Function at 0x899bd0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0xb196ec]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0xb8dbe4]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x21c], edi
cmp eax, edi
je 0x899c10
push 0xffffffffffffffff
push eax
xor esi, esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x899c0a
mov esi, 1
mov dword [ebp - 0x21c], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp dword [0xb45d94], edi
je 0x899e2e
mov eax, dword [0xbd4b1c]
cmp ebx, edi
jne 0x899c37
cmp eax, dword [0xbd5750]
je 0x899d19
push 0xb55918
push 0x104
cmp eax, edi
je 0x899ca5
lea eax, [ebp - 0x110]
push eax
push str.Mail_AntiVirus_Enabled
push 0xabfb8c
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Mail_AntiVirus_Status
push 0xabfba8
push 0xaaec30
call esi
push edi
push edi
push edi
push edi
push edi
push edi
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push edi
push 0x2cb
jmp 0x899d03
lea ecx, [ebp - 0x110]
push ecx
push str.Mail_AntiVirus_Disabled
push 0xabfbdc
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Mail_AntiVirus_Status
push 0xabfba8
push 0xaaec30
call esi
push edi
push edi
push edi
push edi
push edi
push edi
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push edi
push 0x2cc
mov ecx, str.eScan_Mail_AntiVirus
call fcn.00982e00
mov edx, dword [0xbd4b1c]
mov dword [0xbd5750], edx
cmp dword [0xb45d94], edi
je 0x899e2e
mov eax, dword [0xbd575c]
cmp ebx, edi
jne 0x899d3a
cmp eax, dword [0xbd5760]
je 0x899e2e
cmp eax, edi
je 0x899db0
cmp dword [0xb56800], edi
jne 0x899db0
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Proactive_Scan_Enabled
push 0xabfbf8
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Proactive_Scan_Status
push 0xabfc14
push 0xaaec30
call esi
push edi
push edi
push edi
push edi
push edi
push edi
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push edi
push 0x2cd
jmp 0x899e18
push 0xb55918
push 0x104
lea ecx, [ebp - 0x110]
push ecx
push str.Proactive_Scan_Disabled
push 0xabfc48
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Proactive_Scan_Status
push 0xabfc14
push 0xaaec30
call esi
push edi
push edi
push edi
push edi
push edi
push edi
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push edi
push 0x2ce
mov ecx, str.eScan_File_AntiVirus
call fcn.00982e00
mov edx, dword [0xbd575c]
mov dword [0xbd5760], edx
mov eax, dword [0xbd5764]
test ebx, ebx
jne 0x899e43
cmp eax, dword [0xbd5768]
je 0x89a011
push 0xb55918
test eax, eax
push 0x104
lea eax, [ebp - 0x110]
push eax
je 0x899efb
push str.Proactive_Scan_Enabled
push 0xabfbf8
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Proactive_Scan_Status
push 0xabfc14
push 0xaaec30
call esi
push 0xabfc4c
lea edx, [ebp - 0x110]
push str.Proactive_Scan
push edx
call fcn.0095e130
add esp, 0xc
push 0xabfc4c
lea eax, [ebp - 0x218]
push str.Proactive_Scan
push eax
call fcn.0095e130
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x336
mov ecx, str.eScan_Web_AntiVirus
call fcn.00982e00
jmp 0x89a001
push str.Proactive_Scan_Disabled
push 0xabfc48
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Proactive_Scan_Status
push 0xabfc14
push 0xaaec30
call esi
push 0xabfc4c
lea edx, [ebp - 0x110]
push str.Proactive_Scan
push edx
call fcn.0095e130
add esp, 0xc
push 0xabfc4c
lea eax, [ebp - 0x218]
push str.Proactive_Scan
push eax
call fcn.0095e130
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x337
mov ecx, str.eScan_Web_AntiVirus
call fcn.00982e00
push str.Exploit_Block
lea eax, [ebp - 0x110]
push 0xabfc4c
push eax
call fcn.0095e130
add esp, 0xc
push str.Exploit_Block
lea ecx, [ebp - 0x218]
push 0xabfc4c
push ecx
call fcn.0095e130
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push 0
push 0x339
mov ecx, str.eScan_Web_AntiVirus
call fcn.00982e00
mov edi, 1
mov ecx, dword [0xbd5764]
mov dword [0xbd5768], ecx
test ebx, ebx
jne 0x89a023
mov edx, dword [0xbd576c]
cmp edx, dword [0xbd5770]
je 0x89a18c
cmp dword [0xbd576c], 0
je 0x89a0d6
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Proactive_Scan_Enabled
push 0xabfbf8
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Proactive_Scan_Status
push 0xabfc14
push 0xaaec30
call esi
push str.Exploit_Block
lea edx, [ebp - 0x110]
push str.Proactive_Scan
push edx
call fcn.0095e130
add esp, 0xc
push str.Exploit_Block
lea eax, [ebp - 0x218]
push str.Proactive_Scan
push eax
call fcn.0095e130
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x338
jmp 0x89a178
test edi, edi
jne 0x89a182
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Proactive_Scan_Disabled
push 0xabfc48
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Proactive_Scan_Status
push 0xabfc14
push 0xaaec30
call esi
push str.Exploit_Block
lea edx, [ebp - 0x110]
push str.Proactive_Scan
push edx
call fcn.0095e130
add esp, 0xc
push str.Exploit_Block
lea eax, [ebp - 0x218]
push str.Proactive_Scan
push eax
call fcn.0095e130
add esp, 0xc
push edi
push edi
push edi
push edi
push edi
push edi
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push edi
push 0x339
mov ecx, str.eScan_Web_AntiVirus
call fcn.00982e00
mov eax, dword [0xbd576c]
mov dword [0xbd5770], eax
cmp dword [0xb45d94], 0
je 0x89a3ac
mov eax, dword [0xb3df10]
test ebx, ebx
jne 0x89a1ae
cmp eax, dword [0xb3df14]
je 0x89a29c
push 0xb55918
push 0x104
test eax, eax
je 0x89a223
lea ecx, [ebp - 0x110]
push ecx
push str.Mail_AntiPhish_Enabled
push 0xabfc9c
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Mail_AntiPhish_Status
push 0xabfcb8
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push 0
push 0x2cf
jmp 0x89a288
lea edx, [ebp - 0x110]
push edx
push str.Mail_AntiPhish_Disabled
push 0xabfce8
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea eax, [ebp - 0x218]
push eax
push str.Mail_AntiPhish_Status
push 0xabfcb8
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x2d0
mov ecx, str.eScan_Mail_AntiSpam
call fcn.00982e00
mov eax, dword [0xb3df10]
mov dword [0xb3df14], eax
cmp dword [0xb45d94], 0
je 0x89a3ac
mov eax, dword [0xbd5754]
test ebx, ebx
jne 0x89a2be
cmp eax, dword [0xbd5758]
je 0x89a3b0
push 0xb55918
push 0x104
test eax, eax
je 0x89a333
lea ecx, [ebp - 0x110]
push ecx
push str.Mail_AntiSpam_Enabled
push 0xabfd04
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Mail_AntiSpam_Status
push 0xabfd20
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push 0
push 0x2d1
jmp 0x89a398
lea edx, [ebp - 0x110]
push edx
push str.Mail_AntiSpam_Disabled
push 0xabfd3c
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea eax, [ebp - 0x218]
push eax
push str.Mail_AntiSpam_Status
push 0xabfd20
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x2d2
mov ecx, str.eScan_Mail_AntiSpam
call fcn.00982e00
mov eax, dword [0xbd5754]
mov dword [0xbd5758], eax
test ebx, ebx
jne 0x89a3c2
mov ecx, dword [0xb3df18]
cmp ecx, dword [0xb3df1c]
je 0x89a4ce
cmp dword [0xb3df18], 0
je 0x89a445
cmp dword [0xb5681c], 0
jne 0x89a445
push 0xb55918
push 0x104
lea edx, [ebp - 0x110]
push edx
push str.Web_AntiPhish_Enabled
push 0xabfd58
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea eax, [ebp - 0x218]
push eax
push str.Web_AntiPhish_Status
push 0xabfd74
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x2d3
jmp 0x89a4b4
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Web_AntiPhish_Disabled
push 0xabfda4
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Web_AntiPhish_Status
push 0xabfd74
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push 0
push 0x2d4
mov ecx, str.eScan_Web_AntiPhish
call fcn.00982e00
mov ecx, dword [0xb3df18]
mov dword [0xb3df1c], ecx
test ebx, ebx
jne 0x89a4ed
mov edx, dword [0xb524bc]
cmp edx, dword [0xb524d8]
jne 0x89a4ed
mov eax, dword [0xb524b4]
cmp eax, dword [0xb52328]
je 0x89a68f
mov eax, dword [0xb524bc]
cmp eax, 1
je 0x89a5fa
cmp dword [0xb52328], 0
je 0x89a5fa
test eax, eax
jne 0x89a580
push 0xb55918
push 0x104
lea ecx, [ebp - 0x110]
push ecx
push str.Web_Protection___Active
push 0xabfe14
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Web_Protection_Status
push 0xabfde0
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push 0
push 0x2d9
jmp 0x89a669
cmp eax, 2
jne 0x89a673
push 0xb55918
push 0x104
lea edx, [ebp - 0x110]
push edx
push str.Web_Protection___Internet_Access_Blocked
push 0xabfe44
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea eax, [ebp - 0x218]
push eax
push str.Web_Protection_Status
push 0xabfde0
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x2db
jmp 0x89a669
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Web_Protection___Inactive
push 0xabfdc4
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Web_Protection_Status
push 0xabfde0
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push 0
push 0x2da
mov ecx, str.eScan_Web_Protection
call fcn.00982e00
mov ecx, dword [0xb524bc]
mov edx, dword [0xb52328]
mov dword [0xb524d8], ecx
mov dword [0xb524b4], edx
test ebx, ebx
jne 0x89a6a0
mov eax, dword [0xb52390]
cmp eax, dword [0xb52444]
je 0x89a8a4
cmp dword [0xb5681c], 0
jne 0x89a898
mov eax, dword [0xb52390]
cmp eax, 1
jne 0x89a72b
push 0xb55918
push 0x104
lea ecx, [ebp - 0x110]
push ecx
push str.Web_Profile_Set_to_Unprivileged
push 0xabfe68
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Web_Profile_Status
push 0xabfe80
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push 0
push 0x2d5
jmp 0x89a88e
cmp eax, 2
jne 0x89a7a4
push 0xb55918
push 0x104
lea edx, [ebp - 0x110]
push edx
push str.Web_Profile_Set_to_Less_Privileged
push 0xabfea8
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea eax, [ebp - 0x218]
push eax
push str.Web_Profile_Status
push 0xabfe80
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xaa154c
push 0
push 0x2d6
jmp 0x89a88e
cmp eax, 3
jne 0x89a81a
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Web_Profile_Set_to_Normal_Privileged
push 0xabfed4
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Web_Profile_Status
push 0xabfe80
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push 0
push 0x2d7
jmp 0x89a88e
cmp eax, 4
jne 0x89a898
push 0xb55918
push 0x104
lea ecx, [ebp - 0x110]
push ecx
push str.Web_Profile_Set_to_Most_Privileged
push 0xabfed4
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Web_Profile_Status
push 0xabfe80
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push 0
push 0x2d8
mov ecx, str.eScan_Web_Protection
call fcn.00982e00
mov edx, dword [0xb52390]
mov dword [0xb52444], edx
cmp dword [0xb45d94], 0
je 0x89a9c9
mov eax, dword [0xbd577c]
test ebx, ebx
jne 0x89a8c6
cmp eax, dword [0xbd5780]
je 0x89a9c9
test eax, eax
je 0x89a944
cmp dword [0xb5681c], 0
jne 0x89a944
push 0xb55918
push 0x104
lea eax, [ebp - 0x110]
push eax
push str.Privacy_Control_Enabled
push 0xabff14
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.Privacy_Control_Status
push 0xabff30
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x218]
push eax
push 0xaa154c
push 0
push 0x2dc
jmp 0x89a9b3
push 0xb55918
push 0x104
lea ecx, [ebp - 0x110]
push ecx
push str.Privacy_Control_Disabled
push 0xabff68
push 0xaaec30
call esi
push 0xb55918
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.Privacy_Control_Status
push 0xabff30
push 0xaaec30
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0xaa154c
push 0
push 0x2dd
mov ecx, str.eScan_Privacy_Control
call fcn.00982e00
mov edx, dword [0xbd577c]
mov dword [0xbd5780], edx
cmp dword [ebp - 0x21c], 1
jne 0x89a9e2
mov eax, dword [0xb8dbe4]
test eax, eax
je 0x89a9e2
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00a78f21
mov esp, ebp
pop ebp
ret