Function at 0x10080d40
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x24c
mov eax, dword [0x10189710]
xor eax, esp
mov dword [esp + 0x248], eax
mov eax, dword [esp + 0x254]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
push ebp
xor ebp, ebp
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x264]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x268]
push esi
push edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x38], ebp
cmp dword [0x101cbdbc], ebp
jne 0x10080ee6
push 0x103
lea edx, [esp + 0x151]
push ebp
push edx
mov byte [esp + 0x158], 0
call fcn.1012e060
add esp, 0xc
push 0x103
lea eax, [esp + 0x49]
push ebp
push eax
mov byte [esp + 0x50], 0
call fcn.1012e060
add esp, 0xc
push 0x101cbdc0
push str.DoNotLogToEventLog
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
mov dword [0x101cbdbc], 1
call fcn.10059e30
push 0x101cbdc4
push str.LogAllEvents
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
lea edi, [esp + 0x14c]
call fcn.1005d0a0
cmp eax, 1
je 0x10080e37
mov ecx, edi
call fcn.1005d240
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [esp + 0x44], 0
je 0x10080e74
lea eax, [esp + 0x44]
inc eax
cmp byte [eax], 0
jne 0x10080e55
lea ecx, [esp + 0x44]
sub eax, ecx
je 0x10080e74
cmp byte [esp + eax + 0x43], 0x5c
je 0x10080e74
push 0x10158184
mov edx, ecx
push edx
call ebx
push str.vistaescanmon.lan
lea eax, [esp + 0x48]
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x44]
push ecx
push 0x104
push 0x101cbaa8
push str.Description
push str.ColDescription
push str.eScanPro
call esi
lea edx, [esp + 0x44]
push edx
push 0x104
push 0x101cbbb0
push str.Action
push str.ColAction
push str.eScanPro
call esi
lea eax, [esp + 0x44]
push eax
push 0x104
push 0x101cbcb8
push 0x1015d91c
push str.ColName
push str.eScanPro
call esi
cmp dword [0x101cbdc0], ebp
jne 0x10081018
cmp dword [0x101cbdc4], ebp
jne 0x10080f14
mov eax, dword [esp + 0x268]
cmp eax, 1
je 0x10080f14
cmp eax, 2
je 0x10080f14
cmp eax, 3
jne 0x10081018
cmp dword [esp + 0x28], ebp
jne 0x10080f2a
cmp dword [esp + 0x30], ebp
jne 0x10080f2a
cmp dword [esp + 0x24], ebp
je 0x10081018
push 0x8000
call fcn.10128320
add esp, 4
push 0x8000
mov esi, eax
call fcn.10128320
add esp, 4
mov ebp, eax
test esi, esi
je 0x1008100b
test ebp, ebp
je 0x10081002
mov eax, dword [esp + 0x28]
mov byte [ebp], 0
mov byte [esi], 0
test eax, eax
je 0x10080f8c
cmp byte [eax], 0
je 0x10080f8c
push eax
push 0x101cbaa8
push str._s_:__s
push ebp
call fcn.10127dc0
add esp, 0x10
push ebp
push esi
call ebx
push 0x1016cd58
push esi
call ebx
mov eax, dword [esp + 0x30]
test eax, eax
je 0x10080fb9
cmp byte [eax], 0
je 0x10080fb9
push eax
push 0x101cbcb8
push str._s_:__s
push ebp
call fcn.10127dc0
add esp, 0x10
push ebp
push esi
call ebx
push 0x1016cd58
push esi
call ebx
mov eax, dword [esp + 0x24]
test eax, eax
je 0x10080fe6
cmp byte [eax], 0
je 0x10080fe6
push eax
push 0x101cbbb0
push str._s_:__s
push ebp
call fcn.10127dc0
add esp, 0x10
push ebp
push esi
call ebx
push 0x1016cd58
push esi
call ebx
mov ecx, dword [esp + 0x260]
mov edi, dword [esp + 0x268]
mov eax, dword [esp + 0x34]
push ecx
push esi
call fcn.10080ca0
add esp, 8
push esi
call fcn.10128243
add esp, 4
test ebp, ebp
je 0x10081018
push ebp
call fcn.10128243
add esp, 4
call fcn.10080930
test eax, eax
je 0x1008106a
test byte [0x101cdc14], 1
jne 0x1008103b
or dword [0x101cdc14], 1
call fcn.100887f0
mov dword [0x101cdc10], eax
cmp dword [0x101cdc10], 0
jne 0x1008106a
push 1
call fcn.10080420
test eax, eax
je 0x1008106a
push 0x1016cd5c
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x10081071
push 2
call fcn.10080420
xor eax, eax
jmp 0x1008128e
mov esi, dword [esp + 0x34]
test esi, esi
je 0x100810aa
cmp byte [esi], 0
mov eax, esi
je 0x10081086
inc eax
cmp byte [eax], 0
jne 0x10081080
sub eax, esi
inc eax
push eax
call fcn.10128320
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
je 0x1008128a
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
push eax
call edi
jmp 0x100810b0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [esp + 0x40]
test esi, esi
je 0x100810e2
cmp byte [esi], 0
mov eax, esi
je 0x100810c6
nop
inc eax
cmp byte [eax], 0
jne 0x100810c0
sub eax, esi
inc eax
push eax
call fcn.10128320
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
je 0x10081235
push esi
push eax
call edi
mov esi, dword [esp + 0x28]
test esi, esi
je 0x10081113
cmp byte [esi], 0
mov eax, esi
je 0x100810f7
inc eax
cmp byte [eax], 0
jne 0x100810f1
sub eax, esi
inc eax
push eax
call fcn.10128320
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
je 0x10081235
push esi
push eax
call edi
mov esi, dword [esp + 0x30]
test esi, esi
je 0x10081144
cmp byte [esi], 0
mov eax, esi
je 0x10081128
inc eax
cmp byte [eax], 0
jne 0x10081122
sub eax, esi
inc eax
push eax
call fcn.10128320
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
je 0x10081235
push esi
push eax
call edi
mov ebx, dword [esp + 0x24]
test ebx, ebx
je 0x100811fa
cmp byte [ebx], 0
mov eax, ebx
je 0x1008115d
inc eax
cmp byte [eax], 0
jne 0x10081157
sub eax, ebx
xor dl, dl
mov ebp, eax
mov byte [esp + 0x14], dl
mov byte [esp + 0x15], dl
lea edi, [esp + 0x14]
je 0x10081177
inc edi
cmp byte [edi], 0
jne 0x10081171
lea esi, [esp + 0x14]
test dl, dl
je 0x10081186
nop
inc esi
cmp byte [esi], 0
jne 0x10081180
lea ecx, [esp + 0x14]
test dl, dl
je 0x10081196
mov edi, edi
inc ecx
cmp byte [ecx], 0
jne 0x10081190
lea eax, [esp + 0x14]
test dl, dl
je 0x100811a6
mov edi, edi
inc eax
cmp byte [eax], 0
jne 0x100811a0
lea edx, [esp + 0x14]
add edx, edx
add edx, edx
sub eax, edx
add eax, ecx
add eax, esi
add eax, edi
lea eax, [eax + ebp + 0x22]
push eax
call fcn.10128320
mov esi, eax
add esp, 4
test esi, esi
je 0x10081239
cmp byte [esp + 0x14], 0
push ebx
jne 0x100811da
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x100811fe
lea ecx, [esp + 0x18]
push ecx
mov edx, ecx
push edx
mov eax, ecx
push eax
push ecx
push 0
push 0
push str.__u:_u___s_s_s_s___s
push esi
call fcn.10127dc0
add esp, 0x24
jmp 0x100811fe
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x274]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x270]
push esi
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x274]
push eax
push ecx
push edx
call dword [esp + 0x5c]
mov dword [esp + 0x38], eax
jmp 0x10081239
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1008124a
push eax
call fcn.10128243
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1008125b
push eax
call fcn.10128243
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x1008126c
push eax
call fcn.10128243
add esp, 4
test esi, esi
je 0x10081279
push esi
call fcn.10128243
add esp, 4
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x1008128a
push eax
call fcn.10128243
add esp, 4
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x258]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10127db1
add esp, 0x24c
ret 0x18