Function at 0x511410
Capabilities:
Read .ini file

Disassembly:
sub esp, 0xb44
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0xb40], eax
mov eax, dword [esp + 0xb50]
mov ecx, dword [esp + 0xb58]
push ebx
push ebp
mov ebp, dword [esp + 0xb50]
push esi
mov esi, dword [esp + 0xb60]
push edi
mov edi, dword [esp + 0xb5c]
xor ebx, ebx
push 0x103
lea edx, [esp + 0x745]
push ebx
push edx
mov dword [esp + 0x28], edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ecx
mov byte [esp + 0x74c], bl
call fcn.005dfd60
push 0x207
lea eax, [esp + 0x959]
push ebx
push eax
mov byte [esp + 0x960], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x145]
push ebx
push ecx
mov byte [esp + 0x14c], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x4d]
push ebx
push edx
mov byte [esp + 0x54], bl
call fcn.005dfd60
push 0x207
lea eax, [esp + 0x365]
push ebx
push eax
mov byte [esp + 0x36c], bl
call fcn.005dfd60
add esp, 0x3c
cmp ebp, ebx
je 0x5114df
mov byte [ebp], bl
cmp edi, ebx
je 0x5114e5
mov byte [edi], bl
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x5114ef
mov byte [eax], bl
cmp esi, ebx
je 0x5114f5
mov byte [esi], bl
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x5114ff
mov byte [eax], bl
push 0x208
lea ecx, [esp + 0x94c]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x104
lea edx, [esp + 0x744]
push edx
lea eax, [esp + 0x950]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
test eax, eax
je 0x51154a
lea ecx, [esp + 0x740]
push ecx
lea edx, [esp + 0x94c]
push edx
call edi
push ebx
lea eax, [esp + 0x12c]
push eax
lea ecx, [esp + 0x950]
push ecx
call fcn.004ec3a0
lea edx, [esp + 0x134]
push ebx
push edx
call fcn.004e8c10
lea eax, [esp + 0x13c]
push eax
call fcn.004e2520
add esp, 0x18
cmp ebp, ebx
je 0x511596
lea ecx, [esp + 0x128]
push ecx
push ebp
call edi
push ebp
call fcn.004e24e0
add esp, 4
lea edx, [esp + 0x128]
push edx
lea eax, [esp + 0x28]
push eax
call edi
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp byte [esp + 0x24], bl
je 0x5115d3
lea eax, [esp + 0x24]
inc eax
cmp byte [eax], bl
jne 0x5115b5
lea ecx, [esp + 0x24]
sub eax, ecx
je 0x5115d3
cmp byte [esp + eax + 0x23], 0x5c
je 0x5115d3
push 0x66da34
mov edx, ecx
push edx
call ebp
push str.MAILSCAN.INI
lea eax, [esp + 0x28]
push eax
call ebp
push 1
push ebx
push ebx
push ebx
lea ecx, [esp + 0x34]
push ebx
push ecx
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x511612
push ebx
lea edx, [esp + 0x28]
push 0x649a0c
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5117bd
lea eax, [esp + 0x330]
push 0x104
push eax
mov byte [esp + 0x2c], bl
call fcn.004f6260
add esp, 8
cmp byte [esp + 0x330], bl
je 0x511661
lea ecx, [esp + 0x330]
push ecx
lea edx, [esp + 0x28]
push edx
call edi
lea eax, [esp + 0x24]
push eax
call fcn.004e24e0
add esp, 4
push str.MAILSCAN.INI
lea ecx, [esp + 0x28]
push ecx
call ebp
jmp 0x5117cf
push 0x103
lea edx, [esp + 0x231]
push ebx
push edx
mov dword [esp + 0x24], 0x104
mov byte [esp + 0x238], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x549]
push ebx
push eax
mov byte [esp + 0x550], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x861]
push ebx
push ecx
mov byte [esp + 0x868], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x665]
push ebx
push edx
mov byte [esp + 0x66c], bl
call fcn.005dfd60
add esp, 0x30
push ebx
push ebx
lea eax, [esp + 0x644]
push eax
push ebx
push ebx
push ebx
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x860]
push edx
push 0x64d3e8
call fcn.0050f490
test eax, eax
je 0x5117cf
lea eax, [esp + 0x63c]
push eax
lea ecx, [esp + 0x53c]
push 0x64d530
push ecx
call fcn.005dfb23
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x230]
push eax
push 0x6486bc
lea ecx, [esp + 0x544]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
cmp byte [esp + 0x22c], bl
je 0x5117cf
lea edx, [esp + 0x22c]
push ebx
push edx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x5117cf
lea eax, [esp + 0x22c]
push eax
push 0x74a9f8
call edi
lea ecx, [esp + 0x22c]
push ecx
lea edx, [esp + 0x28]
push edx
mov dword [0x74ac8c], ebx
call edi
lea eax, [esp + 0x24]
push eax
call fcn.004e24e0
add esp, 4
push str.MAILSCAN.INI
lea ecx, [esp + 0x28]
push ecx
call ebp
push 1
push ebx
push ebx
push ebx
lea edx, [esp + 0x34]
push ebx
push edx
call fcn.004e8950
add esp, 0x18
test eax, eax
je 0x5117cf
mov byte [esp + 0x24], bl
jmp 0x5117cf
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0x334]
push ecx
call edi
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x5117e2
lea edx, [esp + 0x330]
push edx
push eax
call edi
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x5117f2
lea ecx, [esp + 0x24]
push ecx
push eax
call edi
cmp esi, ebx
je 0x5118b5
cmp byte [esp + 0x24], bl
je 0x511836
lea edx, [esp + 0x24]
push edx
push 0x104
push esi
push 0x60c81c
push str.ReportDirectory
push str.General
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [esi], bl
je 0x51183a
push ebx
push esi
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x511836
mov byte [esi], bl
jmp 0x51183a
cmp byte [esi], bl
jne 0x5118ac
lea eax, [esp + 0x128]
push eax
push esi
call edi
push esi
call fcn.004e24e0
add esp, 4
push 0x61b02c
push esi
call ebp
push ebx
push esi
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x5118ac
cmp byte [esp + 0x330], bl
je 0x5118a1
lea ecx, [esp + 0x330]
push ecx
push esi
call edi
push esi
call fcn.004e24e0
add esp, 4
push 0x61b02c
push esi
call ebp
push ebx
push esi
call fcn.004e8c10
add esp, 8
test eax, eax
jne 0x5118ac
lea edx, [esp + 0x128]
push edx
jmp 0x5118a9
lea eax, [esp + 0x128]
push eax
push esi
call edi
push esi
call fcn.004e2520
add esp, 4
mov esi, dword [esp + 0x14]
cmp esi, ebx
je 0x5118ee
lea ecx, [esp + 0x128]
push ecx
push esi
call edi
push esi
call fcn.004e24e0
add esp, 4
push str.SMTP.INI
push esi
call ebp
push 1
push ebx
push ebx
push ebx
push ebx
push esi
call fcn.004e8950
add esp, 0x18
test eax, eax
je 0x5118ee
mov byte [esi], bl
mov ecx, dword [esp + 0xb50]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005dfbbe
add esp, 0xb44
ret