Function at 0x8646c0
Capabilities:
Create thread
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0xb16570
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x20c4
call fcn.00a91950
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x20c8], esi
mov dword [ebp - 4], esi
mov byte [ebp - 0x328], 0
push 0x207
push esi
lea eax, [ebp - 0x327]
push eax
call fcn.00a7ffb0
mov byte [ebp - 0x1980], 0
push 0x207
push esi
lea ecx, [ebp - 0x197f]
push ecx
call fcn.00a7ffb0
mov byte [ebp - 0x1778], 0
push 0x207
push esi
lea edx, [ebp - 0x1777]
push edx
call fcn.00a7ffb0
mov dword [ebp - 0x20cc], esi
call fcn.00987b80
push esi
push esi
call fcn.0096a780
add esp, 0x2c
cmp dword [0xbda968], esi
je 0x864781
push str._AVPMAPP__Into_StartMonitor
push esi
call fcn.0096a780
add esp, 8
call fcn.00968110
test eax, eax
je 0x864794
mov dword [0xb56800], 1
call fcn.0098a340
mov dword [0xb56804], eax
call fcn.00968d70
mov dword [0xb56808], eax
call fcn.009687b0
mov dword [0xb5680c], eax
call fcn.00968840
mov dword [0xb56810], eax
push esi
call fcn.00986420
add esp, 4
mov byte [0xb56830], 0
mov edi, 0x104
mov ecx, 0xb56830
call fcn.00958630
mov ecx, 0xb56830
call fcn.00960910
mov byte [0xb56a40], 0
mov byte [0xb56938], 0
push edi
push 0xb56938
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov ecx, 0xb56938
call fcn.00960910
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [0xb56800], esi
je 0x86483a
push 0xb56938
push 0xb56a40
call ebx
push str._syswow64_
push str._system32_
push 0xb56a40
call fcn.0095e130
add esp, 0xc
cmp byte [0xb56830], 0
je 0x864869
push 0xb56830
push 0xb56b48
call ebx
mov ecx, 0xb56b48
call fcn.00960910
push str.WinSxS_
push 0xb56b48
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x328]
call fcn.0094ee70
mov dword [ebp - 0x20d0], 0x208
push str.MachineID
lea eax, [ebp - 0x20d0]
lea edi, [ebp - 0x1980]
mov ecx, str.SOFTWAREMicroWorld
mov edx, 0x80000002
call fcn.0094c020
lea eax, [ebp - 0x328]
mov ecx, edi
call fcn.0094c330
test eax, eax
je 0x8648ca
lea eax, [ebp - 0x328]
push eax
push str.SOFTWAREMicroWorld
mov edx, str.MachineID
mov ecx, 0x80000002
call fcn.0094bd00
mov byte [ebp - 0x328], 0
lea esi, [ebp - 0x328]
call fcn.0094eb70
mov dword [0xb45d94], eax
mov eax, 0xaadd14
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x864901
mov eax, 0xaadd18
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x86490b
mov dword [0xb5681c], 1
mov dword [ebp - 0x20d0], 0x208
push str.EPID
lea eax, [ebp - 0x20d0]
lea edi, [ebp - 0x1778]
mov ecx, str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, 0x80000002
call fcn.0094c020
lea eax, [ebp - 0x328]
mov ecx, edi
call fcn.0094c330
test eax, eax
je 0x864961
lea ecx, [ebp - 0x328]
push ecx
push str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, str.EPID
mov ecx, 0x80000002
call fcn.0094bd00
cmp dword [0xbda968], 0
je 0x864979
push str._AVPMAPP__StartMonitor_1
push 0
call fcn.0096a780
add esp, 8
mov eax, 0xb55508
call fcn.00954170
cmp eax, 1
je 0x8649ec
cmp byte [0xb55508], 0
jne 0x8649ec
mov byte [ebp - 0x42c], 0
push 0x103
push 0
lea edx, [ebp - 0x42b]
push edx
call fcn.00a7ffb0
push str._AVPMAPP__Unable_to_get_eScanInstallDir_
push 0
call fcn.0096a780
lea eax, [ebp - 0x42c]
push eax
mov ebx, 0xb55508
call 0x9ccdb0
lea ecx, [ebp - 0x42c]
push ecx
push str._AVPMAPP__eScan_Not_Present__Err:___s_
push 0
call fcn.0096a780
add esp, 0x24
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x866a2f
mov ecx, 0xb55508
call fcn.00960910
cmp dword [0xb56800], 0
je 0x864b05
mov ecx, 0xb55508
lea edx, [ebp - 0x42c]
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864a10
push 0x104
lea ebx, [ebp - 0x42c]
mov esi, 0xb55508
call fcn.00957fa0
push 0
push str.__x86_
mov edx, ebx
push edx
call fcn.0095c8c0
add esp, 0x10
cmp eax, 0xffffffff
je 0x864aff
mov dword [ebp - 0x20dc], 0
mov eax, ebx
push eax
lea ecx, [ebp - 0x83c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0xaa1543
push str.__x86_
lea edx, [ebp - 0x83c]
push edx
call fcn.0095e130
lea eax, [ebp - 0x20dc]
push eax
call fcn.009681c0
add esp, 0x10
test eax, eax
je 0x864aff
lea ecx, [ebp - 0x83c]
call fcn.00960910
lea eax, [ebp - 0x83c]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x864aa0
mov ecx, dword [str.reload.exe]
mov dword [eax], ecx
mov edx, dword [0xaaddc8]
mov dword [eax + 4], edx
mov cx, word [0xaaddcc]
mov word [eax + 8], cx
mov dl, byte [0xaaddce]
mov byte [eax + 0xa], dl
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x83c]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x864af0
lea eax, [ebp - 0x83c]
call fcn.0094dd20
mov eax, dword [ebp - 0x20dc]
push eax
call fcn.00968240
add esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [0xbda968], 0
je 0x864b28
push 0xb55508
push str._AVPMAPP__StartMonitor__dir___s_
push 0
call fcn.0096a780
add esp, 0xc
mov eax, 0xaaddf4
lea ecx, [ebp - 0x328]
call fcn.0094c330
test eax, eax
je 0x864b78
mov eax, 0xaaddf8
lea ecx, [ebp - 0x328]
call fcn.0094c330
test eax, eax
je 0x864b78
mov eax, 0xaaddfc
lea ecx, [ebp - 0x328]
call fcn.0094c330
test eax, eax
je 0x864b78
mov eax, 0xaa1554
lea ecx, [ebp - 0x328]
call fcn.0094c330
test eax, eax
jne 0x864bc8
mov dword [0xb45d94], 0
push 0xb55508
lea ecx, [ebp - 0x328]
push ecx
call ebx
lea ecx, [ebp - 0x328]
call fcn.00960910
push str.Template
lea edx, [ebp - 0x328]
push edx
call edi
lea ecx, [ebp - 0x328]
call fcn.0095a450
test eax, eax
jne 0x864bc8
mov ecx, 0xaa1543
lea esi, [ebp - 0x328]
call fcn.0095e7e0
cmp dword [0xb56808], 0
je 0x864ce3
push 0xb55508
lea eax, [ebp - 0x328]
push eax
call ebx
lea ecx, [ebp - 0x328]
call fcn.00960910
push 0xaade0c
lea ecx, [ebp - 0x328]
push ecx
call edi
lea ecx, [ebp - 0x328]
call fcn.00962b90
push 0xb55508
lea edx, [ebp - 0x328]
push edx
call ebx
lea ecx, [ebp - 0x328]
call fcn.00960910
push str.Template
lea eax, [ebp - 0x328]
push eax
call edi
lea ecx, [ebp - 0x328]
call fcn.00962b90
push 0xb56830
lea ecx, [ebp - 0x328]
push ecx
call ebx
lea ecx, [ebp - 0x328]
call fcn.00960910
push str.general.log
lea edx, [ebp - 0x328]
push edx
call edi
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x328]
call fcn.0095a0f0
add esp, 8
test eax, eax
je 0x864c83
lea esi, [ebp - 0x328]
call fcn.00972be0
lea ecx, [ebp - 0x328]
call fcn.00962b90
push 0xb56830
lea eax, [ebp - 0x328]
push eax
call ebx
lea ecx, [ebp - 0x328]
call fcn.00960910
push str.proxev1.ev1
lea ecx, [ebp - 0x328]
push ecx
call edi
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x328]
call fcn.0095a0f0
add esp, 8
test eax, eax
je 0x864cd8
lea esi, [ebp - 0x328]
call fcn.00972be0
lea ecx, [ebp - 0x328]
call fcn.00962b90
push 0x208
mov ebx, 0xb55710
mov esi, 0xb55508
call fcn.00957fa0
push 0x208
push 0xb54ce8
mov edi, 1
mov esi, str.LogPath
call fcn.008807d0
add esp, 0xc
cmp byte [0xb54ce8], 0
je 0x864d67
mov ecx, 0xb54ce8
call fcn.0095a450
test eax, eax
je 0x864d5e
cmp dword [0xb56808], 0
je 0x864d44
mov esi, 0xb54ce8
call fcn.00960950
mov ecx, esi
call fcn.00962b90
mov ecx, 0xb54ce8
call fcn.00960910
push str.MonVir.log
push 0xb54ce8
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp byte [0xb54ce8], 0
jne 0x864dd3
push 0xb55508
push str._sLOG_
push 0xb54ce8
call fcn.00a78f30
add esp, 0xc
xor ecx, ecx
mov edi, 0xb54ce8
call fcn.0095a6d0
cmp eax, 1
jne 0x864dc1
mov eax, edi
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x864d92
mov edx, dword [str.MonVir.log]
mov dword [eax], edx
mov ecx, dword [0xaade1c]
mov dword [eax + 4], ecx
mov dx, word [0xaade20]
mov word [eax + 8], dx
mov cl, byte [0xaade22]
mov byte [eax + 0xa], cl
jmp 0x864dd3
push str.MonVir.log
push 0xb54ce8
call fcn.00a78f30
add esp, 8
cmp dword [0xbda968], 0
je 0x864df0
push 0xb54ce8
push str._AVPMAPP__MonVirLog___s
push 0
call fcn.0096a780
add esp, 0xc
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGTcpPort.log
lea ebx, [ebx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864e00
push str.TcpPort.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGTcpPort.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864e2a
mov byte [str.C:PROGRA2eScanLOGTcpPort.log], al
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGFScanned.log
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864e34
push str.FScanned.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGFScanned.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864e5e
mov byte [str.C:PROGRA2eScanLOGFScanned.log], al
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGEventLog.log
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864e68
push str.EventLog.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGEventLog.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864e92
mov byte [str.C:PROGRA2eScanLOGEventLog.log], al
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGDisInfFL.log
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864ea0
push str.DisInfFL.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGDisInfFL.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864eca
mov byte [str.C:PROGRA2eScanLOGDisInfFL.log], al
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGeScanMirror.log
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864ed4
push str.eScanMirror.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGeScanMirror.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864f27
mov edx, dword [str.eScanMirror.log]
mov dword [str.C:PROGRA2eScanLOGeScanMirror.log], edx
mov eax, dword [0xaade88]
mov dword [0xb57584], eax
mov ecx, dword [0xaade8c]
mov dword [0xb57588], ecx
mov edx, dword [0xaade90]
mov dword [0xb5758c], edx
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGDirChng.log
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864f31
push str.DirChng.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGDirChng.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864f5b
mov byte [str.C:PROGRA2eScanLOGDirChng.log], al
push 0xb56830
push str.C:WINDOWSproxev1.ev1
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call ebx
mov ecx, str.C:WINDOWSproxev1.ev1
call fcn.00960910
push str.proxev1.ev1
push str.C:WINDOWSproxev1.ev1
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGUAgent.log
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864f91
push str.UAgent.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGUAgent.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864fbb
mov byte [str.C:PROGRA2eScanLOGUAgent.log], al
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGDlxCache.log
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x864fc5
push str.DlxCache.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGDlxCache.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x864fef
mov byte [str.C:PROGRA2eScanLOGDlxCache.log], al
mov ecx, 0xb54ce8
mov edx, str.C:PROGRA2eScanLOGSuperCL.log
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x865000
push str.SuperCL.log
push str.MonVir.log
push str.C:PROGRA2eScanLOGSuperCL.log
call fcn.0095e130
add esp, 0xc
test eax, eax
jne 0x86502a
mov byte [str.C:PROGRA2eScanLOGSuperCL.log], al
push 0x208
push str.C:PROGRA2eScanLOGFilesMod.log
mov edi, 1
mov esi, str.LogPath
call fcn.008807d0
add esp, 8
cmp byte [str.C:PROGRA2eScanLOGFilesMod.log], 0
je 0x865084
mov ecx, str.C:PROGRA2eScanLOGFilesMod.log
call fcn.0095a450
test eax, eax
je 0x865077
mov ecx, str.C:PROGRA2eScanLOGFilesMod.log
call fcn.00960910
push str.FilesMod.log
push str.C:PROGRA2eScanLOGFilesMod.log
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp byte [str.C:PROGRA2eScanLOGFilesMod.log], 0
jne 0x86511f
mov ecx, 0xb55508
mov edx, str.C:PROGRA2eScanLOGFilesMod.log
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x865090
mov ecx, str.C:PROGRA2eScanLOGFilesMod.log
call fcn.00960910
mov eax, str.C:PROGRA2eScanLOGFilesMod.log
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x8650b0
mov ecx, dword [str.LOG_]
mov dword [eax], ecx
mov dl, byte [0xaadedc]
mov byte [eax + 4], dl
xor ecx, ecx
mov edi, str.C:PROGRA2eScanLOGFilesMod.log
call fcn.0095a6d0
cmp eax, 1
jne 0x86510d
mov eax, edi
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x8650e0
mov ecx, dword [str.FilesMod.log]
mov dword [eax], ecx
mov edx, dword [0xaadecc]
mov dword [eax + 4], edx
mov ecx, dword [0xaaded0]
mov dword [eax + 8], ecx
mov dl, byte [0xaaded4]
mov byte [eax + 0xc], dl
jmp 0x86511f
push str.FilesMod.log
push str.C:PROGRA2eScanLOGFilesMod.log
call fcn.00a78f30
add esp, 8
push 0xb54ce8
push 0xb56360
call ebx
cmp byte [0xb55300], 0
jne 0x86517a
push 0x208
push 0xb55300
mov edi, 1
mov esi, str.DatabasePath
call fcn.008807d0
add esp, 8
cmp byte [0xb55300], 0
jne 0x86517a
cmp byte [0xb55508], 0
je 0x86517a
mov ecx, 0xb55508
mov edx, 0xb55300
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x865170
call fcn.0098b510
test eax, eax
je 0x865195
mov eax, 1
mov dword [0xb54194], eax
mov dword [ebp - 0x20cc], eax
jmp 0x86519f
mov dword [ebp - 0x20cc], 0
lea eax, [ebp - 0x20cc]
push eax
push str.IgnoreLSO
mov ecx, 0xaa21e4
mov edx, 0x80000002
call fcn.0094c0d0
mov eax, dword [ebp - 0x20cc]
xor esi, esi
cmp eax, esi
jne 0x8651ca
push 1
jmp 0x8651d0
cmp eax, 2
jne 0x8651d8
push eax
call 0xa54fb0
add esp, 4
cmp byte [0xb55918], 0
jne 0x8651f8
push 0xb55508
push str._sVistaeScanMon.lan
push 0xb55918
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanMAILSCAN.INI], 0
jne 0x865218
push 0xb55508
push 0xaadf14
push str.C:PROGRA2eScanMAILSCAN.INI
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanESCANSET.INI], 0
jne 0x865238
push 0xb55508
push str._sESCANSET.INI
push str.C:PROGRA2eScanESCANSET.INI
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanNWCONFIG.DAT], 0
jne 0x865258
push 0xb55508
push str._sNWCONFIG.DAT
push str.C:PROGRA2eScanNWCONFIG.DAT
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanCLCACHE.DAT], 0
jne 0x8652c2
mov dword [ebp - 0x20d8], esi
push 0xb55508
push str._sCLCACHE.DAT
push str.C:PROGRA2eScanCLCACHE.DAT
call fcn.00a78f30
push esi
push esi
lea edx, [ebp - 0x20d8]
mov ecx, str.C:PROGRA2eScanCLCACHE.DAT
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x8652c2
mov eax, dword [ebp - 0x20d8]
cmp eax, 0x1400000
jb 0x8652c2
shr eax, 0x14
push eax
push str.C:PROGRA2eScanCLCACHE.DAT
push str._AVPMAPP__Clearing__s__size_too_large:__u_MB_
push esi
call fcn.0096a780
add esp, 0x10
mov eax, str.C:PROGRA2eScanCLCACHE.DAT
call fcn.0094dd20
cmp byte [str.C:PROGRA2eScanCLINFC.DAT], 0
jne 0x8652e2
push 0xb55508
push str._sCLINFC.DAT
push str.C:PROGRA2eScanCLINFC.DAT
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanCLNFC.DAT], 0
