Function at 0x457b30
Capabilities:
Create process on windows
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b0767
push eax
mov al, byte [esp + 0x14]
mov dword fs:[0], esp
sub esp, 0x4ec
test al, al
push ebx
mov ebx, dword [sym.imp.user32.dll_MessageBoxA]
push ebp
push esi
push edi
mov ebp, ecx
je 0x457b96
mov ecx, 0x2a
mov esi, str.Do_you_want_to_create_and_display_a_configuration_report__n_nThis_is_a_text_file_which_contains_useful_information_non_the_current_configuration_of_the_server__URLs...etc.
lea edi, [esp + 0x450]
push 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x510]
lea eax, [esp + 0x454]
push str.Create_Report
push eax
push ecx
movsw word es:[edi], word [esi]
call ebx
cmp eax, 7
je 0x4582a5
push str.setupreport.txt
call fcn.00485230
add esp, 4
test al, al
je 0x457bd1
push str.setupreport.txt
call dword [sym.imp.kernel32.dll_DeleteFileA]
test eax, eax
jne 0x457bd1
mov edx, dword [esp + 0x50c]
push 0x30
push str.Error
push str.Unable_to_open_setupreport.txt_file.
push edx
call ebx
jmp 0x4582a5
lea ecx, [esp + 0x2c]
call fcn.004853d0
xor edi, edi
lea ecx, [esp + 0x2c]
push edi
push 1
push 1
push str.setupreport.txt
mov dword [esp + 0x514], edi
call fcn.00485470
test al, al
jne 0x457c15
mov eax, dword [esp + 0x50c]
push 0x30
push str.Error
push str.Unable_to_open_setupreport.txt_file.
push eax
call ebx
jmp 0x458291
mov ecx, dword [0x4d5f90]
mov dword [esp + 0x10], ecx
push str.Ability_Mail_Server_1.15
lea edx, [esp + 0x14]
push str.__s_Configuration_Report_
push edx
mov byte [esp + 0x510], 1
call fcn.004a0e91
mov eax, dword [esp + 0x1c]
add esp, 0xc
lea ecx, [esp + 0x2c]
push eax
call fcn.004856d0
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425030
push str._Overall_Settings_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425060
mov ecx, dword [ebp + 4]
add eax, 0x200
shr eax, 0xa
push eax
call fcn.0044bcd0
mov ecx, eax
call fcn.00425070
add eax, 0x200
lea ecx, [esp + 0x14]
shr eax, 0xa
push eax
push str.Maximum_Mail_Size:__u_KB_r_nMaximum_Account_Size:__u_KB_r_n
push ecx
call fcn.004a0e91
mov edx, dword [esp + 0x20]
add esp, 0x10
lea ecx, [esp + 0x2c]
push edx
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004261b0
test al, al
jne 0x457ced
push str._Remote_Admin___Disabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
jmp 0x457db2
push str._Remote_Admin___Enabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov eax, dword [0x4d5f90]
mov dword [esp + 0x14], eax
mov ecx, dword [ebp + 4]
mov byte [esp + 0x504], 2
call fcn.0044bcd0
mov ecx, eax
call fcn.00427820
test al, al
je 0x457d31
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00427730
push eax
jmp 0x457d36
push str.your_host_address_or_ip
lea ecx, [esp + 0x18]
call fcn.004a371e
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004252c0
cmp eax, 0x50
jne 0x457d6c
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x10]
push ecx
push str.Access_Url:_http:___s
push edx
call fcn.004a0e91
add esp, 0xc
jmp 0x457d93
mov ecx, dword [ebp + 4]
mov esi, dword [esp + 0x14]
call fcn.0044bcd0
mov ecx, eax
call fcn.004252c0
push eax
push esi
lea eax, [esp + 0x18]
push str.Access_Url:_http:___s:_d
push eax
call fcn.004a0e91
add esp, 0x10
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x30]
call fcn.004856d0
lea ecx, [esp + 0x14]
mov byte [esp + 0x504], 1
call fcn.004a3625
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425820
test al, al
jne 0x457de6
push str._WebMail___Disabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
jmp 0x457eac
push str._WebMail___Enabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov edx, dword [0x4d5f90]
mov dword [esp + 0x14], edx
mov ecx, dword [ebp + 4]
mov byte [esp + 0x504], 3
call fcn.0044bcd0
mov ecx, eax
call fcn.004277c0
test al, al
je 0x457e2b
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004276a0
push eax
jmp 0x457e30
push str.your_host_address_or_ip
lea ecx, [esp + 0x18]
call fcn.004a371e
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004257f0
cmp eax, 0x50
jne 0x457e66
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push str.Access_Url:_http:___s
push ecx
call fcn.004a0e91
add esp, 0xc
jmp 0x457e8d
mov ecx, dword [ebp + 4]
mov esi, dword [esp + 0x14]
call fcn.0044bcd0
mov ecx, eax
call fcn.004257f0
push eax
push esi
lea edx, [esp + 0x18]
push str.Access_Url:_http:___s:_d
push edx
call fcn.004a0e91
add esp, 0x10
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x2c]
push eax
call fcn.004856d0
lea ecx, [esp + 0x14]
mov byte [esp + 0x504], 1
call fcn.004a3625
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425230
test al, al
jne 0x457ed7
push str._SMTP___Disabled_
jmp 0x458016
push str._SMTP___Enabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004275f0
push eax
lea ecx, [esp + 0x14]
push str.Max_Recipients_per_Mail:__u
push ecx
call fcn.004a0e91
mov edx, dword [esp + 0x1c]
add esp, 0xc
lea ecx, [esp + 0x2c]
push edx
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00441960
push eax
lea eax, [esp + 0x14]
push str.SMTP_In_Port:__d
push eax
call fcn.004a0e91
mov ecx, dword [esp + 0x1c]
add esp, 0xc
push ecx
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425220
test al, al
jne 0x457f5f
push str.Outgoing_SMTP___Disabled
jmp 0x457f94
push str.Outgoing_SMTP___Enabled
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425190
push eax
lea edx, [esp + 0x14]
push str.Outgoing_SMTP_Port:__d
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425290
test al, al
jne 0x457fca
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004262d0
test al, al
jne 0x457fca
push str.Outgoing_SMTP_Security:_None
jmp 0x458016
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425290
test al, al
je 0x457ff7
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004262d0
test al, al
je 0x457ff7
push str.Outgoing_SMTP_Security:_IP_range_protection_and_SMTP_Authentication
jmp 0x458016
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425290
test al, al
je 0x458011
push str.Outgoing_SMTP_Security:_IP_range_protection
jmp 0x458016
push str.Outgoing_SMTP_Security:_SMTP_Authentication
lea ecx, [esp + 0x30]
call fcn.004856d0
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425240
test al, al
jne 0x458047
push str._POP3___Disabled_
jmp 0x45807c
push str._POP3___Enabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004251a0
push eax
lea ecx, [esp + 0x14]
push str.POP3_Port:__d
push ecx
call fcn.004a0e91
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
lea ecx, [esp + 0x30]
call fcn.004856d0
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004270b0
test al, al
jne 0x4580ad
push str._IMAP4___Disabled_
jmp 0x4580e2
push str._IMAP4___Enabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00427090
push eax
lea eax, [esp + 0x14]
push str.IMAP4_Port:__d
push eax
call fcn.004a0e91
mov ecx, dword [esp + 0x1c]
add esp, 0xc
push ecx
lea ecx, [esp + 0x30]
call fcn.004856d0
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.004262b0
test al, al
jne 0x458116
push str._Outgoing_Mails___Disabled_
jmp 0x45822d
push str._Outgoing_Mails___Enabled_
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.00425200
mov ecx, dword [ebp + 4]
test al, al
je 0x45816e
call fcn.0044bcd0
mov ecx, eax
call fcn.00425180
mov ecx, dword [ebp + 4]
push eax
call fcn.0044bcd0
mov ecx, eax
call fcn.004251e0
push eax
lea edx, [esp + 0x18]
push str.Via_Relay_Host:__s__port__d_
push edx
call fcn.004a0e91
add esp, 0x10
jmp 0x458228
call fcn.0044bcd0
mov ecx, eax
call fcn.00425250
test al, al
je 0x458216
mov al, byte [esp + 0x1b]
mov dword [esp + 0x20], edi
mov byte [esp + 0x1c], al
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea ecx, [esp + 0x1c]
push 0x2c
push ecx
mov ecx, dword [ebp + 4]
mov byte [esp + 0x50c], 4
call fcn.0044bcd0
mov ecx, eax
call fcn.00427160
mov ecx, eax
call fcn.0048ef30
mov eax, dword [esp + 0x20]
cmp eax, edi
jne 0x4581c8
mov eax, 0x4b49e4
push eax
lea edx, [esp + 0x14]
push str.Independent_Mode:_With_DNS__s
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp eax, edi
mov byte [esp + 0x504], 1
je 0x458208
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4581ff
cmp al, 0xff
je 0x4581ff
dec al
mov byte [ecx], al
jmp 0x458208
push ecx
call fcn.004a2a3d
add esp, 4
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
jmp 0x458228
lea eax, [esp + 0x10]
push str.Independent_Mode:_Automatically_detect_DNS
push eax
call fcn.004a0e91
add esp, 8
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x30]
call fcn.004856d0
push 0x4d83ac
lea ecx, [esp + 0x30]
call fcn.004856d0
mov ecx, dword [ebp + 4]
call fcn.0044bcd0
mov ecx, eax
call fcn.0041a350
lea ecx, [esp + 0x2c]
call fcn.004854c0
mov edx, dword [esp + 0x50c]
push 1
push 0x4d83ac
push 0x4d83ac
push str.setupreport.txt
push str.open
push edx
call dword [sym.imp.shell32.dll_ShellExecuteA]
lea ecx, [esp + 0x10]
mov byte [esp + 0x504], 0
call fcn.004a3625
lea ecx, [esp + 0x2c]
mov dword [esp + 0x504], 0xffffffff
call fcn.00485420
mov ecx, dword [esp + 0x4fc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x4f8
ret 8