Function at 0x982e00
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x254
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0x250], eax
mov edx, dword [esp + 0x274]
mov eax, dword [esp + 0x278]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x260]
mov dword [esp], ecx
mov ecx, dword [esp + 0x268]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x26c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x27c]
push ebx
push ebp
mov ebp, dword [esp + 0x26c]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x288]
push esi
xor esi, esi
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x290]
push edi
mov dword [esp + 0x48], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], eax
cmp edx, 4
jbe 0x982ea4
cmp eax, esi
jne 0x982ea4
xor ecx, ecx
call fcn.0097ceb0
mov dword [esp + 0x2c], eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [0xc01324], esi
jne 0x982ff3
push 0x103
lea edx, [esp + 0x159]
push esi
push edx
mov byte [esp + 0x160], 0
call fcn.00a7ffb0
add esp, 0xc
push 0x103
lea eax, [esp + 0x51]
push esi
push eax
mov byte [esp + 0x58], 0
call fcn.00a7ffb0
add esp, 0xc
push 0xc01328
push str.DoNotLogToEventLog
mov ecx, str.SoftwareMicroWorld
mov edx, 0x80000002
mov dword [0xc01324], 1
call fcn.0094c0d0
push 0xc0132c
push str.LogAllEvents
mov ecx, str.SoftwareMicroWorld
mov edx, 0x80000002
call fcn.0094c0d0
lea ebx, [esp + 0x154]
call fcn.009541a0
cmp eax, 1
je 0x982f40
mov ecx, ebx
call fcn.00954350
lea ecx, [esp + 0x154]
push ecx
lea edx, [esp + 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [esp + 0x4c], 0
je 0x982f7f
lea eax, [esp + 0x4c]
mov edi, edi
inc eax
cmp byte [eax], 0
jne 0x982f60
lea ecx, [esp + 0x4c]
sub eax, ecx
je 0x982f7f
cmp byte [esp + eax + 0x4b], 0x5c
je 0x982f7f
push 0xaa1564
mov edx, ecx
push edx
call edi
push str.vistaescanmon.lan
lea eax, [esp + 0x50]
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x4c]
push ecx
push 0x104
push str.Description
push 0xaed050
push str.ColDescription
push str.eScanPro
call esi
lea edx, [esp + 0x4c]
push edx
push 0x104
push str.Action
push 0xaee000
push str.ColAction
push str.eScanPro
call esi
lea eax, [esp + 0x4c]
push eax
push 0x104
push str.Name
push 0xab28f4
push str.ColName
push str.eScanPro
call esi
xor esi, esi
cmp dword [0xc01328], esi
jne 0x983124
cmp dword [0xc0132c], 0
jne 0x983022
mov eax, dword [esp + 0x26c]
cmp eax, 1
je 0x983022
cmp eax, 2
je 0x983022
cmp eax, 3
jne 0x983124
test ebp, ebp
jne 0x983036
cmp dword [esp + 0x20], ebp
jne 0x983036
cmp dword [esp + 0x1c], ebp
je 0x983124
push 0x8000
call fcn.00a7a155
add esp, 4
push 0x8000
mov esi, eax
call fcn.00a7a155
add esp, 4
mov ebx, eax
test esi, esi
je 0x983117
test ebx, ebx
je 0x98310e
mov byte [ebx], 0
mov byte [esi], 0
test ebp, ebp
je 0x983094
cmp byte [ebp], 0
je 0x983094
push ebp
push str.Description
push str._s_:__s
push ebx
call fcn.00a78f30
add esp, 0x10
push ebx
push esi
call edi
push 0xaee01c
push esi
call edi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x9830c3
cmp byte [eax], 0
je 0x9830c3
mov ecx, eax
push ecx
push str.Name
push str._s_:__s
push ebx
call fcn.00a78f30
add esp, 0x10
push ebx
push esi
call edi
push 0xaee01c
push esi
call edi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x9830f2
cmp byte [eax], 0
je 0x9830f2
mov edx, eax
push edx
push str.Action
push str._s_:__s
push ebx
call fcn.00a78f30
add esp, 0x10
push ebx
push esi
call edi
push 0xaee01c
push esi
call edi
mov eax, dword [esp + 0x268]
mov edi, dword [esp + 0x26c]
push eax
mov eax, dword [esp + 0x18]
push esi
call fcn.00982d50
add esp, 8
push esi
call fcn.00a78fec
add esp, 4
test ebx, ebx
je 0x983124
push ebx
call fcn.00a78fec
add esp, 4
call fcn.009829e0
test eax, eax
je 0x98317d
test byte [0xc1148c], 1
jne 0x983147
or dword [0xc1148c], 1
call fcn.0098cf60
mov dword [0xc11488], eax
cmp dword [0xc11488], 0
jne 0x98317d
push 0
push 1
xor ecx, ecx
call fcn.00982250
test eax, eax
je 0x98317d
push str.SendLogLineProc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x40], eax
test eax, eax
jne 0x983184
push eax
push 2
xor ecx, ecx
call fcn.00982250
xor eax, eax
jmp 0x98345c
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x9831b9
push eax
call esi
inc eax
push eax
call fcn.00a7a155
add esp, 4
mov dword [esp + 0x24], eax
test eax, eax
je 0x983458
mov ecx, dword [esp + 0x14]
push ecx
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [esp + 0x10]
test edi, edi
je 0x9831e2
push edi
call esi
inc eax
push eax
call fcn.00a7a155
add esp, 4
mov dword [esp + 0x34], eax
test eax, eax
je 0x983403
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
test ebp, ebp
je 0x983207
push ebp
call esi
inc eax
push eax
call fcn.00a7a155
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
je 0x983403
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [esp + 0x1c], 0
je 0x9833a1
mov eax, dword [esp + 0x1c]
push eax
call esi
mov esi, dword [esp + 0x3c]
lea ecx, [esp + 0x10]
mov dword [esp + 0x18], eax
mov byte [esp + 0x10], 0
mov byte [esp + 0x11], 0
mov dword [esp + 0x14], ecx
mov ebx, ecx
mov ebp, ecx
test esi, esi
je 0x983266
cmp byte [esi], 0
mov dword [esp + 0x14], esi
je 0x983266
push 0x7c
push esi
call fcn.00a7a2c0
add esp, 8
test eax, eax
je 0x983266
push 0xaeacac
push 0xaaec14
push esi
call fcn.0095e130
add esp, 0xc
mov esi, dword [esp + 0x44]
test esi, esi
je 0x983297
cmp byte [esi], 0
mov ebx, esi
je 0x983297
push 0x7c
push esi
call fcn.00a7a2c0
add esp, 8
test eax, eax
je 0x983297
push 0xaeacac
push 0xaaec14
push esi
call fcn.0095e130
add esp, 0xc
mov esi, dword [esp + 0x48]
test esi, esi
je 0x9832c8
cmp byte [esi], 0
mov ebp, esi
je 0x9832c8
push 0x7c
push esi
call fcn.00a7a2c0
add esp, 8
test eax, eax
je 0x9832c8
push 0xaeacac
push 0xaaec14
push esi
call fcn.0095e130
add esp, 0xc
mov edi, dword [esp + 0x14]
cmp byte [edi], 0
je 0x9832d7
inc edi
cmp byte [edi], 0
jne 0x9832d1
cmp byte [ebx], 0
mov esi, ebx
je 0x9832e6
mov edi, edi
inc esi
cmp byte [esi], 0
jne 0x9832e0
cmp byte [ebp], 0
mov ecx, ebp
je 0x9832f6
mov edi, edi
inc ecx
cmp byte [ecx], 0
jne 0x9832f0
cmp byte [esp + 0x10], 0
lea eax, [esp + 0x10]
je 0x983307
inc eax
cmp byte [eax], 0
jne 0x983301
sub eax, ebp
sub eax, ebx
sub eax, dword [esp + 0x14]
lea edx, [esp + 0x10]
sub eax, edx
add eax, ecx
mov ecx, dword [esp + 0x18]
add eax, esi
add eax, edi
lea edx, [eax + ecx + 0x22]
push edx
call fcn.00a7a155
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
je 0x983403
mov eax, dword [esp + 0x284]
test eax, eax
jne 0x983372
cmp dword [esp + 0x2c], eax
jne 0x983372
mov ecx, dword [esp + 0x14]
cmp byte [ecx], al
jne 0x983372
cmp byte [ebx], al
jne 0x983372
cmp byte [ebp], al
jne 0x983372
cmp byte [esp + 0x10], al
jne 0x983372
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x98339b
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
mov edx, dword [esp + 0x34]
push ebp
push ebx
push ecx
push edx
push eax
mov eax, dword [esp + 0x34]
push str.__u:_u___s_s_s_s___s
push eax
call fcn.00a78f30
add esp, 0x24
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, dword [esp + 0x20]
test edi, edi
je 0x9833ca
push edi
call esi
inc eax
push eax
call fcn.00a7a155
mov esi, eax
add esp, 4
mov dword [esp + 0x30], esi
test esi, esi
je 0x983403
push edi
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x9833ce
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x280]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x38]
push esi
push edx
mov edx, dword [esp + 0x278]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x27c]
push edx
push eax
push ecx
call dword [esp + 0x60]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x983414
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x34]
test eax, eax
je 0x983425
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x28]
test eax, eax
je 0x983436
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x983447
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x30]
test eax, eax
je 0x983458
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x260]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00a78f21
add esp, 0x254
ret 0x30