jne 0x865302
push 0xb55508
push str._sCLNFC.DAT
push str.C:PROGRA2eScanCLNFC.DAT
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanCLPRC.DAT], 0
jne 0x865322
push 0xb55508
push str._sCLPRC.DAT
push str.C:PROGRA2eScanCLPRC.DAT
call fcn.00a78f30
add esp, 0xc
cmp byte [0xb55f40], 0
jne 0x86544e
mov dword [ebp - 0x20c4], esi
push 0xb55508
push str._sEUPDATE.INI
push 0xb55f40
call fcn.00a78f30
add esp, 0xc
lea ecx, [ebp - 0x20c4]
push ecx
push str.SSEvalDone
mov ecx, 0xaa21e4
mov edx, 0x80000002
call fcn.0094c0d0
test al, al
jne 0x865396
mov eax, 1
mov dword [ebp - 0x20c4], eax
mov esi, str.SSEvalDone
mov ebx, 0xaa21e4
mov ecx, 0x80000002
call fcn.0094be90
mov dword [ebp - 0x20c4], 0
jmp 0x8653a2
cmp dword [ebp - 0x20c4], esi
jne 0x86544e
mov byte [ebp - 0x105c], 0
push 0x103
push 0
lea edx, [ebp - 0x105b]
push edx
call fcn.00a7ffb0
mov byte [ebp - 0xe54], 0
push 0x103
push 0
lea eax, [ebp - 0xe53]
push eax
call fcn.00a7ffb0
add esp, 0x18
push 0xb55f40
push 0x104
lea ecx, [ebp - 0xe54]
push ecx
push 0xaadfc8
push str.SecServerLastValue
push str.Config
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
push 0xb55f40
push 0x104
lea edx, [ebp - 0x105c]
push edx
push 0xaacdac
push str.SecServer
push str.Config
call esi
cmp byte [ebp - 0xe54], 0x59
jne 0x86544e
cmp byte [ebp - 0x105c], 0x30
jne 0x86544e
push str.Config
mov esi, 0xb55f40
xor eax, eax
mov ebx, str.SecServer
call fcn.009584b0
add esp, 4
cmp byte [str.C:PROGRA2eScanESERV.INI], 0
jne 0x86546e
push 0xb55508
push str._sESERV.INI
push str.C:PROGRA2eScanESERV.INI
call fcn.00a78f30
add esp, 0xc
cmp byte [str.C:PROGRA2eScanMAILSCAN.INI], 0
je 0x86575f
push 0
push 0
xor edx, edx
mov ecx, str.C:PROGRA2eScanMAILSCAN.INI
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x86575f
call fcn.00968110
test eax, eax
je 0x86575f
mov eax, dword [str.c:progra1]
mov dword [ebp - 0x1160], eax
mov ecx, dword [0xaadff0]
mov dword [ebp - 0x115c], ecx
mov edx, dword [0xaadff4]
mov dword [ebp - 0x1158], edx
mov eax, dword [str.c:progra2]
mov dword [ebp - 0xb48], eax
mov ecx, dword [0xaadffc]
mov dword [ebp - 0xb44], ecx
mov edx, dword [0xaae000]
mov dword [ebp - 0xb40], edx
xor ecx, ecx
lea edi, [ebp - 0x1160]
call fcn.0095a6d0
test eax, eax
je 0x86575f
xor ecx, ecx
lea edi, [ebp - 0xb48]
call fcn.0095a6d0
test eax, eax
je 0x86575f
push str.C:PROGRA2eScanMAILSCAN.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.eScanLogFile
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865575
push str.C:PROGRA2_
push str.C:PROGRA1_
mov eax, edi
push eax
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x865575
push str.General
mov esi, str.C:PROGRA2eScanMAILSCAN.INI
mov eax, edi
mov ebx, str.eScanLogFile
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanMAILSCAN.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.QuarantineDirectory
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x8655d7
push str.C:PROGRA2_
push str.C:PROGRA1_
mov ecx, edi
push ecx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x8655d7
push str.General
mov esi, str.C:PROGRA2eScanMAILSCAN.INI
mov eax, edi
mov ebx, str.QuarantineDirectory
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanMAILSCAN.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.ReportDirectory
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865639
push str.C:PROGRA2_
push str.C:PROGRA1_
mov edx, edi
push edx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x865639
push str.General
mov esi, str.C:PROGRA2eScanMAILSCAN.INI
mov eax, edi
mov ebx, str.ReportDirectory
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanMAILSCAN.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.DestDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x86569b
push str.C:PROGRA2_
push str.C:PROGRA1_
mov eax, edi
push eax
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x86569b
push str.General
mov esi, str.C:PROGRA2eScanMAILSCAN.INI
mov eax, edi
mov ebx, str.DestDir
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanMAILSCAN.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.TempDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x8656fd
push str.C:PROGRA2_
push str.C:PROGRA1_
mov ecx, edi
push ecx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x8656fd
push str.General
mov esi, str.C:PROGRA2eScanMAILSCAN.INI
mov eax, edi
mov ebx, str.TempDir
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanMAILSCAN.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.LogfilePath
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x86575f
push str.C:PROGRA2_
push str.C:PROGRA1_
mov edx, edi
push edx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x86575f
push str.General
mov esi, str.C:PROGRA2eScanMAILSCAN.INI
mov eax, edi
mov ebx, str.LogfilePath
call fcn.009584b0
add esp, 4
cmp byte [0xb55f40], 0
je 0x865cc6
push 0
push 0
xor edx, edx
mov ecx, 0xb55f40
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x865cc6
call fcn.00968110
test eax, eax
je 0x865a78
mov eax, dword [str.c:progra1]
mov dword [ebp - 0xf58], eax
mov ecx, dword [0xaadff0]
mov dword [ebp - 0xf54], ecx
mov edx, dword [0xaadff4]
mov dword [ebp - 0xf50], edx
mov eax, dword [str.c:progra2]
mov dword [ebp - 0xd50], eax
mov ecx, dword [0xaadffc]
mov dword [ebp - 0xd4c], ecx
mov edx, dword [0xaae000]
mov dword [ebp - 0xd48], edx
xor ecx, ecx
lea edi, [ebp - 0xf58]
call fcn.0095a6d0
test eax, eax
je 0x865a78
xor ecx, ecx
lea edi, [ebp - 0xd50]
call fcn.0095a6d0
test eax, eax
je 0x865a78
push 0xb55f40
push 0x104
push str.Config
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.TempDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865866
push str.C:PROGRA2_
push str.C:PROGRA1_
mov eax, edi
push eax
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x865866
push str.Config
mov esi, 0xb55f40
mov eax, edi
mov ebx, str.TempDir
call fcn.009584b0
add esp, 4
push 0xb55f40
push 0x104
push str.Config
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.DestDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x8658c8
push str.C:PROGRA2_
push str.C:PROGRA1_
mov ecx, edi
push ecx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x8658c8
push str.Config
mov esi, 0xb55f40
mov eax, edi
mov ebx, str.DestDir
call fcn.009584b0
add esp, 4
push 0xb55f40
push 0x104
push str.Config
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.LogfilePath
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x86592a
push str.C:PROGRA2_
push str.C:PROGRA1_
mov edx, edi
push edx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x86592a
push str.Config
mov esi, 0xb55f40
mov eax, edi
mov ebx, str.LogfilePath
call fcn.009584b0
add esp, 4
cmp byte [str.C:PROGRA2eScanESERV.INI], 0
je 0x865a78
push 0
push 0
xor edx, edx
mov ecx, str.C:PROGRA2eScanESERV.INI
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x865a78
push str.C:PROGRA2eScanESERV.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.TempDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x8659b4
push str.C:PROGRA2_
push str.C:PROGRA1_
mov eax, edi
push eax
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x8659b4
push str.General
mov esi, str.C:PROGRA2eScanESERV.INI
mov eax, edi
mov ebx, str.TempDir
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanESERV.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.LogDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865a16
push str.C:PROGRA2_
push str.C:PROGRA1_
mov ecx, edi
push ecx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x865a16
push str.General
mov esi, str.C:PROGRA2eScanESERV.INI
mov eax, edi
mov ebx, str.LogDir
call fcn.009584b0
add esp, 4
push str.C:PROGRA2eScanESERV.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.ExportFilePath
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865a78
push str.C:PROGRA2_
push str.C:PROGRA1_
mov edx, edi
push edx
call fcn.0095e130
add esp, 0xc
test eax, eax
je 0x865a78
push str.General
mov esi, str.C:PROGRA2eScanESERV.INI
mov eax, edi
mov ebx, str.ExportFilePath
call fcn.009584b0
add esp, 4
push 0xb55f40
push 0x104
push str.Config
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.TempDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865ab3
xor ecx, ecx
call fcn.0095a6d0
test eax, eax
jne 0x865ae6
push 0xb55508
push str._sFTPTEMP
lea eax, [ebp - 0x120]
push eax
call fcn.00a78f30
push str.Config
mov esi, 0xb55f40
lea eax, [ebp - 0x120]
mov ebx, str.TempDir
call fcn.009584b0
add esp, 0x10
push 0xb55f40
push 0x104
push str.Config
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.DestDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865b21
xor ecx, ecx
call fcn.0095a6d0
test eax, eax
jne 0x865b54
push 0xb55508
push 0xaa1544
lea ecx, [ebp - 0x120]
push ecx
call fcn.00a78f30
push str.Config
mov esi, 0xb55f40
lea eax, [ebp - 0x120]
mov ebx, str.DestDir
call fcn.009584b0
add esp, 0x10
push 0xb55f40
push 0x104
push str.Config
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.LogfilePath
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865b8f
xor ecx, ecx
call fcn.0095a6d0
test eax, eax
jne 0x865bc2
push 0xb55508
push str._sLOG
lea edx, [ebp - 0x120]
push edx
call fcn.00a78f30
push str.Config
mov esi, 0xb55f40
lea eax, [ebp - 0x120]
mov ebx, str.LogfilePath
call fcn.009584b0
add esp, 0x10
cmp byte [str.C:PROGRA2eScanESERV.INI], 0
je 0x865cc6
push 0
push 0
xor edx, edx
mov ecx, str.C:PROGRA2eScanESERV.INI
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x865cc6
push str.C:PROGRA2eScanESERV.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.TempDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865c25
xor ecx, ecx
call fcn.0095a6d0
test eax, eax
jne 0x865c58
push 0xb55508
push str._sFTPTEMP
lea eax, [ebp - 0x120]
push eax
call fcn.00a78f30
push str.General
mov esi, str.C:PROGRA2eScanESERV.INI
lea eax, [ebp - 0x120]
mov ebx, str.TempDir
call fcn.009584b0
add esp, 0x10
push str.C:PROGRA2eScanESERV.INI
push 0x104
push str.General
lea edi, [ebp - 0x120]
mov edx, 0xaa1543
mov ecx, str.LogDir
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x120], 0
je 0x865c93
xor ecx, ecx
call fcn.0095a6d0
test eax, eax
jne 0x865cc6
push 0xb55508
push str._sLOG
lea ecx, [ebp - 0x120]
push ecx
call fcn.00a78f30
push str.General
mov esi, str.C:PROGRA2eScanESERV.INI
lea eax, [ebp - 0x120]
mov ebx, str.LogDir
call fcn.009584b0
add esp, 0x10
mov edi, 1
push edi
push 0
xor edx, edx
mov ecx, 0xb55f40
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x865cf1
mov dword [0xb567c8], edi
mov ecx, 0xb55f40
call fcn.00863180
cmp dword [0xb54194], 0
je 0x865ea0
mov byte [ebp - 0x1264], 0
push 0x103
push 0
lea edx, [ebp - 0x1263]
push edx
call fcn.00a7ffb0
push 0x104
lea eax, [ebp - 0x1264]
push eax
push 0xaa1543
mov edx, str.server
mov ecx, 0xaa154c
call fcn.00958d30
add esp, 0x18
cmp byte [ebp - 0x1264], 0x30
jne 0x865dce
mov dword [0xb567cc], edi
push 0xb55f40
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0xaacdac
push str.SecServer
push str.Config
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
cmp byte [ebp - 0x120], 0x31
jne 0x865d8f
mov dword [0xb567d8], edi
call fcn.008a1da0
jmp 0x865f4f
mov dword [0xb567d8], 0
push edi
push 2
push 0
push 0
mov ecx, str.eScanRMM
mov edx, str.2219
call fcn.00a64e60
push 2
push 2
push 0
push 0
mov ecx, str.eScanLiveConnect
mov edx, str.8098
call fcn.00a64e60
add esp, 0x20
jmp 0x865f4f
cmp dword [0xb567c8], 0
je 0x865f49
push 0xb55f40
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0xaa1543
push str.DownloadFromAnotherServer
push str.Config
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
cmp byte [ebp - 0x120], 0x31
jne 0x865f4f
mov dword [0xb567d4], edi
push 0xb55f40
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0xaa1543
push str.httphost
push str.Config
call esi
push 0
push str.mwti.
lea ecx, [ebp - 0x120]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x865f4f
push 0
push str.escanav.
lea edx, [ebp - 0x120]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x865f4f
push 0
push str.microworldsystems.
lea eax, [ebp - 0x120]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x865f4f
mov dword [0xb567cc], edi
jmp 0x865f4f
cmp dword [0xb567c8], 0
je 0x865f49
push 0xb55f40
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0xaa1543
push str.DownloadFromAnotherServer
push str.Config
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
cmp byte [ebp - 0x120], 0x31
jne 0x865f4f
push 0xb55f40
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0xaa1543
push str.httphost
push str.Config
call esi
push 0
push str.mwti.
lea eax, [ebp - 0x120]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x865f4f
push 0
push str.escanav.
lea ecx, [ebp - 0x120]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x865f4f
push 0
push str.microworldsystems.
lea edx, [ebp - 0x120]
push edx
jmp 0x865e84
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call fcn.00862a70
push 0xb55f40
push 0x208
lea eax, [ebp - 0x328]
push eax
push 0xaae0f8
push str.AutomaticDownload
push str.Config
call esi
lea ecx, [ebp - 0x328]
push ecx
call fcn.00a79090
neg eax
sbb eax, eax
neg eax
mov dword [0xb44c9c], eax
push 0x740
push 0
push 0xb54198
call fcn.00a7ffb0
add esp, 0x10
push 0xb54198
mov edx, 0xb548d8
mov ecx, 0xb55508
call fcn.00950610
cmp eax, edi
jne 0x865fc4
mov dword [0xb5417c], edi
jmp 0x8660a7
mov byte [ebp - 0xc4c], 0
push 0x103
push 0
lea edx, [ebp - 0xc4b]
push edx
call fcn.00a7ffb0
mov byte [ebp - 0x120], 0
push 0x103
push 0
lea eax, [ebp - 0x11f]
push eax
call fcn.00a7ffb0
add esp, 0x18
lea ebx, [ebp - 0xc4c]
call fcn.009541a0
cmp eax, 1
jne 0x86607f
xor ebx, ebx
mov byte [ebp - 0x1570], bl
push 0x103
push ebx
lea ecx, [ebp - 0x156f]
push ecx
call fcn.00a7ffb0
mov byte [ebp - 0x20c0], bl
push 0x103
push ebx
lea edx, [ebp - 0x20bf]
push edx
call fcn.00a7ffb0
push 0x63c
push ebx
lea eax, [ebp - 0x1fbc]
push eax
call fcn.00a7ffb0
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x20c0]
lea ecx, [ebp - 0x1570]
call fcn.00860120
lea edx, [ebp - 0x120]
push edx
push eax
push str._AVPMAPP__DBStatus___u___s_
push ebx
call fcn.0096a780
add esp, 0x38
jmp 0x8660a7
lea eax, [ebp - 0x120]
push eax
lea ebx, [ebp - 0xc4c]
call 0x9ccdb0
lea ecx, [ebp - 0x120]
push ecx
push str._AVPMAPP__eScan_Not_Present___s_
push 0
call fcn.0096a780
add esp, 0x10
cmp dword [0xbda968], 0
je 0x8660bf
push str._AVPMAPP__StartMonitor_2
push 0
call fcn.0096a780
add esp, 8
cmp dword [0xb5417c], edi
jne 0x8660f6
cmp byte [0xb548d8], 0
jne 0x8660f6
push 0
xor ebx, ebx
mov ecx, str.eScanBd
mov edi, 0xb548d8
call fcn.009739e0
push edi
mov esi, 0xb54198
call fcn.0094f690
test eax, eax
je 0x866a22
mov ecx, 0xb548d8
call fcn.00960910
cmp dword [0xb567c8], 0
je 0x86681d
push 0xb55508
push str._sURLSQ.DB
lea edx, [ebp - 0x120]
push edx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x866156
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x866156
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
push 0xb55508
push str._sURLSQ.DB_SHM
lea eax, [ebp - 0x120]
push eax
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x86619f
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x86619f
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
push 0xb55508
push str._sURLSQ.DB_WAL
lea ecx, [ebp - 0x120]
push ecx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x8661e8
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x8661e8
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
push 0xb55508
push str._sPHLISTSQ.DB
lea edx, [ebp - 0x120]
push edx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x866231
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x866231
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
push 0xb55508
push str._sPHLISTSQ.DB_SHM
lea eax, [ebp - 0x120]
push eax
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x86627a
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x86627a
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
push 0xb55508
push str._sPHLISTSQ.DB_WAL
lea ecx, [ebp - 0x120]
push ecx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x8662c3
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x8662c3
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
push 0xb55508
push str._svdb64
lea edx, [ebp - 0x120]
push edx
call fcn.00a78f30
push 0
mov ecx, str.BACKUP..avpmapp.exe
lea ebx, [ebp - 0x120]
call fcn.0095eb80
push 0xb55508
push str._svdb32
mov eax, ebx
push eax
call fcn.00a78f30
push 0
mov ecx, str.BACKUP..avpmapp.exe
call fcn.0095eb80
push 0
mov ecx, str.phlist.avs
mov ebx, 0xb55508
call fcn.0095eb80
push 0
mov ecx, str.url.avs
call fcn.0095eb80
add esp, 0x28
cmp byte [0xb548d8], 0
je 0x866360
mov ecx, 0xb548d8
call fcn.0095a450
test eax, eax
je 0x866360
push 0
mov ecx, str.phlist.avs
mov ebx, 0xb548d8
call fcn.0095eb80
push 0
mov ecx, str.url.avs
call fcn.0095eb80
add esp, 8
push str.__ESCANDRIVE__PUBUPDATE
lea ecx, [ebp - 0x42c]
push ecx
call fcn.00a78f30
add esp, 8
push 1
lea edx, [ebp - 0x42c]
push edx
call fcn.00977760
xor ecx, ecx
lea edi, [ebp - 0x42c]
call fcn.0095a6d0
test eax, eax
je 0x8663b0
push 0
mov ecx, str.phlist.avs
mov ebx, edi
call fcn.0095eb80
push 0
mov ecx, str.url.avs
call fcn.0095eb80
add esp, 8
mov edi, str.phnl.avs
mov ecx, 0xb55508
call fcn.00959ba0
test eax, eax
jne 0x86642f
mov edi, str.phnlsq.db
mov ecx, 0xb55508
call fcn.00959ba0
test eax, eax
je 0x86642f
push 0xb55508
mov ecx, str.phnl.avs
call fcn.00a4f8a0
add esp, 4
test eax, eax
jne 0x86642f
cmp dword [0xbd0afc], eax
jne 0x86642f
mov dword [0xbd0afc], 1
push eax
push 1
push str._RELOAD__AVS_Notification_Thread_Started_B1_...
push 0xb54ce8
call fcn.008808e0
push 0
push 0
push 0xa51de0
call fcn.00a791b2
add esp, 0x1c
xor ebx, ebx
mov esi, eax
mov edi, str.AVM_1w
call fcn.0085df70
mov edi, str.urnl.avs
mov ecx, 0xb55508
call fcn.00959ba0
test eax, eax
jne 0x8664ae
mov edi, str.urnlsq.db
mov ecx, 0xb55508
call fcn.00959ba0
test eax, eax
je 0x8664ae
push 0xb55508
mov ecx, str.urnl.avs
call fcn.00a4f8a0
add esp, 4
test eax, eax
jne 0x8664ae
cmp dword [0xbd0afc], eax
jne 0x8664ae
mov dword [0xbd0afc], 1
push eax
push 1
push str._RELOAD__AVS_Notification_Thread_Started_B2_...
push 0xb54ce8
call fcn.008808e0
push 0
push 0
push 0xa51de0
call fcn.00a791b2
add esp, 0x1c
xor ebx, ebx
mov esi, eax
mov edi, str.AVM_1x
call fcn.0085df70
xor ebx, ebx
mov byte [ebp - 0x146c], bl
push 0x207
push ebx
lea eax, [ebp - 0x146b]
push eax
call fcn.00a7ffb0
mov byte [ebp - 0x83c], bl
push 0x207
push ebx
lea ecx, [ebp - 0x83b]
push ecx
call fcn.00a7ffb0
mov byte [ebp - 0xa44], bl
push 0x207
push ebx
lea edx, [ebp - 0xa43]
push edx
call fcn.00a7ffb0
add esp, 0x24
mov dword [ebp - 0x20d4], ebx
mov ecx, 0xb55508
lea edx, [ebp - 0x83c]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x866510
lea ecx, [ebp - 0x83c]
call fcn.00960910
push 0x208
lea ebx, [ebp - 0x146c]
lea esi, [ebp - 0x83c]
call fcn.00957fa0
add esp, 4
mov eax, ebx
push eax
mov ecx, esi
push ecx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
mov ecx, esi
call fcn.00960910
lea esi, [ebp - 0xa44]
call fcn.00967df0
test eax, eax
je 0x8665b4
cmp byte [ebp - 0xa44], 0
je 0x8665b4
mov ecx, esi
call fcn.00960910
push 0x208
call fcn.00957fa0
add esp, 4
mov edx, ebx
push edx
mov eax, esi
push eax
call edi
mov ecx, esi
call fcn.00960910
cmp byte [ebp - 0xa44], 0
je 0x8665b4
mov eax, esi
lea ecx, [ebp - 0x83c]
call fcn.0094c330
test eax, eax
je 0x8665b4
mov dword [ebp - 0x20d4], 1
jmp 0x8665c1
cmp dword [ebp - 0x20d4], 0
je 0x86681d
mov byte [ebp - 0x634], 0
push 0x207
push 0
lea ecx, [ebp - 0x633]
push ecx
call fcn.00a7ffb0
add esp, 0xc
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0x634]
lea ebx, [ebx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x8665f0
lea ecx, [ebp - 0x634]
call fcn.00960910
lea eax, [ebp - 0x634]
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x866610
mov edx, dword [str.AVPLite]
mov dword [eax], edx
mov ecx, dword [0xaae2c8]
mov dword [eax + 4], ecx
xor ecx, ecx
lea edi, [ebp - 0x634]
call fcn.0095a6d0
test eax, eax
je 0x86681d
push 0
mov ecx, str.phlist.avs
mov ebx, edi
call fcn.0095eb80
push 0
mov ecx, str.url.avs
call fcn.0095eb80
mov ecx, edi
call fcn.00960910
mov edx, edi
push edx
push str._sURLSQ.DB
lea eax, [ebp - 0x120]
push eax
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x1c
test eax, eax
jne 0x8666a6
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x8666a6
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
lea ecx, [ebp - 0x634]
push ecx
push str._sURLSQ.DB_SHM
lea edx, [ebp - 0x120]
push edx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x8666f1
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x8666f1
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
lea eax, [ebp - 0x634]
push eax
push str._sURLSQ.DB_WAL
lea ecx, [ebp - 0x120]
push ecx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x86673c
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x86673c
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
lea edx, [ebp - 0x634]
push edx
push str._sPHLISTSQ.DB
lea eax, [ebp - 0x120]
push eax
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x866787
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x866787
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
lea ecx, [ebp - 0x634]
push ecx
push str._sPHLISTSQ.DB_SHM
lea edx, [ebp - 0x120]
push edx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x8667d2
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x8667d2
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
lea eax, [ebp - 0x634]
push eax
push str._sPHLISTSQ.DB_WAL
lea ecx, [ebp - 0x120]
push ecx
call fcn.00a78f30
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.0095a0f0
add esp, 0x14
test eax, eax
jne 0x86681d
lea eax, [ebp - 0x120]
call fcn.0094dd20
test eax, eax
jne 0x86681d
push eax
lea ecx, [ebp - 0x120]
call fcn.00957a90
xor ebx, ebx
mov dword [0xb53f6c], ebx
mov dword [0xb54178], ebx
cmp dword [0xbda968], ebx
je 0x866841
push str._AVPMAPP__InitMutex___szMonLogMutex
push ebx
call fcn.0096a780
add esp, 8
push 0xb55d2c
mov ecx, str.MonVir_LogMutex
call fcn.00970050
add esp, 4
cmp eax, 1
jne 0x8669f5
cmp dword [0xb55d2c], ebx
je 0x8669f5
cmp dword [0xbda968], ebx
je 0x86687e
push str._AVPMAPP__Reading_reg_val...
push ebx
call fcn.0096a780
add esp, 8
push 4
push ebx
xor edi, edi
mov esi, str.Debug
call fcn.008807d0
add esp, 8
mov dword [0xb54184], eax
cmp eax, 4
jne 0x8668aa
mov dword [0xbd065c], 1
mov dword [0xb54184], ebx
push 4
push 0
xor edi, edi
mov esi, str.DirChangeDebug
call fcn.008807d0
mov dword [0xbd0664], eax
push 4
push edi
mov esi, str.DebugA
call fcn.008807d0
mov dword [0xb5658c], eax
push 4
push edi
mov esi, str.DebugX
call fcn.008807d0
mov ebx, eax
push 4
push edi
mov esi, str.DebugX1
call fcn.008807d0
add esp, 0x20
mov dword [0xb56590], eax
test bl, 1
je 0x866904
mov dword [0xbd04f4], 1
test bl, 2
je 0x866913
mov dword [0xb5659c], 1
test bl, 4
je 0x866958
mov dword [0xbd0500], 1
push 4
push 0
xor edi, edi
mov esi, str.DebugY
call fcn.008807d0
add esp, 8
lea ecx, [edi + 1]
test cl, al
je 0x866942
mov dword [0xbd0504], ecx
test al, 2
je 0x86694c
mov dword [0xbd0508], ecx
test al, 4
je 0x86695d
mov dword [0xbd050c], ecx
jmp 0x86695d
mov ecx, 1
test bl, 8
je 0x866968
mov dword [0xb56594], ecx
test bl, 0x10
je 0x866973
mov dword [0xb567e0], ecx
test bl, 0x20
je 0x86697e
mov dword [0xb56598], ecx
test bl, 0x40
je 0x866989
mov dword [0xb565a0], ecx
test bl, bl
jns 0x866993
mov dword [0xb565a4], ecx
cmp dword [0xb5417c], 0
je 0x8669a5
cmp dword [0xb56588], 0
jne 0x8669c2
mov eax, dword [0xb2d47c]
mov edx, eax
add eax, ecx
mov dword [0xb2d47c], eax
push 0x2710
push 2
call fcn.0099f230
add esp, 8
cmp dword [0xbda968], 0
je 0x8669da
push str._AVPMAPP__InitService__
push 0
call fcn.0096a780
add esp, 8
call fcn.00867650
mov dword [ebp - 0x20c8], eax
cmp dword [0xbda968], 0
je 0x866a22
push str._AVPMAPP__Out_of_InitService__
jmp 0x866a18
push str.MonVir_LogMutex
push str._AVPMAPP__Unable_to_InitMutex___s__
push ebx
call fcn.0096a780
add esp, 0xc
jmp 0x866a22
push 0
call fcn.0096a780
add esp, 8
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x20c8]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret