Function at 0x411e90
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe68
mov eax, dword [0x5be094]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xe68], ecx
xor eax, eax
mov word [ebp - 0xe58], ax
push 0x206
push 0
lea ecx, [ebp - 0xe56]
push ecx
call fcn.00488f20
add esp, 0xc
push 0x104
lea edx, [ebp - 0xc50]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea eax, [ebp - 0xc50]
push eax
call fcn.004456d0
add esp, 8
xor ecx, ecx
mov word [eax + 2], cx
xor edx, edx
mov word [ebp - 0xa40], dx
push 0x206
push 0
lea eax, [ebp - 0xa3e]
push eax
call fcn.00488f20
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x418], cx
push 0x206
push 0
lea edx, [ebp - 0x416]
push edx
call fcn.00488f20
add esp, 0xc
lea eax, [ebp - 0xc50]
push eax
push 0x55b614
lea ecx, [ebp - 0x418]
push ecx
call fcn.00410850
add esp, 0xc
push str.RunDateByServiceAuto
mov edx, dword [ebp + 0xc]
push edx
call fcn.0048c6a8
add esp, 8
test eax, eax
jne 0x411fc0
lea eax, [ebp - 0x418]
push eax
push 0x104
lea ecx, [ebp - 0xa40]
push ecx
push 0x55b65c
push 0x55b660
push 0x55b670
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x55b68c
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe5c], eax
cmp dword [ebp - 0xe5c], 0
je 0x411fbb
push 0
push 0
push 0x13a2
mov edx, dword [ebp - 0xe5c]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x412040
lea eax, [ebp - 0x418]
push eax
push 0x55b6b0
push 0x55b6b4
push str.OnExecuteExit
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push str.gaoxin.clockframe
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe60], eax
cmp dword [ebp - 0xe60], 0
je 0x41200e
push 0
push 0
push 0x13a1
mov ecx, dword [ebp - 0xe60]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
push str.gaoxin.haharili
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe64], eax
cmp dword [ebp - 0xe64], 0
je 0x412040
push 0
push 0
push 0x13a4
mov edx, dword [ebp - 0xe64]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
mov word [ebp - 0x838], ax
push 0x206
push 0
lea ecx, [ebp - 0x836]
push ecx
call fcn.00488f20
add esp, 0xc
push str.hhrl
lea edx, [ebp - 0x838]
push edx
call fcn.00488f00
add esp, 8
push 0x55b730
lea eax, [ebp - 0x838]
push eax
call fcn.00488ed2
add esp, 8
lea ecx, [ebp - 0x838]
push ecx
mov ecx, dword [ebp - 0xe68]
add ecx, 0x18
call fcn.0040cb60
mov ecx, dword [ebp - 0xe68]
add ecx, 0x18
call fcn.0040cba0
test eax, eax
jne 0x4120b5
xor eax, eax
jmp 0x412207
mov edx, dword [ebp - 0xe68]
mov dword [edx + 8], 1
push 0
push 0
push 0
lea ecx, [ebp - 0x630]
call fcn.00412ba0
push 0
lea eax, [ebp - 0x630]
push eax
mov ecx, dword [ebp - 0xe68]
add ecx, 4
push ecx
call sub.gdiplus.dll_GdiplusStartup
xor edx, edx
mov word [ebp - 0x620], dx
push 0x206
push 0
lea eax, [ebp - 0x61e]
push eax
call fcn.00488f20
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.00488f20
add esp, 0xc
push 0x104
lea eax, [ebp - 0x620]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x620]
push ecx
push str.__s__RunSendSoftOnlineInfo
lea edx, [ebp - 0x210]
push edx
call fcn.00410850
add esp, 0xc
lea eax, [ebp - 0x210]
push eax
call fcn.0040f250
add esp, 4
call fcn.00407210
mov dword [ebp - 0xa44], eax
push 0x412460
push 0xf4240
push 0
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov edx, dword [ebp - 0xa44]
push edx
call fcn.00412500
mov ecx, eax
call fcn.00432df0
mov eax, dword [ebp - 0xa44]
push eax
call fcn.004125d0
mov ecx, eax
call fcn.00431d30
mov ecx, dword [ebp - 0xa44]
push ecx
call fcn.004126a0
mov ecx, eax
call fcn.00430740
mov edx, dword [ebp - 0xa44]
push edx
call fcn.00407040
mov ecx, eax
call fcn.004010d0
call fcn.00412770
mov ecx, eax
call fcn.0042ccf0
mov ecx, dword [ebp - 0xe68]
call fcn.004123d0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xe68]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xe68]
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00488ec3
mov esp, ebp
pop ebp
ret 8