Function at 0x423850
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5366e2
mov eax, dword fs:[0]
push eax
sub esp, 0x678
mov eax, dword [0x58c758]
xor eax, ebp
mov dword [ebp - 0x38], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x678], ecx
call fcn.0048d380
movzx eax, al
test eax, eax
je 0x4238af
cmp dword [0x58fb50], 0
je 0x4238a8
push 0x54267c
push 0x58f750
call fcn.004045b0
add esp, 8
xor eax, eax
jmp 0x423ccf
push str.http:__www.360.cn
lea ecx, [ebp - 0x34]
call fcn.00408660
mov dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x658], esp
lea edx, [ebp - 0x34]
push edx
call fcn.00428220
mov dword [ebp - 0x67c], eax
call fcn.004236a0
add esp, 4
mov byte [ebp - 0x67d], al
movzx eax, byte [ebp - 0x67d]
test eax, eax
jne 0x423933
cmp dword [0x58fb50], 0
je 0x42390f
push 0x542638
push 0x58f750
call fcn.004045b0
add esp, 8
mov dword [ebp - 0x65c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00401eb0
mov eax, dword [ebp - 0x65c]
jmp 0x423ccf
push 0x542618
lea ecx, [ebp - 0x20]
call fcn.0040ca10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor edx, edx
mov word [ebp - 0x23c], dx
push 0x1fe
push 0
lea eax, [ebp - 0x23a]
push eax
call fcn.004b0ac0
add esp, 0xc
movzx ecx, word [ebp - 0x14]
push ecx
movzx edx, word [ebp - 0x16]
push edx
movzx eax, word [ebp - 0x1a]
push eax
movzx ecx, word [ebp - 0x1c]
push ecx
push str._04d__02d__02d__02d
lea edx, [ebp - 0x23c]
push edx
call fcn.00401ba0
add esp, 0x18
lea ecx, [ebp - 0x30]
call fcn.004a6ac0
mov byte [ebp - 4], 2
push 0xf003f
push 1
push str.SOFTWARE360Safe360Ent
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x30]
call fcn.004a6bf0
movzx eax, al
test eax, eax
je 0x423bb6
push str.NotifyInstSD
lea ecx, [ebp - 0x650]
push ecx
lea ecx, [ebp - 0x30]
call fcn.004a6cc0
mov byte [ebp - 4], 3
lea edx, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x650]
call fcn.00401ef0
test eax, eax
jne 0x423a59
cmp dword [0x58fb50], 0
je 0x423a0e
push str._WN
push 0x58f750
call fcn.004045b0
add esp, 8
mov dword [ebp - 0x660], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x650]
call fcn.00401eb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.004a6af0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00401eb0
mov eax, dword [ebp - 0x660]
jmp 0x423ccf
xor eax, eax
mov word [ebp - 0x64c], ax
push 0x206
push 0
lea ecx, [ebp - 0x64a]
push ecx
call fcn.004b0ac0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x444], dx
push 0x206
push 0
lea eax, [ebp - 0x442]
push eax
call fcn.004b0ac0
add esp, 0xc
push str.EntClientExamCmd.dat
lea ecx, [ebp - 0x654]
push ecx
call fcn.0041acc0
add esp, 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x654]
call fcn.0043e290
push eax
push 0x208
lea edx, [ebp - 0x64c]
push edx
push 0x540868
push str.LastRecieve
push str.InstSD
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x654]
call fcn.0043e290
push eax
push 0x208
lea eax, [ebp - 0x444]
push eax
push 0x540868
push str.LastDone
push str.InstSD
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x444]
push ecx
lea edx, [ebp - 0x64c]
push edx
call fcn.004b55b5
add esp, 8
test eax, eax
jne 0x423b98
cmp dword [0x58fb50], 0
je 0x423b3e
push 0x5424fc
push 0x58f750
call fcn.004045b0
add esp, 8
mov dword [ebp - 0x664], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x654]
call fcn.00401eb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x650]
call fcn.00401eb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.004a6af0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00401eb0
mov eax, dword [ebp - 0x664]
jmp 0x423ccf
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x654]
call fcn.00401eb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x650]
call fcn.00401eb0
call fcn.0041c4a0
movzx eax, al
test eax, eax
je 0x423c19
cmp dword [0x58fb50], 0
je 0x423bdd
push 0x5424ec
push 0x58f750
call fcn.004045b0
add esp, 8
mov dword [ebp - 0x668], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.004a6af0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00401eb0
mov eax, dword [ebp - 0x668]
jmp 0x423ccf
call fcn.00406d30
test eax, eax
je 0x423c76
cmp dword [0x58fb50], 0
je 0x423c3d
push str.hQO_j
push 0x58f750
call fcn.004045b0
add esp, 8
mov dword [ebp - 0x66c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.004a6af0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00401eb0
mov eax, dword [ebp - 0x66c]
jmp 0x423ccf
push ecx
mov ecx, esp
mov dword [ebp - 0x670], esp
lea edx, [ebp - 0x20]
push edx
call fcn.00401e10
mov dword [ebp - 0x684], eax
mov ecx, 0x58fa40
call fcn.00446010
mov dword [ebp - 0x674], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.004a6af0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00401eb0
mov eax, dword [ebp - 0x674]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x38]
xor ecx, ebp
call fcn.004b0a79
mov esp, ebp
pop ebp
ret 0x10