Function at 0x4ce4c0
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x1e10
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x1e0c], eax
mov eax, dword [esp + 0x1e14]
mov ecx, dword [esp + 0x1e18]
mov edx, dword [esp + 0x1e20]
push ebx
push esi
push edi
xor ebx, ebx
push 0x3ff
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1a1d]
push ebx
push eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edx
mov byte [esp + 0x1a24], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0xefd]
push ebx
push ecx
mov byte [esp + 0xf04], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x4e1]
push ebx
push edx
mov byte [esp + 0x4e8], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x1325]
push ebx
push eax
mov byte [esp + 0x132c], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x1539]
push ebx
push ecx
mov byte [esp + 0x1540], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0xd25]
push ebx
push edx
mov dword [esp + 0x5c], 0x104
mov byte [esp + 0xd2c], bl
call fcn.005dfd60
add esp, 0x48
push 0x103
lea eax, [esp + 0x10f9]
push ebx
push eax
mov byte [esp + 0x1100], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x5d9]
push ebx
push ecx
mov byte [esp + 0x5e0], bl
call fcn.005dfd60
push 0x207
lea edx, [esp + 0x7ed]
push ebx
push edx
mov byte [esp + 0x7f4], bl
call fcn.005dfd60
push 0x207
lea eax, [esp + 0x1839]
push ebx
push eax
mov byte [esp + 0x1840], bl
call fcn.005dfd60
push 0x90
lea ecx, [esp + 0x58]
push ebx
push ecx
mov dword [esp + 0x5c], ebx
call fcn.005dfd60
add esp, 0x3c
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1508]
push eax
push 0x6111d8
push str.SOFTWAREMicrosoftInternet_Explorer
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
lea ecx, [esp + 0x1504]
push ecx
lea edx, [esp + 0xce8]
push str.IE:_s
push edx
call fcn.005dfb23
add esp, 0xc
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x24], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
call fcn.004d9930
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push ecx
test eax, eax
push edx
lea eax, [esp + 0x4cc]
je 0x4ce696
push str.Server:_d._d
jmp 0x4ce69b
push str.Client:_d._d
push eax
call fcn.005dfb23
add esp, 0x10
lea ecx, [esp + 0x12fc]
push ebp
push ecx
call fcn.0053c020
lea edx, [esp + 0xef4]
push ebx
push edx
call fcn.004fceb0
lea eax, [esp + 0x1104]
push ebx
push eax
call fcn.005027c0
call fcn.0053b6b0
mov esi, eax
call fcn.0053b890
mov edi, eax
call fcn.0053b9e0
push 0x103
lea ecx, [esp + 0xaf9]
push ebx
push ecx
mov dword [esp + 0x40], eax
mov byte [esp + 0xb00], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x1221]
push ebx
push edx
mov byte [esp + 0x1228], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x1741]
push ebx
push eax
mov byte [esp + 0x1748], bl
call fcn.005dfd60
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0x38
cmp esi, ebx
je 0x4ce754
push esi
lea ecx, [esp + 0xae4]
push ecx
call ebp
push esi
call fcn.005e0865
add esp, 4
cmp edi, ebx
je 0x4ce76c
push edi
lea edx, [esp + 0x1200]
push edx
call ebp
push edi
call fcn.005e0865
add esp, 4
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x4ce788
push esi
lea eax, [esp + 0x1714]
push eax
call ebp
push esi
call fcn.005e0865
add esp, 4
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0xbc]
push edx
call ebp
lea eax, [esp + 0xb8]
push eax
call fcn.004e24e0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 4
push str.verinfo.ini
lea ecx, [esp + 0xbc]
push ecx
call edi
push 1
push ebx
push ebx
push ebx
lea edx, [esp + 0xc8]
push ebx
push edx
call fcn.004e8950
add esp, 0x18
pop ebp
test eax, eax
jne 0x4ceb5a
push 0x103
lea eax, [esp + 0x1bd]
push ebx
push eax
mov byte [esp + 0x1c4], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x6dd]
push ebx
push ecx
mov byte [esp + 0x6e4], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x141d]
push ebx
push edx
mov byte [esp + 0x1424], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x1019]
push ebx
push eax
mov byte [esp + 0x1020], bl
call fcn.005dfd60
push ebx
push 0x104
lea ecx, [esp + 0x1438]
push ecx
push 0x60c81c
push 0x615660
push 0x60c810
call fcn.004edfd0
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0x48
lea edx, [esp + 0xb4]
push edx
push 0x104
lea eax, [esp + 0x6d4]
push eax
push 0x60c81c
push str.GPDate
push str.General
call esi
lea ecx, [esp + 0xb4]
push ecx
push 0x104
lea edx, [esp + 0x1c0]
push edx
push 0x60c81c
push 0x6111d8
push str.General
call esi
push 0x103
lea eax, [esp + 0xded]
push ebx
push eax
mov byte [esp + 0xdf4], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x1619]
push ebx
push ecx
mov byte [esp + 0x1620], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0xbfd]
push ebx
push edx
mov byte [esp + 0xc04], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0xa01]
push ebx
push eax
mov byte [esp + 0xa08], bl
call fcn.005dfd60
push ebx
push 0x104
lea ecx, [esp + 0xe20]
push ecx
push 0x60ef34
push 0x60c818
push 0x60c810
call fcn.004edfd0
add esp, 0x48
push ebx
push 0x104
lea edx, [esp + 0x1610]
push edx
push 0x60ef34
push str.Server
push 0x60c810
call fcn.004edfd0
push ebx
push 0x104
lea eax, [esp + 0xc00]
push eax
push 0x60ef34
push str.StandAlone
push 0x60c810
call fcn.004edfd0
push ebx
push 0x104
lea ecx, [esp + 0xa10]
push ecx
push 0x60ef34
push str.eScanDeployed
push 0x60c810
call fcn.004edfd0
add esp, 0x48
lea edx, [esp + 0x9d8]
push edx
lea eax, [esp + 0xbe4]
push eax
lea ecx, [esp + 0x1610]
push ecx
lea edx, [esp + 0xdf4]
push edx
lea eax, [esp + 0x1000]
push str.__s._s._s._s_
push eax
call fcn.005dfb23
add esp, 0x18
cmp byte [esp + 0x1b8], bl
je 0x4cea81
cmp byte [esp + 0x6cc], bl
je 0x4cea22
lea ecx, [esp + 0x6cc]
push ecx
lea edx, [esp + 0x1bc]
push edx
lea eax, [esp + 0x7d8]
push 0x61a768
push eax
call fcn.005dfb23
add esp, 0x10
jmp 0x4cea3f
lea ecx, [esp + 0x1b8]
push ecx
lea edx, [esp + 0x7d4]
push 0x60c800
push edx
call fcn.005dfb23
add esp, 0xc
push 0x61a764
lea eax, [esp + 0x7d4]
push eax
call edi
lea ecx, [esp + 0x1400]
push ecx
lea edx, [esp + 0x7d4]
push edx
call edi
push 0x61a764
lea eax, [esp + 0x7d4]
push eax
call edi
lea ecx, [esp + 0xff0]
push ecx
lea edx, [esp + 0x7d4]
push edx
call edi
push 0x103
lea eax, [esp + 0x2c1]
push ebx
push eax
mov byte [esp + 0x2c8], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x3d1]
push ebx
push ecx
mov byte [esp + 0x3d8], bl
call fcn.005dfd60
add esp, 0x18
lea edx, [esp + 0xb4]
push edx
push 0x104
lea eax, [esp + 0x3c8]
push eax
push 0x60c81c
push str.ESPATCH_InstallDate
push str.General
call esi
lea ecx, [esp + 0xb4]
push ecx
push 0x104
lea edx, [esp + 0x2c4]
push edx
push 0x60c81c
push str.ESPATCH
push str.General
call esi
cmp byte [esp + 0x2bc], bl
je 0x4ceb5a
cmp byte [esp + 0x3c0], bl
je 0x4ceb3d
lea eax, [esp + 0x3c0]
push eax
lea ecx, [esp + 0x2c0]
push ecx
lea edx, [esp + 0x1818]
push 0x61a768
push edx
call fcn.005dfb23
add esp, 0x10
jmp 0x4ceb5a
lea eax, [esp + 0x2bc]
push eax
lea ecx, [esp + 0x1814]
push 0x60c800
push ecx
call fcn.005dfb23
add esp, 0xc
push ebx
push 0x104
lea edx, [esp + 0x5d0]
push edx
push str.sales_escanav.com
push str.DefaultSalesEmailID
push 0x60c810
call fcn.004edfd0
lea eax, [esp + 0x1724]
push eax
lea ecx, [esp + 0x1214]
push ecx
lea edx, [esp + 0xafc]
push edx
lea eax, [esp + 0xd08]
push eax
lea ecx, [esp + 0xf14]
push ecx
lea edx, [esp + 0x4f0]
push edx
lea eax, [esp + 0x1124]
push eax
lea ecx, [esp + 0x1330]
push ecx
lea edx, [esp + 0x1a50]
push str._s_s_s_s_s_s_s_s
push edx
call fcn.005dfb23
add esp, 0x40
lea eax, [esp + 0x1a18]
push 1
push eax
call fcn.00410660
mov ecx, dword [esp + 0x14]
add esp, 8
cmp dword [esp + 0x1e28], ebx
pop edi
pop esi
pop ebx
push ecx
lea edx, [esp + 0x5c0]
push edx
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x180c]
push eax
lea ecx, [esp + 0x7d0]
push ecx
lea eax, [esp + 0x1a1c]
push edx
je 0x4cec1f
push str.EVAL:_s_s_s_s_s
jmp 0x4cec24
push str.REGD:_s_s_s_s_s
push eax
call fcn.005dfb23
add esp, 0x1c
lea ecx, [esp + 0x1a0c]
push 2
push ecx
call fcn.00410660
mov ecx, dword [esp + 0x1e14]
add esp, 8
xor ecx, esp
call fcn.005dfbbe
add esp, 0x1e10
ret