Function at 0x4159c0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45745f
mov eax, dword fs:[0]
push eax
sub esp, 0x110
mov eax, dword [0x4ec560]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x104
lea eax, [ebp - 0x114]
mov dword [ebp - 0x118], 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
mov ecx, 0x4ee63c
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x5c
mov ecx, 0x4ee63c
call dword [sym.imp.mfc140.dll_Ordinal_12826]
inc eax
mov ecx, 0x4ee63c
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
mov ecx, 0x4ee63c
mov dword [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, 0x4ee63c
mov dword [ebp - 4], 1
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov edx, dword [0x4ee63c]
mov esi, eax
push 0xa
push 0x463d84
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x118], 1
push dword [edx - 0xc]
push edx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
mov ecx, 0x4ee63c
push esi
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push dword [0x4ee63c]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0
push str.uploadStyle
push 0x463d9c
call edi
push 0xf5
push eax
push str.Echo:_t_t__Record__:_uploadStyle:__d__LINE___d
mov dword [0x4ee618], eax
call fcn.0042eb70
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0xc
cmp dword [0x4ee618], 0
jne 0x415c78
push dword [0x4ee63c]
push 0
push str.httpUrlTag
push 0x463de0
call edi
push 0xfb
push eax
push str.Echo:_t_t__Record__:_httpUrlTag:__d__LINE___d
mov dword [0x4ee61c], eax
call fcn.0042eb70
mov eax, dword [0x4ee61c]
add esp, 0xc
test eax, eax
jne 0x415bdd
push dword [0x4ee63c]
mov ecx, 0x4ee640
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463e18
push str.httpControlUrl
push 0x463e3c
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee640
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push dword [0x4ee63c]
mov ecx, 0x4ee64c
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463e44
push str.httpReleaseUrl
push 0x463e68
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee64c
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push 0x107
push dword [0x4ee64c]
push dword [0x4ee640]
push str.Echo:_t_t__Record__:_httpControlUrl:_s__httpReleaseUrl:__s__LINE___d
call fcn.0042eb70
mov eax, dword [0x4ee61c]
add esp, 0x10
cmp eax, 1
jne 0x415c78
push dword [0x4ee63c]
mov ecx, 0x4ee634
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463eb4
push str.httpUploadUrl
push 0x463ed8
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee634
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push dword [0x4ee63c]
mov ecx, 0x4ee650
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463ee0
push str.httpRemotePath
push 0x463f04
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee650
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push 0x114
push dword [0x4ee650]
push dword [0x4ee634]
push str.Echo:_t_t__Record__:_httpUploadUrl:_s__httpRemotePath:__s__LINE___d
call fcn.0042eb70
add esp, 0x10
push dword [0x4ee63c]
mov ecx, 0x4ee644
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463f0c
push str.recordServerUrl
push 0x463f74
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee644
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push dword [0x4ee63c]
mov ecx, 0x4ee638
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463f7c
push str.screenServerUrl
push 0x463fa0
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee638
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push 0x120
push dword [0x4ee638]
push dword [0x4ee644]
push str.Echo:_t_t__Record__:_recordServerUrl:_s__screenServerUrl:_s__LINE___d
call fcn.0042eb70
add esp, 0x10
cmp dword [0x4ee618], 0
je 0x415e68
push dword [0x4ee63c]
mov ecx, 0x4ee62c
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push 0x463ff0
push str.ftpControlUrl
push 0x464014
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee62c
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push 0x127
push dword [0x4ee62c]
push str.Echo:_t_t_Get_ftpControlUrl_From_Config_file_:__s__LINE___d
call fcn.0042eb70
add esp, 0xc
mov ecx, 0x4ee654
push dword [0x4ee63c]
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push str.http:__127.0.0.1:80
push str.ftpReleaseUrl
push 0x46407c
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee654
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push 0x12c
push dword [0x4ee654]
push str.Echo:_t_t_Get_ftpReleaseUrl_From_Config_file_:__s__LINE___d
call fcn.0042eb70
add esp, 0xc
push dword [0x4ee63c]
push 0x1f9b
push str.listenPort
push 0x4640cc
call edi
push 0x130
push eax
push 0x4640d4
mov dword [0x4ee620], eax
call fcn.0042eb70
add esp, 0xc
mov ecx, 0x4ee648
push dword [0x4ee63c]
push 0x80
push 0x80
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push str.egoo3466
push str.ftpPassword
push 0x464128
call esi
push 0xffffffffffffffff
mov ecx, 0x4ee648
call dword [sym.imp.mfc140.dll_Ordinal_12503]
push 0x135
push dword [0x4ee648]
push str.Echo:_t_t_Get_ftpPassword_From_Config_file_:__s__LINE___d
call fcn.0042eb70
add esp, 0xc
push dword [0x4ee63c]
push 0x15
push str.ftpServerport
push 0x46417c
call edi
push 0x139
push eax
push str.Echo:_t_t_Get_ftpServerport_From_Config_file_:__d__LINE___d
mov dword [0x4ee624], eax
call fcn.0042eb70
add esp, 0xc
push dword [0x4ee63c]
push 5
push str.scanInterval
push str.Record
call edi
push 0x13f
push eax
push str.Echo:_t_t_Get_scanInterval_From_Config_file_:__d__LINE___d
mov dword [0x4ee628], eax
call fcn.0042eb70
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004385c0
mov esp, ebp
pop ebp
ret