Function at 0x419b00
Capabilities:
Create directory
Create process on windows
Delete file
Read .ini file
Set current directory

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffdb4
push ebx
push esi
push edi
mov dword [ebp - 0x11c], eax
mov eax, 0x53c634
call fcn.00503e60
mov esi, 0x5379ba
lea edi, [ebp - 0x5a4]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x11d], 0
xor eax, eax
mov dword [ebp - 0x124], eax
xor edx, edx
mov dword [ebp - 0x128], edx
xor ecx, ecx
mov dword [ebp - 0x12c], ecx
xor eax, eax
mov dword [ebp - 0x130], eax
xor edx, edx
mov dword [ebp - 0x134], edx
xor ecx, ecx
mov dword [ebp - 0x138], ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
xor edx, edx
mov dword [ebp - 0x140], edx
xor ecx, ecx
mov dword [ebp - 0x144], ecx
xor eax, eax
mov dword [ebp - 0x148], eax
mov word [ebp - 0x108], 0x14
mov edx, 0x53a12d
lea eax, [ebp - 4]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov word [ebp - 0x108], 8
mov word [ebp - 0x108], 0x20
mov edx, 0x53a12e
lea eax, [ebp - 8]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov word [ebp - 0x108], 8
mov esi, 0x537dba
lea edi, [ebp - 0x6a8]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x537ebe
lea edi, [ebp - 0x7ac]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x537fc2
lea edi, [ebp - 0x8b0]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x5380c6
lea edi, [ebp - 0x9b4]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x5381ca
lea edi, [ebp - 0xdb4]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebp - 0x14c], eax
xor edx, edx
mov dword [ebp - 0x150], edx
xor ecx, ecx
mov dword [ebp - 0x154], ecx
xor eax, eax
mov dword [ebp - 0x158], eax
xor edx, edx
mov dword [ebp - 0x15c], edx
xor ecx, ecx
mov dword [ebp - 0x160], ecx
xor eax, eax
mov dword [ebp - 0x164], eax
xor edx, edx
mov dword [ebp - 0x168], edx
xor ecx, ecx
mov dword [ebp - 0x16c], ecx
xor eax, eax
mov dword [ebp - 0x170], eax
xor edx, edx
mov dword [ebp - 0x174], edx
mov esi, 0x5385ca
lea edi, [ebp - 0xeb8]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x5386ce
lea edi, [ebp - 0xfbc]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebp - 0x178], eax
xor edx, edx
mov dword [ebp - 0x17c], edx
mov ecx, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [ecx]
call fcn.0040e3dc
test al, al
jne 0x419d0a
or eax, 0xffffffff
push eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0050f140
pop eax
mov edx, dword [ebp - 0x118]
mov dword fs:[0], edx
jmp 0x41bd90
push 0x53a12f
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00420bd0
add esp, 8
mov edx, eax
mov eax, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [eax]
mov cl, 1
call fcn.0040b904
call sub.KERNEL32.DLL_GetTickCount
push eax
push str.xscan_running__lu
lea edx, [ebp - 0xdb4]
push edx
call fcn.00506898
add esp, 0xc
lea eax, [ebp - 0xdb4]
push eax
call fcn.004029dc
pop ecx
lea edx, [ebp - 0xdb4]
push edx
push 0
push 0
call sub.KERNEL32.DLL_CreateMutexA
mov dword [ebp - 0x180], eax
mov dl, 1
mov eax, dword [0x4d86f0]
call fcn.004024a8
mov ecx, dword [ebp - 0x11c]
mov dword [ecx + 0x450], eax
push 0x9d0
call fcn.00502dd8
pop ecx
mov dword [ebp - 0xc], eax
test eax, eax
je 0x419db4
mov word [ebp - 0x108], 0x38
mov eax, dword [ebp - 0xc]
call fcn.00401ab4
mov word [ebp - 0x108], 0x2c
mov edx, dword [ebp - 0xc]
jmp 0x419db7
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x11c]
mov dword [eax + 0x44c], edx
call fcn.004205e4
test eax, eax
je 0x419e67
push 0x53a164
push str._s__
lea ecx, [ebp - 0xdb4]
push ecx
call fcn.00506898
add esp, 0xc
mov word [ebp - 0x108], 0x44
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x10]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x50
mov edx, 0x53a170
lea eax, [ebp - 0x14]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0050f140
jmp 0x419ef9
push str.X_Scan_v3.3
push str._s___network_security_scanner
lea ecx, [ebp - 0xdb4]
push ecx
call fcn.00506898
add esp, 0xc
mov word [ebp - 0x108], 0x5c
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x18]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x68
mov edx, str.http:__www.xfocus.org_EN___http:__www.xfocus.net_CN_
lea eax, [ebp - 0x1c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x74
mov edx, 0x53a216
lea eax, [ebp - 0x20]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0050f140
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x450]
mov edx, dword [eax]
call dword [edx + 0x44]
mov word [ebp - 0x108], 0x80
push 0x53a217
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00420bd0
add esp, 8
mov edx, eax
lea eax, [ebp - 0x24]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x4e79bc]
call fcn.0040b838
mov dword [ebp - 0x148], eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x8c
mov edx, str.127.0.0.1_127.0.0.1
lea eax, [ebp - 0x30]
call fcn.0050efe0
inc dword [ebp - 0xfc]
push dword [eax]
xor ecx, ecx
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x34]
push eax
inc dword [ebp - 0xfc]
mov edx, 0x53a229
lea eax, [ebp - 0x2c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
push dword [eax]
mov edx, 0x53a222
lea eax, [ebp - 0x28]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x148]
pop ecx
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0x34], 0
je 0x41a007
mov eax, dword [ebp - 0x34]
jmp 0x41a00c
mov eax, 0x53a246
push eax
lea edx, [ebp - 0x5a4]
push edx
call fcn.00503a5c
add esp, 8
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0050f140
push 0
mov edx, str.load_host_from_file
lea eax, [ebp - 0x3c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
push dword [eax]
mov word [ebp - 0x108], 0x98
mov edx, 0x53a247
lea eax, [ebp - 0x38]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x148]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov byte [ebp - 0x11d], al
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0050f140
cmp byte [ebp - 0x11d], 0
je 0x41a27a
mov word [ebp - 0x108], 0xa4
mov edx, str.hostlist.txt
lea eax, [ebp - 0x48]
call fcn.0050efe0
inc dword [ebp - 0xfc]
push dword [eax]
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x4c]
push eax
inc dword [ebp - 0xfc]
mov edx, 0x53a269
lea eax, [ebp - 0x44]
call fcn.0050efe0
inc dword [ebp - 0xfc]
push dword [eax]
mov edx, 0x53a262
lea eax, [ebp - 0x40]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x148]
pop ecx
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0x4c], 0
je 0x41a14f
mov eax, dword [ebp - 0x4c]
jmp 0x41a154
mov eax, 0x53a285
push eax
lea edx, [ebp - 0xdb4]
push edx
call fcn.00503a5c
add esp, 8
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0xb0
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x50]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov eax, dword [eax]
call fcn.004ebf64
push eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0050f140
pop ecx
test cl, cl
je 0x41a235
mov word [ebp - 0x108], 0xbc
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x54]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x450]
mov ecx, dword [eax]
call dword [ecx + 0x68]
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0050f140
jmp 0x41a2bd
mov word [ebp - 0x108], 0xc8
lea edx, [ebp - 0x5a4]
lea eax, [ebp - 0x58]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x450]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0050f140
jmp 0x41a2bd
mov word [ebp - 0x108], 0xd4
lea edx, [ebp - 0x5a4]
lea eax, [ebp - 0x5c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x450]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0050f140
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0
je 0x41a2f3
mov eax, dword [ebp - 0x64]
mov edx, dword [eax]
mov dword [ebp - 0x60], edx
mov word [ebp - 0x108], 0xec
mov edx, 3
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x108], 0xe0
mov word [ebp - 0x108], 0xf8
mov edx, str._sql
lea eax, [ebp - 0x68]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0x68]
mov eax, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [eax]
add eax, 0x460
call fcn.0050f354
test eax, eax
jne 0x41a374
mov edx, 0x53a28b
lea eax, [ebp - 0x6c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0x6c]
mov ecx, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [ecx]
add eax, 0x460
call fcn.0050f354
test eax, eax
setne dl
and edx, 1
push edx
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0050f140
pop ecx
test ecx, ecx
jne 0x41a374
xor eax, eax
jmp 0x41a379
mov eax, 1
mov dword [ebp - 0x130], eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0050f140
cmp dword [ebp - 0x130], 0
je 0x41a3a0
call fcn.00417ef8
push 0x18
call fcn.00420d10
pop ecx
mov ecx, dword [ebp - 0x11c]
mov dword [ecx + 0x418], eax
