Function at 0x863180
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbac
mov eax, dword [0xb196ec]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push ebx
push esi
push edi
mov esi, ecx
push esi
xor ebx, ebx
push 0x20
push str.Config
lea edi, [ebp - 0x84]
mov edx, 0xaa1543
mov ecx, str.HighBandwidth
mov dword [ebp - 0xb9c], esi
mov byte [ebp - 0x44], bl
mov dword [ebp - 0x43], eax
mov dword [ebp - 0x3f], eax
mov dword [ebp - 0x3b], eax
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x33], eax
mov dword [ebp - 0x2f], eax
mov dword [ebp - 0x2b], eax
mov word [ebp - 0x27], ax
mov byte [ebp - 0x25], al
mov byte [ebp - 0x64], bl
mov dword [ebp - 0x63], eax
mov dword [ebp - 0x5f], eax
mov dword [ebp - 0x5b], eax
mov dword [ebp - 0x57], eax
mov dword [ebp - 0x53], eax
mov dword [ebp - 0x4f], eax
mov dword [ebp - 0x4b], eax
mov word [ebp - 0x47], ax
mov byte [ebp - 0x45], al
mov byte [ebp - 0x84], bl
mov dword [ebp - 0x83], eax
mov dword [ebp - 0x7f], eax
mov dword [ebp - 0x7b], eax
mov dword [ebp - 0x77], eax
mov dword [ebp - 0x73], eax
mov dword [ebp - 0x6f], eax
mov dword [ebp - 0x6b], eax
mov word [ebp - 0x67], ax
mov byte [ebp - 0x65], al
mov byte [ebp - 0x24], bl
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
call fcn.00970690
add esp, 0xc
push esi
push 0x20
push str.Config
lea edi, [ebp - 0x44]
mov edx, 0xaa1543
mov ecx, str.inituploadfiles
call fcn.00970690
add esp, 0xc
push esi
push 0x20
push str.Schedule
lea edi, [ebp - 0x64]
mov edx, 0xaa1543
mov ecx, str.ScheduleDownload
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x44], 0x31
jne 0x8639d6
cmp byte [ebp - 0x64], 0x31
jne 0x86336a
push 0x103
lea eax, [ebp - 0x18f]
push ebx
push eax
mov byte [ebp - 0x190], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x103
lea ecx, [ebp - 0x297]
push ebx
push ecx
mov byte [ebp - 0x298], bl
call fcn.00a7ffb0
add esp, 0xc
push esi
push 0x104
push str.Config
lea edi, [ebp - 0x190]
mov edx, 0xaa1543
mov ecx, str.AutomaticDownload
call fcn.00970690
add esp, 0xc
push esi
push 0x104
push str.Config
lea edi, [ebp - 0x298]
mov edx, 0xaa1543
mov ecx, str.ManualDownload
call fcn.00970690
mov al, 0x30
add esp, 0xc
cmp byte [ebp - 0x190], al
jne 0x863320
cmp byte [ebp - 0x298], al
je 0x863360
push str.Config
mov eax, 0xaa1ac4
mov ebx, str.AutomaticDownload
call fcn.009584b0
add esp, 4
push str.Config
mov eax, 0xaa1ac4
mov ebx, str.ManualDownload
call fcn.009584b0
add esp, 4
push esi
push str._AVPMAPP__Setting_AutomaticDownload_and_ManualDownload_to_0_in__s
push 0
call fcn.0096a780
add esp, 0xc
xor ebx, ebx
cmp byte [ebp - 0x44], 0x31
jne 0x8639d6
push 0x7ff
lea edx, [ebp - 0xb97]
push ebx
push edx
mov dword [ebp - 0xba0], ebx
mov byte [ebp - 0xb98], bl
call fcn.00a7ffb0
add esp, 0xc
push esi
push 0x800
push str.Config
lea edi, [ebp - 0xb98]
mov edx, 0xaa1543
mov ecx, str.IgnoreEventIds
call fcn.00970690
add esp, 0xc
push 0x2c
mov eax, edi
push eax
mov ecx, 0xaabc14
call fcn.0098d4d0
push 0x2c
lea ecx, [ebp - 0xb98]
push ecx
mov ecx, 0xaad5c4
mov edi, eax
call fcn.0098d4d0
push 1
push 0x2c
mov edx, 0xaad5c8
lea ecx, [ebp - 0xb98]
or edi, eax
call fcn.009694d0
push 1
push 0x2c
mov edx, 0xaad5cc
lea ecx, [ebp - 0xb98]
or edi, eax
call fcn.009694d0
push 1
push 0x2c
mov edx, 0xaad5d0
lea ecx, [ebp - 0xb98]
or edi, eax
call fcn.009694d0
or eax, edi
je 0x86345f
push str.Config
lea eax, [ebp - 0xb98]
mov ebx, str.IgnoreEventIds
mov dword [ebp - 0xba0], 1
call fcn.009584b0
mov edx, dword [ebp - 0xb9c]
add esp, 4
push edx
lea eax, [ebp - 0xb98]
push eax
push str._AVPMAPP__Modified_IgnoreEventIds_to__s_in__s
push 0
call fcn.0096a780
mov esi, dword [ebp - 0xb9c]
add esp, 0x10
xor ebx, ebx
push esi
push 0x800
push str.Config
lea edi, [ebp - 0xb98]
mov edx, 0xaa1543
mov ecx, str.SendOnlyEventIds
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x84], 0x31
jne 0x8634a2
cmp byte [ebp - 0xb98], bl
je 0x8635d1
mov byte [ebp - 0xb98], bl
jmp 0x863569
push 0x103
lea ecx, [ebp - 0x18f]
push ebx
push ecx
mov dword [ebp - 0xba8], ebx
mov byte [ebp - 0x190], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x2c
lea edx, [ebp - 0xb98]
push edx
mov ecx, 0xaabc14
call fcn.0098d4d0
mov edi, eax
push 0x2c
lea eax, [ebp - 0xb98]
push eax
mov ecx, 0xaad5c4
call fcn.0098d4d0
or edi, eax
lea ecx, [ebp - 0xba8]
push ecx
mov dword [ebp - 0xba4], edi
push str.109_152_153_154_601_602_603_604_605_737_700_506_9
mov bl, 0x2c
lea edi, [ebp - 0x190]
call fcn.0095ae80
add esp, 8
cmp dword [ebp - 0xba8], 0xffffffff
je 0x863560
jmp 0x863520
push 1
push 0x2c
lea edx, [ebp - 0x190]
lea ecx, [ebp - 0xb98]
call fcn.009694d0
or dword [ebp - 0xba4], eax
lea edx, [ebp - 0xba8]
push edx
push str.109_152_153_154_601_602_603_604_605_737_700_506_9
mov bl, 0x2c
lea edi, [ebp - 0x190]
call fcn.0095ae80
add esp, 8
cmp dword [ebp - 0xba8], 0xffffffff
jne 0x863520
cmp dword [ebp - 0xba4], 0
je 0x8635cf
push str.Config
lea eax, [ebp - 0xb98]
mov ebx, str.SendOnlyEventIds
mov dword [ebp - 0xba0], 1
call fcn.009584b0
add esp, 4
cmp byte [ebp - 0xb98], 0
je 0x8635b3
mov eax, dword [ebp - 0xb9c]
push eax
lea ecx, [ebp - 0xb98]
push ecx
push str._AVPMAPP__Modified_SendOnlyEventIds_to__s_in__s
push 0
call fcn.0096a780
add esp, 0x10
jmp 0x8635c9
mov edx, dword [ebp - 0xb9c]
push edx
push str._AVPMAPP__Modified_SendOnlyEventIds_to_BLANK_in__s
push 0
call fcn.0096a780
add esp, 0xc
mov esi, dword [ebp - 0xb9c]
xor ebx, ebx
push esi
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0xaa1543
push str.DownloadFromAnotherServer
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push esi
push 0x800
push str.Config
lea edi, [ebp - 0xb98]
mov edx, 0xaa1543
mov ecx, str.IgnoreEventIdsServToServ
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0x24], 0x31
jne 0x86364e
cmp byte [ebp - 0xb98], 0x2a
jne 0x863696
push str.Config
mov eax, 0xaa1543
mov ebx, str.IgnoreEventIdsServToServ
mov dword [ebp - 0xba0], 1
call fcn.009584b0
mov ecx, dword [ebp - 0xb9c]
add esp, 4
push ecx
push str._AVPMAPP__Modified_IgnoreEventIdsServToServ_to_NULL_in__s
jmp 0x863684
cmp byte [ebp - 0xb98], 0x2a
je 0x863696
push str.Config
mov eax, 0xaabc14
mov ebx, str.IgnoreEventIdsServToServ
mov dword [ebp - 0xba0], 1
call fcn.009584b0
mov edx, dword [ebp - 0xb9c]
add esp, 4
push edx
push str._AVPMAPP__Modified_IgnoreEventIdsServToServ_to__in__s
push 0
call fcn.0096a780
mov esi, dword [ebp - 0xb9c]
add esp, 0xc
xor ebx, ebx
cmp byte [ebp - 0x24], 0x31
push esi
push 0x800
mov byte [ebp - 0xb98], bl
lea edi, [ebp - 0xb98]
mov edx, 0xaa1543
mov ecx, str.SendOnlyEventIdsServToServ
push str.Config
jne 0x863774
mov dword [ebp - 0xba4], ebx
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0xb98], bl
je 0x8636e7
push 0xaad728
mov esi, edi
call fcn.0098d400
test eax, eax
jne 0x8636ff
push 1
push 0x2c
mov edx, 0xaad728
lea ecx, [ebp - 0xb98]
call fcn.009694d0
mov edi, eax
jmp 0x863705
mov edi, dword [ebp - 0xba4]
push 0xaad72c
lea esi, [ebp - 0xb98]
call fcn.0098d400
test eax, eax
jne 0x86372b
push 1
push 0x2c
mov edx, 0xaad72c
mov ecx, esi
call fcn.009694d0
or edi, eax
mov esi, dword [ebp - 0xb9c]
cmp edi, ebx
je 0x8637c3
push str.Config
lea eax, [ebp - 0xb98]
mov ebx, str.SendOnlyEventIdsServToServ
mov dword [ebp - 0xba0], 1
call fcn.009584b0
add esp, 4
push esi
lea eax, [ebp - 0xb98]
push eax
push str._AVPMAPP__Modified_SendOnlyEventIdsServToServ_to__s_in__s
push 0
call fcn.0096a780
add esp, 0x10
jmp 0x8637c1
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0xb98], bl
je 0x8637c3
push str.Config
mov eax, 0xaa1543
mov ebx, str.SendOnlyEventIdsServToServ
mov dword [ebp - 0xba0], 1
call fcn.009584b0
mov ecx, dword [ebp - 0xb9c]
add esp, 4
push ecx
push str._AVPMAPP__Modified_SendOnlyEventIdsServToServ_to_NULL_in__s
push 0
call fcn.0096a780
mov esi, dword [ebp - 0xb9c]
add esp, 0xc
xor ebx, ebx
push esi
push 0x800
push str.Config
lea edi, [ebp - 0xb98]
mov edx, 0xaa1543
mov ecx, str.UDPBindToIP
call fcn.00970690
add esp, 0xc
cmp byte [ebp - 0xb98], bl
je 0x863838
mov eax, str.0.0.0.0
mov ecx, edi
call fcn.0094c330
test eax, eax
je 0x863838
push str.Config
mov eax, str.0.0.0.0
mov ebx, str.UDPBindToIP
call fcn.009584b0
mov edx, dword [ebp - 0xb9c]
add esp, 4
push edx
mov eax, edi
push eax
push str._AVPMAPP__Modified_UDPBindToIP_from___s__to__0.0.0.0__in__s
push 0
call fcn.0096a780
mov esi, dword [ebp - 0xb9c]
add esp, 0x10
xor ebx, ebx
jmp 0x863840
cmp dword [ebp - 0xba0], ebx
je 0x8638a3
push 0x103
lea ecx, [ebp - 0x297]
push ebx
push ecx
mov byte [ebp - 0x298], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x298]
push edx
push 0xaa1543
mov edx, str.server
mov ecx, 0xaa154c
call fcn.00958d30
add esp, 0xc
cmp byte [ebp - 0x298], 0x31
jne 0x8638a3
push ebx
push 2
push 1
push str.escan_eserv
mov edx, str.eserv.exe
mov ecx, str.trayeser.exe
call fcn.008ae250
add esp, 0x10
push esi
push 0x800
lea eax, [ebp - 0xb98]
push eax
push 0xaa1543
push str.DownloadFromAnotherServer
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0xb98], 0x31
jne 0x8639d6
xor edi, edi
mov ecx, str.eScan_Apache
call fcn.009620b0
test eax, eax
je 0x8639d6
push 1
push str.eScan_Apache
call fcn.00956740
add esp, 8
cmp eax, 1
jne 0x8639d6
cmp byte [0xbe5a88], bl
jne 0x86399d
push 0x207
lea ecx, [ebp - 0x397]
push ebx
push ecx
mov byte [ebp - 0x398], bl
call fcn.00a7ffb0
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
xor edx, edx
xor ecx, ecx
lea ebx, [ebp - 0x398]
call fcn.009748c0
add esp, 0x18
mov ecx, ebx
call fcn.00960910
push 0xaa1ab8
mov edx, ebx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
xor eax, eax
jmp 0x863960
mov cl, byte [ebp + eax - 0x398]
mov byte [eax + 0xbe5a88], cl
inc eax
test cl, cl
jne 0x863960
mov ecx, 0xbe5a88
call fcn.00960910
mov eax, 0xbe5a88
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x863982
mov ecx, dword [str.Apache2]
mov edx, dword [0xaa1e40]
mov dword [eax], ecx
mov dword [eax + 4], edx
xor ebx, ebx
push 1
push str.eScan_Apache
mov esi, 0xbe5a88
call fcn.0099ab30
push ebx
mov ecx, str.eScan_Apache
call fcn.00954c00
add esp, 0xc
push esi
push str.eScan_Apache
push str._INITUP_CE___s___s__Service_Stopped_and_Disabled.
push ebx
call fcn.0096a780
mov esi, dword [ebp - 0xb9c]
add esp, 0x10
mov ecx, esi
call fcn.00862f30
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00a78f21
mov esp, ebp
pop ebp
ret