Function at 0x5ce680
Capabilities:
Create thread
Query or enumerate registry key
Read .ini file
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x65e4
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x65e0], eax
mov eax, dword [esp + 0x65ec]
mov ecx, dword [esp + 0x65fc]
mov edx, dword [esp + 0x6600]
push ebx
push ebp
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x660c]
mov dword [esp + 0xb8], ecx
mov ecx, dword [esp + 0x6618]
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x661c]
push esi
mov esi, dword [esp + 0x65fc]
xor ebx, ebx
push edi
mov edi, dword [esp + 0x65f8]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6630]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x6634]
mov dword [esp + 0xbc], edx
mov edx, dword [esp + 0x6638]
mov dword [esp + 0xac], edi
mov dword [esp + 0xc4], eax
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xe4], edx
mov dword [esp + 0x44], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x4c], esi
cmp byte [0x765ad8], bl
jne 0x5ce758
push str.SOFTWAREMicroWorldeScan_for_WindowsMMCMon
push 0x765ad8
call fcn.005dfb23
add esp, 8
or ebp, 0xffffffff
cmp byte [0x762368], bl
jne 0x5ce7e2
lea edx, [esp + 0x2388]
mov eax, edi
sub edx, edi
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x5ce770
lea eax, [esp + 0x2388]
push eax
call fcn.004e24e0
lea eax, [esp + 0x238c]
add esp, 4
add eax, ebp
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x5ce793
mov ecx, dword [str.RDownUA.BAT]
mov edx, dword [0x622ecc]
push ebx
push ebx
mov dword [eax], ecx
mov ecx, dword [0x622ed0]
mov dword [eax + 4], edx
push ebx
lea edx, [esp + 0x2394]
push ebx
push edx
mov dword [eax + 8], ecx
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x5ce7e2
lea ecx, [ecx]
mov cl, byte [esp + eax + 0x2388]
mov byte [eax + 0x762368], cl
inc eax
cmp cl, bl
jne 0x5ce7d0
cmp byte [0x762578], bl
jne 0x5ce882
lea edx, [esp + 0x248c]
mov eax, edi
sub edx, edi
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x5ce800
lea eax, [esp + 0x248c]
push eax
call fcn.004e24e0
lea eax, [esp + 0x2490]
add esp, 4
add eax, ebp
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x5ce823
mov ecx, dword [str.RDownUAF.BAT]
mov edx, dword [0x622e10]
mov dword [eax], ecx
mov ecx, dword [0x622e14]
push ebx
mov dword [eax + 4], edx
mov dl, byte [0x622e18]
push ebx
mov dword [eax + 8], ecx
push ebx
mov byte [eax + 0xc], dl
lea eax, [esp + 0x2498]
push ebx
push eax
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x5ce882
jmp 0x5ce870
mov cl, byte [esp + eax + 0x248c]
mov byte [eax + 0x762578], cl
inc eax
cmp cl, bl
jne 0x5ce870
cmp byte [0x7658d0], bl
jne 0x5ce8b3
push edi
push 0x7658d0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x7658d0
call fcn.004e24e0
add esp, 4
push str.eupdate.ini
push 0x7658d0
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp dword [esp + 0x661c], ebx
jne 0x5ceadb
cmp esi, ebx
je 0x5ce8d0
mov dword [0x7658c8], ebx
push 0x7658d0
push 0x400
push 0x7654c8
push 0x60c81c
push str.PriorityServer
push 0x60da74
call edi
push 0x7658d0
push 0x2000
push 0x7634c8
push 0x60c81c
push str.Servers
push 0x60da74
call edi
push ebx
push 0x400
push 0x7630c8
push 0x60c81c
push str.ServerIPs
push 0x60c810
call fcn.004edfd0
add esp, 0x18
cmp dword [esp + 0x6618], 1
jne 0x5ceadb
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5ce958
push eax
call fcn.005e0865
add esp, 4
mov dword [0x7630c0], ebx
push 0x207
lea ecx, [esp + 0x3fed]
push ebx
push ecx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3ff4], bl
call fcn.005dfd60
add esp, 0xc
push 1
lea edx, [esp + 0x3fec]
push edx
push 0x762eb8
call fcn.0050dc50
lea eax, [esp + 0x38]
push eax
call fcn.0050a280
push ebx
lea ecx, [esp + 0x44]
push ecx
call fcn.004fbdb0
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x5cea28
cmp byte [eax], bl
je 0x5cea1f
push 1
push ebx
push 0x2c
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x35e0]
push ecx
push eax
mov dword [esp + 0x88], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x70], ebp
je 0x5cea1b
lea ebx, [ebx]
push 1
push 0x2c
lea edx, [esp + 0x35d8]
push edx
push 0x7630c0
call fcn.004e5820
mov edx, dword [esp + 0x38]
push 1
push ebx
push 0x2c
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x35e0]
push ecx
push edx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x70], ebp
jne 0x5ce9e0
mov eax, dword [esp + 0x38]
push eax
call fcn.005e0865
add esp, 4
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x5ceaa8
cmp byte [eax], bl
je 0x5cea9f
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x37e8]
push edx
push eax
mov dword [esp + 0x68], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x50], ebp
je 0x5cea9b
lea esp, [esp]
push 1
push 0x2c
lea eax, [esp + 0x37e0]
push eax
push 0x7630c0
call fcn.004e5820
mov eax, dword [esp + 0x40]
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x37e8]
push edx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x50], ebp
jne 0x5cea60
mov eax, dword [esp + 0x40]
push eax
call fcn.005e0865
add esp, 4
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5ceac2
cmp byte [eax], bl
je 0x5ceac2
push 0x2c
push str.127.0.0.1
push eax
call fcn.004e5560
cmp byte [0x762eb8], bl
je 0x5ceadb
push 0x2c
push str.LocalHost
push 0x762eb8
call fcn.004e5560
mov ebp, dword [esp + 0x6628]
cmp ebp, ebx
je 0x5ceaef
xor eax, eax
mov dword [0x7658c8], eax
jmp 0x5ceaf4
mov eax, dword [0x7658c8]
mov esi, dword [esp + 0x6608]
cmp dword [esp + 0x6618], ebx
jne 0x5ceb18
cmp eax, ebx
je 0x5ceb2d
cmp dword [0x762eb0], esi
je 0x5ceb18
mov dword [0x7658c8], ebx
jmp 0x5ceb2d
cmp eax, ebx
jne 0x5d017a
cmp dword [esp + 0x6618], ebx
jne 0x5d017a
push 0x207
lea ecx, [esp + 0x1861]
push ebx
push ecx
mov byte [esp + 0x1868], bl
call fcn.005dfd60
push 0x207
lea edx, [esp + 0x208d]
push ebx
push edx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov byte [esp + 0x2094], bl
call fcn.005dfd60
push 0x207
lea eax, [esp + 0x27b5]
push ebx
push eax
mov byte [esp + 0x27bc], bl
call fcn.005dfd60
add esp, 0x24
mov dword [0x762eb0], esi
cmp dword [esp + 0x6604], ebx
je 0x5ceba5
push ebx
push esi
push str._MMC__Initializing_IPList__SetClientsToUpdateFromUpdateAgent___d__OnlyGetClientCount___d_
push ebx
call fcn.004f0f30
add esp, 0x10
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5cebbd
push eax
call fcn.005e0865
add esp, 4
mov dword [0x7630c0], ebx
cmp ebp, ebx
jne 0x5cebcb
mov dword [0x7658c8], 1
push ebx
lea ecx, [esp + 0x2080]
push ecx
push 0x762eb8
mov byte [0x762eb8], bl
call fcn.0050dc50
push 1
lea edx, [esp + 0x279c]
push edx
push 0x762eb8
call fcn.0050dc50
lea eax, [esp + 0x2c]
push eax
call fcn.0050a280
push ebx
lea ecx, [esp + 0x34]
push ecx
call fcn.004fbdb0
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x5cecab
cmp byte [eax], bl
je 0x5cec9d
push 1
push ebx
push 0x2c
lea edx, [esp + 0x80]
push edx
lea ecx, [esp + 0x2dc0]
push ecx
push eax
mov dword [esp + 0x8c], ebx
call fcn.004e1380
or esi, 0xffffffff
add esp, 0x18
cmp dword [esp + 0x74], esi
je 0x5cec8e
nop
push 1
push 0x2c
lea edx, [esp + 0x2db8]
push edx
push 0x7630c0
call fcn.004e5820
mov edx, dword [esp + 0x2c]
push 1
push ebx
push 0x2c
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x2dc0]
push ecx
push edx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x74], esi
jne 0x5cec50
mov eax, dword [esp + 0x2c]
push eax
call fcn.005e0865
add esp, 4
jmp 0x5cecae
push eax
or esi, 0xffffffff
call fcn.005e0865
add esp, 4
jmp 0x5cecae
or esi, 0xffffffff
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x5ced28
cmp byte [eax], bl
je 0x5ced1f
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x32d4]
push edx
push eax
mov dword [esp + 0x70], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x58], esi
je 0x5ced1b
nop
push 1
push 0x2c
lea eax, [esp + 0x32cc]
push eax
push 0x7630c0
call fcn.004e5820
mov eax, dword [esp + 0x30]
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x32d4]
push edx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x58], esi
jne 0x5cece0
mov eax, dword [esp + 0x30]
push eax
call fcn.005e0865
add esp, 4
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5ced42
cmp byte [eax], bl
je 0x5ced42
push 0x2c
push str.127.0.0.1
push eax
call fcn.004e5560
cmp byte [0x762eb8], bl
je 0x5ced5b
push 0x2c
push str.LocalHost
push 0x762eb8
call fcn.004e5560
cmp byte [esp + 0x207c], bl
je 0x5ced78
push 0x2c
push str.127.0.0.1
lea ecx, [esp + 0x2084]
push ecx
call fcn.004e5560
cmp byte [esp + 0x2798], bl
je 0x5ced95
push 0x2c
push str.127.0.0.1
lea edx, [esp + 0x27a0]
push edx
call fcn.004e5560
push 0x7658d0
push 0x400
push 0x7654c8
push 0x60c81c
push str.PriorityServer
push 0x60da74
mov dword [0x762360], 1
call edi
push 0x7658d0
push 0x2000
push 0x7634c8
push 0x60c81c
push str.Servers
push 0x60da74
call edi
push ebx
push 0x400
push 0x7630c8
push 0x60c81c
push str.ServerIPs
push 0x60c810
call fcn.004edfd0
add esp, 0x18
cmp byte [0x7634c8], bl
je 0x5ceff0
mov eax, 0x7634c8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x5cee15
sub eax, edx
sub eax, 0xffffff80
push eax
call fcn.005e20e4
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x5cee4a
mov eax, 0x7634c8
mov edx, edi
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x5cee40
push 0x2c
push str.127.0.0.1
push 0x7634c8
call fcn.004e5560
push 0x2c
push str.localhost
push 0x7634c8
mov esi, eax
call fcn.004e5560
or esi, eax
cmp byte [0x762eb8], bl
je 0x5cee8b
push 0x2c
push 0x762eb8
push 0x7634c8
call fcn.004e5560
or esi, eax
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5cef04
cmp byte [eax], bl
je 0x5cef04
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x2ec4]
push edx
push eax
mov dword [esp + 0x94], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x7c], 0xffffffff
je 0x5cef04
push 0x2c
lea eax, [esp + 0x2eb8]
push eax
push 0x7634c8
call fcn.004e5560
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x2ec4]
or esi, eax
mov eax, dword [0x7630c0]
push edx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x7c], 0xffffffff
jne 0x5ceec4
cmp esi, ebx
je 0x5cefda
push str.INVALID_HOST_PRESENT_in_Servers_entry_of_EUPDATE.INI_
push ebx
call fcn.004f0f30
add esp, 8
cmp edi, ebx
je 0x5cef2d
push edi
push str.OldValue:__s
push ebx
call fcn.004f0f30
add esp, 0xc
push 0x7634c8
push str.NewValue:__s
push ebx
call fcn.004f0f30
add esp, 0xc
cmp byte [0x7634c8], bl
jne 0x5cefda
push ebx
push 0x2000
push 0x7634c8
push 0x60c81c
push str.ServerIPs
push 0x60c810
call fcn.004edfd0
add esp, 0x18
cmp byte [0x7634c8], bl
je 0x5cef82
push 0x7634c8
push str.Modified_NewValue_A_:__s
jmp 0x5cefb8
push 0x7658d0
push 0x2000
push 0x7634c8
push 0x60c81c
push str.PriorityServer
push 0x60da74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [0x7634c8], bl
je 0x5cefda
push 0x7634c8
push str.Modified_NewValue_A1_:__s
push ebx
call fcn.004f0f30
push 0x7658d0
push 0x7634c8
push str.Servers
push 0x60da74
call fcn.004e0cb0
add esp, 0x1c
cmp edi, ebx
je 0x5cf07a
push edi
call fcn.005e0865
add esp, 4
jmp 0x5cf07a
push ebx
push 0x2000
push 0x7634c8
push 0x60c81c
push str.ServerIPs
push 0x60c810
call fcn.004edfd0
add esp, 0x18
cmp byte [0x7634c8], bl
je 0x5cf026
push 0x7634c8
push str.Modified_NewValue_B_:__s
jmp 0x5cf058
push 0x7658d0
push 0x2000
push 0x7634c8
push 0x60c81c
push str.PriorityServer
push 0x60da74
call edi
cmp byte [0x7634c8], bl
je 0x5cf07a
push 0x7634c8
push str.Modified_NewValue_B1_:__s
push ebx
call fcn.004f0f30
push 0x7658d0
push 0x7634c8
push str.Servers
push 0x60da74
call fcn.004e0cb0
add esp, 0x1c
push 0x7658d0
push 0x208
lea ecx, [esp + 0x1864]
push ecx
push 0x60c81c
push str.HTTPHost
push 0x60da74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [esp + 0x185c]
push ebx
mov edi, 1
push edx
mov esi, edi
call fcn.00508760
add esp, 8
test eax, eax
jne 0x5cf148
push ebx
lea eax, [esp + 0x1860]
push str.mwti.
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x5cf14a
push ebx
lea ecx, [esp + 0x1860]
push str.escanav.
push ecx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x5cf14a
push ebx
lea edx, [esp + 0x1860]
push str.microworldsystems.
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x5cf14a
push ebx
lea eax, [esp + 0x1860]
push str.escan_av.
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x5cf14a
push ebx
lea ecx, [esp + 0x1860]
push str.sourcenext.
push ecx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x5cf14a
xor esi, esi
cmp dword [esp + 0x6604], ebx
je 0x5cf16a
push esi
lea edx, [esp + 0x1860]
push edx
push str._MMC__HTTPHost:__s__CouldBeEScanServerOrSOHOProduct_Updated_From_Internet___u_
push ebx
call fcn.004f0f30
add esp, 0x10
cmp byte [esp + 0x185c], bl
je 0x5cf1b0
lea eax, [esp + 0x185c]
push eax
call fcn.004fff20
lea ecx, [esp + 0x1860]
push 0x2f
push ecx
call fcn.005e0940
add esp, 0xc
cmp eax, ebx
je 0x5cf198
mov byte [eax], bl
lea edx, [esp + 0x185c]
push 0x3a
push edx
call fcn.005e0940
add esp, 8
cmp eax, ebx
je 0x5cf1b0
mov byte [eax], bl
mov esi, dword [esp + 0x6604]
cmp esi, ebx
je 0x5cf1d1
lea eax, [esp + 0x185c]
push eax
push str._MMC__Modified_HTTPHost:__s
push ebx
call fcn.004f0f30
add esp, 0xc
lea ecx, [esp + 0x185c]
push str.127.0.0.1
push ecx
call fcn.005f095a
add esp, 8
test eax, eax
je 0x5cf23d
lea edx, [esp + 0x185c]
push str.localhost
push edx
call fcn.005f095a
add esp, 8
test eax, eax
je 0x5cf23d
lea eax, [esp + 0x185c]
push 0x762eb8
push eax
call fcn.005f095a
add esp, 8
test eax, eax
je 0x5cf23d
mov edx, dword [0x7630c0]
push ebx
lea ecx, [esp + 0x1860]
push ecx
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5cf343
mov eax, dword [0x7630c0]
push eax
lea ecx, [esp + 0x1860]
push ecx
push str._WARNING___HTTPHost_points_to_Local_host_itself__HTTPHost:_s__LocalIPList:_s__
push ebx
call fcn.004f0f30
add esp, 0x10
cmp byte [0x7634c8], bl
je 0x5cf343
push 0x103
lea edx, [esp + 0x1b6d]
push ebx
push edx
mov dword [esp + 0xf4], ebx
mov byte [esp + 0x1b74], bl
call fcn.005dfd60
push edi
push ebx
push 0x2c
lea eax, [esp + 0x100]
push eax
lea ecx, [esp + 0x1b84]
push ecx
push 0x7634c8
call fcn.004e1380
add esp, 0x24
cmp byte [esp + 0x1b68], bl
je 0x5cf343
lea edx, [esp + 0x1b68]
push edx
lea eax, [esp + 0x1860]
push str.http:___s:3333
push eax
call fcn.005dfb23
lea ecx, [esp + 0x1868]
push ecx
push str._NEW_HTTPHost_Value:__s_
push ebx
call fcn.004f0f30
push 0x7658d0
lea edx, [esp + 0x1878]
push edx
push str.HTTPHost
push 0x60da74
call fcn.004e0cb0
add esp, 0x28
xor eax, eax
jmp 0x5cf310
mov cl, byte [esp + eax + 0x1b68]
mov byte [esp + eax + 0x185c], cl
add eax, edi
cmp cl, bl
jne 0x5cf310
push 0x7658d0
lea eax, [esp + 0x1b6c]
push eax
push str.FTPHost
push 0x60da74
call fcn.004e0cb0
add esp, 0x10
cmp esi, ebx
mov esi, dword [esp + 0xac]
je 0x5cf3d2
push esi
push str._MMC__eScanRootPath:__s
push ebx
call fcn.004f0f30
push 0x7634c8
push str._MMC__Servers_Value:__s
push ebx
call fcn.004f0f30
push 0x762eb8
push str._MMC__Local_HostName:__s
push ebx
call fcn.004f0f30
mov eax, dword [0x7630c0]
add esp, 0x24
cmp eax, ebx
je 0x5cf39b
push eax
push str._MMC__Local_IPs__ALL_:__s
push ebx
call fcn.004f0f30
add esp, 0xc
jmp 0x5cf3a9
push str._MMC__Local_IPs_A_:_NULL
push ebx
call fcn.004f0f30
add esp, 8
lea ecx, [esp + 0x207c]
push ecx
push str._MMC__Local_IPs__LOCAL_ALL_:__s
push ebx
call fcn.004f0f30
lea edx, [esp + 0x27a4]
push edx
push str._MMC__Local_IPs__LOCAL_ONE_:__s
push ebx
call fcn.004f0f30
add esp, 0x18
cmp ebp, ebx
je 0x5cf3dd
xor eax, eax
jmp 0x5d1050
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x6608], edi
jne 0x5cf6db
cmp byte [0x7634c8], bl
je 0x5cf45e
push edi
push ebx
push 0x2c
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x2fc8]
push ecx
push 0x7634c8
mov dword [esp + 0x78], ebx
call fcn.004e1380
or ebp, 0xffffffff
add esp, 0x18
cmp dword [esp + 0x60], ebp
je 0x5cf45e
push edi
push 0x2c
lea edx, [esp + 0x2fc0]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.004e5820
push edi
push ebx
push 0x2c
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x2fc8]
push edx
push 0x7634c8
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x60], ebp
jne 0x5cf425
push edi
push 0x2c
lea eax, [esp + 0x1864]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.004e5820
or ebp, 0xffffffff
push edi
push 0x2c
push str.localhost
lea edx, [esp + 0x20]
push edx
call fcn.004e5820
push edi
push 0x2c
push str.127.0.0.1
lea eax, [esp + 0x20]
push eax
call fcn.004e5820
push 0x2c
push str.localhost
push 0x762eb8
call fcn.004e5560
cmp byte [0x762ca8], bl
jne 0x5cf552
mov edx, 0x762ca8
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, edi
cmp cl, bl
jne 0x5cf4c0
push 0x762ca8
call fcn.004e24e0
mov eax, 0x762ca8
add esp, 4
add eax, ebp
nop
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x5cf4e0
mov ecx, dword [str.eserver.sem]
mov edx, dword [0x6652f0]
mov dword [eax], ecx
mov ecx, dword [0x6652f4]
mov dword [eax + 4], edx
mov edx, 0x762aa0
mov dword [eax + 8], ecx
mov eax, esi
sub edx, esi
jmp 0x5cf510
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, edi
cmp cl, bl
jne 0x5cf510
push 0x762aa0
call fcn.004e24e0
mov eax, 0x762aa0
add esp, 4
add eax, ebp
nop
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x5cf530
mov edx, dword [str.eserver.sem]
mov ecx, dword [0x6652f0]
mov dword [eax], edx
mov edx, dword [0x6652f4]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
push 0x103
lea eax, [esp + 0x1a69]
push ebx
push eax
mov byte [esp + 0x1a70], bl
call fcn.005dfd60
add esp, 0xc
mov dword [esp + 0x18], ebx
mov dword [esp + 0x28], ebx
cmp dword [esp + 0x6608], edi
jne 0x5cf7a4
lea ecx, [esp + 0x18]
push ecx
push str.RetainSettings_esrvrUAG
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
test al, al
jne 0x5cf5ba
mov edx, dword [esp + 0x18]
push edx
push str.RetainSettings_esrvrUAG
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
push edi
push ebx
push ebx
push ebx
lea eax, [esp + 0x38]
push eax
push 0x762ca8
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x5cf79a
cmp dword [esp + 0x28], ebx
je 0x5cf79a
cmp dword [esp + 0x18], ebx
je 0x5cf79e
lea ecx, [esp + 0x90]
push ecx
push str.LastSetClientRefVal
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xa0], edi
call fcn.004d5820
lea edx, [esp + 0x1e74]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, edi
cmp cl, bl
jne 0x5cf621
lea edx, [esp + 0x1e74]
push edx
call fcn.004e24e0
lea eax, [esp + 0x1e78]
add esp, 4
add eax, ebp
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x5cf645
mov ecx, dword [str.eserver_uag_bak.sem]
mov edx, dword [0x6652b0]
mov dword [eax], ecx
mov ecx, dword [0x6652b4]
mov dword [eax + 4], edx
mov edx, dword [0x6652b8]
push edi
push ebx
mov dword [eax + 8], ecx
mov ecx, dword [0x6652bc]
mov dword [eax + 0xc], edx
push ebx
push ebx
lea edx, [esp + 0xe8]
mov dword [eax + 0x10], ecx
push edx
lea eax, [esp + 0x1e88]
push eax
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x5cf775
mov eax, dword [esp + 0xd8]
cmp eax, ebx
je 0x5cf775
cmp eax, dword [esp + 0x28]
jne 0x5cf6bf
cmp dword [esp + 0x90], ebx
jne 0x5cf79e
push ebx
lea ecx, [esp + 0x1e78]
push 0x762ca8
push ecx
call fcn.004edd70
add esp, 0xc
push edi
jmp 0x5cf911
cmp byte [0x762eb8], bl
je 0x5cf6f5
push edi
push 0x2c
push 0x762eb8
lea edx, [esp + 0x20]
push edx
call fcn.004e5820
cmp byte [esp + 0x207c], bl
je 0x5cf473
push edi
push ebx
push 0x2c
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x31d0]
push ecx
lea edx, [esp + 0x2090]
push edx
mov dword [esp + 0x60], ebx
call fcn.004e1380
or ebp, 0xffffffff
add esp, 0x18
cmp dword [esp + 0x48], ebp
je 0x5cf476
push edi
push 0x2c
lea eax, [esp + 0x31c8]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.004e5820
push edi
push ebx
push 0x2c
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x31d0]
push eax
lea ecx, [esp + 0x2090]
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x48], ebp
jne 0x5cf734
jmp 0x5cf476
cmp dword [esp + 0x90], edi
jne 0x5cf79a
push ebx
lea edx, [esp + 0x1e78]
push edx
push 0x762ca8
call fcn.004edd70
add esp, 0xc
push edi
jmp 0x5cf911
mov dword [esp + 0x18], ebx
push edi
jmp 0x5cf911
lea eax, [esp + 0x18]
push eax
push str.RetainSettings_esrvrSVR
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
test al, al
jne 0x5cf7da
mov ecx, dword [esp + 0x18]
push ecx
push str.RetainSettings_esrvrSVR
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
push edi
push ebx
push ebx
push ebx
lea edx, [esp + 0x38]
push edx
push 0x762aa0
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x5cf90c
cmp dword [esp + 0x28], ebx
je 0x5cf90c
cmp dword [esp + 0x18], ebx
je 0x5cf910
lea eax, [esp + 0x98]
push eax
push str.LastSetClientRefVal
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xa8], ebx
call fcn.004d5820
lea edx, [esp + 0x1f78]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, edi
cmp cl, bl
jne 0x5cf841
lea ecx, [esp + 0x1f78]
push ecx
call fcn.004e24e0
lea eax, [esp + 0x1f7c]
add esp, 4
add eax, ebp
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x5cf865
mov edx, dword [str.eserver_svr_bak.sem]
mov ecx, dword [0x665284]
mov dword [eax], edx
mov edx, dword [0x665288]
mov dword [eax + 4], ecx
mov ecx, dword [0x66528c]
push edi
mov dword [eax + 8], edx
mov edx, dword [0x665290]
push ebx
mov dword [eax + 0xc], ecx
push ebx
mov dword [eax + 0x10], edx
push ebx
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x1f8c]
push ecx
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x5cf8eb
mov eax, dword [esp + 0xd4]
cmp eax, ebx
je 0x5cf8eb
cmp eax, dword [esp + 0x28]
jne 0x5cf8d3
cmp dword [esp + 0x98], edi
jne 0x5cf910
push ebx
lea edx, [esp + 0x1f7c]
push 0x762aa0
push edx
call fcn.004edd70
add esp, 0xc
jmp 0x5cf910
cmp dword [esp + 0x98], ebx
jne 0x5cf90c
push ebx
lea eax, [esp + 0x1f7c]
push eax
push 0x762aa0
call fcn.004edd70
add esp, 0xc
jmp 0x5cf910
mov dword [esp + 0x18], ebx
push ebx
push str.LastSetClientRefVal
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
mov esi, dword [esp + 0x6608]
cmp dword [esp + 0x18], ebx
jne 0x5cf9fc
cmp esi, edi
jne 0x5cf9be
cmp byte [0x762eb8], bl
je 0x5cf983
cmp dword [esp + 0x6604], ebx
je 0x5cf962
push 0x762eb8
push str._MMC__HTTPHost_To_Add_A_:__s
push ebx
call fcn.004f0f30
add esp, 0xc
push 0x762ca8
push 0x762eb8
push str.HTTPHost
push str.Server
call fcn.004e0cb0
add esp, 0x10
jmp 0x5cfa04
cmp byte [esp + 0x2798], bl
je 0x5cfa1e
cmp dword [esp + 0x6604], ebx
je 0x5cf9af
lea ecx, [esp + 0x2798]
push ecx
push str._MMC__HTTPHost_To_Add_B_:__s
push ebx
call fcn.004f0f30
add esp, 0xc
push 0x762ca8
lea edx, [esp + 0x279c]
push edx
jmp 0x5cf96c
cmp dword [esp + 0x6604], ebx
je 0x5cf9dd
lea eax, [esp + 0x185c]
push eax
push str._MMC__HTTPHost_To_Add_A1_:__s
push ebx
call fcn.004f0f30
add esp, 0xc
push 0x762aa0
lea ecx, [esp + 0x1860]
push ecx
push str.HTTPHost
push str.Server
call fcn.004e0cb0
add esp, 0x10
cmp esi, edi
jne 0x5cfbe6
cmp byte [0x762eb8], bl
je 0x5cfa1e
push edi
push 0x2c
push 0x762eb8
lea edx, [esp + 0x1c]
push edx
call fcn.004e5820
cmp byte [esp + 0x207c], bl
je 0x5cfa91
push edi
push ebx
push 0x2c
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x38ec]
push ecx
lea edx, [esp + 0x2090]
push edx
mov dword [esp + 0x80], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x68], ebp
je 0x5cfa91
push edi
push 0x2c
lea eax, [esp + 0x38e4]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.004e5820
push edi
push ebx
push 0x2c
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x38ec]
push eax
lea ecx, [esp + 0x2090]
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x68], ebp
jne 0x5cfa55
cmp dword [esp + 0x18], ebx
jne 0x5cfff9
push 0xfff
lea ecx, [esp + 0x55f5]
push ebx
push ecx
mov byte [esp + 0x55fc], bl
call fcn.005dfd60
push 0xfff
lea edx, [esp + 0x4601]
push ebx
push edx
mov byte [esp + 0x4608], bl
call fcn.005dfd60
add esp, 0x18
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x55f4]
push ecx
push str.AddServerIpsOldVal
push 0x765ad8
mov esi, 0x1000
push reloc.OLEAUT32.dll_SysReAllocString
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x38], ebx
mov dword [esp + 0xbc], esi
call fcn.004d5770
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x45f4]
push eax
push str.RemoveServerIpsOldVal
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0xbc], esi
call fcn.004d5770
cmp byte [esp + 0x55f0], bl
je 0x5cfc84
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x98]
push ecx
lea edx, [esp + 0x2ab4]
push edx
lea eax, [esp + 0x5604]
push eax
mov dword [esp + 0xa4], ebx
call fcn.004e1380
or esi, 0xffffffff
add esp, 0x18
cmp dword [esp + 0x8c], esi
je 0x5cfc87
mov edi, edi
mov edx, dword [esp + 0x10]
push 0x2c
lea ecx, [esp + 0x2aa8]
push ecx
push edx
call fcn.004e5460
test eax, eax
jne 0x5cfbb3
push 1
push 0x2c
lea eax, [esp + 0x2aac]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.004e5820
mov edi, 1
push 1
push ebx
push 0x2c
lea edx, [esp + 0x98]
push edx
lea eax, [esp + 0x2ab4]
push eax
lea ecx, [esp + 0x5604]
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x8c], esi
jne 0x5cfb80
jmp 0x5cfc87
push edi
push 0x2c
lea edx, [esp + 0x1864]
push edx
lea eax, [esp + 0x1c]
push eax
call fcn.004e5820
cmp byte [0x7634c8], bl
je 0x5cfed0
push edi
push ebx
push 0x2c
lea ecx, [esp + 0x90]
push ecx
lea edx, [esp + 0x33d8]
push edx
push 0x7634c8
mov dword [esp + 0x9c], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x84], ebp
je 0x5cfed0
lea esp, [esp]
push edi
push 0x2c
lea eax, [esp + 0x33d0]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.004e5820
push edi
push ebx
push 0x2c
lea edx, [esp + 0x90]
push edx
lea eax, [esp + 0x33d8]
push eax
push 0x7634c8
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x84], ebp
jne 0x5cfc40
jmp 0x5cfed0
or esi, 0xffffffff
cmp byte [esp + 0x45f0], bl
je 0x5cfdae
mov ecx, dword [esp + 0x10]
push 1
push ebx
push 0x2c
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0x34dc]
push eax
push ecx
mov dword [esp + 0x98], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x80], esi
je 0x5cfd08
push 0x2c
lea edx, [esp + 0x34d0]
push edx
lea eax, [esp + 0x45f8]
push eax
call fcn.004e5560
mov eax, dword [esp + 0x10]
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x34dc]
push edx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x80], esi
jne 0x5cfcc6
cmp byte [esp + 0x45f0], bl
je 0x5cfdae
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x29b0]
push edx
lea eax, [esp + 0x4604]
push eax
mov dword [esp + 0x90], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x78], esi
je 0x5cfdae
jmp 0x5cfd50
mov edx, dword [esp + 0x14]
push 0x2c
lea ecx, [esp + 0x29a4]
push ecx
push edx
call fcn.004e5460
test eax, eax
jne 0x5cfd83
push 1
push 0x2c
lea eax, [esp + 0x29a8]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.004e5820
mov ebp, 1
push 1
push ebx
push 0x2c
lea edx, [esp + 0x84]
push edx
lea eax, [esp + 0x29b0]
push eax
lea ecx, [esp + 0x4604]
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x78], esi
jne 0x5cfd50
cmp edi, ebx
je 0x5cfdd5
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x55f0]
push edx
push eax
push str._MMC__Forcing_SendCommand_as_New_ServerIpsToAdd___s__NOT_matching_with_earlier_ServerIpsToAdd___s_
push ebx
call fcn.004f0f30
add esp, 0x10
mov dword [esp + 0x4c], 1
cmp ebp, ebx
je 0x5cfdfc
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x45f0]
push ecx
push edx
push str._MMC__Forcing_SendCommand_as_New_RemoveServerIps___s__NOT_matching_with_earlier_RemoveServerIps___s_
push ebx
call fcn.004f0f30
add esp, 0x10
mov dword [esp + 0x4c], 1
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x5cfe92
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x30cc]
push edx
push eax
mov dword [esp + 0xa0], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x88], esi
je 0x5cfe81
jmp 0x5cfe40
push 1
push 0x2c
lea eax, [esp + 0x30c4]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.004e5820
mov ecx, dword [esp + 0x24]
push 1
push ebx
push 0x2c
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0x30cc]
push eax
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x88], esi
jne 0x5cfe40
mov edx, dword [esp + 0x24]
push edx
call fcn.005e0865
add esp, 4
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x14]
push eax
push str.RemoveServerIpsOldVal
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
mov ecx, dword [esp + 0x10]
push ecx
push str.AddServerIpsOldVal
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
mov esi, dword [esp + 0x6608]
mov edi, 1
cmp dword [esp + 0x18], ebx
jne 0x5cfff9
cmp dword [esp + 0x6604], ebx
je 0x5cff32
mov edx, dword [esp + 0x10]
push edx
push str._MMC__ServerIps_To_Add:__s
push ebx
call fcn.004f0f30
mov eax, dword [esp + 0x20]
push eax
push str._MMC__ServerIps_To_Del:__s
push ebx
call fcn.004f0f30
add esp, 0x18
cmp esi, edi
jne 0x5cff1f
push 0x762ca8
push str._MMC__ServerSemFile:__s
push ebx
call fcn.004f0f30
add esp, 0xc
jmp 0x5cff36
push 0x762aa0
push str._MMC__ServerSemFile:__s
push ebx
call fcn.004f0f30
add esp, 0xc
cmp esi, edi
jne 0x5cff8d
push 0x762ca8
push str.3333
push str.HTTPPort
push str.Server
call fcn.004e0cb0
push 0x762ca8
push str.2021
push str.FTPPort
push str.Server
call fcn.004e0cb0
mov ecx, dword [esp + 0x30]
push 0x762ca8
push ecx
push str.AddServerIps
push str.Server
call fcn.004e0cb0
mov edx, dword [esp + 0x44]
push 0x762ca8
push edx
jmp 0x5cffe2
push 0x762aa0
push str.3333
push str.HTTPPort
push str.Server
call fcn.004e0cb0
push 0x762aa0
push str.2021
push str.FTPPort
push str.Server
call fcn.004e0cb0
mov eax, dword [esp + 0x30]
push 0x762aa0
push eax
push str.AddServerIps
push str.Server
call fcn.004e0cb0
mov ecx, dword [esp + 0x44]
push 0x762aa0
push ecx
push str.RemoveServerIps
push str.Server
call fcn.004e0cb0
add esp, 0x40
jmp 0x5d0154
cmp dword [esp + 0x6604], ebx
je 0x5d002e
cmp esi, edi
jne 0x5d001b
push 0x762ca8
push str._MMC__ServerSemFile:__s
push ebx
call fcn.004f0f30
add esp, 0xc
jmp 0x5d0036
push 0x762aa0
push str._MMC__ServerSemFile:__s
push ebx
call fcn.004f0f30
add esp, 0xc
cmp esi, edi
jne 0x5d00be
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x762ca8
push 0x104
lea edx, [esp + 0x1a6c]
push edx
push 0x60c81c
push str.HTTPPort
push str.Server
call esi
cmp byte [esp + 0x1a64], bl
jne 0x5d0084
push 0x762ca8
push str.3333
push str.HTTPPort
push str.Server
call fcn.004e0cb0
add esp, 0x10
push 0x762ca8
push 0x104
lea eax, [esp + 0x1a6c]
push eax
push 0x60c81c
push str.FTPPort
push str.Server
call esi
cmp byte [esp + 0x1a64], bl
jne 0x5d0154
push 0x762ca8
jmp 0x5d013d
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x762aa0
push 0x104
lea ecx, [esp + 0x1a6c]
push ecx
push 0x60c81c
push str.HTTPPort
push str.Server
call esi
cmp byte [esp + 0x1a64], bl
jne 0x5d010c
push 0x762aa0
push str.3333
push str.HTTPPort
push str.Server
call fcn.004e0cb0
add esp, 0x10
push 0x762aa0
push 0x104
lea edx, [esp + 0x1a6c]
push edx
push 0x60c81c
push str.FTPPort
push str.Server
call esi
cmp byte [esp + 0x1a64], bl
jne 0x5d0154
push 0x762aa0
push str.2021
push str.FTPPort
push str.Server
call fcn.004e0cb0
add esp, 0x10
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x5d0169
push eax
call fcn.005e0865
add esp, 4
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x5d017a
push eax
call fcn.005e0865
add esp, 4
cmp dword [esp + 0x6608], 1
mov esi, dword [esp + 0x1c]
jne 0x5d0220
push 0x5c
push esi
call fcn.005e0a00
add esp, 8
cmp eax, ebx
je 0x5d019e
inc eax
jmp 0x5d01a0
mov eax, esi
push 0x64f600
push eax
call fcn.005f095a
add esp, 8
test eax, eax
push esi
lea eax, [esp + 0x2594]
je 0x5d01ef
push str.SOFTWAREMicroWorldeScan_for_WindowsManagementConsoleMMCManaged_Computers_sClient_Computers
push eax
call fcn.005dfb23
mov ebp, dword [esp + 0x6610]
add esp, 0xc
cmp ebp, ebx
je 0x5d0260
mov edx, dword [esp + 0x663c]
push esi
lea ecx, [esp + 0x2594]
push ecx
push edx
push str._MMC___u__KeyName_A_:__s___s_
jmp 0x5d0257
push str.SOFTWAREMicroWorldeScan_for_WindowsManagementConsoleMMCManaged_Computers_s
push eax
call fcn.005dfb23
mov ebp, dword [esp + 0x6610]
add esp, 0xc
cmp ebp, ebx
je 0x5d0260
mov edx, dword [esp + 0x663c]
push esi
lea ecx, [esp + 0x2594]
push ecx
push edx
push str._MMC___u__KeyName_B_:__s___s_
jmp 0x5d0257
push esi
lea eax, [esp + 0x2594]
push str.SOFTWAREMicroWorldeScan_for_WindowsMMCMon_s
push eax
call fcn.005dfb23
mov ebp, dword [esp + 0x6610]
add esp, 0xc
cmp ebp, ebx
je 0x5d0260
mov edx, dword [esp + 0x663c]
push esi
lea ecx, [esp + 0x2594]
push ecx
push edx
push str._MMC___u__KeyName_C_:__s___s_
push ebx
call fcn.004f0f30
add esp, 0x14
lea eax, [esp + 0x44]
push eax
push 9
push ebx
lea ecx, [esp + 0x259c]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004dc0a0
mov esi, eax
add esp, 0x14
cmp esi, ebx
jne 0x5d0f0f
lea edx, [esp + 0xf0]
push edx
mov edx, dword [esp + 0x48]
push ebx
push ebx
push ebx
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x1668]
push ecx
push ebx
push edx
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x1674], bl
mov dword [esp + 0xc4], 0x208
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x5d0ef2
lea esp, [esp]
lea eax, [esp + 0x1654]
push eax
lea ecx, [esp + 0x2594]
push ecx
lea edx, [esp + 0x1c74]
push 0x612438
push edx
call fcn.005dfb23
add esp, 0x10
cmp ebp, ebx
je 0x5d032d
lea eax, [esp + 0x1c6c]
push eax
push str._MMC__ClientRegKey_A_:__s
push ebx
call fcn.004f0f30
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x1660]
push ecx
push edx
inc eax
push eax
push str._MMC__CLIENT_Computer__u_:__s_s
push ebx
call fcn.004f0f30
add esp, 0x20
lea ecx, [esp + 0x1654]
push ebx
push ecx
call fcn.00508760
add esp, 8
test eax, eax
jne 0x5d03a0
lea edx, [esp + 0x1654]
push 0x762eb8
push edx
call fcn.005f095a
add esp, 8
test eax, eax
je 0x5d0378
lea eax, [esp + 0x1654]
push str.localhost
push eax
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x5d0402
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x5d0386
mov dword [eax], 1
cmp ebp, ebx
je 0x5d0ea2
lea ecx, [esp + 0x1654]
push ecx
push str._MMC__IGNORING_LOCAL_HOSTNAME:__s
jmp 0x5d0e99
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5d0402
cmp byte [eax], bl
je 0x5d0402
push 0x2c
lea edx, [esp + 0x1658]
push edx
push eax
call fcn.004e5460
test eax, eax
jne 0x5d03da
lea eax, [esp + 0x1654]
push str.127.0.0.
push eax
call fcn.004dd6e0
add esp, 8
test eax, eax
jne 0x5d0402
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x5d03e8
mov dword [eax], 1
cmp ebp, ebx
je 0x5d0ea2
lea ecx, [esp + 0x1654]
push ecx
push str._MMC__IGNORING_LOCAL_IP:__s
jmp 0x5d0e99
cmp byte [0x7634c8], bl
je 0x5d044d
push ebx
lea edx, [esp + 0x1658]
push edx
push 0x7634c8
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5d044d
cmp ebp, ebx
je 0x5d0ea2
push 0x7634c8
lea eax, [esp + 0x1658]
push eax
push str._MMC__IGNORING__s_as_it_is_part_of_Servers_entry_of_eupdate.ini___s_
push ebx
call fcn.004f0f30
add esp, 0x10
jmp 0x5d0ea2
cmp byte [0x7654c8], bl
je 0x5d0498
push ebx
lea ecx, [esp + 0x1658]
push ecx
push 0x7654c8
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5d0498
cmp ebp, ebx
je 0x5d0ea2
push 0x7654c8
lea edx, [esp + 0x1658]
push edx
push str._MMC__IGNORING__s_as_it_is_part_of_PriorityServer_entry_of_eupdate.ini___s_
push ebx
call fcn.004f0f30
add esp, 0x10
jmp 0x5d0ea2
cmp byte [0x7630c8], bl
je 0x5d04e3
push ebx
lea eax, [esp + 0x1658]
push eax
push 0x7630c8
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5d04e3
cmp ebp, ebx
je 0x5d0ea2
push 0x7630c8
lea ecx, [esp + 0x1658]
push ecx
push str._MMC__IGNORING__s_as_it_is_part_of_ServerIPs_entry_of_win.ini___s_
push ebx
call fcn.004f0f30
add esp, 0x10
jmp 0x5d0ea2
push 0x103
lea edx, [esp + 0x2289]
push ebx
push edx
mov byte [esp + 0x2290], bl
call fcn.005dfd60
add esp, 0xc
lea eax, [esp + 0xec]
push eax
lea ecx, [esp + 0x2288]
push ecx
push str.ClientType
lea edx, [esp + 0x1c78]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x100], 0x104
call fcn.004d5770
test al, al
je 0x5d05a4
mov eax, dword [esp + 0x6608]
cmp eax, 1
jne 0x5d0566
cmp byte [esp + 0x2284], 0x32
jne 0x5d0566
cmp ebp, ebx
je 0x5d0ea2
lea eax, [esp + 0x1654]
push eax
push str._MMC__IGNORING__s_as_its_ClientType_is_2__update_agent_
jmp 0x5d0e99
cmp ebp, ebx
je 0x5d05a4
cmp eax, 1
jne 0x5d0586
lea ecx, [esp + 0x2284]
push ecx
lea edx, [esp + 0x1658]
push edx
push str._MMC___s_ClientType:__s__SetClientsToUpdateFromUpdateAgent_
jmp 0x5d059b
lea eax, [esp + 0x2284]
push eax
lea ecx, [esp + 0x1658]
push ecx
push str._MMC___s_ClientType:__s__SetClientsToUpdateFromPrimaryServer_
push ebx
call fcn.004f0f30
add esp, 0x10
push ebx
lea edx, [esp + 0x1658]
push 0x6648d0
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5d0630
cmp dword [0x762a9c], ebx
jne 0x5d060d
lea eax, [esp + 0xa0]
push eax
push str.ProcessRandomizedClients
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [0x762a9c], 1
call fcn.004d5820
test al, al
jne 0x5d060d
mov ecx, dword [esp + 0xa0]
push ecx
push str.ProcessRandomizedClients
push 0x765ad8
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
cmp dword [esp + 0xa0], ebx
jne 0x5d0630
cmp ebp, ebx
je 0x5d0ea2
lea edx, [esp + 0x1654]
push edx
push str._MMC__IGNORING__s_as_it_is_Randomized_Client.
jmp 0x5d0e99
cmp dword [esp + 0x6618], ebx
je 0x5d0722
mov esi, dword [esp + 0xc4]
cmp esi, ebx
je 0x5d0722
cmp dword [esp + 0x9c], ebx
je 0x5d0722
mov edi, dword [esp + 0xe4]
cmp edi, ebx
je 0x5d0722
xor eax, eax
lea ebx, [ebx]
mov cl, byte [esp + eax + 0x1654]
mov byte [esp + eax + 0x2ba8], cl
inc eax
cmp cl, bl
jne 0x5d0670
push ebx
lea eax, [esp + 0x2bac]
push 0x61ba8c
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x5d0722
push 1
push ebx
lea ecx, [esp + 0x165c]
push ecx
mov ecx, esi
mov byte [esp + eax + 0x2bb4], bl
call fcn.004f2b40
test eax, eax
je 0x5d0722
push 1
push ebx
lea edx, [esp + 0x2bb0]
push edx
mov ecx, edi
call fcn.004f2b40
test eax, eax
jne 0x5d0708
cmp ebp, ebx
je 0x5d06ef
lea eax, [esp + 0x2ba8]
push eax
push str._MMC__DUPLICATE__Inserting___s__into_Duplicate_Name_ClientTree
push ebx
call fcn.004f0f30
add esp, 0xc
push 1
push ebx
lea ecx, [esp + 0x2bb0]
push ecx
mov ecx, dword [esp + 0xa8]
call fcn.004f2b40
jmp 0x5d0722
cmp ebp, ebx
je 0x5d0722
lea edx, [esp + 0x2ba8]
push edx
push str._MMC__Inserting___s__into_ClientTree
push ebx
call fcn.004f0f30
add esp, 0xc
push 0x3ff
lea eax, [esp + 0x3bed]
push ebx
push eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0xa0], ebx
xor esi, esi
xor edi, edi
mov byte [esp + 0x3bf4], bl
call fcn.005dfd60
add esp, 0xc
mov dword [esp + 0x54], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
cmp ebp, ebx
je 0x5d077e
lea ecx, [esp + 0x1c6c]
push ecx
push str._MMC__ClientRegKey_B_:__s
push ebx
call fcn.004f0f30
add esp, 0xc
mov eax, dword [esp + 0x6608]
cmp eax, 1
jne 0x5d07c2
lea edx, [esp + 0x3c]
push edx
push str.CommandRunSetToUpdateAgent
lea eax, [esp + 0x1c74]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp dword [esp + 0x3c], ebx
jne 0x5d07e8
mov eax, dword [esp + 0xd0]
cmp eax, ebx
je 0x5d0856
inc dword [eax]
jmp 0x5d0856
cmp eax, ebx
jne 0x5d07f6
lea ecx, [esp + 0x34]
push ecx
push str.CommandRunSetToPrimaryServer
lea edx, [esp + 0x1c74]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp dword [esp + 0x34], ebx
jmp 0x5d07aa
cmp dword [esp + 0x6c], ebx
je 0x5d0856
mov eax, dword [esp + 0x6c]
inc dword [eax]
jmp 0x5d0856
lea eax, [esp + 0x94]
push eax
push str.ForceSetToPrimaryServer
lea ecx, [esp + 0x1c74]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp dword [esp + 0x94], ebx
je 0x5d0856
lea edx, [esp + 0x34]
push edx
push str.CommandRunSetToPrimaryServer
lea eax, [esp + 0x1c74]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea ecx, [esp + 0x3c]
push ecx
push str.CommandRunSetToUpdateAgent
lea edx, [esp + 0x1c74]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp ebp, ebx
je 0x5d0887
mov eax, dword [esp + 0x662c]
mov ecx, dword [0x76246c]
mov edx, dword [esp + 0x6608]
push eax
mov eax, dword [esp + 0x661c]
push ecx
push edx
push eax
push str._NDEB__OGC_u__SetCl_u__xSendEx0x_x__DwnOK:_u
push ebx
call fcn.004f0f30
add esp, 0x18
cmp dword [esp + 0x6618], ebx
jne 0x5d0ae3
cmp dword [esp + 0x6608], 1
jne 0x5d0ae3
cmp dword [0x76246c], ebx
je 0x5d0ae3
push 0x3ff
lea ecx, [esp + 0x41f5]
push ebx
push ecx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
mov byte [esp + 0x41fc], bl
call fcn.005dfd60
lea edx, [esp + 0x39ec]
push str.SOFTWAREMicroWorldeScan_for_WindowsManagementConsoleMMCManaged_Computers
push edx
mov dword [esp + 0xc4], 0x400
call fcn.005dfb23
add esp, 0x14
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x3bec]
push ecx
push str.LastPolicyAppliedOnLocal
lea edx, [esp + 0x39ec]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
cmp al, 1
jne 0x5d0ab7
cmp byte [esp + 0x3be8], bl
je 0x5d0ab7
lea eax, [esp + 0xb4]
push eax
push str.EScanSetIniLastWriteLowUA
push str.SoftwareMicroWorldeScan_for_WindowsMwMonitor
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea ecx, [esp + 0xb8]
push ecx
push str.EScanSetIniLastWriteHighUA
push str.SoftwareMicroWorldeScan_for_WindowsMwMonitor
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea edx, [esp + 0x54]
push edx
push str.EScanSetIniFSizeUA
push str.SoftwareMicroWorldeScan_for_WindowsMwMonitor
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x41f4]
push ecx
push str.LastPolicyApplied
lea edx, [esp + 0x1c78]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0xc4], 0x400
call fcn.004d5770
lea eax, [esp + 0xdc]
push eax
push str.LastPolicyWriteLow
lea ecx, [esp + 0x1c74]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea edx, [esp + 0xe0]
push edx
push str.LastPolicyWriteHigh
lea eax, [esp + 0x1c74]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea ecx, [esp + 0xc8]
push ecx
push str.LastPolicyFSize
lea edx, [esp + 0x1c74]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea eax, [esp + 0x41f0]
push eax
lea ecx, [esp + 0x3bec]
push ecx
call fcn.005f095a
add esp, 8
test eax, eax
je 0x5d0a59
cmp ebp, ebx
je 0x5d0ab2
lea edx, [esp + 0x41f0]
push edx
lea eax, [esp + 0x3bec]
push eax
push str._MMC__PolicyName____s___LastPolicyNameOnClient____s_
push ebx
call fcn.004f0f30
add esp, 0x10
jmp 0x5d0ab2
mov eax, dword [esp + 0xc8]
cmp eax, dword [esp + 0x54]
je 0x5d0a80
cmp ebp, ebx
je 0x5d0ab2
mov ecx, dword [esp + 0x54]
push eax
push ecx
push str._MMC__eScanSetIni_size____u___LasteScanSetIni_size____u_
push ebx
call fcn.004f0f30
add esp, 0x10
jmp 0x5d0ab2
mov edx, dword [esp + 0xe0]
cmp edx, dword [esp + 0xb8]
jne 0x5d0aa0
mov eax, dword [esp + 0xdc]
cmp eax, dword [esp + 0xb4]
je 0x5d0ab7
cmp ebp, ebx
je 0x5d0ab2
push str._MMC__Timing_of_eScanSet.INI_Change.
