Function at 0x4044a0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x404
mov eax, dword [0x423640]
xor eax, esp
mov dword [esp + 0x400], eax
push ebp
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ScanDesc
push str.Settings
call edi
cmp byte [esp + 8], 0
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
je 0x4044f0
lea ecx, [esp + 8]
push ecx
lea edx, [ebx + 4]
push edx
call ebp
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ScanFlags
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x40452a
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov dword [ebx + 0x108], eax
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanWindowStyle
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404564
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov dword [ebx + 0x10c], eax
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ActionIdExe1
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x40459e
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x125], al
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ActionIdExe2
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4045d8
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x126], al
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ActionIdDoc1
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404612
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x127], al
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ActionIdDoc2
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x40464c
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x128], al
cmp byte [esp + 0x410], 6
jne 0x404a65
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.FileScanMethod
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404694
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x110], al
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanAutoFlags
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4046ce
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov dword [ebx + 0x114], eax
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ScanExtensions
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4046ff
lea edx, [esp + 8]
push edx
lea eax, [ebx + 0x130]
push eax
call ebp
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ThreatEnabled
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404739
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x129], al
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ThreatFlags
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404773
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov dword [ebx + 0x12c], eax
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanCompressed
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4047ad
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x119], al
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ScanDetectEncArchives
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4047e7
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x11a], al
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ScanObjMemory
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404821
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x11b], al
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanObjBootSectors
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x40485b
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x11c], al
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ScanObjPartitions
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404895
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x11d], al
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ScanObjCriticalSettings
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4048cf
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x11e], al
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanObjAutoRunInf
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404909
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x11f], al
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ScanObjTrackingCookies
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404943
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x121], al
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ScanObjUnwantedFiles
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x40497d
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x122], al
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanObjUnwantedRegistry
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4049b7
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x120], al
push esi
push 0x400
lea ecx, [esp + 0x10]
push ecx
push 0x421364
push str.ScanObjGenRootkits
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x4049f1
push 0xa
lea edx, [esp + 0xc]
push 0
push edx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x123], al
push esi
push 0x400
lea eax, [esp + 0x10]
push eax
push 0x421364
push str.ScanObjVulnerabilities
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404a2b
push 0xa
lea ecx, [esp + 0xc]
push 0
push ecx
call fcn.00409d34
add esp, 0xc
mov byte [ebx + 0x124], al
push esi
push 0x400
lea edx, [esp + 0x10]
push edx
push 0x421364
push str.ScanItems
push str.Settings
call edi
cmp byte [esp + 8], 0
je 0x404a65
push 0xa
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00409d34
add esp, 0xc
mov dword [ebx + 0x274], eax
mov ecx, dword [esp + 0x408]
pop edi
pop ebp
xor ecx, esp
mov al, 1
call fcn.00409279
add esp, 0x404
ret