Function at 0x416060
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb98
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push ebx
push esi
push 0x20
mov dword [ebp - 0x43], eax
mov dword [ebp - 0x3f], eax
mov dword [ebp - 0x3b], eax
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x33], eax
mov dword [ebp - 0x2f], eax
mov dword [ebp - 0x2b], eax
mov word [ebp - 0x27], ax
mov byte [ebp - 0x25], al
mov dword [ebp - 0x63], eax
mov dword [ebp - 0x5f], eax
mov dword [ebp - 0x5b], eax
mov dword [ebp - 0x57], eax
mov dword [ebp - 0x53], eax
mov dword [ebp - 0x4f], eax
mov dword [ebp - 0x4b], eax
mov word [ebp - 0x47], ax
mov byte [ebp - 0x45], al
mov dword [ebp - 0x83], eax
mov dword [ebp - 0x7f], eax
mov dword [ebp - 0x7b], eax
mov dword [ebp - 0x77], eax
mov dword [ebp - 0x73], eax
mov dword [ebp - 0x6f], eax
mov dword [ebp - 0x6b], eax
mov word [ebp - 0x67], ax
mov byte [ebp - 0x65], al
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
lea eax, [ebp - 0x84]
push eax
push 0x60c81c
push str.HighBandwidth
push 0x60da74
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x64], bl
mov byte [ebp - 0x84], bl
mov byte [ebp - 0x24], bl
call fcn.004e3460
push ebx
push esi
push 0x20
lea ecx, [ebp - 0x44]
push ecx
push 0x60c81c
push str.inituploadfiles
push 0x60da74
call fcn.004e3460
push ebx
push esi
push 0x20
lea edx, [ebp - 0x64]
push edx
push 0x60c81c
push str.ScheduleDownload
push str.Schedule
call fcn.004e3460
add esp, 0x54
cmp byte [ebp - 0x44], 0x31
jne 0x416862
cmp byte [ebp - 0x64], 0x31
jne 0x416238
push 0x103
lea eax, [ebp - 0x187]
push ebx
push eax
mov byte [ebp - 0x188], bl
call fcn.005dfd60
push 0x103
lea ecx, [ebp - 0x28b]
push ebx
push ecx
mov byte [ebp - 0x28c], bl
call fcn.005dfd60
push ebx
push esi
push 0x104
lea edx, [ebp - 0x188]
push edx
push 0x60c81c
push str.AutomaticDownload
push 0x60da74
call fcn.004e3460
push ebx
push esi
push 0x104
lea eax, [ebp - 0x28c]
push eax
push 0x60c81c
push str.ManualDownload
push 0x60da74
call fcn.004e3460
mov al, 0x30
add esp, 0x50
cmp byte [ebp - 0x188], al
jne 0x4161f5
cmp byte [ebp - 0x28c], al
je 0x41622e
push esi
push 0x60cf3c
push str.AutomaticDownload
push 0x60da74
call fcn.004e0cb0
push esi
push 0x60cf3c
push str.ManualDownload
push 0x60da74
call fcn.004e0cb0
push esi
push str._AVPMAPP__Setting_AutomaticDownload_and_ManualDownload_to_0_in__s
push ebx
call fcn.004f0f30
add esp, 0x2c
cmp byte [ebp - 0x44], 0x31
jne 0x416862
push edi
push 0x7ff
lea ecx, [ebp - 0xb8f]
push ebx
push ecx
mov dword [ebp - 0xb94], ebx
mov byte [ebp - 0xb90], bl
call fcn.005dfd60
push ebx
push esi
push 0x800
lea edx, [ebp - 0xb90]
push edx
push 0x60c81c
push str.IgnoreEventIds
push 0x60da74
call fcn.004e3460
add esp, 0x28
push 0x2c
push 0x66da74
lea eax, [ebp - 0xb90]
push eax
call fcn.004e5560
push 0x2c
push 0x66da58
lea ecx, [ebp - 0xb90]
push ecx
mov edi, eax
call fcn.004e5560
push 1
push 0x2c
push 0x613570
lea edx, [ebp - 0xb90]
push edx
or edi, eax
call fcn.004e56c0
push 1
push 0x2c
or edi, eax
push 0x61356c
lea eax, [ebp - 0xb90]
push eax
call fcn.004e56c0
push 1
push 0x2c
push 0x613568
lea ecx, [ebp - 0xb90]
push ecx
or edi, eax
call fcn.004e56c0
or eax, edi
je 0x416324
push esi
lea edx, [ebp - 0xb90]
push edx
push str.IgnoreEventIds
push 0x60da74
mov dword [ebp - 0xb94], 1
call fcn.004e0cb0
push esi
lea eax, [ebp - 0xb90]
push eax
push str._AVPMAPP__Modified_IgnoreEventIds_to__s_in__s
push ebx
call fcn.004f0f30
add esp, 0x20
push ebx
push esi
push 0x800
lea ecx, [ebp - 0xb90]
push ecx
push 0x60c81c
push str.SendOnlyEventIds
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x84], 0x31
jne 0x416369
cmp byte [ebp - 0xb90], bl
je 0x416478
mov byte [ebp - 0xb90], bl
jmp 0x416426
push 0x103
lea edx, [ebp - 0x187]
push ebx
push edx
mov dword [ebp - 0xb98], ebx
mov byte [ebp - 0x188], bl
call fcn.005dfd60
add esp, 0xc
push 0x2c
push 0x66da74
lea eax, [ebp - 0xb90]
push eax
call fcn.004e5560
push 0x2c
push 0x66da58
lea ecx, [ebp - 0xb90]
push ecx
mov edi, eax
call fcn.004e5560
push 1
push ebx
push 0x2c
lea edx, [ebp - 0xb98]
or edi, eax
push edx
lea eax, [ebp - 0x188]
push eax
push str.109_152_153_154_601_602_603_604_605_737_700
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0xb98], 0xffffffff
je 0x416422
lea ecx, [ecx]
push 1
push 0x2c
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0xb90]
push edx
call fcn.004e56c0
push 1
push ebx
or edi, eax
push 0x2c
lea eax, [ebp - 0xb98]
push eax
lea ecx, [ebp - 0x188]
push ecx
push str.109_152_153_154_601_602_603_604_605_737_700
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0xb98], 0xffffffff
jne 0x4163e0
cmp edi, ebx
je 0x416478
push esi
lea edx, [ebp - 0xb90]
push edx
push str.SendOnlyEventIds
push 0x60da74
mov dword [ebp - 0xb94], 1
call fcn.004e0cb0
add esp, 0x10
push esi
cmp byte [ebp - 0xb90], bl
je 0x41646a
lea eax, [ebp - 0xb90]
push eax
push str._AVPMAPP__Modified_SendOnlyEventIds_to__s_in__s
push ebx
call fcn.004f0f30
add esp, 0x10
jmp 0x416478
push str._AVPMAPP__Modified_SendOnlyEventIds_to_BLANK_in__s
push ebx
call fcn.004f0f30
add esp, 0xc
push esi
push 0x20
lea ecx, [ebp - 0x24]
push ecx
push 0x60c81c
push str.DownloadFromAnotherServer
push 0x60da74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push ebx
push esi
push 0x800
lea edx, [ebp - 0xb90]
push edx
push 0x60c81c
push str.IgnoreEventIdsServToServ
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0x24], 0x31
jne 0x4164ef
cmp byte [ebp - 0xb90], 0x2a
jne 0x416526
push esi
push 0x60c81c
push str.IgnoreEventIdsServToServ
push 0x60da74
mov dword [ebp - 0xb94], 1
call fcn.004e0cb0
push esi
push str._AVPMAPP__Modified_IgnoreEventIdsServToServ_to_NULL_in__s
jmp 0x41651d
cmp byte [ebp - 0xb90], 0x2a
je 0x416526
push esi
push 0x66da74
push str.IgnoreEventIdsServToServ
push 0x60da74
mov dword [ebp - 0xb94], 1
call fcn.004e0cb0
push esi
push str._AVPMAPP__Modified_IgnoreEventIdsServToServ_to__in__s
push ebx
call fcn.004f0f30
add esp, 0x1c
cmp byte [ebp - 0x24], 0x31
push ebx
push esi
mov byte [ebp - 0xb90], bl
push 0x800
jne 0x416602
lea eax, [ebp - 0xb90]
push eax
push 0x60c81c
push str.SendOnlyEventIdsServToServ
push 0x60da74
xor edi, edi
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0xb90], bl
je 0x41657c
push 0x2c
push 0x613410
lea ecx, [ebp - 0xb90]
push ecx
call fcn.004e5460
test eax, eax
jne 0x416593
push 1
push 0x2c
push 0x613410
lea edx, [ebp - 0xb90]
push edx
call fcn.004e56c0
mov edi, eax
push 0x2c
push 0x61340c
lea eax, [ebp - 0xb90]
push eax
call fcn.004e5460
test eax, eax
jne 0x4165c1
push 1
push 0x2c
push 0x61340c
lea ecx, [ebp - 0xb90]
push ecx
call fcn.004e56c0
or edi, eax
cmp edi, ebx
je 0x416656
push esi
lea edx, [ebp - 0xb90]
push edx
push str.SendOnlyEventIdsServToServ
push 0x60da74
mov dword [ebp - 0xb94], 1
call fcn.004e0cb0
push esi
lea eax, [ebp - 0xb90]
push eax
push str._AVPMAPP__Modified_SendOnlyEventIdsServToServ_to__s_in__s
push ebx
call fcn.004f0f30
add esp, 0x20
jmp 0x416656
lea ecx, [ebp - 0xb90]
push ecx
push 0x60c81c
push str.SendOnlyEventIdsServToServ
push 0x60da74
call fcn.004e3460
add esp, 0x1c
cmp byte [ebp - 0xb90], bl
je 0x416656
push esi
push 0x60c81c
push str.SendOnlyEventIdsServToServ
push 0x60da74
mov dword [ebp - 0xb94], 1
call fcn.004e0cb0
push esi
push str._AVPMAPP__Modified_SendOnlyEventIdsServToServ_to_NULL_in__s
push ebx
call fcn.004f0f30
add esp, 0x1c
push ebx
push esi
push 0x800
lea edx, [ebp - 0xb90]
push edx
push 0x60c81c
push str.UDPBindToIP
push 0x60da74
call fcn.004e3460
add esp, 0x1c
pop edi
cmp byte [ebp - 0xb90], bl
je 0x4166c9
lea eax, [ebp - 0xb90]
push 0x613380
push eax
call fcn.005f095a
add esp, 8
test eax, eax
je 0x4166c9
push esi
push 0x613380
push str.UDPBindToIP
push 0x60da74
call fcn.004e0cb0
push esi
lea ecx, [ebp - 0xb90]
push ecx
push str._AVPMAPP__Modified_UDPBindToIP_from___s__to__0.0.0.0__in__s
push ebx
call fcn.004f0f30
add esp, 0x20
jmp 0x4166d1
cmp dword [ebp - 0xb94], ebx
je 0x416737
push 0x103
lea edx, [ebp - 0x28b]
push ebx
push edx
mov byte [ebp - 0x28c], bl
call fcn.005dfd60
push ebx
push 0x104
lea eax, [ebp - 0x28c]
push eax
push 0x60c81c
push str.server
push 0x60c810
call fcn.004efe40
add esp, 0x24
cmp byte [ebp - 0x28c], 0x31
jne 0x416737
push ebx
push 2
push 1
push str.escan_eserv
push str.eserv.exe
push str.trayeser.exe
push 0x6af4b8
call fcn.0044f8f0
add esp, 0x1c
push esi
push 0x800
lea ecx, [ebp - 0xb90]
push ecx
push 0x60c81c
push str.DownloadFromAnotherServer
push 0x60da74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0xb90], 0x31
jne 0x416862
push ebx
push str.eScan_Apache
call fcn.0050d920
add esp, 8
test eax, eax
je 0x416862
push 1
push str.eScan_Apache
call fcn.004d8010
add esp, 8
cmp eax, 1
jne 0x416862
cmp byte [0x6b1ee8], bl
jne 0x41682e
push 0x207
lea edx, [ebp - 0x38f]
push ebx
push edx
mov byte [ebp - 0x390], bl
call fcn.005dfd60
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x390]
push eax
push ebx
call fcn.00512330
lea ecx, [ebp - 0x390]
push ecx
call fcn.004e24e0
add esp, 0x38
push 0x60cf40
lea edx, [ebp - 0x390]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
xor eax, eax
mov cl, byte [ebp + eax - 0x390]
mov byte [eax + 0x6b1ee8], cl
inc eax
cmp cl, bl
jne 0x4167f0
push 0x6b1ee8
call fcn.004e24e0
mov eax, 0x6b1ee8
add esp, 4
dec eax
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x416815
mov ecx, dword [str.Apache2]
mov edx, dword [0x60dc0c]
mov dword [eax], ecx
mov dword [eax + 4], edx
push 1
push str.eScan_Apache
push 0x6b1ee8
call fcn.0052af90
push str.eScan_Apache
push ebx
call fcn.005001f0
push 0x6b1ee8
push str.eScan_Apache
push str._INITUP_CE___s___s__Service_Stopped_and_Disabled.
push ebx
call fcn.004f0f30
add esp, 0x24
push esi
call fcn.00415e20
mov ecx, dword [ebp - 4]
add esp, 4
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret