Function at 0x1002f865
Capabilities:
Create thread
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x10185a38
push 0x10132540
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x127f4
call fcn.10140530
mov eax, dword [0x10189710]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x20], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, ecx
mov dword [ebp - 0x127b0], edi
xor esi, esi
mov dword [ebp - 0x127b8], esi
mov dword [ebp - 0x127b4], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x127cc], esi
mov byte [ebp - 0x134], 0
push 0x103
push esi
lea eax, [ebp - 0x133]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x654], 0
push 0x207
push esi
lea ecx, [ebp - 0x653]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x67ac], 0
push 0x7ff
push esi
lea edx, [ebp - 0x67ab]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x5fac], 0
push 0x7ff
push esi
lea eax, [ebp - 0x5fab]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0xb7ac], 0
push 0xfff
push esi
lea ecx, [ebp - 0xb7ab]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x57ac], 0
push 0x7ff
push esi
lea edx, [ebp - 0x57ab]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x6fac], 0
push 0x7ff
push esi
lea eax, [ebp - 0x6fab]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x77ac], 0
push 0x7ff
push esi
lea ecx, [ebp - 0x77ab]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x47ac], 0
push 0x7ff
push esi
lea edx, [ebp - 0x47ab]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x4fac], 0
push 0x7ff
push esi
lea eax, [ebp - 0x4fab]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x7fac], 0
push 0x7ff
push esi
lea ecx, [ebp - 0x7fab]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x87ac], 0
push 0x7ff
push esi
lea edx, [ebp - 0x87ab]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x44c], 0
push 0x103
push esi
lea eax, [ebp - 0x44b]
push eax
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127c0], esi
mov byte [ebp - 0x23c], 0
push 0x103
push esi
lea ecx, [ebp - 0x23b]
push ecx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127c4], esi
mov byte [ebp - 0xe7ac], 0
push 0xfff
push esi
lea edx, [ebp - 0xe7ab]
push edx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127ec], esi
mov byte [ebp - 0xe0c], 0
push 0x103
push esi
lea eax, [ebp - 0xe0b]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x1334], 0
push 0x103
push esi
lea ecx, [ebp - 0x1333]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x1544], 0
push 0x103
push esi
lea edx, [ebp - 0x1543]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0xd04], 0
push 0x103
push esi
lea eax, [ebp - 0xd03]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x1124], 0
push 0x103
push esi
lea ecx, [ebp - 0x1123]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x143c], 0
push 0x103
push esi
lea edx, [ebp - 0x143b]
push edx
call fcn.1012e060
add esp, 0xc
push 0x101a9f1c
push str.EventDebugLog
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
push 0x101a9f18
push str.CatLog
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
push 0x101a9f20
push str.AcceptLog
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
push 0x101a9f24
push str.ListenLog
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
push 0x101a9f28
push str.ConnectionCountLog
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
mov ebx, 1
mov dword [ebp - 0x127b4], ebx
cmp byte [edi], 0
je 0x100312a0
mov byte [ebp - 0x96c], 0
push 0x103
push esi
lea eax, [ebp - 0x96b]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x185c], 0
push 0x103
push esi
lea ecx, [ebp - 0x185b]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x344], 0
push 0x103
push esi
lea edx, [ebp - 0x343]
push edx
call fcn.1012e060
add esp, 0xc
mov dword [0x101a9f34], ebx
mov dword [ebp - 0x127b4], 2
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp dword [0x101a9f58], esi
je 0x1002ecb8
push edi
push 0x104
lea eax, [ebp - 0x344]
push eax
push 0x1014d980
push str.AWSDebug
push 0x1015faf0
call ebx
lea ecx, [ebp - 0x344]
push ecx
call fcn.10128238
add esp, 4
mov esi, eax
push edi
push 0x104
lea edx, [ebp - 0x344]
push edx
push 0x1014d980
push str.AWSEnabled
push 0x1015faf0
call ebx
test esi, esi
je 0x1002ea9b
lea eax, [ebp - 0x344]
push eax
push str._AWS__AWSEnabled:__s
push 0
call fcn.1006ed90
add esp, 0xc
cmp byte [ebp - 0x344], 0x30
je 0x1002ec9b
push 0x101ac750
push 0x101aa388
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x101aa388
call fcn.10065200
push str.aws_sendawsevent.exe
push 0x101aa388
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
push 0
xor edx, edx
mov ecx, 0x101aa388
call fcn.10060eb0
add esp, 8
test eax, eax
jne 0x1002ec75
push edi
push 0x104
lea ecx, [ebp - 0x344]
push ecx
push 0x1014d5e3
push str.AwsAccountId
push 0x1015faf0
call ebx
cmp byte [ebp - 0x344], 0
je 0x1002eb2a
lea ecx, [ebp - 0x344]
mov edx, 0x101a9f68
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002eb20
test esi, esi
je 0x1002eb44
lea edx, [ebp - 0x344]
push edx
push str._AWS__AwsAccountId:__s
push 0
call fcn.1006ed90
add esp, 0xc
push edi
push 0x104
lea eax, [ebp - 0x344]
push eax
push 0x1014d5e3
push str.AwsRegion
push 0x1015faf0
call ebx
cmp byte [ebp - 0x344], 0
je 0x1002eb80
lea ecx, [ebp - 0x344]
mov edx, 0x101aa070
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002eb76
test esi, esi
je 0x1002eb9a
lea ecx, [ebp - 0x344]
push ecx
push str._AWS__AwsRegion:__s
push 0
call fcn.1006ed90
add esp, 0xc
push edi
push 0x104
lea edx, [ebp - 0x344]
push edx
push 0x1014d5e3
push str.AccessKeyID
push 0x1015faf0
call ebx
cmp byte [ebp - 0x344], 0
je 0x1002ebda
lea ecx, [ebp - 0x344]
mov edx, 0x101aa178
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002ebd0
test esi, esi
je 0x1002ebf4
lea eax, [ebp - 0x344]
push eax
push str._AWS__AccessKeyID:__s
push 0
call fcn.1006ed90
add esp, 0xc
push edi
push 0x104
lea ecx, [ebp - 0x344]
push ecx
push 0x1014d5e3
push str.AccessKey
push 0x1015faf0
call ebx
cmp byte [ebp - 0x344], 0
je 0x1002ec30
lea ecx, [ebp - 0x344]
mov edx, 0x101aa280
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002ec26
test esi, esi
je 0x1002ec4a
lea edx, [ebp - 0x344]
push edx
push str._AWS__AccessKey:__s
push 0
call fcn.1006ed90
add esp, 0xc
cmp byte [0x101a9f68], 0
je 0x1002ec9b
cmp byte [0x101aa070], 0
je 0x1002ec9b
cmp byte [0x101aa178], 0
je 0x1002ec9b
cmp byte [0x101aa280], 0
je 0x1002ec9b
mov eax, 1
jmp 0x1002ec9d
test esi, esi
je 0x1002ec8d
push 0x101aa388
push str._AWS__Missing_File:__s
push 0
call fcn.1006ed90
add esp, 0xc
xor eax, eax
mov dword [0x101a9f60], eax
mov byte [0x101aa388], al
jmp 0x1002eca2
xor eax, eax
mov dword [0x101a9f60], eax
test esi, esi
je 0x1002ecb6
push eax
push str._AWS__AWSEnabled:__d
push 0
call fcn.1006ed90
add esp, 0xc
xor esi, esi
mov dword [ebp - 0x127b4], 3
push edi
push 0x104
lea eax, [ebp - 0x344]
push eax
push 0x1014d980
push str.MWADebug
push str.Config
call ebx
lea ecx, [ebp - 0x344]
push ecx
call fcn.10128238
add esp, 4
mov dword [0x101a9f10], eax
cmp eax, esi
jne 0x1002ed11
push 0x101a9f10
push str.GroupDebug
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitor
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
mov dword [ebp - 0x127b4], 4
push 0x101ac750
lea edx, [ebp - 0x185c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x185c]
call fcn.10065200
push str.ASocket.DLL
lea eax, [ebp - 0x185c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push esi
xor edx, edx
lea ecx, [ebp - 0x185c]
call fcn.10060eb0
add esp, 8
test eax, eax
jne 0x1002eede
push edi
push 0x104
lea ecx, [ebp - 0x134]
push ecx
push 0x1014d980
push str.SendSNMPTraps
push str.Config
call ebx
xor edx, edx
cmp byte [ebp - 0x134], 0x31
sete dl
mov esi, edx
mov dword [ebp - 0x127cc], esi
push edi
push 0x104
lea eax, [ebp - 0x134]
push eax
push str.127.0.0.1
push str.SNMPTrapDestination
push str.Config
call ebx
lea ecx, [ebp - 0x134]
push ecx
push 0x101a68d0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1015fc28
push str.SNMPTrapUDPPort
push str.Config
call ebx
lea eax, [ebp - 0x134]
push eax
call fcn.10128238
add esp, 4
mov word [0x101a68b0], ax
cmp esi, 1
jne 0x1002eee6
push 0x101ac750
push 0x101b9da8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x101b9da8
call fcn.10065200
push 0x1015fc3c
push 0x101b9da8
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x101b9da8
lea ecx, [ebp - 0xbfc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0xbfc]
call fcn.10065200
push str.eScan.mib
lea edx, [ebp - 0xbfc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push esi
push 0
xor edx, edx
lea ecx, [ebp - 0xbfc]
call fcn.10060eb0
add esp, 8
test eax, eax
jne 0x1002eeca
cmp dword [0x101b3974], eax
jne 0x1002eee6
mov eax, dword [str.ESCAN]
mov dword [ebp - 0x2c], eax
mov cx, word [0x1015fc50]
mov word [ebp - 0x28], cx
mov dword [ebp - 0x26], 0
lea edx, [ebp - 0x2c]
push edx
push 0
push 0x100a0390
call fcn.10127f7d
add esp, 0xc
mov dword [0x101b3974], esi
movzx eax, word [0x101a68b0]
push eax
push 0x101a68d0
push str.SNMP_Thread_Initialized_for_sending_traps_to__s:_d...
call fcn.10017540
add esp, 0xc
jmp 0x1002eee6
lea ecx, [ebp - 0xbfc]
push ecx
push str._ERROR__Unable_to_find_MIB_file:__s_
call fcn.10017540
add esp, 8
xor esi, esi
mov dword [ebp - 0x127cc], esi
mov dword [ebp - 0x127b4], 5
mov dword [0x101b3a7c], esi
cmp dword [ebp - 0x127b8], 0
je 0x1002ef0e
push str._DNSL__getMID
push 0
call fcn.1006ed90
add esp, 8
mov ecx, 0x101ab430
call fcn.1005b250
mov esi, dword [ebp - 0x127b8]
test esi, esi
je 0x1002ef36
push 0x101ab430
push str._DNSL__MID:_s
push 0
call fcn.1006ed90
add esp, 0xc
mov dword [ebp - 0x127b4], 6
push 0x101ac750
lea edx, [ebp - 0x96c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x96c]
call fcn.10065200
push str.eserv.exe
lea eax, [ebp - 0x96c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x134]
mov ecx, 0x1014d980
mov edx, str.server
call fcn.1005f940
cmp byte [ebp - 0x134], 0x31
jne 0x1002f4c2
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x96c]
call fcn.10060eb0
add esp, 8
test eax, eax
jne 0x1002f4c2
test esi, esi
je 0x1002efbf
push str._DNSL__S1
push eax
call fcn.1006ed90
add esp, 8
cmp byte [0x101ab328], 0
jne 0x1002efe7
push 0
push 0
push 0
push 0
push 0
push 0x101ab328
lea ecx, [ebp - 0x96c]
push ecx
xor edx, edx
xor ecx, ecx
call fcn.10071150
mov dword [0x101a9f44], 0x565253
mov byte [ebp - 0x75c], 0
push 0x103
push 0
lea edx, [ebp - 0x75b]
push edx
call fcn.1012e060
add esp, 0xc
push 0x101ab328
lea eax, [ebp - 0x96c]
push eax
push str.Management_Console:__s___s_
lea ecx, [ebp - 0x75c]
push ecx
call fcn.10127dc0
add esp, 0x10
cmp byte [0x101c5258], 0
je 0x1002f04f
lea edx, [ebp - 0x75c]
push edx
push 0x101c5258
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002f07e
lea ecx, [ebp - 0x75c]
mov edx, 0x101c5258
lea ebx, [ebx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002f060
lea eax, [ebp - 0x75c]
push eax
push 0x1014d8cc
call fcn.10017540
add esp, 8
cmp byte [0x101ab328], 0
je 0x1002f22b
mov byte [ebp - 0x1754], 0
push 0x103
push 0
lea ecx, [ebp - 0x1753]
push ecx
call fcn.1012e060
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 0x127f8], ebx
push 0x2e
push 0x101ab328
call fcn.10128490
add esp, 8
mov esi, eax
test esi, esi
je 0x1002f1ad
mov byte [esi], bl
push 0x101ab328
call fcn.10128238
add esp, 4
cmp eax, 0xb
jl 0x1002f1a8
mov byte [esi], 0x2e
mov dword [0x101ab114], 1
cmp byte [0x101ab328], bl
je 0x1002f1a8
mov al, 0x2e
mov edx, 0x101ab328
call fcn.100770c0
cmp eax, 3
jne 0x1002f1a8
push 0x2e
push 0x101ab328
call fcn.10129030
add esp, 8
test eax, eax
je 0x1002f1a8
inc eax
push eax
call fcn.10128238
add esp, 4
cmp eax, 0x172
jl 0x1002f1a8
push 0x101aa5a8
push 0x104
push str.Config
lea edi, [ebp - 0xa74]
mov edx, 0x1015f288
mov ecx, str.IsUniqueIdExist
call fcn.10073c60
add esp, 0xc
cmp byte [ebp - 0xa74], 0x31
jne 0x1002f1a2
push 0x101aa5a8
push 0x104
push str.Config
mov edx, 0x1014d980
mov ecx, str.IsMachineWithUniqueID
call fcn.10073c60
add esp, 0xc
cmp byte [ebp - 0xa74], 0x30
jne 0x1002f1a2
mov ebx, 1
mov dword [0x101ab21c], ebx
mov dword [ebp - 0x127f8], ebx
mov edi, dword [ebp - 0x127b0]
mov byte [esi], 0x2e
jmp 0x1002f1b4
mov byte [0x101ab328], 0
test ebx, ebx
je 0x1002f1c6
push str.Primary_Server___Server_Supports_NHX
lea edx, [ebp - 0x1754]
push edx
jmp 0x1002f1d2
push str.Primary_Server___Server_DOES_NOT_Support_NHX
lea eax, [ebp - 0x1754]
push eax
call fcn.10127dc0
add esp, 8
cmp byte [0x101c5360], 0
je 0x1002f1fb
push 0x101c5360
lea ecx, [ebp - 0x1754]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002f22b
lea ecx, [ebp - 0x1754]
mov edx, 0x101c5360
mov ebx, 1
jmp 0x1002f210
mov al, byte [ecx]
mov byte [edx], al
add ecx, ebx
add edx, ebx
test al, al
jne 0x1002f210
push 0x101c5360
call fcn.10017540
add esp, 4
jmp 0x1002f230
mov ebx, 1
mov dword [ebp - 0x127b4], 7
mov dword [0x101975f4], ebx
push edi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1014d5e3
push str.AppendActualIP
push str.Config
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
cmp byte [ebp - 0x134], 0
je 0x1002f281
lea eax, [ebp - 0x134]
push eax
call fcn.10128238
add esp, 4
mov dword [0x101975f4], eax
mov byte [ebp - 0x134], 0
mov dword [0x101aa6b4], ebx
push edi
push 0x104
lea ecx, [ebp - 0x134]
push ecx
push 0x1014d5e3
push str.DownloadFromAnotherServer
push str.Config
call esi
mov dword [ebp - 0x127b4], 8
cmp byte [ebp - 0x134], 0x31
jne 0x1002f49b
push edi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1014d5e3
push str.httphost
push str.Config
call esi
cmp byte [ebp - 0x134], 0
je 0x1002f4a5
push 0x10156860
lea eax, [ebp - 0x134]
push eax
call fcn.101283f0
add esp, 8
test eax, eax
je 0x1002f313
add eax, 2
push eax
lea ecx, [ebp - 0x44c]
push ecx
jmp 0x1002f321
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x44c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x3a
lea ecx, [ebp - 0x44c]
push ecx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002f33f
mov byte [eax], 0
push 0x2f
lea edx, [ebp - 0x44c]
push edx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002f357
mov byte [eax], 0
push edi
push 0x208
lea eax, [ebp - 0x654]
push eax
push 0x1014d5e3
push str.EventServer
push str.Config
call esi
cmp byte [ebp - 0x654], 0
je 0x1002f48d
push 0x2c
lea ecx, [ebp - 0x654]
push ecx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002f444
mov byte [ebp - 0x2b9c], 0
push 0x207
push 0
lea edx, [ebp - 0x2b9b]
push edx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x12800], 0
push ebx
push 0x2c
lea eax, [ebp - 0x12800]
push eax
lea ecx, [ebp - 0x2b9c]
push ecx
xor cl, cl
lea edx, [ebp - 0x654]
call fcn.10061f00
add esp, 0x10
cmp dword [0x101c5464], 0
jne 0x1002f40d
lea edx, [ebp - 0x2b9c]
push edx
lea eax, [ebp - 0x654]
push eax
push str._ERROR__A_Multiple_Entries_present_in__EventServer_:___s___Not_supported._Only_first_entry___s__will_be_taken
call fcn.10017540
add esp, 0xc
mov dword [0x101c5464], ebx
lea ecx, [ebp - 0x2b9c]
lea edx, [ebp - 0x654]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, ebx
add edx, ebx
test al, al
jne 0x1002f420
push 0x3a
lea ecx, [ebp - 0x654]
push ecx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002f444
mov byte [eax], 0
push str.203.92.54.25
lea edx, [ebp - 0x654]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x1002f470
mov byte [ebp - 0x654], al
mov dword [ebp - 0x127c0], ebx
mov dword [0x101b335c], ebx
jmp 0x1002f4a5
cmp byte [ebp - 0x654], 0
je 0x1002f48d
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0x44c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x127c0], ebx
mov dword [0x101b335c], ebx
jmp 0x1002f4a5
mov dword [0x101b335c], 0
push str.127.0.0.1
lea edx, [ebp - 0x23c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x127c4], ebx
jmp 0x1002ffec
mov dword [ebp - 0x127d8], esi
push edi
push 0x104
lea eax, [ebp - 0x75c]
push eax
push 0x1015ddbc
push str.SecServer
push str.Config
call ebx
test esi, esi
je 0x1002f507
mov ecx, dword [0x101aa49c]
push ecx
lea edx, [ebp - 0x75c]
push edx
push str._DNSL__C1___Tempbuff_s__eScanCl_d
push 0
call fcn.1006ed90
add esp, 0x10
mov al, byte [ebp - 0x75c]
cmp al, 0x58
je 0x1002fa0f
cmp dword [0x101aa49c], esi
je 0x1002fa0f
cmp al, 0x31
jne 0x1002fa09
mov dword [ebp - 0x127f0], esi
mov eax, 1
mov dword [0x101aa6b4], eax
mov dword [0x101aa6b8], eax
push edi
push 0x104
lea eax, [ebp - 0x75c]
push eax
push 0x1015f288
push str.SecServerSendEventsToPrimaryServer
push str.Config
call ebx
cmp byte [ebp - 0x75c], 0x31
jne 0x1002f66f
mov byte [ebp - 0x1964], 0
push 0x103
push 0
lea ecx, [ebp - 0x1963]
push ecx
call fcn.1012e060
add esp, 0xc
mov dword [0x101aa6bc], 1
lea esi, [ebp - 0x1964]
call fcn.1005ead0
test eax, eax
jne 0x1002f637
cmp byte [ebp - 0x1964], al
je 0x1002f5c1
push eax
mov edx, esi
push edx
push 0x101b3768
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1002f637
push edi
push 0x104
lea eax, [ebp - 0x75c]
push eax
push 0x1014d5e3
push str.CreateLiveEvents
push str.Config
call ebx
cmp dword [ebp - 0x127b8], 0
je 0x1002f5fe
lea ecx, [ebp - 0x75c]
push ecx
push str._DNSL__C1b___Cle:__s_
push 0
call fcn.1006ed90
add esp, 0xc
lea edx, [ebp - 0x75c]
push edx
call fcn.10128238
add esp, 4
test eax, eax
jle 0x1002f68a
mov dword [ebp - 0x127d8], 2
mov dword [0x101aa6bc], 0
cmp dword [ebp - 0x127b8], 0
je 0x1002f68a
push 0
push str._DNSL__C1b___SecServerSendEventsToPrimaryServer:_u
jmp 0x1002f680
mov dword [0x101aa6bc], 0
mov eax, 1
mov dword [ebp - 0x127f0], eax
mov dword [ebp - 0x127d8], eax
cmp dword [ebp - 0x127b8], 0
je 0x1002f68a
push eax
push 0
push str._DNSL__C1a___SecServerSendEventsToPrimaryServer:_u__ThisIsCloudClient:_u
push 0
call fcn.1006ed90
add esp, 0x10
jmp 0x1002f68a
mov dword [0x101aa6bc], esi
test esi, esi
je 0x1002f68a
push 0
push str._DNSL__C1c___SecServerSendEventsToPrimaryServer:_u
push 0
call fcn.1006ed90
add esp, 0xc
mov dword [0x101975f4], 1
push edi
push 0x104
lea eax, [ebp - 0x75c]
push eax
push 0x1014d5e3
push str.AppendActualIP
push str.Config
call ebx
cmp byte [ebp - 0x75c], 0
je 0x1002f6cf
lea ecx, [ebp - 0x75c]
push ecx
call fcn.10128238
add esp, 4
mov dword [0x101975f4], eax
push 0x101ac750
lea edx, [ebp - 0x96c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x96c]
call fcn.10065200
push str.eservcln.exe
lea eax, [ebp - 0x96c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push 0
xor edx, edx
lea ecx, [ebp - 0x96c]
call fcn.10060eb0
add esp, 8
test eax, eax
jne 0x1002fa0f
mov byte [ebp - 0x2174], al
push 0x207
push eax
lea ecx, [ebp - 0x2173]
push ecx
call fcn.1012e060
add esp, 0xc
cmp byte [0x101ab328], 0
jne 0x1002f75d
push 0
push 0
push 0
push 0
push 0
push 0x101ab328
lea edx, [ebp - 0x96c]
push edx
xor edx, edx
xor ecx, ecx
call fcn.10071150
push 0x101ab328
lea eax, [ebp - 0x96c]
push eax
push str.Management_Console__Update_Agent_:__s___s_
lea ecx, [ebp - 0x2174]
push ecx
call fcn.10127dc0
add esp, 0x10
cmp byte [0x101c5468], 0
je 0x1002f79e
lea edx, [ebp - 0x2174]
push edx
push 0x101c5468
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002f7ca
lea eax, [ebp - 0x2174]
push eax
push 0x1014d8cc
call fcn.10017540
add esp, 8
lea ecx, [ebp - 0x2174]
mov edx, 0x101c5468
lea ecx, [ecx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002f7c0
mov dword [0x101a9f44], 0x474155
cmp byte [0x101ab328], 0
je 0x1002fa0f
mov byte [ebp - 0x122c], 0
push 0x103
push 0
lea ecx, [ebp - 0x122b]
push ecx
call fcn.1012e060
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 0x127d0], ebx
push 0x2e
push 0x101ab328
call fcn.10128490
add esp, 8
mov esi, eax
test esi, esi
je 0x1002f988
mov byte [esi], bl
push 0x101ab328
call fcn.10128238
add esp, 4
cmp eax, 0xb
jl 0x1002f985
mov byte [esi], 0x2e
mov dword [0x101ab114], 1
cmp byte [0x101ab328], bl
je 0x1002f985
mov al, 0x2e
mov edx, 0x101ab328
call fcn.100770c0
cmp eax, 3
jne 0x1002f985
push 0x2e
push 0x101ab328
call fcn.10129030
add esp, 8
test eax, eax
je 0x1002f985
inc eax
push eax
call fcn.10128238
add esp, 4
cmp eax, 0x172
jl 0x1002f985
push 0x101aa5a8
push 0x104
push str.Config
lea edi, [ebp - 0xa74]
mov edx, 0x1015f288
mov ecx, str.IsUniqueIdExist
call fcn.10073c60
add esp, 0xc
cmp byte [ebp - 0xa74], 0x31
jne 0x1002f985
push 0x101aa5a8
push 0x104
push str.Config
mov edx, 0x1014d980
mov ecx, str.IsMachineWithUniqueID
call fcn.10073c60
add esp, 0xc
cmp byte [ebp - 0xa74], 0x30
jne 0x1002f985
mov byte [ebp - 0x3bac], bl
push 0x3ff
push ebx
lea edx, [ebp - 0x3bab]
push edx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127fc], 0x400
push str.LogEstr
lea eax, [ebp - 0x127fc]
lea edi, [ebp - 0x3bac]
mov ecx, str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, reloc.WS2_32.dll_bind
call fcn.10059d80
cmp byte [ebp - 0x3bac], bl
je 0x1002f963
push ebx
push str._NHX_
mov eax, edi
push eax
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x1002f963
mov ebx, 1
mov dword [0x101ab21c], ebx
jmp 0x1002f97f
cmp dword [ebp - 0x127f0], 0
je 0x1002f97d
mov ebx, 2
mov dword [0x101ab21c], 1
jmp 0x1002f97f
xor ebx, ebx
mov dword [ebp - 0x127d0], ebx
mov byte [esi], 0x2e
cmp ebx, 1
jne 0x1002f99b
push str.SecServer___Main_Server_Supports_NHX
lea ecx, [ebp - 0x122c]
push ecx
jmp 0x1002f9ba
cmp ebx, 2
jne 0x1002f9ae
push str.SecServer___Main_Server_Supports_NHX__Cloud_Client_
lea edx, [ebp - 0x122c]
push edx
jmp 0x1002f9ba
push str.SecServer___Main_Server_DOES_NOT_Support_NHX
lea eax, [ebp - 0x122c]
push eax
call fcn.10127dc0
add esp, 8
cmp byte [0x101c5670], 0
je 0x1002f9e3
push 0x101c5670
lea ecx, [ebp - 0x122c]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002fa0f
lea ecx, [ebp - 0x122c]
mov edx, 0x101c5670
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002f9f0
push 0x101c5670
call fcn.10017540
add esp, 4
jmp 0x1002fa0f
mov dword [0x101aa6b8], esi
mov dword [ebp - 0x127b4], 9
mov edi, dword [ebp - 0x127b0]
push edi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1014d5e3
push str.httphost
push str.Config
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call ebx
cmp dword [ebp - 0x127b8], 0
je 0x1002fa62
lea eax, [ebp - 0x134]
push eax
push str._DNSL__httphost:_s
push 0
call fcn.1006ed90
add esp, 0xc
mov dword [ebp - 0x127b4], 0x5b
mov byte [ebp - 0x278c], 0
push 0x207
push 0
lea ecx, [ebp - 0x278b]
push ecx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127b4], 0x38f
mov edx, dword [0x101aa6bc]
push edx
mov eax, dword [0x101aa6b8]
push eax
push edi
lea ecx, [ebp - 0x134]
push ecx
push str.eScan_Client_HTTPHOST:__s___s__SS:_u__SSE:_u_
lea edx, [ebp - 0x278c]
push edx
call fcn.10127dc0
add esp, 0x18
mov dword [ebp - 0x127b4], 0x390
cmp byte [0x101c5778], 0
je 0x1002fae7
lea eax, [ebp - 0x278c]
push eax
push 0x101c5778
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002fb1f
mov dword [ebp - 0x127b4], 0x391
lea ecx, [ebp - 0x278c]
push ecx
call fcn.10017540
add esp, 4
mov dword [ebp - 0x127b4], 0x392
lea ecx, [ebp - 0x278c]
mov edx, 0x101c5778
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002fb15
mov dword [ebp - 0x127b4], 0x5c
cmp byte [ebp - 0x134], 0
je 0x1002fbe2
push 0x10156860
lea edx, [ebp - 0x134]
push edx
call fcn.101283f0
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
test eax, eax
je 0x1002fb61
add eax, 2
push eax
lea eax, [ebp - 0x23c]
push eax
jmp 0x1002fb6f
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x23c]
push edx
call esi
mov dword [ebp - 0x127b4], 0x5e
push 0x3a
lea eax, [ebp - 0x23c]
push eax
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002fb93
mov byte [eax], 0
push 0x2f
lea ecx, [ebp - 0x23c]
push ecx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002fbab
mov byte [eax], 0
mov dword [ebp - 0x127c4], 1
mov dword [ebp - 0x127b4], 0x5f
cmp dword [0x101aa6bc], 0
je 0x1002fbe2
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x44c]
push eax
call esi
mov dword [ebp - 0x127c0], 1
mov dword [ebp - 0x127b4], 0xa
push edi
push 0x208
lea ecx, [ebp - 0x654]
push ecx
push 0x1014d5e3
push str.EventServer
push str.Config
call ebx
cmp byte [ebp - 0x654], 0
je 0x1002fcfc
push 0x2c
lea edx, [ebp - 0x654]
push edx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002fcd5
mov byte [ebp - 0x2da4], 0
push 0x207
push 0
lea eax, [ebp - 0x2da3]
push eax
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127f4], 0
push 1
push 0x2c
lea ecx, [ebp - 0x127f4]
push ecx
lea edx, [ebp - 0x2da4]
push edx
xor cl, cl
lea edx, [ebp - 0x654]
call fcn.10061f00
add esp, 0x10
cmp dword [0x101c5980], 0
jne 0x1002fca7
lea eax, [ebp - 0x2da4]
push eax
lea ecx, [ebp - 0x654]
push ecx
push str._ERROR__B_Multiple_Entries_present_in__EventServer_:___s___Not_supported._Only_first_entry___s__will_be_taken
call fcn.10017540
add esp, 0xc
mov dword [0x101c5980], 1
lea ecx, [ebp - 0x2da4]
lea edx, [ebp - 0x654]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002fcb3
push 0x3a
lea edx, [ebp - 0x654]
push edx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1002fcd5
mov byte [eax], 0
cmp byte [ebp - 0x654], 0
je 0x1002fcfc
push str.203.92.54.25
lea eax, [ebp - 0x654]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x1002fcfc
mov byte [ebp - 0x654], al
mov esi, dword [ebp - 0x127d8]
test esi, esi
je 0x1002fd8a
mov byte [ebp - 0x2994], 0
push 0x207
push 0
lea ecx, [ebp - 0x2993]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x654], 0
push esi
push str.Events_will_be_sent_to_LocalHost__EW:_u_
lea edx, [ebp - 0x2994]
push edx
call fcn.10127dc0
add esp, 0xc
cmp byte [0x101c5988], 0
je 0x1002fd64
lea eax, [ebp - 0x2994]
push eax
push 0x101c5988
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002fd8a
lea ecx, [ebp - 0x2994]
push ecx
call fcn.10017540
add esp, 4
lea ecx, [ebp - 0x2994]
mov edx, 0x101c5988
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002fd80
mov dword [ebp - 0x127b4], 0xb
cmp byte [ebp - 0x654], 0
je 0x1002fff2
mov esi, 1
mov dword [ebp - 0x127e0], esi
mov byte [ebp - 0x237c], 0
push 0x207
push 0
lea edx, [ebp - 0x237b]
push edx
call fcn.1012e060
add esp, 0xc
push edi
lea eax, [ebp - 0x654]
push eax
push str.EventServer:__s___s_
lea ecx, [ebp - 0x237c]
push ecx
call fcn.10127dc0
add esp, 0x10
cmp byte [0x101c5b90], 0
je 0x1002fe06
lea edx, [ebp - 0x237c]
push edx
push 0x101c5b90
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002fe2c
lea eax, [ebp - 0x237c]
push eax
call fcn.10017540
add esp, 4
lea ecx, [ebp - 0x237c]
mov edx, 0x101c5b90
mov al, byte [ecx]
mov byte [edx], al
add ecx, esi
add edx, esi
test al, al
jne 0x1002fe20
cmp dword [0x101aa6bc], 0
je 0x1002fe4f
lea ecx, [ebp - 0x654]
push ecx
lea edx, [ebp - 0x44c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x127c0], esi
cmp dword [0x101aa5a4], 0xa
jl 0x1002fe98
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0x23c]
push ecx
push 0x101b3768
mov edx, dword [ebp + 8]
push edx
mov eax, dword [0x101ab42c]
push eax
push str.hF___u__CFI___u__HLH___s__HLH_Loc___s__ES___s
lea ecx, [ebp - 0x164c]
push ecx
call fcn.10127dc0
add esp, 0x1c
lea edx, [ebp - 0x164c]
push edx
call fcn.10017540
add esp, 4
cmp dword [0x101ab42c], 0
je 0x1002ffc5
cmp dword [ebp + 8], 0
jne 0x1002ffc5
mov byte [ebp - 0xf14], 0
push 0x103
push 0
lea eax, [ebp - 0xf13]
push eax
call fcn.1012e060
add esp, 0xc
cmp byte [0x101c5d98], 0
je 0x1002feed
lea ecx, [ebp - 0x654]
push ecx
push 0x101c5d98
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002ff3c
lea edx, [ebp - 0x654]
push edx
push str.Checking_Connectivity_to_EventServer__s:2225
lea eax, [ebp - 0x1d64]
push eax
call fcn.10127dc0
add esp, 0xc
lea ecx, [ebp - 0x1d64]
push ecx
push 0x1014d8cc
call fcn.10017540
add esp, 8
or ebx, 0xffffffff
mov dword [0x101a417c], ebx
lea ecx, [ebp - 0x654]
mov edx, 0x101c5d98
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1002ff30
jmp 0x1002ff3f
or ebx, 0xffffffff
mov byte [ebp - 0xf14], 0
push 0
push 0
push 0
push 0
push 0x2710
push 1
lea edx, [ebp - 0xf14]
push edx
push str.2225
lea eax, [ebp - 0x654]
push eax
xor edx, edx
xor ecx, ecx
call fcn.100104e0
add esp, 0x24
mov esi, eax
cmp esi, 1
jne 0x1003004e
mov eax, dword [0x101a417c]
cmp eax, ebx
je 0x1002ff8c
test eax, eax
jne 0x1002ffc5
lea ecx, [ebp - 0x654]
push ecx
push str.Connection_Successful_to_EventServer__s:2225
lea edx, [ebp - 0x1d64]
push edx
call fcn.10127dc0
add esp, 0xc
lea eax, [ebp - 0x1d64]
push eax
push 0x1014d8cc
call fcn.10017540
add esp, 8
mov dword [0x101a417c], 1
cmp dword [ebp - 0x127e0], 0
je 0x1002ffec
lea edx, [ebp - 0x654]
push edx
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x127c4], 1
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp dword [ebp - 0x127b8], 0
je 0x1003000a
push str._DNSL__further_1
push 0
call fcn.1006ed90
add esp, 8
mov dword [ebp - 0x127b4], 0xd
push edi
push 0x104
lea ecx, [ebp - 0x134]
push ecx
push 0x1014d5e3
push str.DirectBlockAVC
push str.Config
call ebx
cmp byte [ebp - 0x134], 0
jne 0x10030491
mov dword [0x101aa498], 1
jmp 0x100304ab
mov byte [ebp - 0x127ac], 0
push 0x1fff
push 0
lea ecx, [ebp - 0x127ab]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0xa7ac], 0
push 0x1fff
push 0
lea edx, [ebp - 0xa7ab]
push edx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127bc], 0
mov byte [ebp - 0x864], 0
push 0x103
push 0
lea eax, [ebp - 0x863]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x101c], 0
push 0x103
push 0
lea ecx, [ebp - 0x101b]
push ecx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127e0], 0
mov eax, dword [0x101a417c]
cmp eax, ebx
je 0x100300e4
cmp eax, 1
jne 0x1003011d
lea edx, [ebp - 0xf14]
push edx
lea eax, [ebp - 0x654]
push eax
push str.Connection_Failure_to_EventServer__s:2225__Reason:__s
lea ecx, [ebp - 0x1d64]
push ecx
call fcn.10127dc0
lea edx, [ebp - 0x1d64]
push edx
push 0x1014d8cc
call fcn.10017540
add esp, 0x18
mov dword [0x101a417c], esi
push edi
push 0x104
lea eax, [ebp - 0x101c]
push eax
push 0x1014d5e3
push str.IgnoreServerIPs
push str.Config
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
cmp byte [ebp - 0x101c], 0x31
jne 0x10030153
mov byte [ebp - 0x127ac], 0
jmp 0x10030176
push 0x2000
lea ecx, [ebp - 0x127ac]
push ecx
push 0x1014d5e3
mov edx, str.ServerIPs
mov ecx, str.eScan
call fcn.1005ffb0
add esp, 0xc
push edi
push 0x2000
lea edx, [ebp - 0xa7ac]
push edx
push 0x1014d5e3
push str.Servers
push str.Config
call esi
xor esi, esi
mov dword [ebp - 0x127bc], esi
push 1
push 0x2c
lea eax, [ebp - 0x127bc]
push eax
lea ecx, [ebp - 0x864]
push ecx
xor cl, cl
lea edx, [ebp - 0xa7ac]
call fcn.10061f00
add esp, 0x10
cmp dword [ebp - 0x127bc], ebx
je 0x100301ef
push 1
push 0x2c
lea edx, [ebp - 0x864]
lea ecx, [ebp - 0x127ac]
call fcn.1006c030
push 1
push 0x2c
lea edx, [ebp - 0x127bc]
push edx
lea eax, [ebp - 0x864]
push eax
jmp 0x100301ae
cmp byte [ebp - 0x127ac], 0
je 0x1002ffc5
mov dword [ebp - 0x127bc], esi
push 1
push 0x2c
lea ecx, [ebp - 0x127bc]
push ecx
lea edx, [ebp - 0x864]
push edx
xor cl, cl
lea edx, [ebp - 0x127ac]
call fcn.10061f00
add esp, 0x10
cmp dword [ebp - 0x127bc], ebx
je 0x1002ffc5
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0x864]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003047a
push str.127.0.0.1
lea edx, [ebp - 0x864]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003047a
push str.localhost
lea eax, [ebp - 0x864]
push eax
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003047a
lea ecx, [ebp - 0x864]
push ecx
push str.Checking_Connectivity_to_possible_alternate_EventServer__s:2225
lea edx, [ebp - 0x1d64]
push edx
call fcn.10127dc0
add esp, 0xc
lea eax, [ebp - 0x1d64]
push eax
push 0x1014d8cc
call fcn.10017540
mov byte [ebp - 0xf14], 0
push 0
push 0
push 0
push 0
push 0x2710
push 1
lea ecx, [ebp - 0xf14]
push ecx
push str.2225
lea edx, [ebp - 0x864]
push edx
xor edx, edx
xor ecx, ecx
call fcn.100104e0
add esp, 0x2c
cmp eax, 1
jne 0x10030447
mov byte [ebp - 0x107ac], 0
push 0x1fff
push 0
lea eax, [ebp - 0x107ab]
push eax
call fcn.1012e060
add esp, 0xc
lea ecx, [ebp - 0x864]
push ecx
push str.Connection_Successful_to_alternate_EventServer__s:2225
lea edx, [ebp - 0x1d64]
push edx
call fcn.10127dc0
add esp, 0xc
lea eax, [ebp - 0x1d64]
push eax
push 0x1014d8cc
call fcn.10017540
add esp, 8
mov dword [ebp - 0x127e0], 1
lea ecx, [ebp - 0x864]
push ecx
lea edx, [ebp - 0x654]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
push 0x2000
lea eax, [ebp - 0xa7ac]
push eax
push 0x1014d5e3
push str.Servers
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0xa7ac]
lea ecx, [ebp - 0x107ac]
mov dl, byte [eax]
mov byte [ecx], dl
inc eax
inc ecx
test dl, dl
jne 0x10030388
push 1
push 0x2c
lea edx, [ebp - 0x654]
lea ecx, [ebp - 0xa7ac]
call fcn.1006c030
cmp eax, 1
jne 0x100303f9
push str.Config
mov esi, edi
lea eax, [ebp - 0xa7ac]
mov ebx, str.Servers
call fcn.1005f6b0
add esp, 4
lea ecx, [ebp - 0x107ac]
push ecx
lea edx, [ebp - 0xa7ac]
push edx
push str.Modified_Servers_to__s__OldValue:__s_
lea eax, [ebp - 0x1d64]
push eax
call fcn.10127dc0
lea ecx, [ebp - 0x1d64]
push ecx
push 0x1014d8cc
call fcn.10017540
add esp, 0x18
push str.Config
mov esi, edi
lea eax, [ebp - 0x654]
mov ebx, str.EventServer
call fcn.1005f6b0
add esp, 4
lea edx, [ebp - 0x654]
push edx
push str.Modified_Event_Server_to__s
lea eax, [ebp - 0x1d64]
push eax
call fcn.10127dc0
add esp, 0xc
lea ecx, [ebp - 0x1d64]
push ecx
push 0x1014d8cc
call fcn.10017540
add esp, 8
jmp 0x1002ffc5
lea edx, [ebp - 0xf14]
push edx
lea eax, [ebp - 0x864]
push eax
push str.Connection_Failure_to_alternate_EventServer__s:2225__Reason:__s
lea ecx, [ebp - 0x1d64]
push ecx
call fcn.10127dc0
lea edx, [ebp - 0x1d64]
push edx
push 0x1014d8cc
call fcn.10017540
add esp, 0x18
push 1
push 0x2c
lea eax, [ebp - 0x127bc]
push eax
lea ecx, [ebp - 0x864]
push ecx
jmp 0x10030214
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
add esp, 4
neg eax
sbb eax, eax
neg eax
mov dword [0x101aa498], eax
push edi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1014d5e3
push str.CacheUnsentEvents
push str.Config
call ebx
cmp byte [ebp - 0x134], 0
je 0x100304e6
lea ecx, [ebp - 0x134]
push ecx
call fcn.10128238
add esp, 4
mov dword [0x101aa6b0], eax
push edi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1014d5e3
push str.LimitAppAllowedEvents
push str.Config
call ebx
cmp byte [ebp - 0x134], 0
je 0x1003052a
lea eax, [ebp - 0x134]
push eax
call fcn.10128238
add esp, 4
test eax, eax
mov dword [0x101962ac], 0
je 0x10030534
mov dword [0x101962ac], 1
push edi
push 0x104
lea ecx, [ebp - 0x134]
push ecx
push 0x1014d5e3
push str.LimitAppAllowedEvents_Secs
push str.Config
call ebx
cmp byte [ebp - 0x134], 0
je 0x10030574
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
add esp, 4
mov dword [0x101963b4], eax
cmp eax, 3
ja 0x1003057e
mov dword [0x101963b4], 0xb4
mov dword [ebp - 0x127b4], 0xe
cmp dword [0x101aa6b4], 0
je 0x10030888
push edi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1016036c
push str.EMailNotification
push str.Config
call ebx
push 0x1016036c
lea ecx, [ebp - 0x134]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x100305e7
push str.Config
mov esi, dword [ebp - 0x127b0]
mov eax, 0x1014d980
mov ebx, str.EMailNotification
call fcn.1005f6b0
jmp 0x100305fe
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
mov dword [0x101ad18c], eax
mov esi, dword [ebp - 0x127b0]
add esp, 4
push esi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1016036c
push str.SeparateEmailNotificationForEveryEvent
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x1016036c
lea ecx, [ebp - 0x134]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030657
push str.Config
mov eax, 0x1014d980
mov ebx, str.SeparateEmailNotificationForEveryEvent
call fcn.1005f6b0
mov esi, dword [ebp - 0x127b0]
jmp 0x10030668
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
mov dword [0x101ad294], eax
add esp, 4
push esi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1016036c
push str.SimpleEMailNotification
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x1016036c
lea ecx, [ebp - 0x134]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x100306c1
push str.Config
mov eax, 0x1014d980
mov ebx, str.SimpleEMailNotification
call fcn.1005f6b0
mov esi, dword [ebp - 0x127b0]
jmp 0x100306d2
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
mov dword [0x101ad39c], eax
add esp, 4
push esi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1016036c
push str.EMailNotificationIntervalInSecs
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x1016036c
lea ecx, [ebp - 0x134]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030730
push str.Config
mov eax, 0x10159bd8
mov ebx, str.EMailNotificationIntervalInSecs
call fcn.1005f6b0
mov eax, dword [0x10197034]
mov esi, dword [ebp - 0x127b0]
jmp 0x10030741
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
mov dword [0x10197034], eax
add esp, 4
cmp eax, 1
jge 0x10030755
mov dword [0x10197034], 1
jmp 0x10030783
cmp eax, 0x1388
jne 0x10030783
mov dword [0x10197034], 5
push str.Config
mov eax, 0x10159bd8
mov ebx, str.EMailNotificationIntervalInSecs
call fcn.1005f6b0
add esp, 4
mov esi, dword [ebp - 0x127b0]
push esi
push 0x800
lea eax, [ebp - 0x5fac]
push eax
push 0x1016036c
push str.EMailEventIds
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x1016036c
lea ecx, [ebp - 0x5fac]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x100307da
push str.Config
mov eax, 0x1014d5e3
mov ebx, str.EMailEventIds
call fcn.1005f6b0
add esp, 4
mov esi, dword [ebp - 0x127b0]
push esi
push 0x1000
lea edx, [ebp - 0xb7ac]
push edx
push 0x1016036c
push str.EMailEventIdsFromHosts
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x1016036c
lea eax, [ebp - 0xb7ac]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030831
push str.Config
mov eax, 0x1014d5e3
mov ebx, str.EMailEventIdsFromHosts
call fcn.1005f6b0
add esp, 4
mov esi, dword [ebp - 0x127b0]
push esi
push 0x800
lea ecx, [ebp - 0x57ac]
push ecx
push 0x1016036c
push str.EMailEventIdsExcludeDescFilter
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x1016036c
lea edx, [ebp - 0x57ac]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030888
push str.Config
mov esi, dword [ebp - 0x127b0]
mov eax, 0x1014d5e3
mov ebx, str.EMailEventIdsExcludeDescFilter
call fcn.1005f6b0
add esp, 4
mov dword [ebp - 0x127b4], 0xf
mov esi, dword [ebp - 0x127b0]
push esi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1014d980
push str.Debug
push str.Config
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call ebx
lea ecx, [ebp - 0x134]
push ecx
call fcn.10128238
add esp, 4
mov dword [0x101aa5a4], eax
push esi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1014d980
push str.EVQDebug
push str.Config
call ebx
lea eax, [ebp - 0x134]
push eax
call fcn.10128238
add esp, 4
mov dword [0x101a9f54], eax
push esi
push 0x104
lea ecx, [ebp - 0x134]
push ecx
push 0x10160438
push str.CloudPriorityEventSendIntervalSecs
push str.Config
call ebx
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
add esp, 4
mov dword [0x1019735c], eax
cmp eax, 0x14
jae 0x10030943
mov dword [0x1019735c], 0x5a
push esi
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0x1014d980
push str.UploadEvents
push str.Config
call ebx
lea ecx, [ebp - 0x134]
push ecx
call fcn.10128238
add esp, 4
mov dword [0x101aa6ac], eax
push esi
push 0x104
lea edx, [ebp - 0x134]
push edx
push str.2225
push str.HttpLogPort
push str.Config
call ebx
lea eax, [ebp - 0x134]
push eax
push 0x101b31fc
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
push esi
push 0x800
lea ecx, [ebp - 0x67ac]
push ecx
push 0x1014d5e3
push str.IgnoreEventIds
push str.Config
call ebx
push esi
push 0x104
lea edx, [ebp - 0x134]
push edx
push 0x1014d5e3
push str.IgnoreEventIdsApplyToCachedEvents
push str.Config
call ebx
lea eax, [ebp - 0x134]
push eax
call fcn.10128238
add esp, 4
test eax, eax
je 0x10030a00
mov dword [0x101ad5ac], 1
push esi
push 0x800
lea ecx, [ebp - 0x47ac]
push ecx
push str.154_161_701_737_738_741_750_751_768_800_801_6700_20700_20702
push str.LogEventIds
push str.Config
call ebx
push esi
push 0x800
lea edx, [ebp - 0x4fac]
push edx
push str.154_741_751_737_738_739
push str.CloudPriorityEventIds
push str.Config
call ebx
push esi
push 0x800
lea eax, [ebp - 0x6fac]
push eax
push 0x1014d5e3
push str.SendOnlyEventIds
push str.Config
call ebx
push esi
push 0x800
lea ecx, [ebp - 0x77ac]
push ecx
push 0x1014d5e3
push str.SIEMSendOnlyEventIds
push str.Config
call ebx
push esi
push 0x800
lea edx, [ebp - 0x7fac]
push edx
push 0x1014d5e3
push str.IgnoreEventIdsServToServ
push str.Config
call ebx
push esi
push 0x800
lea eax, [ebp - 0x87ac]
push eax
push 0x1014d5e3
push str.SendOnlyEventIdsServToServ
push str.Config
call ebx
lea ecx, [ebp - 0x5fac]
push ecx
call fcn.10061df0
add esp, 4
lea edx, [ebp - 0xb7ac]
push edx
call fcn.10061df0
add esp, 4
lea eax, [ebp - 0x57ac]
push eax
call fcn.10061df0
add esp, 4
lea ecx, [ebp - 0x67ac]
push ecx
call fcn.10061df0
add esp, 4
lea edx, [ebp - 0x6fac]
push edx
call fcn.10061df0
add esp, 4
lea eax, [ebp - 0x77ac]
push eax
call fcn.10061df0
add esp, 4
lea ecx, [ebp - 0x47ac]
push ecx
call fcn.10061df0
add esp, 4
lea edx, [ebp - 0x4fac]
push edx
call fcn.10061df0
add esp, 4
lea eax, [ebp - 0x7fac]
push eax
call fcn.10061df0
add esp, 4
lea ecx, [ebp - 0x87ac]
push ecx
call fcn.10061df0
add esp, 4
mov dword [ebp - 0x127b4], 0x10
cmp dword [ebp - 0x127b8], 0
je 0x10030b6c
push str._DNSL__further_2
push 0
call fcn.1006ed90
add esp, 8
cmp byte [0x101acb68], 0
je 0x10030cd2
push 0x101acb68
push 0x104
lea edx, [ebp - 0xe0c]
push edx
push 0x1014d5e3
push str.AdminEmailId
push 0x10156244
call ebx
lea eax, [ebp - 0xe0c]
push eax
call fcn.10061df0
add esp, 4
cmp byte [ebp - 0xe0c], 0
jne 0x10030bcc
push 0x101aabe8
push str.postmaster__s
lea ecx, [ebp - 0xe0c]
push ecx
call fcn.10127dc0
add esp, 0xc
push 0x101acb68
push 0x104
lea edx, [ebp - 0x1334]
push edx
lea eax, [ebp - 0xe0c]
push eax
push str.WarningMailsFromUser
push 0x10156244
call ebx
push 0x101acb68
push 0x104
lea ecx, [ebp - 0x1544]
push ecx
push 0x101605cc
push str.WarningsToSMTPPort
push 0x10156244
call ebx
push 0x101acb68
push 0x104
lea edx, [ebp - 0xd04]
push edx
push 0x1014d5e3
push str.WarningsToSMTPServer
push 0x10156244
call ebx
lea eax, [ebp - 0x1334]
push eax
call fcn.10061df0
add esp, 4
lea ecx, [ebp - 0x1544]
push ecx
call fcn.10061df0
add esp, 4
lea edx, [ebp - 0xd04]
push edx
call fcn.10061df0
add esp, 4
cmp byte [ebp - 0xd04], 0
je 0x10030cd2
push 0x101acb68
push 0x104
lea eax, [ebp - 0x1124]
push eax
push 0x1014d5e3
push str.AuthUserName
lea ecx, [ebp - 0xd04]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, 0x101acb68
lea ecx, [ebp - 0x143c]
lea ebx, [ebp - 0xd04]
call fcn.1003fa60
lea edx, [ebp - 0x1124]
push edx
call fcn.10061df0
add esp, 4
lea eax, [ebp - 0x143c]
push eax
call fcn.10061df0
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x101af6b8
lea ecx, [ebp - 0x67ac]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101afeb8
lea edx, [ebp - 0x6fac]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101b06b8
lea eax, [ebp - 0x77ac]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101b0eb8
lea ecx, [ebp - 0x47ac]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101b16b8
lea edx, [ebp - 0x4fac]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101b1eb8
lea eax, [ebp - 0x7fac]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101b26b8
lea ecx, [ebp - 0x87ac]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101adeb8
lea edx, [ebp - 0xb7ac]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101aeeb8
lea eax, [ebp - 0x57ac]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101ad6b8
lea ecx, [ebp - 0x5fac]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
cmp byte [0x101acb68], al
je 0x100312cc
push 0x101ad088
lea edx, [ebp - 0xe0c]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101ad190
lea eax, [ebp - 0x1334]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101ad298
lea ecx, [ebp - 0x1544]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101ad3a0
lea edx, [ebp - 0xd04]
push edx
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101ad4a8
lea eax, [ebp - 0x1124]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x10030e8e
push 0x101ad5b0
lea ecx, [ebp - 0x143c]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x100312cc
mov eax, dword [0x101b31ec]
test eax, eax
je 0x10030ea0
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea edx, [ebp - 0x5fac]
push edx
push 0x101ad6b8
call edi
lea eax, [ebp - 0xb7ac]
push eax
push 0x101adeb8
call edi
lea ecx, [ebp - 0x57ac]
push ecx
push 0x101aeeb8
call edi
lea edx, [ebp - 0x67ac]
push edx
push 0x101af6b8
call edi
lea eax, [ebp - 0x6fac]
push eax
push 0x101afeb8
call edi
lea ecx, [ebp - 0x77ac]
push ecx
push 0x101b06b8
call edi
push 0x101b0eb8
lea edx, [ebp - 0x47ac]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x10030fef
lea eax, [ebp - 0x47ac]
push eax
push 0x101b0eb8
call edi
mov al, byte [0x101b0eb8]
push 0x101a6e80
test al, al
je 0x10030fce
cmp al, 0x2a
je 0x10030fce
mov dword [ebp - 0x127e4], 0
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call esi
mov ecx, 0x101c01d0
call fcn.1007ee50
push 1
push 0x2c
lea ecx, [ebp - 0x127e4]
push ecx
lea edx, [ebp - 0xaf4]
push edx
xor cl, cl
mov edx, 0x101b0eb8
call fcn.10061f00
add esp, 0x10
or edi, 0xffffffff
cmp dword [ebp - 0x127e4], edi
je 0x10030fb5
push 0
lea ecx, [ebp - 0xaf4]
mov edx, 0x101c01d0
call fcn.1007eff0
push 1
push 0x2c
lea eax, [ebp - 0x127e4]
push eax
lea ecx, [ebp - 0xaf4]
push ecx
xor cl, cl
mov edx, 0x101b0eb8
call fcn.10061f00
add esp, 0x10
jmp 0x10030f78
mov ecx, 0x101c01d0
call fcn.1007f7e0
push 0x101a6e80
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call edi
jmp 0x10030ffb
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call esi
mov ecx, 0x101c01d0
call fcn.1007ee50
push 0x101a6e80
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call edi
jmp 0x10030ffb
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x101b16b8
lea edx, [ebp - 0x4fac]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x100310c0
lea eax, [ebp - 0x4fac]
push eax
push 0x101b16b8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov al, byte [0x101b16b8]
push 0x101a6e80
test al, al
je 0x100310ad
cmp al, 0x2a
je 0x100310ad
mov dword [ebp - 0x127dc], 0
call esi
mov ecx, 0x101c00f8
call fcn.1007ee50
push 1
push 0x2c
lea ecx, [ebp - 0x127dc]
push ecx
lea edx, [ebp - 0xaf4]
push edx
xor cl, cl
mov edx, 0x101b16b8
call fcn.10061f00
add esp, 0x10
cmp dword [ebp - 0x127dc], 0xffffffff
je 0x100310a1
push 0
lea ecx, [ebp - 0xaf4]
mov edx, 0x101c00f8
call fcn.1007eff0
push 1
push 0x2c
lea eax, [ebp - 0x127dc]
push eax
lea ecx, [ebp - 0xaf4]
push ecx
jmp 0x10031063
mov ecx, 0x101c00f8
call fcn.1007f7e0
jmp 0x100310b9
call esi
mov ecx, 0x101c00f8
call fcn.1007ee50
push 0x101a6e80
call edi
lea edx, [ebp - 0x7fac]
push edx
push 0x101b1eb8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x87ac]
push eax
push 0x101b26b8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [0x101acb68], 0
je 0x100311ed
push 0x101ad088
lea ecx, [ebp - 0xe0c]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003111b
lea edx, [ebp - 0xe0c]
push edx
push 0x101ad088
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x101ad190
lea eax, [ebp - 0x1334]
push eax
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031145
lea ecx, [ebp - 0x1334]
push ecx
push 0x101ad190
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x101ad298
lea edx, [ebp - 0x1544]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003116f
lea eax, [ebp - 0x1544]
push eax
push 0x101ad298
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x101ad3a0
lea ecx, [ebp - 0xd04]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031199
lea edx, [ebp - 0xd04]
push edx
push 0x101ad3a0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x101ad4a8
lea eax, [ebp - 0x1124]
push eax
call fcn.10135887
add esp, 8
test eax, eax
je 0x100311c3
lea ecx, [ebp - 0x1124]
push ecx
push 0x101ad4a8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x101ad5b0
lea edx, [ebp - 0x143c]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x100311ed
lea eax, [ebp - 0x143c]
push eax
push 0x101ad5b0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0
push str.Project
push 0x101ac858
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1003124a
cmp dword [0x101a9f5c], 1
jne 0x10031228
push 0
push str.httpd
push 0x101ac858
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1003124a
cmp dword [0x101a9f5c], 0
jne 0x1003128e
push 0
push str.eServ
push 0x101ac858
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x1003128e
cmp dword [0x101ad4a4], 0
jne 0x1003128e
cmp byte [0x101ad3a0], 0
je 0x1003128e
push 0x101a6e68
call esi
cmp dword [0x101ad4a4], 0
jne 0x10031287
mov dword [0x101ad4a4], 1
push 0
push 0
push 0x1004aef0
call fcn.10127f7d
add esp, 0xc
push 0x101a6e68
call edi
mov eax, dword [0x101b31ec]
test eax, eax
je 0x100312cc
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x100312cc
push 0x101ac648
lea ecx, [ebp - 0x23c]
push ecx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
push str.2225
push 0x101b31fc
call esi
mov dword [ebp - 0x127c4], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x127b4], 0x11
cmp dword [ebp - 0x127b8], 0
je 0x100312ee
push str._DNSL__further_4
push 0
call fcn.1006ed90
add esp, 8
cmp byte [ebp - 0x23c], 0
je 0x10031991
xor edi, edi
mov dword [ebp - 0x127c8], edi
push edi
lea edx, [ebp - 0x23c]
push edx
call fcn.10069e60
add esp, 8
test eax, eax
je 0x10031326
mov dword [ebp - 0x127c8], 1
jmp 0x1003150d
push 0
push str.mwti.
lea eax, [ebp - 0x23c]
push eax
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100313bc
push 0
push str.escanav.
lea ecx, [ebp - 0x23c]
push ecx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100313bc
push 0
push str.microworldsystems.
lea edx, [ebp - 0x23c]
push edx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100313bc
push 0
push str.escan_av.
lea eax, [ebp - 0x23c]
push eax
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100313bc
push 0
push str.sourcenext.
lea ecx, [ebp - 0x23c]
push ecx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100313bc
mov dword [ebp - 0x127c8], 1
jmp 0x1003150d
mov byte [ebp - 0xa74], 0
push 0x103
push 0
lea edx, [ebp - 0xa73]
push edx
call fcn.1012e060
add esp, 0xc
lea esi, [ebp - 0xa74]
call fcn.1005ead0
test eax, eax
jne 0x10031408
cmp byte [ebp - 0xa74], al
je 0x10031417
push eax
mov eax, esi
push eax
lea ecx, [ebp - 0x23c]
push ecx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x10031417
mov dword [ebp - 0x127c8], 1
jmp 0x1003150d
mov byte [ebp - 0x37ac], 0
push 0x3ff
push 0
lea edx, [ebp - 0x37ab]
push edx
call fcn.1012e060
add esp, 0xc
mov eax, dword [ebp - 0x127b0]
push eax
push 0x400
lea ecx, [ebp - 0x37ac]
push ecx
push 0x1014d5e3
push str.LiveLogDomains
push str.Config
call ebx
cmp byte [ebp - 0x37ac], 0
je 0x10031505
mov dword [ebp - 0x127e8], 0
mov byte [ebp - 0x2fac], 0
push 0x207
push 0
lea edx, [ebp - 0x2fab]
push edx
call fcn.1012e060
add esp, 0xc
push 1
push 0x2c
lea eax, [ebp - 0x127e8]
push eax
lea ecx, [ebp - 0x2fac]
push ecx
xor cl, cl
lea edx, [ebp - 0x37ac]
call fcn.10061f00
add esp, 0x10
or esi, 0xffffffff
cmp dword [ebp - 0x127e8], esi
je 0x10031505
push 0
lea edx, [ebp - 0x2fac]
push edx
lea eax, [ebp - 0x23c]
push eax
call fcn.10063340
add esp, 0xc
cmp eax, esi
je 0x100314e1
mov dword [ebp - 0x127c8], 1
jmp 0x1003150d
push 1
push 0x2c
lea ecx, [ebp - 0x127e8]
push ecx
lea edx, [ebp - 0x2fac]
push edx
xor cl, cl
lea edx, [ebp - 0x37ac]
call fcn.10061f00
add esp, 0x10
jmp 0x100314b1
test edi, edi
je 0x100318ab
mov byte [ebp - 0x1f6c], 0
push 0x207
push 0
lea eax, [ebp - 0x1f6b]
push eax
call fcn.1012e060
add esp, 0xc
mov esi, dword [ebp - 0x127b0]
cmp byte [esi], 0
je 0x10031558
push esi
push 0x101b31fc
lea ecx, [ebp - 0x23c]
push ecx
push str.LiveLog_Server:__s:_s___s_
lea edx, [ebp - 0x1f6c]
push edx
call fcn.10127dc0
add esp, 0x14
jmp 0x10031578
push 0x101b31fc
lea eax, [ebp - 0x23c]
push eax
push str.LiveLog_Server:__s:_s
lea ecx, [ebp - 0x1f6c]
push ecx
call fcn.10127dc0
add esp, 0x10
cmp byte [0x101c5ea0], 0
je 0x10031599
lea edx, [ebp - 0x1f6c]
push edx
push 0x101c5ea0
call fcn.10135887
add esp, 8
test eax, eax
je 0x100315c2
lea eax, [ebp - 0x1f6c]
push eax
push 0x1014d8cc
call fcn.10017540
add esp, 8
lea ecx, [ebp - 0x1f6c]
mov edx, 0x101c5ea0
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x100315b8
mov byte [ebp - 0xe7ac], 0
push esi
push 0x2000
lea ecx, [ebp - 0x107ac]
push ecx
push 0x1014d5e3
push str.Servers
push str.Config
call ebx
mov edi, 1
cmp byte [ebp - 0x107ac], 0
je 0x10031681
xor esi, esi
mov dword [ebp - 0x127d4], esi
mov dword [ebp - 0x12808], esi
push edi
push 0x2c
lea edx, [ebp - 0x127d4]
push edx
lea eax, [ebp - 0x101c]
push eax
xor cl, cl
lea edx, [ebp - 0x107ac]
call fcn.10061f00
add esp, 0x10
cmp dword [ebp - 0x127d4], 0xffffffff
je 0x10031681
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x101c]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x100317ab
push edi
push 0x2c
lea edx, [ebp - 0x101c]
lea ecx, [ebp - 0xe7ac]
call fcn.1006c030
add esi, edi
mov dword [ebp - 0x12808], esi
cmp esi, 0xa
jle 0x100317a5
push str.TOO_MANY_ALTERNATE_HOSTS_C_____ONLY_TAKING_10_OF_THEM...
call fcn.10017540
add esp, 4
cmp byte [ebp - 0x44c], 0
je 0x1003193e
mov byte [ebp - 0x164c], 0
push 0x103
push 0
lea edx, [ebp - 0x164b]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x3fac], 0
push 0x3ff
push 0
lea eax, [ebp - 0x3fab]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x33ac], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x33ab]
push ecx
call fcn.1012e060
add esp, 0xc
push 0x101b31fc
lea edx, [ebp - 0x44c]
push edx
push str.Parent_LiveLog_Server:__s:_s
lea eax, [ebp - 0x33ac]
push eax
call fcn.10127dc0
add esp, 0x10
cmp byte [0x101c60a8], 0
je 0x10031726
lea ecx, [ebp - 0x33ac]
push ecx
push 0x101c60a8
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031751
lea edx, [ebp - 0x33ac]
push edx
push 0x1014d8cc
call fcn.10017540
add esp, 8
lea ecx, [ebp - 0x33ac]
mov edx, 0x101c60a8
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x10031745
cmp dword [ebp + 8], 0
je 0x100317c1
push str.localhost
lea eax, [ebp - 0x44c]
push eax
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003188c
push str.127.0.0.1
lea ecx, [ebp - 0x44c]
push ecx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003188c
push 0
push 0
push 0x1002e520
call fcn.10127f7d
add esp, 0xc
jmp 0x1003193e
mov dword [ebp - 0x127ec], edi
push edi
push 0x2c
lea eax, [ebp - 0x127d4]
push eax
lea ecx, [ebp - 0x101c]
push ecx
jmp 0x10031618
push 0
lea edx, [ebp - 0x3fac]
lea ecx, [ebp - 0x164c]
call fcn.100700c0
lea edx, [ebp - 0x164c]
push edx
lea eax, [ebp - 0x3fac]
push eax
push str.List_Of_LocalIPs:__s___s_
lea ecx, [ebp - 0x33ac]
push ecx
call fcn.10127dc0
add esp, 0x10
cmp byte [0x101c62b0], 0
je 0x10031817
lea edx, [ebp - 0x33ac]
push edx
push 0x101c62b0
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031842
lea eax, [ebp - 0x33ac]
push eax
push 0x1014d8cc
call fcn.10017540
add esp, 8
lea ecx, [ebp - 0x33ac]
mov edx, 0x101c62b0
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
test al, al
jne 0x10031836
lea ecx, [ebp - 0x44c]
push ecx
lea esi, [ebp - 0x3fac]
call fcn.10089150
cmp eax, edi
je 0x1003188c
push str.localhost
lea edx, [ebp - 0x44c]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003188c
push str.127.0.0.1
lea eax, [ebp - 0x44c]
push eax
call fcn.10135887
add esp, 8
test eax, eax
jne 0x1003193e
mov byte [ebp - 0x44c], 0
mov dword [ebp - 0x127c0], edi
push str.Ignoring_Parent_LiveLog_Server_as_it_loops_back_to_self_
call fcn.10017540
add esp, 4
jmp 0x1003193e
mov byte [ebp - 0x2584], 0
push 0x207
push 0
lea ecx, [ebp - 0x2583]
push ecx
call fcn.1012e060
add esp, 0xc
lea edx, [ebp - 0x23c]
push edx
push str.Not_Accepting_LiveLog_Server___s__as_it_seems_hosted_on_Internet
lea eax, [ebp - 0x2584]
push eax
call fcn.10127dc0
add esp, 0xc
cmp byte [0x101c5ea0], 0
je 0x10031904
lea ecx, [ebp - 0x2584]
push ecx
push 0x101c5ea0
call fcn.10135887
add esp, 8
test eax, eax
je 0x1003192d
lea edx, [ebp - 0x2584]
push edx
push 0x1014d8cc
call fcn.10017540
add esp, 8
lea ecx, [ebp - 0x2584]
mov edx, 0x101c5ea0
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x10031923
mov byte [ebp - 0x23c], 0
mov dword [ebp - 0x127c4], 1
push 0x101607ac
lea eax, [ebp - 0x134]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
mov eax, dword [ebp - 0x127b0]
cmp byte [eax], 0
je 0x1003197b
push eax
push 0x104
lea ecx, [ebp - 0x134]
push ecx
push 0x101607ac
push str.HttpLogWriteWaitInSec
push str.Config
call ebx
lea edx, [ebp - 0x134]
push edx
call fcn.10128238
add esp, 4
mov dword [0x1019664c], eax
jmp 0x100319ab
mov eax, dword [ebp - 0x127b0]
push eax
push str._ERROR__Unable_to_get_httphost_entry_from__s_
call fcn.10017540
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x127b4], 0x12
cmp dword [ebp - 0x127c0], 0
je 0x100319e4
lea ecx, [ebp - 0x44c]
push ecx
push 0x101b3870
call fcn.10135887
add esp, 8
test eax, eax
je 0x100319e4
lea edx, [ebp - 0x44c]
push edx
push 0x101b3870
call esi
cmp dword [ebp - 0x127c4], 0
je 0x10031a13
lea eax, [ebp - 0x23c]
push eax
push 0x101b3768
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031a13
lea ecx, [ebp - 0x23c]
push ecx
push 0x101b3768
call esi
cmp dword [ebp - 0x127b8], 0
je 0x10031a2b
push str._DNSL__further_5
push 0
call fcn.1006ed90
add esp, 8
cmp byte [0x101b3768], 0
jne 0x10031c44
mov dword [ebp - 0x127b0], 0
mov byte [ebp - 0xd7ac], 0
push 0x1fff
push 0
lea edx, [ebp - 0xd7ab]
push edx
call fcn.1012e060
add esp, 0xc
push 0x2000
lea eax, [ebp - 0xd7ac]
push eax
push 0x1014d5e3
mov edx, str.ServerIP
mov ecx, str.eScan
call fcn.1005ffb0
add esp, 0xc
cmp byte [ebp - 0xd7ac], 0
je 0x10031bba
mov byte [ebp - 0xbfc], 0
push 0x103
xor esi, esi
push esi
lea ecx, [ebp - 0xbfb]
push ecx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x127b0], esi
mov dword [ebp - 0x12804], esi
push 1
push 0x2c
lea edx, [ebp - 0x127b0]
push edx
push 0x101b3768
xor cl, cl
lea edx, [ebp - 0xd7ac]
call fcn.10061f00
add esp, 0x10
or edi, 0xffffffff
cmp dword [ebp - 0x127b0], edi
je 0x10031b59
mov dword [ebp - 0x127b0], esi
push 1
push 0x2c
lea eax, [ebp - 0x127b0]
push eax
lea ecx, [ebp - 0xbfc]
push ecx
xor cl, cl
lea edx, [ebp - 0xd7ac]
call fcn.10061f00
add esp, 0x10
cmp dword [ebp - 0x127b0], edi
je 0x10031b59
push 0x101b3768
lea edx, [ebp - 0xbfc]
push edx
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031aea
push 1
push 0x2c
lea edx, [ebp - 0xbfc]
mov ecx, 0x101ab648
call fcn.1006c030
inc esi
mov dword [ebp - 0x12804], esi
cmp esi, 0xa
jle 0x10031aea
push str.TOO_MANY_ALTERNATE_HOSTS_A_____ONLY_TAKING_10_OF_THEM...
call fcn.10017540
add esp, 4
mov byte [ebp - 0xd7ac], 0
push 0x2000
lea edx, [ebp - 0xd7ac]
push edx
push str.2225
mov edx, str.ServerPort
mov ecx, str.eScan
call fcn.1005ffb0
add esp, 0xc
cmp byte [ebp - 0xd7ac], 0
je 0x10031bba
lea eax, [ebp - 0xd7ac]
push eax
call fcn.10128238
add esp, 4
test eax, eax
jle 0x10031bba
lea ecx, [ebp - 0xd7ac]
mov edx, 0x101b31fc
lea ebx, [ebx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x10031bb0
cmp byte [0x101b3768], 0
je 0x10031be4
mov dword [0x101aa494], 1
push 0x101b31fc
push 0x101b3768
push str.MWAgent_provided_eScan_Server_IP_Port_1_:__s:_s
call fcn.10017540
add esp, 0xc
cmp byte [0x101ab648], 0
je 0x10031bff
push 0x101ab648
push str.MWAgent_provided_eScan_Alternate_Servers_1_:__s
call fcn.10017540
add esp, 8
push 0x2000
lea ecx, [ebp - 0xd7ac]
push ecx
push 0x1014d980
mov edx, str.Debug
mov ecx, str.eScan
call fcn.1005ffb0
add esp, 0xc
lea edx, [ebp - 0xd7ac]
push edx
call fcn.10128238
add esp, 4
mov dword [0x101aa5a4], eax
test eax, eax
je 0x10031c44
mov dword [0x101aa5a4], 7
mov dword [ebp - 0x127b4], 0x13
cmp dword [ebp - 0x127ec], 0
je 0x10031c81
lea eax, [ebp - 0xe7ac]
push eax
push 0x101ab648
call fcn.10135887
add esp, 8
test eax, eax
je 0x10031c81
lea ecx, [ebp - 0xe7ac]
push ecx
push 0x101ab648
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp - 0x127b8], 0
je 0x10031cba
push str._DNSL__further_end
push 0
call fcn.1006ed90
add esp, 8
jmp 0x10031cba
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.10127db1
mov esp, ebp
pop ebp
ret