push ebx
call fcn.004f0f30
add esp, 8
mov esi, 1
cmp dword [0x76246c], ebx
je 0x5d0ae3
cmp esi, ebx
jne 0x5d0ae3
cmp dword [esp + 0x662c], ebx
je 0x5d0ae3
mov edi, 1
cmp ebp, ebx
je 0x5d0ae3
push str._MMC__ForceClientDownload__1
push ebx
call fcn.004f0f30
add esp, 8
cmp dword [esp + 0xbc], ebx
je 0x5d0b03
push 1
push ebx
lea ecx, [esp + 0x165c]
push ecx
mov ecx, dword [esp + 0xc8]
call fcn.004f2b40
cmp dword [esp + 0x6618], ebx
je 0x5d0b27
cmp dword [esp + 0xc0], ebx
je 0x5d0ea2
mov eax, dword [esp + 0xc0]
inc dword [eax]
jmp 0x5d0ea2
mov eax, dword [esp + 0x6608]
cmp eax, 1
jne 0x5d0b69
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x5d0b4d
cmp dword [esp + 0x4c], ebx
jne 0x5d0b4d
cmp esi, ebx
jne 0x5d0b4d
cmp edi, ebx
je 0x5d0ea2
cmp ebp, ebx
je 0x5d0bc6
mov edx, dword [esp + 0x4c]
push edi
push esi
push edx
push eax
push str._MMC__CreateSFT_A__CRS___u__FS___u__PolicyChng___u__ForceDWN___u_
push ebx
call fcn.004f0f30
add esp, 0x18
jmp 0x5d0bc6
cmp eax, ebx
jne 0x5d0b8c
cmp dword [esp + 0x34], ebx
jne 0x5d0ea2
cmp ebp, ebx
je 0x5d0bc6
push ebx
push str._MMC__CreateSFT_B__CRS___u_
push ebx
call fcn.004f0f30
add esp, 0xc
jmp 0x5d0bc6
mov eax, dword [esp + 0x94]
cmp eax, ebx
je 0x5d0ea2
cmp dword [esp + 0x34], ebx
jne 0x5d0ea2
cmp dword [esp + 0x3c], 1
jne 0x5d0ea2
cmp ebp, ebx
je 0x5d0bc6
push 1
push ebx
push eax
push str._MMC__CreateSFT_C__FSP___u__CRSP___u__CRSU___u_
push ebx
call fcn.004f0f30
add esp, 0x14
push 0x155c
lea eax, [esp + 0xfc]
push ebx
push eax
call fcn.005dfd60
add esp, 0xc
xor eax, eax
mov edi, edi
mov cl, byte [esp + eax + 0x1654]
mov byte [esp + eax + 0x710], cl
inc eax
cmp cl, bl
jne 0x5d0be0
xor eax, eax
cmp dword [esp + 0x6608], 1
jne 0x5d0c20
nop
mov cl, byte [eax + 0x762ca8]
mov byte [esp + eax + 0xf8], cl
inc eax
cmp cl, bl
jne 0x5d0c00
jmp 0x5d0c32
mov cl, byte [eax + 0x762aa0]
mov byte [esp + eax + 0xf8], cl
inc eax
cmp cl, bl
jne 0x5d0c20
xor eax, eax
jmp 0x5d0c40
mov cl, byte [eax + 0x762eb8]
mov byte [esp + eax + 0xc24], cl
inc eax
cmp cl, bl
jne 0x5d0c40
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5d0c75
cmp byte [eax], bl
je 0x5d0c75
push 0x400
push eax
lea ecx, [esp + 0xe34]
push ecx
call fcn.004d5c40
add esp, 0xc
xor eax, eax
jmp 0x5d0c80
mov cl, byte [esp + eax + 0x1c6c]
mov byte [esp + eax + 0x300], cl
inc eax
cmp cl, bl
jne 0x5d0c80
xor eax, eax
jmp 0x5d0ca0
mov cl, byte [esp + eax + 0x1654]
mov byte [esp + eax + 0x918], cl
inc eax
cmp cl, bl
jne 0x5d0ca0
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0xa1c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x5d0cc0
mov byte [esp + 0x508], bl
xor eax, eax
jmp 0x5d0ce0
mov cl, byte [esp + eax + 0x3be8]
mov byte [esp + eax + 0x123c], cl
inc eax
cmp cl, bl
jne 0x5d0ce0
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x1644], eax
mov eax, dword [esp + 0x6608]
mov dword [esp + 0x163c], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x1640], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x1234], esi
mov dword [esp + 0x1238], edi
mov dword [esp + 0x1650], ebx
mov dword [esp + 0x122c], ebp
mov dword [esp + 0x1230], eax
mov dword [esp + 0x1648], edx
mov dword [esp + 0x164c], ecx
cmp eax, ebx
je 0x5d0d69
cmp eax, 2
jne 0x5d0dae
mov esi, dword [esp + 0x1c]
push 0x64f600
push esi
call fcn.005f095a
add esp, 8
test eax, eax
je 0x5d0d97
push esi
lea edx, [esp + 0x50c]
push str.SOFTWAREMicroWorldeScan_for_WindowsManagementConsoleMMCManaged_Computers_sClient_Computers
push edx
call fcn.005dfb23
add esp, 0xc
jmp 0x5d0db2
lea eax, [esp + 0x508]
push str.SOFTWAREMicroWorldeScan_for_WindowsManagementConsoleMMCManaged_ComputersClient_Computers
push eax
call fcn.005dfb23
add esp, 8
jmp 0x5d0db2
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xcc], 1
cmp ebp, ebx
je 0x5d0dd8
lea ecx, [esp + 0x1654]
push ecx
push esi
push str._MMC__RUNNING_COMMAND_ON_CLIENT_Computer:__s_s
push ebx
call fcn.004f0f30
add esp, 0x10
cmp byte [0x6b1828], bl
je 0x5d0dfb
lea edx, [esp + 0x1654]
push edx
push esi
push str._MMC__RUNNING_COMMAND_ON_CLIENT_Computer:__s_s
push 0x6b1828
call fcn.004f0f30
add esp, 0x10
lea eax, [esp + 0xf8]
push eax
push ebx
push 0x5cd290
call fcn.005e07ac
add esp, 0xc
cmp eax, 0xffffffff
je 0x5d0ea2
push 0x762358
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
cmp dword [esp + 0x1650], ebx
jne 0x5d0e43
mov edi, edi
push 5
call fcn.004d5a60
add esp, 4
cmp dword [esp + 0x1650], ebx
je 0x5d0e30
mov ecx, dword [0x762358]
cmp ecx, 0x40
jl 0x5d0ea2
cmp ebp, ebx
je 0x5d0e67
mov edx, dword [0x762358]
push edx
push str._MMC__UpdateAgentThreadCount:_u._Will_wait_for_it_to_get_less_than_32...
push ebx
call fcn.004f0f30
add esp, 0xc
mov eax, dword [0x762358]
cmp eax, 0x20
jl 0x5d0e89
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xc8
call esi
mov ecx, dword [0x762358]
cmp ecx, 0x20
jge 0x5d0e77
cmp ebp, ebx
je 0x5d0ea2
mov edx, dword [0x762358]
push edx
push str._MMC__UpdateAgentThreadCount_Now:_u._Continuing...
push ebx
call fcn.004f0f30
add esp, 0xc
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0xf0]
push ecx
push ebx
push ebx
push ebx
lea edx, [esp + 0xb4]
push edx
mov edx, dword [esp + 0x58]
lea ecx, [esp + 0x1668]
inc eax
push ecx
push eax
push edx
mov dword [esp + 0x7c], eax
mov byte [esp + 0x1674], bl
mov dword [esp + 0xc4], 0x208
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
je 0x5d02d0
cmp dword [esp + 0x5c], ebx
jne 0x5d0f31
mov edi, dword [esp + 0x20]
cmp ebp, ebx
je 0x5d0f35
mov eax, dword [esp + 0x1c]
push eax
push str._MMC__No_Client_Computers_under__s_
push ebx
call fcn.004f0f30
add esp, 0xc
jmp 0x5d0f35
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp ebp, ebx
je 0x5d0f31
push esi
lea ecx, [esp + 0x2594]
push ecx
push str._MMC__Unable_to_open_key_C___s__LastError:__d
push ebx
call fcn.004f0f30
add esp, 0x10
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x5d0f48
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x44], ebx
cmp edi, ebx
je 0x5d1049
cmp dword [edi], ebx
jne 0x5d1049
mov esi, dword [esp + 0xac]
push ebp
push esi
push 0x762eb8
call fcn.005ce330
add esp, 0xc
mov dword [edi], eax
cmp eax, ebx
jne 0x5d1049
push ebp
push esi
push str.localhost
call fcn.005ce330
add esp, 0xc
mov dword [edi], eax
cmp eax, ebx
jne 0x5d1049
mov eax, dword [0x7630c0]
cmp eax, ebx
je 0x5d1005
cmp byte [eax], bl
je 0x5d1005
push 1
push ebx
push 0x2c
lea edx, [esp + 0x70]
push edx
lea ecx, [esp + 0x36e4]
push ecx
push eax
mov dword [esp + 0x7c], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x64], 0xffffffff
je 0x5d1005
push ebp
lea edx, [esp + 0x36d8]
push esi
push edx
call fcn.005ce330
add esp, 0xc
mov dword [edi], eax
cmp eax, 1
je 0x5d1005
mov edx, dword [0x7630c0]
push 1
push ebx
push 0x2c
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x36e4]
push ecx
push edx
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x64], 0xffffffff
jne 0x5d0fc4
cmp dword [edi], ebx
jne 0x5d1049
push ebp
push esi
push str.127.0.0.1
call fcn.005ce330
add esp, 0xc
mov dword [edi], eax
cmp eax, ebx
jne 0x5d1049
push 0x762eb8
lea eax, [esp + 0x3ae8]
push str._s__
push eax
call fcn.005dfb23
push ebp
lea ecx, [esp + 0x3af4]
push esi
push ecx
call fcn.005ce330
add esp, 0x18
mov dword [edi], eax
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x65f0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005dfbbe
add esp, 0x65e4
ret