Function at 0x48d130
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58d2db
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x61b000]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ebp + 8], 0
je 0x48d1b0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
add ecx, 2
mov dword [ebp - 0x98], ecx
mov edx, dword [ebp - 0x94]
mov ax, word [edx]
mov word [ebp - 0x9a], ax
add dword [ebp - 0x94], 2
cmp word [ebp - 0x9a], 0
jne 0x48d179
mov ecx, dword [ebp - 0x94]
sub ecx, dword [ebp - 0x98]
sar ecx, 1
mov dword [ebp - 0xa0], ecx
jne 0x48d1c9
push str.ERR:_invalid_param_input__Out_r_n
push 0x59fddc
call fcn.0040c230
add esp, 8
xor eax, eax
jmp 0x48d738
call fcn.00402270
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x6c], 0
xor edx, edx
mov dword [ebp - 0x6b], edx
mov dword [ebp - 0x67], edx
mov dword [ebp - 0x63], edx
mov dword [ebp - 0x5f], edx
mov dword [ebp - 0x5b], edx
mov dword [ebp - 0x57], edx
mov dword [ebp - 0x53], edx
mov word [ebp - 0x4f], dx
mov byte [ebp - 0x4d], dl
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x48d20b
mov dword [ebp - 0xa4], 0
jmp 0x48d26c
mov ecx, dword [ebp - 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3fffffff
jle 0x48d230
mov dword [ebp - 0xa8], 0
jmp 0x48d260
mov eax, dword [ebp - 0x14]
shl eax, 1
call fcn.00570840
mov dword [ebp - 0xac], esp
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x14]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0xac]
push edx
call fcn.004022d0
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0xa4]
push ecx
push 0x20
lea edx, [ebp - 0x6c]
push edx
push 0x59a7f3
push 0x59fde8
push 0x59fdf0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x48d2aa
lea eax, [ebp - 0x6c]
push eax
push str.Read_report_server_ip_S_r_n
push 0x59fe34
call fcn.0040c230
add esp, 0xc
jmp 0x48d2ca
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ERR:_can_not_get_report_ip_conf_err_d__Out_r_n
push 0x59fea0
call fcn.0040c230
add esp, 0xc
xor eax, eax
jmp 0x48d738
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0x59feac
push 0x59feb8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x4c], eax
mov edx, dword [ebp - 0x4c]
push edx
push str.Read_report_server_port_d_r_n
push 0x59ff0c
call fcn.0040c230
add esp, 0xc
cmp dword [ebp - 0x4c], 0
jne 0x48d31f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ERR:_can_not_get_report_port_conf_err_d__Out_r_n
push 0x59ff7c
call fcn.0040c230
add esp, 0xc
xor eax, eax
jmp 0x48d738
lea eax, [ebp - 0x6c]
push eax
mov ecx, 0x6412d0
call fcn.00406110
mov ecx, dword [ebp - 0x4c]
mov dword [0x6412ec], ecx
mov edx, dword [ebp + 8]
push edx
push 1
push str.network_flow
push 0x59ffa4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x6414f4], eax
mov eax, dword [ebp + 8]
push eax
push 0
push 0x59ffbc
push 0x59ffd0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x6414d0], eax
mov ecx, dword [0x6414d0]
push ecx
push str.Read_last_handle_event_audit_time_d_r_n
push 0x5a0038
call fcn.0040c230
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
push 0
push 0x5a0044
push 0x5a005c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x6414d4], eax
mov eax, dword [0x6414d4]
push eax
push str.Read_last_handle_event_audit_record_d_r_n
push 0x5a00cc
call fcn.0040c230
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
push 0
push str.localset
push 0x5a00ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x40]
push edx
push str.Read_report_local_set_d_r_n
push 0x5a013c
call fcn.0040c230
add esp, 0xc
xor eax, eax
cmp eax, dword [ebp - 0x40]
sbb ecx, ecx
neg ecx
mov dword [0x6412f0], ecx
mov edx, dword [ebp + 8]
push edx
push 0
push str.selflearn
push str.selflearn_conf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
push str.Read_report_self_learn_d_r_n
push 0x5a01b4
call fcn.0040c230
add esp, 0xc
mov ecx, dword [ebp - 0x74]
mov dword [0x6414bc], ecx
mov edx, dword [ebp + 8]
push edx
push 0
push str.heartbeat
push str.heartbeat_conf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
push str.Read_report_heartbeat_d_r_n
push 0x5a022c
call fcn.0040c230
add esp, 0xc
cmp dword [ebp - 0x38], 0
jne 0x48d46f
mov dword [ebp - 0xb0], 0x5a0
jmp 0x48d478
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0xb0]
mov dword [0x6414c0], edx
mov eax, dword [ebp + 8]
push eax
push 0
push str.detect_cdrom_exist
push 0x5a0260
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
push ecx
push str.Read_report_detect_CDRom_exist_d_r_n
push 0x5a0274
call fcn.0040c230
add esp, 0xc
cmp dword [ebp - 0x48], 0
jne 0x48d4c5
mov dword [ebp - 0xb4], 0x1e
jmp 0x48d4ce
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0xb4]
mov dword [0x6414c4], eax
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0x5a02c8
push 0x5a02ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
push edx
push str.Read_report_detect_local_port_d_r_n
push 0x5a0348
call fcn.0040c230
add esp, 0xc
cmp dword [ebp - 0x18], 0
jne 0x48d51a
mov dword [ebp - 0xb8], 0x3c
jmp 0x48d523
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
mov dword [0x6414c8], ecx
mov edx, dword [ebp + 8]
push edx
push 0x3c
push str.system_running
push 0x5a0374
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x6414f8], eax
mov eax, dword [ebp + 8]
push eax
push 0x15180
push str.system_software
push 0x5a03a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x6414fc], eax
mov ecx, dword [ebp + 8]
push ecx
push 0x384
push str.system_base_info
push 0x5a03e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x641500], eax
mov edx, dword [ebp + 8]
push edx
push 0x384
push str.network_card
push 0x5a0410
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x641504], eax
mov eax, dword [ebp + 8]
push eax
push 0x384
push str.open_port_detail
push 0x5a0448
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x641508], eax
mov ecx, dword [ebp + 8]
push ecx
push 0x384
push str.system_patch
push 0x5a0478
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x64150c], eax
mov edx, dword [ebp + 8]
push edx
push 0x384
push str.system_hardware
push 0x5a04ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x641510], eax
mov eax, dword [ebp + 8]
push eax
push 0x384
push str.process_info
push 0x5a04dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x641514], eax
mov ecx, dword [ebp + 8]
push ecx
push 0x384
push str.scan_assets
push 0x5a0508
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x641518], eax
mov edx, dword [ebp + 8]
push edx
push 0
push str.cmd_max_len
push 0x5a0534
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
push str.Read_report_cmd_max_length_d_r_n
push str.ParseConf
call fcn.0040c230
add esp, 0xc
cmp dword [ebp - 0x3c], 0
jne 0x48d67b
mov dword [ebp - 0xbc], 0x400
jmp 0x48d684
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xbc], ecx
mov edx, dword [ebp - 0xbc]
mov dword [0x6414cc], edx
xor eax, eax
mov word [ebp - 0x30], ax
xor ecx, ecx
mov dword [ebp - 0x2e], ecx
mov dword [ebp - 0x2a], ecx
mov dword [ebp - 0x26], ecx
mov dword [ebp - 0x22], ecx
mov word [ebp - 0x1e], cx
mov edx, dword [ebp + 8]
push edx
push 0xa
lea eax, [ebp - 0x30]
push eax
push 0x5a0594
push str.PROCESS
push 0x5a05a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x48d71b
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x90]
call fcn.00406230
mov dword [ebp - 0xc0], eax
mov edx, dword [ebp - 0xc0]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xc4]
push eax
mov ecx, 0x6414d8
call fcn.0042b7d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00406270
mov ecx, dword [ebp + 8]
push ecx
call fcn.0048bb80
add esp, 4
mov edx, dword [ebp + 8]
push edx
call fcn.0048bec0
add esp, 4
mov eax, 1
lea esp, [ebp - 0xc8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00560c61
mov esp, ebp
pop ebp
ret