Function at 0x10026f50
Capabilities:
Read .ini file

Disassembly:
push ebp
lea ebp, [esp - 0x4dac]
mov eax, 0x4dac
call fcn.10140530
push 0xfffffffffffffffe
push 0x10185910
push 0x10132540
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x10189710]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp + 0x4da8], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov eax, dword [ebp + 0x4db4]
mov dword [ebp - 0x20], eax
mov edi, dword [ebp + 0x4dc0]
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x48], edx
xor ebx, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], ebx
mov esi, 1
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], ebx
mov dword [ebp], ebx
push 0x1288
push ebx
lea eax, [ebp + 4]
push eax
call fcn.1012e060
add esp, 0xc
call fcn.10016ab0
cmp byte [edi], bl
je 0x100271d1
mov ecx, dword [0x101ab324]
cmp ecx, 0x100
jg 0x100271d1
mov eax, dword [ebp + 0x4dbc]
cmp eax, ebx
je 0x10027092
cmp eax, 2
je 0x10027092
mov eax, dword [0x101b31ec]
cmp eax, ebx
je 0x10027025
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x101b31ec]
mov cl, byte [0x101af6b8]
cmp cl, bl
jne 0x1002703b
cmp byte [0x101afeb8], bl
je 0x10027143
cmp cl, 0x2a
jne 0x10027054
cmp dword [0x101aa5a4], 5
jl 0x100270df
push str.IgnEventIds___So_Not_registering_event...
jmp 0x100270d2
mov ecx, 5
mov edx, dword [ebp - 0x20]
call fcn.1001cd40
mov edi, eax
mov dword [ebp - 0x24], edi
cmp edi, ebx
jle 0x10027083
push 0x1015d8cc
push ebx
mov edx, dword [ebp - 0x20]
push edx
mov edx, 0x101afeb8
mov ecx, 0x101af6b8
jmp 0x10027122
xor esi, esi
mov dword [ebp - 0x2c], esi
mov eax, dword [0x101b31ec]
jmp 0x10027146
mov eax, dword [0x101b31ec]
cmp eax, ebx
je 0x100270a9
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x101b31ec]
mov cl, byte [0x101b1eb8]
cmp cl, bl
jne 0x100270bf
cmp byte [0x101b26b8], bl
je 0x10027143
cmp cl, 0x2a
jne 0x100270f8
cmp dword [0x101aa5a4], 5
jl 0x100270df
push str.IgnEventIdsServ___So_Not_registering_event...
call fcn.10017540
add esp, 4
mov eax, dword [0x101b31ec]
cmp eax, ebx
je 0x100270ea
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 4], 0xfffffffe
mov eax, esi
jmp 0x10027940
mov ecx, 5
mov edx, dword [ebp - 0x20]
call fcn.1001cd40
mov edi, eax
mov dword [ebp - 0x24], edi
cmp edi, ebx
jle 0x10027137
push 0x1015d89c
push ebx
mov eax, dword [ebp - 0x20]
push eax
mov edx, 0x101b26b8
mov ecx, 0x101b1eb8
push edi
call fcn.100267f0
add esp, 0x10
mov esi, eax
mov dword [ebp - 0x2c], esi
mov eax, dword [0x101b31ec]
jmp 0x10027146
xor esi, esi
mov dword [ebp - 0x2c], esi
mov eax, dword [0x101b31ec]
jmp 0x10027146
mov edi, dword [ebp - 0x24]
cmp eax, ebx
je 0x10027151
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp esi, ebx
jne 0x1002719e
cmp dword [0x101aa5a4], 5
jl 0x1002718d
mov ecx, dword [ebp + 0x4dc8]
push ecx
mov edx, dword [ebp + 0x4dbc]
push edx
push edi
push str.Ignoring_Event_ID__u__CachedEv:__u__FW:__u_
lea eax, [ebp + 0x468c]
push eax
call fcn.10127dc0
lea ecx, [ebp + 0x468c]
push ecx
call fcn.10017540
add esp, 0x18
mov dword [ebp - 4], 0xfffffffe
mov eax, 1
jmp 0x10027940
mov eax, dword [ebp - 0x20]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x100271a4
sub eax, edx
add eax, 0x104
push eax
call fcn.10128320
add esp, 4
mov esi, eax
mov dword [ebp - 0x1c], esi
cmp esi, ebx
jne 0x100271df
push str.Malloc_Error
call fcn.10017540
add esp, 4
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x10027940
mov edx, dword [ebp - 0x20]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp + 0x4dc4], ebx
je 0x100277aa
mov eax, esi
lea edx, [eax + 1]
jmp 0x10027200
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10027200
sub eax, edx
cmp byte [eax + esi - 1], 0x20
je 0x1002722b
mov edi, dword [ebp - 0x1c]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x10027214
mov ax, word [0x10156858]
mov word [edi], ax
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x24]
cmp dword [0x101aa6b8], ebx
je 0x100277aa
mov byte [ebp + 0x228c], bl
push 0xfff
push ebx
lea ecx, [ebp + 0x228d]
push ecx
call fcn.1012e060
add esp, 0xc
cmp edi, ebx
jne 0x10027267
mov ecx, 5
mov edx, esi
call fcn.1001cd40
mov edi, eax
mov dword [ebp - 0x24], edi
cmp edi, 0x2e1
je 0x10027283
cmp edi, 0x2e2
je 0x10027283
cmp edi, 0x2ee
jne 0x100277aa
cmp byte [0x101aa6c0], bl
jne 0x100272e6
mov ecx, 0x101ac750
mov edx, 0x101aa6c0
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x10027295
mov ecx, 0x101aa6c0
call fcn.10065200
mov eax, 0x101aa6c0
dec eax
nop
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x100272b0
mov edx, dword [str.L0ESCANSET.INI]
mov dword [eax], edx
mov ecx, dword [0x1015d910]
mov dword [eax + 4], ecx
mov edx, dword [0x1015d914]
mov dword [eax + 8], edx
mov cx, word [0x1015d918]
mov word [eax + 0xc], cx
mov dl, byte [0x1015d91a]
mov byte [eax + 0xe], dl
push 0x101aa6c0
push 0x1000
lea eax, [ebp + 0x228c]
push eax
push 0x1014d5e3
push 0x1015d91c
push str.Policy
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xor edi, edi
cmp edi, ebx
je 0x10027327
lea ecx, [ebp + 0x228c]
push ecx
push str._TISS__GroupName:_s
push ebx
call fcn.1006ed90
add esp, 0xc
cmp byte [ebp + 0x228c], bl
je 0x100277aa
mov byte [ebp + 0x328c], bl
push 0xfff
push ebx
lea edx, [ebp + 0x328d]
push edx
call fcn.1012e060
mov dword [ebp - 0x38], ebx
push 0x1000
push esi
mov ecx, 6
lea edx, [ebp + 0x328c]
call fcn.1001ce60
add esp, 0x14
cmp edi, ebx
je 0x10027380
lea eax, [ebp + 0x328c]
push eax
push str._TISS__ModName:_s
push ebx
call fcn.1006ed90
add esp, 0xc
push ebx
push str._GN:
lea ecx, [ebp + 0x328c]
push ecx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100277aa
cmp dword [0x101c437c], ebx
jne 0x100274ae
mov esi, 1
mov dword [0x101c437c], esi
mov byte [ebp + 0x428c], bl
push 0x3ff
push ebx
lea edx, [ebp + 0x428d]
push edx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x40], 0x400
push str.LogEstr
lea eax, [ebp - 0x40]
lea edi, [ebp + 0x428c]
mov ecx, str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, reloc.WS2_32.dll_bind
call fcn.10059d80
cmp byte [ebp + 0x428c], bl
je 0x1002741f
push ebx
push str._NHX_
mov eax, edi
push eax
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x1002741f
mov dword [0x101c4380], esi
push str.SendEvents___Server_Supports_NHX
jmp 0x10027490
mov byte [ebp + 0x4ba0], bl
push 0x103
push ebx
lea eax, [ebp + 0x4ba1]
push eax
call fcn.1012e060
add esp, 0xc
lea esi, [ebp + 0x4ba0]
call fcn.1005ead0
test eax, eax
jne 0x10027481
cmp byte [ebp + 0x4ba0], bl
je 0x10027467
push ebx
mov ecx, esi
push ecx
push 0x101b3768
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10027481
push str.SendEvents___Server_DOES_NOT_Support_NHX
lea edx, [ebp + 0x4ca4]
push edx
call fcn.10127dc0
lea eax, [ebp + 0x4ca4]
push eax
jmp 0x100274a3
mov dword [0x101c4380], 1
push str.SendEvents___Server_Supports_NHX__Cloud_Client_
lea ecx, [ebp + 0x4ca4]
push ecx
call fcn.10127dc0
lea edx, [ebp + 0x4ca4]
push edx
call fcn.10017540
add esp, 0xc
mov esi, dword [ebp - 0x1c]
xor edi, edi
cmp edi, ebx
je 0x100274c8
mov eax, dword [0x101c4380]
push eax
push str._TISS__ServerSupportsNHX:_d
push ebx
call fcn.1006ed90
add esp, 0xc
cmp byte [ebp + 0x328c], bl
je 0x100274f1
push 4
push str._C_
lea ecx, [ebp + 0x328c]
push ecx
call fcn.1013661b
add esp, 0xc
test eax, eax
jne 0x100274f1
mov dword [ebp - 0x38], 1
mov al, 0x3b
mov edx, esi
call fcn.100770c0
cmp eax, 6
jl 0x10027797
mov edi, dword [ebp - 0x1c]
mov esi, 6
mov dword [ebp - 0x44], esi
cmp esi, ebx
je 0x10027523
push 0x3b
push edi
call fcn.10128490
add esp, 8
inc eax
mov edi, eax
dec esi
jmp 0x1002750b
xor eax, eax
cmp eax, ebx
je 0x10027538
push edi
push str._TISS__chrPtr___s_
push ebx
call fcn.1006ed90
add esp, 0xc
mov byte [ebp + 0x4998], bl
push 0x207
push ebx
lea edx, [ebp + 0x4999]
push edx
call fcn.1012e060
add esp, 0xc
cmp byte [0x101b2eb8], bl
je 0x1002758c
push str.127.0.0.1
push 0x101b2fc0
call fcn.10135887
add esp, 8
test eax, eax
je 0x1002758c
mov eax, str.169.254.
mov ecx, 0x101b2fc0
call fcn.1005a140
test eax, eax
je 0x1002758c
cmp dword [0x101b5988], ebx
je 0x100275d2
mov esi, 5
cmp dword [0x101aa5a4], esi
jl 0x100275a6
push str._PROCX__Getting_Local_IPs...
call fcn.10017540
add esp, 4
push 1
mov edx, 0x101b2fc0
mov ecx, 0x101b2eb8
call fcn.100700c0
cmp dword [0x101aa5a4], esi
jl 0x100275cc
push str._PROCX__Finished_getting_Local_IPs...
call fcn.10017540
add esp, 4
mov dword [0x101b5988], ebx
xor eax, eax
cmp eax, ebx
je 0x100275f0
push 0x101b2fc0
push 0x101b2eb8
push str._TISS__HostName___s___hip___s_
push ebx
call fcn.1006ed90
add esp, 0x10
mov ecx, 0x101b2eb8
lea edx, [ebp + 0x4790]
jmp 0x10027600
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x10027600
cmp dword [0x101c4380], ebx
je 0x10027710
cmp byte [0x101c4388], bl
jne 0x100276d7
mov esi, dword [ebp + 0x4dcc]
cmp esi, ebx
je 0x1002765a
cmp byte [esi], bl
je 0x1002765a
xor eax, eax
cmp eax, ebx
je 0x10027649
push 0x101c4388
push str._TISS__UniqueMidLocal___A___s_
push ebx
call fcn.1006ed90
add esp, 0xc
mov ecx, esi
mov edx, 0x101c4388
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x10027650
cmp byte [0x101c4388], bl
jne 0x100276d7
mov dword [ebp - 0x34], ebx
lea eax, [ebp - 0x34]
push eax
push str.UniqueMidIndex
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
cmp byte [0x101c4388], bl
jne 0x100276d7
mov eax, dword [ebp - 0x34]
cmp eax, 2
je 0x100276cf
push eax
mov ecx, 0x101c4388
call fcn.10029040
add esp, 4
cmp dword [0x101aa5a4], 5
jl 0x100276b6
push 0x101c4388
push str._PROC__UniqueMidLocal_AX_:__s
call fcn.10017540
add esp, 8
xor eax, eax
cmp eax, ebx
je 0x100276cf
push 0x101c4388
push str._TISS__UniqueMidLocal___B___s_
push ebx
call fcn.1006ed90
add esp, 0xc
cmp byte [0x101c4388], bl
je 0x10027710
push 0x101c4388
push 0x101b2eb8
push str._s___s_
lea ecx, [ebp + 0x4790]
push ecx
call fcn.10127dc0
add esp, 0x10
xor eax, eax
cmp eax, ebx
je 0x10027710
lea edx, [ebp + 0x4790]
push edx
push str._TISS__NHostName___s_
push ebx
call fcn.1006ed90
add esp, 0xc
push 0x101b2fc0
lea eax, [ebp + 0x4790]
lea ecx, [ebp + 0x228c]
lea edx, [ebp + 0x4998]
push eax
push ecx
cmp dword [ebp - 0x38], ebx
je 0x10027735
push str._C___GN:_s_s_s_
jmp 0x1002773a
push str._GN:_s_s_s_
push edx
call fcn.10127dc0
add esp, 0x14
xor eax, eax
cmp eax, ebx
je 0x1002775e
lea eax, [ebp + 0x4998]
push eax
push str._TISS__GroupNameStr:_s
push ebx
call fcn.1006ed90
add esp, 0xc
push edi
lea ecx, [ebp + 0x128c]
push ecx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
lea edx, [ebp + 0x4998]
push edx
push edi
call esi
lea eax, [ebp + 0x128c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
xor eax, eax
cmp eax, ebx
je 0x100277aa
mov ecx, dword [ebp - 0x1c]
push ecx
push str._TISS__New_LocBuf:_s
jmp 0x100277a1
cmp edi, ebx
je 0x100277aa
push esi
push str._TISS__Invalid_Event___s_
push ebx
call fcn.1006ed90
add esp, 0xc
push 0x10155f64
mov esi, dword [ebp - 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp + 0x1288], ebx
mov dword [ebp], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x1178], esi
mov edi, 1
cmp dword [ebp + 0x4dbc], ebx
jbe 0x100277e9
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x18], ebx
jmp 0x100277f5
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x1c], edi
mov dword [ebp + 0x18], edi
mov edx, dword [ebp - 0x4c]
push edx
lea eax, [ebp + 0x28]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
mov ecx, dword [ebp - 0x3c]
push ecx
lea edx, [ebp + 0x12c]
push edx
call esi
mov eax, dword [ebp - 0x48]
push eax
lea ecx, [ebp + 0x136]
push ecx
call esi
mov ecx, dword [ebp + 0x4dcc]
cmp ecx, ebx
je 0x1002784c
cmp byte [ecx], bl
je 0x1002784c
cmp dword [ebp + 0x4dd0], ebx
jne 0x1002784c
lea edx, [ebp + 0x1136]
jmp 0x10027840
mov al, byte [ecx]
mov byte [edx], al
add ecx, edi
add edx, edi
cmp al, bl
jne 0x10027840
mov eax, dword [ebp - 0x24]
cmp eax, ebx
jne 0x10027863
mov ecx, 5
mov edx, dword [ebp - 0x20]
call fcn.1001cd40
mov dword [ebp - 0x24], eax
mov dword [ebp + 0x1284], eax
mov ecx, 7
mov edx, dword [ebp - 0x20]
call fcn.1001cd40
mov dword [ebp + 0x24], eax
push ebx
push ebx
lea edx, [ebp]
push edx
push 0x10025a90
push ebx
push ebx
call fcn.101296b6
add esp, 0x18
mov esi, eax
mov dword [ebp - 0x50], esi
cmp esi, ebx
jne 0x100278b0
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.10128243
add esp, 4
jmp 0x10027936
cmp dword [ebp], ebx
jne 0x100278bc
call fcn.1005a8a0
jmp 0x100278b0
mov ecx, esi
call fcn.1005a920
mov dword [ebp - 0x28], edi
cmp dword [ebp + 0x4db8], ebx
je 0x100278f6
mov dword [ebp - 0x30], edi
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x30]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x10027900
xor ecx, ecx
cmp dword [ebp - 0x30], ebx
setne cl
mov dword [ebp - 0x28], ecx
jmp 0x10027900
mov esi, 0xa
call fcn.1005a8b0
lea edx, [ebp - 0x50]
push edx
call fcn.10082e10
mov eax, dword [ebp - 0x1c]
push eax
call fcn.10128243
add esp, 4
jmp 0x10027936
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x4da8]
xor ecx, ebp
call fcn.10127db1
add ebp, 0x4dac
mov esp, ebp
pop ebp
ret 0x20