Function at 0x4485a0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa20
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x404]
push str._SECSERVER__Start_EServCln__u_
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x404]
push edx
push 0x6aec98
call fcn.004311c0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 0x1c
cmp byte [0x734110], 0
jne 0x4486be
mov eax, dword [ebp + 8]
test eax, eax
je 0x44861f
cmp byte [eax], 0
je 0x44861f
mov edx, 0x734110
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x448610
jmp 0x4486be
push 0x207
lea eax, [ebp - 0x60b]
push 0
push eax
mov byte [ebp - 0x60c], 0
call fcn.005dfd60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x60c]
push ecx
push 0
call fcn.00512330
lea edx, [ebp - 0x60c]
push edx
call fcn.004e24e0
add esp, 0x38
push 0x60cf40
lea eax, [ebp - 0x60c]
push eax
call ebx
xor eax, eax
jmp 0x448680
mov cl, byte [ebp + eax - 0x60c]
mov byte [eax + 0x734110], cl
inc eax
test cl, cl
jne 0x448680
push 0x734110
call fcn.004e24e0
mov eax, 0x734110
add esp, 4
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4486a5
mov ecx, dword [str.Apache2]
mov edx, dword [0x60dc0c]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
lea eax, [ebp - 0xa1c]
push eax
call esi
lea ecx, [ebp - 0xa1c]
push ecx
call fcn.004e24e0
add esp, 4
push str.updater.dll
lea edx, [ebp - 0xa1c]
push edx
call ebx
push edi
lea eax, [ebp - 0x814]
push eax
call esi
lea ecx, [ebp - 0x814]
push ecx
call fcn.004e24e0
add esp, 4
push str.eservcln.exe
lea edx, [ebp - 0x814]
push edx
call ebx
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x814]
push 0
push eax
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x448dc5
push 0x103
push eax
lea ecx, [ebp - 0x507]
push ecx
mov byte [ebp - 0x508], al
call fcn.005dfd60
add esp, 0xc
push 0
push 0
push 0
push 0
lea edx, [ebp - 0xa20]
push edx
push str.eservcln.exe
mov dword [ebp - 0xa20], 0
call fcn.00503770
test eax, eax
je 0x44879c
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 1
push 0
push str.eservcln.exe
push eax
call fcn.0052d190
add esp, 0x14
push 0x118
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x814]
push 0
push eax
call fcn.00506de0
push 1
push 0
push 0
push 0
lea ecx, [ebp - 0xa1c]
push 0
push ecx
call fcn.004e8950
add esp, 0x34
push 0
push str.eScan_Apache
test eax, eax
jne 0x448a74
lea esi, [eax + 1]
call fcn.0050d920
add esp, 8
test eax, eax
je 0x44884d
push esi
push str.eScan_Apache
call fcn.004d8010
add esp, 8
test eax, eax
jne 0x44887b
push str.eScan_Apache
push esi
call fcn.005001f0
push 0
push str.eScan_Apache
push 0x734110
call fcn.0052ae50
push 0x734110
push str.eScan_Apache
lea edx, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Started.
push edx
call fcn.005dfb23
push 0
push esi
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x44887b
push str.eScan_Apache
lea ecx, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_A__
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x404]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0
push str.eScan_Apache_New
call fcn.0050d920
add esp, 8
test eax, eax
je 0x4488f7
push 1
push str.eScan_Apache_New
call fcn.004d8010
add esp, 8
test eax, eax
jne 0x448925
push str.eScan_Apache_New
push 1
call fcn.005001f0
push 0
push str.eScan_Apache_New
push 0x734110
call fcn.0052ae50
push 0x734110
push str.eScan_Apache_New
lea eax, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Started.
push eax
call fcn.005dfb23
push 0
push 1
lea ecx, [ebp - 0x404]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x448925
push str.eScan_Apache_New
lea edx, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_A__
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0
push str.eScan_Apache_Updater
call fcn.0050d920
add esp, 8
test eax, eax
je 0x4489a1
push 1
push str.eScan_Apache_Updater
call fcn.004d8010
add esp, 8
test eax, eax
jne 0x4489cf
push str.eScan_Apache_Updater
push 1
call fcn.005001f0
push 0
push str.eScan_Apache_Updater
push 0x734110
call fcn.0052ae50
push 0x734110
push str.eScan_Apache_Updater
lea ecx, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Started.
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x404]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x4489cf
push str.eScan_Apache_Updater
lea eax, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_A__
push eax
call fcn.005dfb23
push 0
push 1
lea ecx, [ebp - 0x404]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0
push str.eScan_Apache_IOSUpdater
call fcn.0050d920
add esp, 8
test eax, eax
je 0x448a4e
push 1
push str.eScan_Apache_IOSUpdater
call fcn.004d8010
add esp, 8
test eax, eax
jne 0x448d05
push str.eScan_Apache_IOSUpdater
push 1
call fcn.005001f0
push 0
push str.eScan_Apache_IOSUpdater
push 0x734110
call fcn.0052ae50
push 0x734110
push str.eScan_Apache_IOSUpdater
lea edx, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Started.
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x448d05
push str.eScan_Apache_IOSUpdater
lea ecx, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_A__
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x404]
push edx
jmp 0x448cf8
xor esi, esi
call fcn.0050d920
add esp, 8
test eax, eax
je 0x448ae5
push 1
push str.eScan_Apache
call fcn.004d8010
add esp, 8
cmp eax, 1
jne 0x448b13
push eax
push str.eScan_Apache
push 0x734110
call fcn.0052af90
push str.eScan_Apache
push esi
call fcn.005001f0
push 0x734110
push str.eScan_Apache
lea eax, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Stopped_and_Disabled.
push eax
call fcn.005dfb23
push esi
push 1
lea ecx, [ebp - 0x404]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x448b13
push str.eScan_Apache
lea edx, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_B__
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0
push str.eScan_Apache_New
call fcn.0050d920
add esp, 8
test eax, eax
je 0x448b8b
push 1
push str.eScan_Apache_New
call fcn.004d8010
add esp, 8
cmp eax, 1
jne 0x448bb9
push eax
push str.eScan_Apache_New
push 0x734110
call fcn.0052af90
push str.eScan_Apache_New
push 0
call fcn.005001f0
push 0x734110
push str.eScan_Apache_New
lea ecx, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Stopped_and_Disabled.
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x404]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x448bb9
push str.eScan_Apache_New
lea eax, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_B__
push eax
call fcn.005dfb23
push 0
push 1
lea ecx, [ebp - 0x404]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0
push str.eScan_Apache_Updater
call fcn.0050d920
add esp, 8
test eax, eax
je 0x448c31
push 1
push str.eScan_Apache_Updater
call fcn.004d8010
add esp, 8
cmp eax, 1
jne 0x448c5f
push eax
push str.eScan_Apache_Updater
push 0x734110
call fcn.0052af90
push str.eScan_Apache_Updater
push 0
call fcn.005001f0
push 0x734110
push str.eScan_Apache_Updater
lea edx, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Stopped_and_Disabled.
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x448c5f
push str.eScan_Apache_Updater
lea ecx, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_B__
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x404]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0
push str.eScan_Apache_IOSUpdater
call fcn.0050d920
add esp, 8
test eax, eax
je 0x448cd7
push 1
push str.eScan_Apache_IOSUpdater
call fcn.004d8010
add esp, 8
cmp eax, 1
jne 0x448d05
push eax
push str.eScan_Apache_IOSUpdater
push 0x734110
call fcn.0052af90
push str.eScan_Apache_IOSUpdater
push 0
call fcn.005001f0
push 0x734110
push str.eScan_Apache_IOSUpdater
lea eax, [ebp - 0x404]
push str._SECSERVER___s___s__Service_Stopped_and_Disabled.
push eax
call fcn.005dfb23
push 0
push 1
lea ecx, [ebp - 0x404]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x34
jmp 0x448d05
push str.eScan_Apache_IOSUpdater
lea edx, [ebp - 0x404]
push str._SECSERVER___s_Service_Absent_B__
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
push 0x6af8c8
push 0x104
lea ecx, [ebp - 0x508]
push ecx
push str.Update_Agent_Started
push 0x622048
push 0x614348
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0
push str.eScan_Monitor
lea edx, [ebp - 0x508]
push edx
mov eax, edx
push eax
push 0x60c810
push 0
push str.eScan_Monitor
push 0x2df
call fcn.00513910
test esi, esi
je 0x448d76
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0xa1c]
push ecx
lea edx, [ebp - 0x814]
push edx
push eax
push str._SECSERVER__SecServer_Started__u_:__s__UpdaterDLL:__s_
lea ecx, [ebp - 0x404]
push ecx
jmp 0x448d94
mov ecx, dword [ebp + 0x10]
lea edx, [ebp - 0xa1c]
push edx
lea eax, [ebp - 0x814]
push eax
push ecx
push str._SECSERVER__SecServer_Started__u_:__s__UpdaterDLL_ABSENT:__s_
lea edx, [ebp - 0x404]
push edx
call fcn.005dfb23
add esp, 0x14
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x814]
push ecx
lea edx, [ebp - 0x404]
push str._SECSERVER__Unable_to_locate__s_
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x404]
push eax
push 0x6aec98
call fcn.004311c0
mov ecx, dword [ebp - 4]
add esp, 0x1c
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret