Function at 0x4028f4
Capabilities:
Read file via mapping

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x294
push ebx
xor ebx, ebx
push esi
push edi
mov byte [0x41c557], 1
cmp byte [0x41c55e], bl
je 0x402a3e
mov eax, dword [0x41c560]
cmp eax, ebx
jne 0x402944
cmp byte [0x41c55c], bl
je 0x402bbe
push 0x10
push str.ANSAV
push str.No_socket_initialized
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x402bbe
cmp byte [0x41c55d], bl
jne 0x402a97
cmp byte [0x41c55c], bl
je 0x402bbe
mov esi, eax
cmp byte [eax + 0x1ac], bl
je 0x40296b
call sub.WSOCK32.dll_WSACleanup
push esi
call fcn.00405528
mov dword [0x41c560], ebx
mov dword [esp], 0x1b0
call fcn.0040559d
mov esi, eax
pop ecx
cmp esi, ebx
je 0x4029b3
mov eax, dword [0x41b8fc]
mov edi, dword [eax + 0x200]
add eax, 0x17d
mov dword [ebp + 0x70], eax
call fcn.004047aa
push edi
push dword [ebp + 0x70]
call fcn.00404854
mov dword [0x41c560], esi
jmp 0x4029b9
mov dword [0x41c560], ebx
mov edi, 0x80
push edi
lea eax, [ebp - 0x14]
push ebx
push eax
call fcn.00405420
mov esi, dword [0x41c560]
add esp, 0xc
cmp esi, ebx
je 0x402a19
cmp byte [esi + 0x1ac], bl
je 0x402a19
cmp byte [esi + 0x1ad], bl
je 0x402a19
push edi
lea eax, [ebp - 0x14]
push eax
call fcn.00404925
test eax, eax
je 0x402a19
push str.ANSAV_update_workstation_server
call fcn.004052c0
pop ecx
cmp eax, 1
jb 0x402a19
mov esi, eax
lea edx, [ebp - 0x14]
call fcn.004035b0
cmp eax, ebx
je 0x402a19
mov byte [0x41c55d], 1
cmp byte [0x41c55d], bl
jne 0x402a97
cmp byte [0x41c55c], bl
je 0x402bbe
push 0x10
push str.ANSAV
push str.No_update_workstation_server_found
jmp 0x402938
cmp dword [0x41c564], ebx
jne 0x402a55
push str.Inet_not_initialized_in_AnsavUpdate::UpdateCheckerThreadProc__
call fcn.00404e57
jmp 0x402bbd
cmp byte [0x41c55c], bl
je 0x402a8e
call fcn.00403e01
test al, al
jne 0x402a97
cmp byte [0x41c55c], bl
je 0x402bbe
push 0x10
push str.ANSAV
push str.No_internet_connection
jmp 0x402938
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00403e01
test al, al
je 0x402a83
cmp byte [0x41c55c], bl
jne 0x402aaa
push 0xc350
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.an_conf_map
push 1
push 4
mov byte [ebp + 0x77], bl
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov esi, eax
cmp esi, ebx
je 0x402af2
push 0xc
push ebx
push ebx
push 4
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
cmp dword [eax], 0x2198
jne 0x402ae2
push eax
mov byte [ebp + 0x77], 1
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp + 0x77], bl
jne 0x402bbe
call fcn.0040271c
test eax, eax
jbe 0x402bbe
push 0x44
push str.ANSAV
push str.ANSAV_found_new_update_available_from_update_server._nWe_recommended_that_you_update_ANSAV_to_the_latest_definition_as_soon_as_possible._nDo_you_want_to_update_now_
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x402bbe
push str.Ansav.exe
lea edi, [ebp - 0x21c]
call fcn.00404a20
mov eax, edi
push eax
call fcn.004049ad
pop ecx
pop ecx
test al, al
jne 0x402b5f
push str.File_Ansav.exe_not_found
call fcn.00404e96
pop ecx
push 0x10
push 0x414db8
push str.file_Ansav.exe_not_found
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x402bbe
push 0x324
call fcn.0040559d
push 9
mov edi, eax
lea eax, [ebp - 0x21c]
push str.__update
push eax
call fcn.00405395
add esp, 0x10
lea eax, [ebp - 0x21c]
push eax
call fcn.004044c9
test al, al
jne 0x402bac
mov esi, str.Cannot_execute_Ansav.exe
push esi
call fcn.00404e96
pop ecx
push 0x10
push 0x414db8
push esi
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp edi, ebx
je 0x402bbe
mov eax, edi
call fcn.00404395
push edi
call fcn.00405528
pop ecx
pop edi
pop esi
mov byte [0x41c557], bl
pop ebx
add ebp, 0x78
leave
ret