push 0x53a290
lea eax, [ebp - 0x6a8]
push eax
call fcn.00420bd0
add esp, 8
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00417988
add esp, 8
mov esi, 0x5387d2
lea edi, [ebp - 0x10c0]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x108], 8
xor eax, eax
mov dword [ebp - 0x184], eax
xor edx, edx
mov dword [ebp - 0x188], edx
lea ecx, [ebp - 0x10c0]
push ecx
push 0x53a29b
call fcn.00420c60
add esp, 8
mov dword [ebp - 0x188], 0x393b1
push dword [ebp - 0x188]
lea eax, [ebp - 0x10c0]
push eax
call fcn.00421b74
add esp, 8
mov dword [ebp - 0x184], eax
push dword [ebp - 0x188]
push 0
push 0
push dword [ebp - 0x184]
call fcn.00421c60
add esp, 0x10
push 0
push dword [ebp - 0x184]
call fcn.00421cc8
add esp, 8
mov edx, dword [ebp - 0x11c]
mov dword [edx + 0x970], eax
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x970]
mov edx, dword [ebp - 0x11c]
mov dword [edx + 0x984], eax
mov esi, 0x5388d6
lea edi, [ebp - 0x11c4]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebp - 0x18c], eax
xor edx, edx
mov dword [ebp - 0x190], edx
mov cl, 1
mov dl, 1
mov eax, dword [0x55894c]
call fcn.00421d48
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax + 0x970]
mov dword [ecx + 0x934], edx
mov ecx, dword [ebp - 0x194]
mov byte [ecx + 0xf], 1
mov eax, dword [ebp - 0x194]
call fcn.004e4b60
lea edx, [ebp - 0x10c0]
push edx
push 1
push str.MemMapFile
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x418]
call fcn.00420ca4
add esp, 0x10
push dword [ebp - 0x188]
push 3
push str.MemMapFileSize
mov eax, dword [ebp - 0x11c]
push dword [eax + 0x418]
call fcn.00420ca4
add esp, 0x10
mov edx, dword [ebp - 0x11c]
add edx, 0x45c
push edx
call sub.KERNEL32.DLL_SetCurrentDirectoryA
push 0
push 0
lea ecx, [ebp - 0xdb4]
push ecx
push str.PLUGIN_LOADING
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x104
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x70]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0050f140
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x44c]
mov edx, dword [ebp - 0x11c]
mov ecx, dword [edx + 0x134c]
mov dword [eax + 8], ecx
mov dword [ebp - 0x198], 1
mov word [ebp - 0x108], 8
jmp 0x41a60a
push 0x31
imul eax, dword [ebp - 0x198], 0x32
add eax, dword [ebp - 0x11c]
add eax, 0x988
push eax
imul edx, dword [ebp - 0x198], 0x32
mov ecx, dword [ebp - 0x11c]
add edx, dword [ecx + 0x44c]
add edx, 0xc
push edx
call fcn.00503c8c
add esp, 0xc
inc dword [ebp - 0x198]
mov eax, dword [ebp - 0x198]
mov edx, dword [ebp - 0x11c]
cmp eax, dword [edx + 0x134c]
jl 0x41a5d0
mov ecx, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [ecx]
xor edx, edx
mov dl, byte [eax + 0x464]
mov dword [ebp - 0x124], edx
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x44c]
mov edx, dword [ebp - 0x124]
mov dword [eax + 4], edx
mov edx, str..xpn
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x44c]
call fcn.00402158
test eax, eax
jge 0x41a671
mov word [ebp - 0x108], 8
jmp 0x41bbaa
push 0
push 0
lea edx, [ebp - 0xdb4]
push edx
push str.PLUGIN_LOAD_SUCCEED
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x110
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x74]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0050f140
lea ecx, [ebp - 0x7ac]
push ecx
push 0x53a2e1
call fcn.00420c60
add esp, 8
push 0x53a2e5
lea eax, [ebp - 0x7ac]
push eax
call fcn.00505c3c
add esp, 8
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x41a7fa
push 0x18
call fcn.00420d10
pop ecx
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x144], 1
push dword [ebp - 0x144]
push 0x53a2e7
lea edx, [ebp - 0xdb4]
push edx
call fcn.00506898
add esp, 0xc
inc dword [ebp - 0x144]
push 0x53a2f5
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00420bd0
add esp, 8
push eax
push 0x104
lea eax, [ebp - 0xdb4]
push eax
push 0x53a2f3
lea edx, [ebp - 0xdb4]
push edx
push str.Plug_ins
call sub.KERNEL32.DLL_GetPrivateProfileStringA
lea ecx, [ebp - 0xdb4]
push ecx
call fcn.00503a8c
pop ecx
test eax, eax
je 0x41a7a1
push 1
push 4
push 3
lea eax, [ebp - 0xdb4]
push eax
push dword [ebp - 0x160]
call fcn.00420fc7
add esp, 0x14
jmp 0x41a719
cmp dword [ebp - 0x160], 0
je 0x41a7ee
push 0
push dword [ebp - 0x154]
push dword [ebp - 0x160]
call fcn.00421518
add esp, 0xc
push dword [ebp - 0x160]
call fcn.00421b00
pop ecx
lea edx, [ebp - 0x7ac]
push edx
push 1
push str.PluginListFile
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x418]
call fcn.00420ca4
add esp, 0x10
push dword [ebp - 0x154]
call fcn.00505794
pop ecx
mov word [ebp - 0x108], 0x11c
mov edx, str._port
lea eax, [ebp - 0x78]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0x78]
mov eax, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [eax]
add eax, 0x460
call fcn.0050f354
test eax, eax
jne 0x41a87b
mov edx, 0x53a315
lea eax, [ebp - 0x7c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0x7c]
mov ecx, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [ecx]
add eax, 0x460
call fcn.0050f354
test eax, eax
setne dl
and edx, 1
push edx
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0050f140
pop ecx
test ecx, ecx
jne 0x41a87b
xor eax, eax
jmp 0x41a880
mov eax, 1
mov dword [ebp - 0x128], eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0050f140
cmp dword [ebp - 0x128], 0
je 0x41a8ed
push 0x53a31a
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00420bd0
add esp, 8
push str.PORT_LIST
push str.PORT_SCAN_OPTIONS
lea eax, [ebp - 0x6a8]
push eax
call fcn.00417960
add esp, 0xc
push eax
push 1
push 0x53a325
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call fcn.00420ca4
add esp, 0x10
jmp 0x41a90d
push 0x53a357
push 1
push 0x53a34c
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x418]
call fcn.00420ca4
add esp, 0x10
mov word [ebp - 0x108], 0x128
mov edx, str._nasl
lea eax, [ebp - 0x80]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0x80]
mov eax, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [eax]
add eax, 0x460
call fcn.0050f354
test eax, eax
jne 0x41a997
mov edx, str._all
lea eax, [ebp - 0x84]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0x84]
mov ecx, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [ecx]
add eax, 0x460
call fcn.0050f354
test eax, eax
setne dl
and edx, 1
push edx
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0050f140
pop ecx
test ecx, ecx
jne 0x41a997
xor eax, eax
jmp 0x41a99c
mov eax, 1
mov dword [ebp - 0x12c], eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0050f140
mov ecx, dword [sym.xscan_gui.exe__LoadScriptsForm]
mov eax, dword [ecx]
mov eax, dword [eax + 0x2fc]
xor edx, edx
call sym.xscan_gui.exe__TCGauge_SetProgress_qqrl
cmp dword [ebp - 0x12c], 0
je 0x41aeae
push str.ScriptsDir
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x418]
call fcn.00420cc4
add esp, 8
push eax
lea eax, [ebp - 0xeb8]
push eax
call fcn.00503a5c
add esp, 8
push str.IncludeDir
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call fcn.00420cc4
add esp, 8
push eax
lea ecx, [ebp - 0xfbc]
push ecx
call fcn.00503a5c
add esp, 8
push str.ScriptsList
mov eax, dword [ebp - 0x11c]
push dword [eax + 0x418]
call fcn.00420cc4
add esp, 8
push eax
lea edx, [ebp - 0x8b0]
push edx
call fcn.00503a5c
add esp, 8
lea ecx, [ebp - 0x8b0]
push ecx
call fcn.00503a8c
pop ecx
test eax, eax
jne 0x41aa79
lea eax, [ebp - 0xeb8]
push eax
lea edx, [ebp - 0x8b0]
push edx
call fcn.00503a5c
add esp, 8
push 0x53a386
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00420bd0
add esp, 8
lea eax, [ebp - 0x6a8]
push eax
call sub.KERNEL32.DLL_LoadLibraryA
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jne 0x41ab16
push 0
lea edx, [ebp - 0x6a8]
push edx
lea ecx, [ebp - 0xdb4]
push ecx
push 0x53a392
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x134
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x88]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.00417710
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 8
jmp 0x41bbaa
push 0x53a39f
push dword [ebp - 0x164]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x16c], eax
push str.SetTimeout
push dword [ebp - 0x164]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x168], eax
push str.LoadPlugins
push dword [ebp - 0x164]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x170], eax
push str.FreePlugins
push dword [ebp - 0x164]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x16c], 0
je 0x41ab92
cmp dword [ebp - 0x168], 0
je 0x41ab92
cmp dword [ebp - 0x170], 0
je 0x41ab92
cmp dword [ebp - 0x174], 0
jne 0x41abfb
push 0
push 0
lea ecx, [ebp - 0xdb4]
push ecx
push 0x53a3d3
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x140
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x8c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.00417710
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 8
jmp 0x41bbaa
lea ecx, [ebp - 0xeb8]
push ecx
lea eax, [ebp - 0xeb8]
push eax
call dword [ebp - 0x16c]
push str.NetworkTimeout
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call fcn.00420cc4
add esp, 8
push eax
push str.ScriptTimeout
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x418]
call fcn.00420cc4
add esp, 8
push eax
call dword [ebp - 0x168]
push 0
push 0
lea eax, [ebp - 0xdb4]
push eax
push 0x53a405
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x14c
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x90]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x158
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x94]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [sym.xscan_gui.exe__LoadScriptsForm]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x2f4]
call fcn.0049aef4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0050f140
mov ecx, dword [sym.xscan_gui.exe__LoadScriptsForm]
mov eax, dword [ecx]
mov byte [eax + 0x300], 0
mov edx, dword [sym.xscan_gui.exe__LoadScriptsForm]
mov eax, dword [edx]
call fcn.00486da8
mov edx, dword [0x57b59c]
mov eax, dword [edx]
call fcn.0048ac5c
push 0x53a41a
lea edx, [ebp - 0x8b0]
push edx
call fcn.00505c3c
add esp, 8
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x41ad78
push dword [ebp - 0x154]
call fcn.00505794
pop ecx
push fcn.0042260c
lea ecx, [ebp - 0x17c]
push ecx
push 0x53a41c
lea eax, [ebp - 0x8b0]
push eax
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
jmp 0x41ada8
push fcn.0042260c
lea ecx, [ebp - 0x17c]
push ecx
push 0x53a41e
lea eax, [ebp - 0x8b0]
push eax
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x17c], 0
jle 0x41ae17
cmp dword [ebp - 0x178], 0
je 0x41ae17
push 0
push 0
lea ecx, [ebp - 0xdb4]
push ecx
push 0x53a425
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x164
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x98]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0050f140
jmp 0x41ae72
push 0
push 0
lea ecx, [ebp - 0xdb4]
push ecx
push 0x53a43f
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x170
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0x9c]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0050f140
mov ecx, dword [sym.xscan_gui.exe__LoadScriptsForm]
mov eax, dword [ecx]
call fcn.00486bbc
mov edx, dword [sym.xscan_gui.exe__LoadScriptsForm]
mov ecx, dword [edx]
cmp byte [ecx + 0x300], 0
je 0x41aed6
push dword [ebp - 0x178]
call dword [ebp - 0x174]
xor eax, eax
mov dword [ebp - 0x178], eax
xor edx, edx
mov dword [ebp - 0x17c], edx
jmp 0x41aed6
xor ecx, ecx
mov dword [ebp - 0x17c], ecx
push 0x53a467
push 1
push 0x53a458
mov eax, dword [ebp - 0x11c]
push dword [eax + 0x418]
call fcn.00420ca4
add esp, 0x10
push dword [ebp - 0x17c]
push 3
push str.ScriptNumber
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call fcn.00420ca4
add esp, 0x10
cmp dword [ebp - 0x178], 0
je 0x41b09c
cmp dword [ebp - 0x17c], 0
jle 0x41b09c
lea ecx, [ebp - 0x11c4]
push ecx
push 0x53a47b
call fcn.00420c60
add esp, 8
imul eax, dword [ebp - 0x17c], 0x88
inc eax
mov dword [ebp - 0x190], eax
push str.NASL_SCRIPTS
push dword [ebp - 0x190]
lea edx, [ebp - 0x11c4]
push edx
call fcn.00421bec
add esp, 0xc
mov dword [ebp - 0x18c], eax
push dword [ebp - 0x190]
push 0
push 0
push dword [ebp - 0x18c]
call fcn.00421c60
add esp, 0x10
push 0
push dword [ebp - 0x18c]
call fcn.00421cc8
add esp, 8
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x178]
mov dword [ebp - 0x19c], ecx
mov word [ebp - 0x108], 8
jmp 0x41b034
mov eax, dword [ebp - 0x19c]
mov edx, dword [eax + 8]
mov dword [ebp - 0x1a0], edx
mov word [ebp - 0x108], 8
push 0x7f
mov ecx, dword [ebp - 0x19c]
push dword [ecx]
lea eax, [ebp - 0x1244]
push eax
call fcn.00503c8c
add esp, 0xc
push 0x53a48c
push dword [ebp - 0x1a0]
call fcn.00421182
add esp, 8
mov dword [ebp - 0x124c], eax
push 0x53a48f
push dword [ebp - 0x1a0]
call fcn.00421182
add esp, 8
mov dword [ebp - 0x1248], eax
push 0x88
lea edx, [ebp - 0x124c]
push edx
push dword [ebp - 0x14c]
call fcn.0050386c
add esp, 0xc
add dword [ebp - 0x14c], 0x88
mov ecx, dword [ebp - 0x19c]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
je 0x41b04d
mov edx, dword [ebp - 0x19c]
cmp dword [edx + 0x10], 0
jne 0x41af9e
lea ecx, [ebp - 0x11c4]
push ecx
push 1
push str.ScriptListFile
mov eax, dword [ebp - 0x11c]
push dword [eax + 0x418]
call fcn.00420ca4
add esp, 0x10
push dword [ebp - 0x190]
push 3
push str.ScriptMapFileSize
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call fcn.00420ca4
add esp, 0x10
push dword [ebp - 0x178]
call dword [ebp - 0x174]
mov ecx, dword [ebp - 0x11c]
add ecx, 0x560
push ecx
push 0x53a4b9
call fcn.00420c60
add esp, 8
push 0x53a4bd
mov eax, dword [ebp - 0x11c]
add eax, 0x560
push eax
call fcn.00505c3c
add esp, 8
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x41b106
push 0
push dword [ebp - 0x154]
mov edx, dword [ebp - 0x11c]
push dword [edx + 0x418]
call fcn.00421518
add esp, 0xc
push dword [ebp - 0x154]
call fcn.00505794
pop ecx
push 0
lea ecx, [ebp - 0xdb4]
push ecx
call fcn.00420a5c
pop ecx
push eax
call sub.KERNEL32.DLL_CreateDirectoryA
push 0x53a4bf
mov eax, dword [ebp - 0x11c]
add eax, 0x664
push eax
call fcn.00505c3c
add esp, 8
mov dword [ebp - 0x154], eax
test eax, eax
jne 0x41b1b2
push 0
mov edx, dword [ebp - 0x11c]
add edx, 0x664
push edx
lea ecx, [ebp - 0xdb4]
push ecx
push 0x53a4c1
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x17c
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0xa0]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.00417710
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 8
jmp 0x41bbaa
push 0x53a4d4
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00420bd0
add esp, 8
cmp byte [ebp - 0x11d], 0
je 0x41b1fa
push str.host_list_file
push 0x53a4df
lea eax, [ebp - 0x6a8]
push eax
call fcn.00417960
add esp, 0xc
push eax
lea edx, [ebp - 0xdb4]
push edx
call fcn.00503a5c
add esp, 8
jmp 0x41b223
push str.IP_range
push str.X_Scan
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00417960
add esp, 0xc
push eax
lea eax, [ebp - 0xdb4]
push eax
call fcn.00503a5c
add esp, 8
lea edx, [ebp - 0xdb4]
push edx
push str.options_s
push dword [ebp - 0x154]
call fcn.00505c70
add esp, 0xc
lea edx, [ebp - 0xdb4]
mov eax, dword [ebp - 0x11c]
call fcn.00419970
lea ecx, [ebp - 0xdb4]
push ecx
push 0x53a511
push dword [ebp - 0x154]
call fcn.00505c70
add esp, 0xc
push dword [ebp - 0x154]
call fcn.00505794
pop ecx
push str.HostListFile
mov eax, dword [ebp - 0x11c]
push dword [eax + 0x418]
call fcn.00420cc4
add esp, 8
push eax
lea edx, [ebp - 0xdb4]
push edx
call fcn.00503a5c
add esp, 8
lea ecx, [ebp - 0xdb4]
push ecx
call fcn.00503a8c
pop ecx
test eax, eax
je 0x41b2d8
push 0x53a522
lea eax, [ebp - 0xdb4]
push eax
call fcn.00505c3c
add esp, 8
mov dword [ebp - 0x154], eax
test eax, eax
jne 0x41b2d8
push dword [ebp - 0x154]
call fcn.00505794
pop ecx
mov word [ebp - 0x108], 0x188
add esp, 0xfffffff8
call fcn.004ed930
fstp qword [esp]
xor edx, edx
mov dword [ebp - 0xb0], edx
lea eax, [ebp - 0xb0]
inc dword [ebp - 0xfc]
call fcn.004ee610
lea edx, [ebp - 0xb0]
push edx
add esp, 0xfffffff8
call fcn.004ed904
fstp qword [esp]
xor ecx, ecx
mov dword [ebp - 0xa4], ecx
lea eax, [ebp - 0xa4]
inc dword [ebp - 0xfc]
call fcn.004ee5f0
lea edx, [ebp - 0xa4]
push edx
mov edx, 0x53a524
lea eax, [ebp - 0xa8]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0xac]
inc dword [ebp - 0xfc]
pop eax
call fcn.0050f198
lea eax, [ebp - 0xac]
xor edx, edx
mov dword [ebp - 0xb4], edx
lea ecx, [ebp - 0xb4]
inc dword [ebp - 0xfc]
pop edx
call fcn.0050f198
lea edx, [ebp - 0xb4]
lea eax, [ebp - 4]
call fcn.0050f170
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0050f140
push 0x10
push 0
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x984]
call fcn.005038dc
add esp, 0xc
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax + 0x448]
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x984]
mov dword [edx + 8], eax
mov edx, dword [ebp - 0x11c]
mov ecx, dword [edx + 0x448]
xor eax, eax
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx + 0x458]
call fcn.004e4b60
mov word [ebp - 0x108], 0x194
mov edx, 0x53a526
lea eax, [ebp - 0xb8]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0050f140
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov dword [ecx + 0x980], eax
xor edx, edx
mov dword [ebp - 0x144], edx
jmp 0x41b67c
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x450]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, dword [ebp - 0x144]
jg 0x41b4e5
mov ecx, dword [ebp - 0x11c]
mov dword [ecx + 0x980], 1
mov word [ebp - 0x108], 0x1a0
xor eax, eax
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0xbc]
inc dword [ebp - 0xfc]
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x450]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0xbc]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xc0], edx
lea edx, [ebp - 0xc0]
inc dword [ebp - 0xfc]
call fcn.004eb628
cmp dword [ebp - 0xc0], 0
je 0x41b54b
mov eax, dword [ebp - 0xc0]
jmp 0x41b550
mov eax, 0x53a52a
push eax
push 0x53a527
lea edx, [ebp - 0xdb4]
push edx
call fcn.00506898
add esp, 0xc
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0050f140
lea edx, [ebp - 0xdb4]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x418]
mov eax, dword [ebp - 0x11c]
call fcn.00419590
mov edx, dword [ebp - 0x11c]
cmp dword [edx + 0x984], 0
je 0x41b676
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x984]
cmp dword [eax + 0xc], 0
je 0x41b676
push 0
push 0
lea edx, [ebp - 0xdb4]
push edx
push 0x53a52b
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x1ac
mov edx, 0x53a542
lea eax, [ebp - 0xc4]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x1b8
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0xc8]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0050f140
jmp 0x41b699
inc dword [ebp - 0x144]
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x450]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x144]
jg 0x41b4bb
mov ecx, dword [ebp - 0x11c]
cmp dword [ecx + 0x984], 0
je 0x41b7c2
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax + 0x984]
cmp dword [edx + 0xc], 0
jne 0x41b7c2
mov ecx, dword [0x57b59c]
mov eax, dword [ecx]
call fcn.0048ac5c
push 0x64
call sub.KERNEL32.DLL_Sleep
mov edx, dword [ebp - 0x11c]
cmp dword [edx + 0x984], 0
je 0x41b79e
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x984]
cmp dword [eax + 0xc], 0
je 0x41b79e
push 0
push 0
lea edx, [ebp - 0xdb4]
push edx
push str.ACT_TERMINATING_THREAD
call fcn.00420670
add esp, 0x10
mov word [ebp - 0x108], 0x1c4
mov edx, 0x53a55a
lea eax, [ebp - 0xcc]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x1d0
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0xd0]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0050f140
jmp 0x41b7c2
mov ecx, dword [ebp - 0x11c]
cmp dword [ecx + 0x984], 0
je 0x41b7c2
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax + 0x984]
cmp dword [edx], 0
jg 0x41b6c2
mov ecx, dword [ebp - 0x11c]
cmp dword [ecx + 0x984], 0
je 0x41b7f4
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax + 0x984]
cmp dword [edx + 0xc], 0
je 0x41b7f4
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x448]
call fcn.00403b00
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx + 0x458]
call fcn.004e4b34
mov word [ebp - 0x108], 0x1dc
add esp, 0xfffffff8
call fcn.004ed930
fstp qword [esp]
xor edx, edx
mov dword [ebp - 0xe0], edx
lea eax, [ebp - 0xe0]
inc dword [ebp - 0xfc]
call fcn.004ee610
lea edx, [ebp - 0xe0]
push edx
add esp, 0xfffffff8
call fcn.004ed904
fstp qword [esp]
xor ecx, ecx
mov dword [ebp - 0xd4], ecx
lea eax, [ebp - 0xd4]
inc dword [ebp - 0xfc]
call fcn.004ee5f0
lea edx, [ebp - 0xd4]
push edx
mov edx, 0x53a55b
lea eax, [ebp - 0xd8]
call fcn.0050efe0
inc dword [ebp - 0xfc]
lea edx, [ebp - 0xd8]
xor eax, eax
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0xdc]
inc dword [ebp - 0xfc]
pop eax
call fcn.0050f198
lea eax, [ebp - 0xdc]
xor edx, edx
mov dword [ebp - 0xe4], edx
lea ecx, [ebp - 0xe4]
inc dword [ebp - 0xfc]
pop edx
call fcn.0050f198
lea edx, [ebp - 0xe4]
lea eax, [ebp - 8]
call fcn.0050f170
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0050f140
mov word [ebp - 0x108], 0x1e8
mov edx, 0x53a55d
lea eax, [ebp - 0xe8]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0050f140
push 0
push 0
lea ecx, [ebp - 0xdb4]
push ecx
push str.ACT_ALL_DONE
call fcn.00420670
add esp, 0x10
cmp dword [ebp - 8], 0
je 0x41b99b
mov eax, dword [ebp - 8]
jmp 0x41b9a0
mov eax, 0x53a57d
push eax
cmp dword [ebp - 4], 0
je 0x41b9ac
mov edx, dword [ebp - 4]
jmp 0x41b9b1
mov edx, 0x53a57c
push edx
lea eax, [ebp - 0x9b4]
push eax
push str.REPORT_SCAN_TIME
call fcn.00420670
add esp, 0x10
push 0x53a57e
mov ecx, dword [ebp - 0x11c]
add ecx, 0x664
push ecx
call fcn.00505c3c
add esp, 8
mov dword [ebp - 0x154], eax
test eax, eax
je 0x41ba2b
cmp dword [ebp - 8], 0
je 0x41b9f5
mov edx, dword [ebp - 8]
jmp 0x41b9fa
mov edx, 0x53a591
push edx
cmp dword [ebp - 4], 0
je 0x41ba06
mov eax, dword [ebp - 4]
jmp 0x41ba0b
mov eax, 0x53a590
push eax
push str.timeall_s_s_n
push dword [ebp - 0x154]
call fcn.00505c70
add esp, 0x10
push dword [ebp - 0x154]
call fcn.00505794
pop ecx
push 0x53a592
lea edx, [ebp - 0xdb4]
push edx
call fcn.00503980
add esp, 8
lea ecx, [ebp - 0x9b4]
push ecx
lea eax, [ebp - 0xdb4]
push eax
call fcn.00503980
add esp, 8
mov word [ebp - 0x108], 0x1f4
lea edx, [ebp - 0xdb4]
lea eax, [ebp - 0xec]
call fcn.0050efe0
inc dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11c]
call fcn.004176a4
dec dword [ebp - 0xfc]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0050f140
mov ecx, dword [sym.xscan_gui.exe__ConfigForm]
mov eax, dword [ecx]
mov eax, dword [eax + 0x3dc]
mov edx, dword [eax]
call dword [edx + 0xc4]
test al, al
je 0x41bbaa
mov ecx, dword [ebp - 0x11c]
add ecx, 0x86c
push ecx
mov ecx, dword [ebp - 0x11c]
add ecx, 0x768
mov edx, dword [ebp - 0x11c]
add edx, 0x664
mov eax, dword [ebp - 0x11c]
call fcn.00418660
mov dword [ebp - 0x1a4], 0xffffffff
mov word [ebp - 0x108], 8
push 0x53a595
mov eax, dword [ebp - 0x11c]
add eax, 0x86c
push eax
call fcn.00503c44
add esp, 8
test eax, eax
je 0x41bb52
push 0x53a599
mov edx, dword [ebp - 0x11c]
add edx, 0x86c
push edx
call fcn.00503c44
add esp, 8
test eax, eax
je 0x41bb52
push 0x53a59e
mov ecx, dword [ebp - 0x11c]
add ecx, 0x86c
push ecx
call fcn.00503c44
add esp, 8
test eax, eax
jne 0x41bb79
push 3
push 0
mov eax, dword [ebp - 0x11c]
add eax, 0x768
push eax
push 0x53a5a7
push 0x53a5a2
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
je 0x41bbaa
cmp dword [ebp - 0x1a4], 0x20
jg 0x41bbaa
push 3
push 0
push 0
mov edx, dword [ebp - 0x11c]
add edx, 0x768
push edx
push 0x53a5b4
push 0
call sub.SHELL32.DLL_ShellExecuteA
cmp dword [ebp - 0x180], 0
je 0x41bbc9
push dword [ebp - 0x180]
call sub.KERNEL32.DLL_ReleaseMutex
push dword [ebp - 0x180]
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 0x194]
call fcn.004e4b98
push 0x1f4
call sub.KERNEL32.DLL_Sleep
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx + 0x450]
mov edx, dword [eax]
call dword [edx + 0x44]
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + 0x450]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x41bc3a
mov edx, dword [ebp - 0xf4]
mov ecx, dword [edx]
mov dword [ebp - 0xf0], ecx
mov word [ebp - 0x108], 0x20c
mov edx, 3
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x108], pe_nt_image_headers32
mov edx, 3
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x44c]
call fcn.00401b64
mov edx, dword [ebp - 0x11c]
add edx, 0x560
push edx
call fcn.00503a8c
pop ecx
test eax, eax
je 0x41bc79
mov ecx, dword [ebp - 0x11c]
add ecx, 0x560
push ecx
call sub.KERNEL32.DLL_DeleteFileA
push 0x53a5b9
mov eax, dword [ebp - 0x11c]
add eax, 0x560
push eax
call fcn.00503a5c
add esp, 8
lea edx, [ebp - 0x7ac]
push edx
call fcn.00503a8c
pop ecx
test eax, eax
je 0x41bcaf
lea ecx, [ebp - 0x7ac]
push ecx
call sub.KERNEL32.DLL_DeleteFileA
mov eax, dword [ebp - 0x11c]
push dword [eax + 0x970]
call fcn.00421d28
pop ecx
mov edx, dword [ebp - 0x11c]
xor ecx, ecx
mov dword [edx + 0x970], ecx
push dword [ebp - 0x184]
call fcn.00421d38
pop ecx
lea eax, [ebp - 0x10c0]
push eax
call sub.KERNEL32.DLL_DeleteFileA
cmp dword [ebp - 0x18c], 0
je 0x41bd08
push dword [ebp - 0x18c]
call fcn.00421d38
pop ecx
lea edx, [ebp - 0x11c4]
push edx
call sub.KERNEL32.DLL_DeleteFileA
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov dword [ecx + 0x984], eax
mov edx, dword [ebp - 0x11c]
cmp dword [edx + 0x418], 0
je 0x41bd45
mov ecx, dword [ebp - 0x11c]
push dword [ecx + 0x418]
call fcn.00421b00
pop ecx
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov dword [eax + 0x418], edx
cmp dword [ebp - 0x164], 0
je 0x41bd59
push dword [ebp - 0x164]
call sub.KERNEL32.DLL_FreeLibrary
xor eax, eax
push eax
dec dword [ebp - 0xfc]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0050f140
dec dword [ebp - 0xfc]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0050f140
pop eax
mov edx, dword [ebp - 0x118]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret