea ecx, [ebp - 0x30]
call fcn.005d9280
jmp 0x4f245a
push str._WAUUpdateApps_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0ec2
push 1
push ecx
push 1
push 0xb
mov ecx, edi
call fcn.0046a8d0
jmp 0x4f245a
push str._AswMBRScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0fcf
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 0
push 0x682548
push 3
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
push 0
push 0x62439c
mov ecx, esi
movq qword [ebp - 0x20], xmm0
movups xmmword [ebp - 0x30], xmm0
call fcn.005dc190
mov esi, dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, eax
call fcn.005dc190
push eax
lea ecx, [ebp - 0x30]
call fcn.005d92a0
xor edx, edx
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x48], edx
call fcn.005d9210
test eax, eax
je 0x4f0fb8
xor edi, edi
push edx
lea ecx, [ebp - 0x30]
call fcn.005d9220
push eax
mov ecx, esi
call fcn.005dc510
push 0x62a118
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f0f81
push str._full
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f0f84
or edi, 1
push str._StartOnly
mov ecx, esi
call fcn.005dc4c0
mov edx, dword [ebp - 0x48]
mov ecx, edi
or ecx, 0x800
test al, al
cmove ecx, edi
inc edx
mov edi, ecx
mov dword [ebp - 0x48], edx
lea ecx, [ebp - 0x30]
call fcn.005d9210
cmp edx, eax
jb 0x4f0f50
mov dword [ebp - 0x4c], edi
mov edi, dword [ebp - 0x44]
push dword [ebp - 0x4c]
mov ecx, edi
call fcn.00437000
lea ecx, [ebp - 0x30]
call fcn.005d9280
jmp 0x4f245a
push str._AdwCleanerScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f103e
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 3
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, dword [ebp - 0x40]
push 0xa
push 1
push 1
push 0
push str._StartOnly
call fcn.005daa70
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00436dc0
jmp 0x4f245a
push str._RogueKillerScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f10ad
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 3
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, dword [ebp - 0x40]
push 0xa
push 1
push 1
push 0
push str._StartOnly
call fcn.005daa70
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00436cc0
jmp 0x4f245a
push str._AvastBCScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f111c
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 3
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, dword [ebp - 0x40]
push 0xa
push 1
push 1
push 0
push str._StartOnly
call fcn.005daa70
neg eax
mov ecx, edi
sbb eax, eax
and eax, 0x800
push eax
call fcn.00436c90
jmp 0x4f245a
push str._UAKScan_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1191
push 0
push ecx
mov ecx, edi
call fcn.00477170
test al, al
je 0x4f245a
push 3
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, dword [ebp - 0x40]
push 0xa
push 1
push 1
push 0
push str._StartOnly
call fcn.005daa70
test eax, eax
mov edx, 0x80f
mov ecx, 0xf
cmovne ecx, edx
push ecx
mov ecx, edi
call fcn.00436650
jmp 0x4f245a
push str._RegisterSystemDLLs_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f11b1
lea ecx, [edi + 0x1290]
call fcn.0056b2b0
jmp 0x4f245a
push str._AutoLogon_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f124e
mov esi, dword [ebp - 0x40]
mov ecx, esi
push 1
push 0x6558f0
call fcn.005dc190
mov ecx, dword [ebp - 0x4c]
push eax
call fcn.005d9070
mov ecx, dword [ebp - 0x4c]
call fcn.005d9210
push 0
cmp eax, 2
jae 0x4f11fe
lea ecx, [edi + 0x1290]
call fcn.00553be0
jmp 0x4f245a
push 0
push 1
call fcn.005d9220
push eax
push 1
push 2
call fcn.005d9220
push eax
mov ecx, esi
call fcn.005dc260
mov ecx, dword [ebp - 0x4c]
mov esi, eax
push 1
call fcn.005d9220
push ecx
mov edx, esi
mov ecx, eax
call fcn.0059b9e0
add esp, 4
mov edx, str.Failed_to_enable_auto_logon_for_the_following_user:
test al, al
mov ecx, str.Successfully_enabled_auto_logon_for_the_following_user:
cmove ecx, edx
push ecx
mov ecx, edi
call fcn.0045a700
jmp 0x4f245a
push str._DisableAutoLogon_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f128d
push 0
push 0
push 0
push ecx
xor edx, edx
xor ecx, ecx
call fcn.0059b9e0
add esp, 4
mov edx, str.Failed_to_disable_user_auto_logon.
test al, al
mov ecx, str.Successfully_disabled_user_auto_logon.
cmove ecx, edx
push ecx
mov ecx, edi
call fcn.0045a700
jmp 0x4f245a
push str._PreventShutdown_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f12cf
push 0
push 0
push 0
push ecx
push str.Script_execution_in_progress._Please_cancel_shutdown.
mov ecx, edi
call fcn.0043dbb0
add esp, 4
mov edx, str.Failed_to_prevent_this_PC_from_shutting_down.
test eax, eax
mov ecx, str.Successfully_prevented_this_PC_from_shutting_down.
cmove ecx, edx
push ecx
mov ecx, edi
call fcn.0045a700
jmp 0x4f245a
push str._EnableF8BootMenu_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f12ef
lea ecx, [edi + 0x1290]
call fcn.00560360
jmp 0x4f245a
push str._RestoreBootMenu_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f130f
lea ecx, [edi + 0x1290]
call fcn.00560240
jmp 0x4f245a
push str._EnableWinRE_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f132f
lea ecx, [edi + 0x1290]
call fcn.00555320
jmp 0x4f245a
push str._FlushDNS_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1351
push 2
lea ecx, [edi + 0x1290]
call fcn.00544e80
jmp 0x4f245a
push str._FixIEHistory_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1371
lea ecx, [edi + 0x1290]
call fcn.00567550
jmp 0x4f245a
push str._CleanupRecentList_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1391
lea ecx, [edi + 0x1290]
call fcn.0055fdf0
jmp 0x4f245a
push str._CleanupTrayIconCache_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f13b3
push 1
lea ecx, [edi + 0x1290]
call fcn.00545770
jmp 0x4f245a
push str._RunMemDiagOnReboot_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f13d5
push 0
lea ecx, [edi + 0x1290]
call fcn.0055fce0
jmp 0x4f245a
push str._CancelMemDiag_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f13f7
push 1
lea ecx, [edi + 0x1290]
call fcn.0055fce0
jmp 0x4f245a
push str._AeroEffectsTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1423
push 1
push str.Aero_Effects
push str.AeroDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._AppCompatibilityTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f144f
push 1
push str.App_Compatibility
push str.PCWDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._AudioPlaybackTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f147b
push 1
push str.Audio_Playback
push str.AudioPlaybackDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._AudioRecordingTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f14a7
push 1
push str.Audio_Recording
push str.AudioRecordingDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._DeviceTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f14d3
push 1
push str.Device
push str.DeviceDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._DirectAccessTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f14ff
push 1
push str.DirectAccess
push str.NetworkDiagnosticsDA
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._FileShareTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f152b
push 1
push str.File_Share
push str.NetworkDiagnosticsFileShare
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._HomeGroupTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1557
push 1
push str.HomeGroup
push str.HomeGroupDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._IEPerformanceTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1583
push 1
push str.IE_Performance
push str.IEBrowseWebDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._IESecurityTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f15af
push 1
push str.IE_Security
push str.IESecurityDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._InstallUninstallTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f15e0
push 0
push str.Install_Uninstall
push str.InstallUninstallTroubleshooter.diagcab
push str.https:__aka.ms_Program_Install_and_Uninstall
lea ecx, [edi + 0x1290]
call fcn.00578390
jmp 0x4f245a
push str._InternetConnectionTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f160c
push 1
push str.Internet_Connection
push str.NetworkDiagnosticsWeb
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._KeyboardTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1638
push 1
push str.Keyboard
push str.KeyboardDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._MaintenanceTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1664
push 1
push str.Maintenance
push str.MaintenanceDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._NetworkAdapterTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1690
push 1
push str.Network_Adapter
push str.NetworkDiagnosticsNetworkAdapter
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._NetworkInboundTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f16bc
push 1
push str.Network_Inbound
push str.NetworkDiagnosticsInbound
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._PerformanceTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f16e8
push 1
push str.Performance
push str.PerformanceDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._PowerTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1714
push 1
push str.Power
push str.PowerDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._PrinterTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1740
push 1
push str.Printer
push str.PrinterDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._SearchTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f176c
push 1
push str.Windows_Search
push str.SearchDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._ShowHideUpdatesTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f179d
push 0
push str.Show_Hide_Updates
push str.ShowHideUpdatesTroubleshooter.diagcab
push str.https:__download.microsoft.com_download_F_2_2_F22D5FDB_59CD_4275_8C95_1BE17BF70B21_wushowhide.diagcab
lea ecx, [edi + 0x1290]
call fcn.00578390
jmp 0x4f245a
push str._StartMenutroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f17bd
lea ecx, [edi + 0x1290]
call fcn.00578770
jmp 0x4f245a
push str._WindowsStoreAppsTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f17dd
lea ecx, [edi + 0x1290]
call fcn.00578740
jmp 0x4f245a
push str._WindowsUpdateTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1809
push 1
push str.Windows_Update
push str.WindowsUpdateDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._WindowsUpdateWebTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1829
lea ecx, [edi + 0x1290]
call fcn.00578700
jmp 0x4f245a
push str._WMPSettingsTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1855
push 1
push str.WMP_Settings
push str.WindowsMediaPlayerConfigurationDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._WMPDVDPlayingTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1881
push 1
push str.WMP_DVD_Playing
push str.WindowsMediaPlayerDVDDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._WMPLibraryTroubleshooter_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f18ad
push 1
push str.WMP_Library
push str.WindowsMediaPlayerLibraryDiagnostic
lea ecx, [edi + 0x1290]
call fcn.00578580
jmp 0x4f245a
push str._UninstallMBAM_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f18cd
lea ecx, [edi + 0x1290]
call fcn.005567c0
jmp 0x4f245a
push str._UninstallSAS_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f18ed
lea ecx, [edi + 0x1290]
call fcn.005564c0
jmp 0x4f245a
push str._UninstallRogueKiller_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f190d
lea ecx, [edi + 0x1290]
call fcn.005562a0
jmp 0x4f245a
push str._BackupDesktopIcons_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1930
sub esp, 8
lea ecx, [edi + 0x1290]
call fcn.00554cb0
jmp 0x4f245a
push str._RestoreDesktopIcons_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1953
sub esp, 8
lea ecx, [edi + 0x1290]
call fcn.00554bc0
jmp 0x4f245a
push str._DeviceRescue_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f196f
mov ecx, edi
call fcn.0046c2e0
jmp 0x4f245a
push str._MultipleRebootScheduler_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f198d
push 0
mov ecx, edi
call fcn.0046ae10
jmp 0x4f245a
push str._AccountProfileFixer_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f19ab
push 0
mov ecx, edi
call fcn.0046ace0
jmp 0x4f245a
push str._DefragDrive_
mov ecx, esi
call fcn.005dc4c0
mov ecx, esi
test al, al
je 0x4f1a18
push 3
push 0
push 0
push 0x62439c
call fcn.005dc190
ret
cmpsd dword [esi], dword es:[edi]
push cs
add byte [ebx - 0x31743f8b], cl
push eax
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, esi
call fcn.005dc190
mov ecx, eax
call fcn.005e1220
cmp eax, 3
je 0x4f19fe
push 0x656ce4
mov ecx, esi
call fcn.005dc510
push 1
mov ecx, esi
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.00570ea0
jmp 0x4f245a
push str._UnpinAllStartTiles_
call fcn.005dc4c0
test al, al
je 0x4f1a36
lea ecx, [edi + 0x1290]
call fcn.00577630
jmp 0x4f245a
push str._RemoveKB4532693_
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f2449
push str._RemoveKB4537821_
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f2449
push str._FixChromeBlackWindow_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1a7f
push ecx
lea ecx, [edi + 0x1290]
call fcn.00565250
jmp 0x4f245a
push str._FixMicrosoftDefender_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1a9f
lea ecx, [edi + 0x1290]
call fcn.0056b740
jmp 0x4f245a
push str._ResetWindowsShell_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1ac1
push 1
lea ecx, [edi + 0x1290]
call fcn.00578c60
jmp 0x4f245a
push str._DismRepairGUI_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1ae1
lea ecx, [edi + 0x1290]
call fcn.005747d0
jmp 0x4f245a
push str._SfcScanGUI_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1b01
lea ecx, [edi + 0x1290]
call fcn.00572fc0
jmp 0x4f245a
push str._CheckDiskGUI_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1b21
lea ecx, [edi + 0x1290]
call fcn.00571de0
jmp 0x4f245a
push str._ResetFileAssociations_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1b4e
push ecx
lea ecx, [edi + 0x1290]
call fcn.0057c2d0
push eax
lea ecx, [edi + 0x1290]
call fcn.0055ff70
jmp 0x4f245a
push str._WiFiManager_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1b6e
lea ecx, [edi + 0x1290]
call fcn.0055f510
jmp 0x4f245a
push str._CleanupSystemProfile_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1b8e
lea ecx, [edi + 0x1290]
call fcn.0055f100
jmp 0x4f245a
push str._DismWindowsRepair_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1bae
lea ecx, [edi + 0x1290]
call fcn.0056b200
jmp 0x4f245a
push str._Sleep_
mov ecx, esi
call fcn.005dc4c0
mov ecx, esi
test al, al
je 0x4f1c5a
push 0
push 0
push 0x62439c
call fcn.005dc190
mov esi, dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.005da270
push 3
mov ecx, esi
call fcn.005da0f0
mov ecx, esi
call fcn.005dafb0
mov dword [ebp - 0x44], eax
cmp eax, 1
jl 0x4f245a
push 0x96
push 0
push ecx
push 0
push 0
push str._secconds...
mov ecx, esi
call fcn.005dc190
push eax
push str.Pausing_the_script_for
mov ecx, edi
call fcn.004397f0
push 1
push dword [ebp - 0x44]
lea ecx, [edi + 0x1290]
call fcn.00546ef0
cmp eax, 0xffffffff
jne 0x4f245a
push 0
push str._secconds.
mov ecx, esi
call fcn.005dc190
push eax
push str.Script_successfully_paused_for
mov ecx, edi
call fcn.0045a700
movzx eax, al
jmp 0x4f245f
push str._Beep_
call fcn.005dc4c0
mov ecx, esi
test al, al
je 0x4f1d00
push 0
push 0
push 0x62439c
call fcn.005dc190
mov esi, dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.005da270
push 3
mov ecx, esi
call fcn.005da0f0
mov ecx, esi
call fcn.005dafb0
mov dword [ebp - 0x44], eax
test eax, eax
je 0x4f245a
jns 0x4f1cad
push 1
mov ecx, esi
call fcn.005dad50
push 0x96
push 0
push ecx
push 0
push 0
push str._times...
mov ecx, esi
call fcn.005dc190
push eax
push str.Beeping
mov ecx, edi
call fcn.004397f0
push 0
push str._times.
mov ecx, esi
call fcn.005dc190
push eax
push str.Successfully_beeped
mov ecx, edi
call fcn.0045a700
push dword [ebp - 0x44]
lea ecx, [edi + 0x1290]
call fcn.0056ae90
jmp 0x4f245a
push str._FixInstallProblems_
call fcn.005dc4c0
test al, al
je 0x4f1d1e
lea ecx, [edi + 0x1290]
call fcn.0056a3b0
jmp 0x4f245a
push str._EnableAutoplay_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1d3e
lea ecx, [edi + 0x1290]
call fcn.005707a0
jmp 0x4f245a
push str._DisableAutoplay_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1d5e
lea ecx, [edi + 0x1290]
call fcn.00570640
jmp 0x4f245a
push str._FixWindowsUpdate_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1d8c
mov al, byte [edi + 0x1f68]
lea ecx, [edi + 0x1290]
not al
and al, 1
movzx eax, al
push eax
call fcn.00569d90
jmp 0x4f245a
push str._ResetHostsAndDns_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1dae
push 3
lea ecx, [edi + 0x1290]
call fcn.00544e80
jmp 0x4f245a
push str._ResetMSEdge_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1df5
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._AllUsers
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
xor ecx, ecx
cmp esi, eax
setg cl
push ecx
lea ecx, [edi + 0x1290]
call fcn.005447d0
jmp 0x4f245a
push str._ResetIEAndInternet_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1e17
push 1
lea ecx, [edi + 0x1290]
call fcn.00543630
jmp 0x4f245a
push str._ResetChrome_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1e5e
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._AllUsers
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
xor ecx, ecx
cmp esi, eax
setg cl
push ecx
lea ecx, [edi + 0x1290]
call fcn.00543400
jmp 0x4f245a
push str._ResetFirefox_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1ea5
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._AllUsers
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
xor ecx, ecx
cmp esi, eax
setg cl
push ecx
lea ecx, [edi + 0x1290]
call fcn.00542710
jmp 0x4f245a
push str._ResetPrintSpool_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1ec5
lea ecx, [edi + 0x1290]
call fcn.00541d00
jmp 0x4f245a
push str._ResetFFPrintSettings_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1ee5
lea ecx, [edi + 0x1290]
call fcn.00541e00
jmp 0x4f245a
push str._ResetCDBurnQueue_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1f05
lea ecx, [edi + 0x1290]
call fcn.00541a30
jmp 0x4f245a
push str._CreateRestorePoint_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1f7e
sub esp, 8
mov dword [ebp - 0x34], 0
xorps xmm0, xmm0
lea ecx, [edi + 0x143c]
movq qword [ebp - 0x3c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._fix
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3c]
call fcn.005dc520
sub esp, 8
mov dword [ebp - 4], 3
push 0
push ecx
lea ecx, [ebp - 0x3c]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.00564a40
lea ecx, [ebp - 0x3c]
call fcn.005dc430
jmp 0x4f245a
push str._EmptyBrowsersCache_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f1fc6
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._AllUsers
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
lea ecx, [edi + 0x1290]
setg byte [ebp - 0x44]
push dword [ebp - 0x44]
call fcn.00563140
jmp 0x4f245a
push str._DeleteBrowsersCookies_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f200e
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._AllUsers
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
lea ecx, [edi + 0x1290]
setg byte [ebp - 0x44]
push dword [ebp - 0x44]
call fcn.005623c0
jmp 0x4f245a
push str._UnhideDir_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f2084
mov esi, dword [ebp - 0x40]
mov ecx, esi
push 8
push 0
push 0x62439c
push str._s_UnhideDir__s
call fcn.005d9660
push str.All_drives
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f2056
lea ecx, [edi + 0x1290]
call fcn.00546920
jmp 0x4f245a
mov ecx, esi
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4f245a
mov ecx, esi
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.00546820
jmp 0x4f245a
push str._RebuildIconCache_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f20cc
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._Allusers
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
lea ecx, [edi + 0x1290]
setg byte [ebp - 0x44]
push dword [ebp - 0x44]
call fcn.00546320
jmp 0x4f245a
push str._ResetGroupPolicy_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f2114
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str._DelAdm
call fcn.005daa70
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
lea ecx, [edi + 0x1290]
setg byte [ebp - 0x44]
push dword [ebp - 0x44]
call fcn.005407f0
jmp 0x4f245a
push str._ImunizeSystem_
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f23e1
push str._ImmunizeSystem_
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f23e1
push str._ClearAllBrowsersHistory_
mov ecx, esi
call fcn.005dc4c0
mov ecx, esi
test al, al
je 0x4f2193
push 0
push 0
push 0x62439c
call fcn.005dc190
mov ecx, dword [ebp - 0x40]
push eax
call fcn.005da270
mov ecx, dword [ebp - 0x40]
push 0
push 1
push 1
push 0
push str.AllUsers
call fcn.005daa70
test eax, eax
lea ecx, [edi + 0x1290]
setg al
movzx eax, al
push eax
call fcn.005623a0
jmp 0x4f245a
push str._BackupRegistry_
call fcn.005dc4c0
test al, al
je 0x4f2296
mov ecx, dword [ebp - 0x40]
push 1
push 0x6558f0
call fcn.005dc190
mov esi, dword [ebp - 0x4c]
mov ecx, esi
push eax
call fcn.005d9070
mov ecx, esi
mov dword [ebp - 0x44], 3
call fcn.005d9210
cmp eax, 1
jbe 0x4f21e5
push 1
call fcn.005d9220
push eax
call fcn.004227e6
add esp, 4
mov dword [ebp - 0x44], eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
mov ecx, esi
movq qword [ebp - 0x24], xmm0
call fcn.005d9210
cmp eax, 2
jbe 0x4f2209
push 2
call fcn.005d9220
jmp 0x4f220e
mov eax, 0x62439c
push 1
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc570
sub esp, 8
mov dword [ebp - 4], 4
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
lea ecx, [edi + 0x15c]
movq qword [ebp - 0x3c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x682808
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3c]
call fcn.005dc520
push 0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.005dc190
push eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x3c]
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.0054ddf0
lea ecx, [ebp - 0x3c]
call fcn.005dc430
lea ecx, [ebp - 0x24]
call fcn.005dc430
jmp 0x4f245a
push str._RestoreRegistry_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f2365
mov ecx, dword [ebp - 0x40]
push 1
push 0x6558f0
call fcn.005dc190
mov esi, dword [ebp - 0x4c]
mov ecx, esi
push eax
call fcn.005d9070
mov ecx, esi
mov dword [ebp - 0x44], 3
call fcn.005d9210
cmp eax, 1
jbe 0x4f22ea
push 1
call fcn.005d9220
push eax
call fcn.004227e6
add esp, 4
mov dword [ebp - 0x44], eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
mov ecx, esi
movq qword [ebp - 0x24], xmm0
call fcn.005d9210
cmp eax, 2
jbe 0x4f230e
push 2
call fcn.005d9220
jmp 0x4f2313
mov eax, 0x62439c
push 1
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc570
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x18], 0
call fcn.005dc190
push eax
push dword [ebp - 0x44]
lea ecx, [edi + 0x1290]
push 0
call fcn.0054c8e0
test eax, eax
je 0x4f2358
mov eax, dword [ebp - 0x48]
cmp byte [eax], 0
jne 0x4f2358
mov byte [eax], 2
lea ecx, [ebp - 0x24]
call fcn.005dc430
jmp 0x4f245a
push str._Reboot_
mov ecx, esi
call fcn.005dc4c0
test al, al
jne 0x4f2454
push str._Shutdown_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f2394
mov ecx, dword [ebp - 0x48]
mov byte [ecx], 1
jmp 0x4f245a
push str._RebootSafeMode_
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4f23d7
mov edi, dword [ebp - 0x40]
mov ecx, edi
push 0xb
call fcn.005da0f0
mov ecx, esi
call fcn.005dc3a0
push eax
mov ecx, edi
call fcn.005dad50
mov ecx, edi
call fcn.005dafb0
mov ecx, dword [ebp - 0x48]
dec eax
neg eax
sbb al, al
add al, 4
mov byte [ecx], al
jmp 0x4f245a
push esi
mov ecx, edi
call fcn.004ef9d0
jmp 0x4f245f
push 0
push 0
push 0x62439c
mov ecx, esi
call fcn.005dc190
mov esi, dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.005da270
push 0
push 1
push 1
push 0
push str.AllUsers
mov ecx, esi
call fcn.005daa70
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x4f2420
dec eax
mov ecx, esi
push eax
call fcn.005dae00
push 3
mov ecx, esi
call fcn.005da0f0
cmp dword [ebx + 0x18], 0
mov ecx, esi
setg al
movzx eax, al
push eax
call fcn.005dc190
push eax
lea ecx, [edi + 0x1290]
call fcn.0055e210
jmp 0x4f245a
mov ecx, edi
call fcn.004361c0
test eax, eax
je 0x4f245a
mov ecx, dword [ebp - 0x48]
mov byte [ecx], 2
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14