Function at 0x41acc0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x66fb28
push 0x5dfbd0
mov eax, dword fs:[0]
push eax
sub esp, 0xc44
mov eax, dword [0x6aae14]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc50], eax
mov esi, dword [ebp + 0x14]
mov dword [ebp - 4], 0
mov byte [ebp - 0x328], 0
push 0x103
push 0
lea ecx, [ebp - 0x327]
push ecx
call fcn.005dfd60
mov edx, dword [ebp + 0x10]
push edx
mov edi, dword [ebp + 8]
push edi
push str._SECSERVER__ProcessSecServerValue_of__u__FW:_u_
lea eax, [ebp - 0xa44]
push eax
call fcn.005dfb23
push 0
push 1
lea ecx, [ebp - 0xa44]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x2c
cmp byte [0x6b2308], 0
jne 0x41addd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6b2308
push 0
call fcn.00512330
push 0x6b2308
call fcn.004e24e0
add esp, 0x2c
push 0x60cf40
push 0x6b2308
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
call ebx
mov ecx, 0x6b2308
mov edx, 0x6b2100
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x41ada5
push 0x6b2100
call fcn.004e24e0
add esp, 4
mov eax, 0x6b2100
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41adc2
mov edx, dword [str.Apache2]
mov dword [eax], edx
mov ecx, dword [0x60dc0c]
mov dword [eax + 4], ecx
jmp 0x41ade3
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
test esi, esi
je 0x41adfa
mov ecx, 0x6b2100
mov edx, esi
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x41adf0
test edi, edi
jne 0x41af0f
call fcn.004196e0
test eax, eax
je 0x41b2ae
push edi
push 1
push str._SECSERVER__Reset_SecServer_Value.
push 0x6aec98
call fcn.004311c0
add esp, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push edi
push 1
push edi
push str.eservcln.exe
push eax
call fcn.0052d190
push 1
push 1
call fcn.00509b00
push edi
push str.eScan_Apache
call fcn.0050d920
add esp, 0x24
test eax, eax
je 0x41ae74
push edi
push str.eScan_Apache
push 0x6b2100
call fcn.0052af90
push str.eScan_Apache
push 3
call fcn.005001f0
add esp, 0x14
push 0
push str.eScan_Apache_New
call fcn.0050d920
add esp, 8
test eax, eax
je 0x41aea7
push 0
push str.eScan_Apache_New
push 0x6b2100
call fcn.0052af90
push str.eScan_Apache_New
push 3
call fcn.005001f0
add esp, 0x14
push 0x6af8c8
push 0x104
lea edx, [ebp - 0x328]
push edx
push str.Update_Agent_Stopped
push 0x615230
push 0x614348
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0
push str.eScan_Monitor
lea eax, [ebp - 0x328]
push eax
mov ecx, eax
push ecx
push 0x60c810
push 0
push str.eScan_Monitor
push 0x2e0
call fcn.00513910
push 0
push 1
push str._SECSERVER__Finished_Reset_of_SecServer_Value.
push 0x6aec98
call fcn.004311c0
add esp, 0x10
jmp 0x41b2ae
mov edi, 1
mov dword [ebp - 0xc54], edi
mov byte [ebp - 0x634], 0
push 0x103
push 0
lea edx, [ebp - 0x633]
push edx
call fcn.005dfd60
add esp, 0xc
push 0x6af4b8
lea eax, [ebp - 0x224]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
lea ecx, [ebp - 0x224]
push ecx
call fcn.004e24e0
add esp, 4
push str.eServ.ini
lea edx, [ebp - 0x224]
push edx
call ebx
push 0
push edi
push str._SECSERVER__Set_SecServer_Value.
push 0x6aec98
call fcn.004311c0
add esp, 0x10
mov eax, dword [ebp - 0xc50]
push eax
push 0x104
lea ecx, [ebp - 0x634]
push ecx
push 0x60c81c
push str.SecServerAVUpdateFromInternet
push 0x60da74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0x634], 0
jne 0x41afcc
mov edx, dword [ebp - 0xc50]
push edx
push 0x60cf3c
push str.SecServerAVUpdateFromInternet
push 0x60da74
call fcn.004e0cb0
add esp, 0x10
push str.__ESCANDRIVE__PUBAVX
lea eax, [ebp - 0x530]
push eax
call fcn.005dfb23
add esp, 8
push 1
lea ecx, [ebp - 0x530]
push ecx
call fcn.00515650
push str.__ESCANDRIVE__PUBUPDATE
lea edx, [ebp - 0x83c]
push edx
call fcn.005dfb23
add esp, 8
push 1
lea eax, [ebp - 0x83c]
push eax
call fcn.00515650
lea ecx, [ebp - 0x83c]
push ecx
lea edx, [ebp - 0x120]
push edx
call esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e24e0
add esp, 4
push str.policy.dlz
lea ecx, [ebp - 0x120]
push ecx
call ebx
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x120]
push edx
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x41b067
lea eax, [ebp - 0x120]
push eax
call fcn.004e0670
add esp, 4
push 0
lea ecx, [ebp - 0x530]
push ecx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x41b1a8
push str.PLUGINS
lea edx, [ebp - 0x530]
push edx
call ebx
push 0
lea eax, [ebp - 0x530]
push eax
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x41b1a8
push str..xmd
lea ecx, [ebp - 0x530]
push ecx
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x41b1a8
push str..cvd
lea edx, [ebp - 0x530]
push edx
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x41b1a8
push str..ivd
lea eax, [ebp - 0x530]
push eax
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x41b1a8
push str.cevakrnl.
lea ecx, [ebp - 0x530]
push ecx
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x41b1a8
push str.eserv.ini
push 0x6af4b8
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x41b1a8
mov dword [ebp - 0xc50], eax
push eax
push eax
push eax
lea edx, [ebp - 0xc50]
push edx
lea eax, [ebp - 0x224]
push eax
call fcn.004ec5a0
add esp, 0x14
test eax, eax
jne 0x41b1a8
cmp dword [ebp - 0xc50], 0x100
jbe 0x41b1a8
xor edi, edi
mov dword [ebp - 0xc54], edi
call fcn.004199d0
test eax, eax
jne 0x41b1a8
lea ecx, [ebp - 0x224]
push ecx
push str._SECSERVER__Re_creating__s
lea edx, [ebp - 0xc4c]
push edx
call fcn.005dfb23
push edi
push 1
lea eax, [ebp - 0xc4c]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
mov dword [ebp - 0xc54], 1
jmp 0x41b1ac
test edi, edi
je 0x41b1c6
push 1
push 0
push 0
push 0x6af4b8
push 0
call fcn.004cbf40
add esp, 0x14
jmp 0x41b258
push 0
lea ecx, [ebp - 0x83c]
push ecx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x41b258
push 0x6af4b8
lea edx, [ebp - 0x120]
push edx
call esi
lea eax, [ebp - 0x120]
push eax
call fcn.004e24e0
add esp, 4
push str.license.ini
lea ecx, [ebp - 0x120]
push ecx
call ebx
push 1
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x120]
push edx
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x41b258
lea eax, [ebp - 0x120]
push eax
call fcn.005d9fd0
add esp, 4
test eax, eax
je 0x41b258
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x83c]
push ecx
push str.license.ini
push 0x6af4b8
call fcn.005017d0
push 1
push 0
call fcn.0041a8e0
add esp, 8
cmp dword [ebp + 0x18], 0
je 0x41b27e
push 2
push 0x6af4b8
push 0x6b2100
call fcn.004485a0
add esp, 0xc
push 0
push 1
push str._SECSERVER__Finished_Processing_of_SecServer_Value.
push 0x6aec98
call fcn.004311c0
add esp, 0x10
jmp 0x41b2ae
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret