Function at 0x70202c80
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x108
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ebx, 1
push edi
test byte [0x7036f098], bl
jne 0x70202cc1
or dword [0x7036f098], ebx
push 0x703594f8
push 0
push 0x70325dd0
push str.general
call esi
mov dword [0x7036f094], eax
xor ebp, ebp
cmp dword [0x7036f094], ebp
jne 0x70202f12
cmp dword [0x703593a8], ebp
ja 0x70202f12
cmp dword [0x70359fd8], ebp
je 0x70202f12
test byte [0x7036f098], 2
jne 0x70202d0f
or dword [0x7036f098], 2
push 0x703594f8
push 0x13
push 0x70325de4
push str.general
call esi
mov dword [0x7036f090], eax
mov eax, 4
test byte [0x7036f098], al
jne 0x70202d39
or dword [0x7036f098], eax
push 0x703594f8
push ebx
push 0x70325df4
push str.general
call esi
mov dword [0x7036f08c], eax
mov eax, 8
test byte [0x7036f098], al
jne 0x70202d63
or dword [0x7036f098], eax
push 0x703594f8
push ebx
push 0x70325e04
push str.general
call esi
mov dword [0x7036f088], eax
push str.360se.exe
push 0x70359f90
mov dword [esp + 0x1c], ebp
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x70202d7f
mov dword [esp + 0x14], ebx
xor edi, edi
mov dword [esp + 0x10], ebp
cmp dword [esp + 0x14], ebp
je 0x70202d9b
test byte [0x7036f090], bl
je 0x70202db7
mov eax, dword [0x7036f08c]
push eax
jmp 0x70202dab
test byte [0x7036f090], 2
je 0x70202db7
mov ecx, dword [0x7036f088]
push ecx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov edi, ebx
mov dword [esp + 0x10], eax
lea ebx, [esp + 0x18]
call fcn.70202660
push ebp
mov esi, 0x70325e2c
call fcn.702b45d0
mov ebp, eax
test ebp, ebp
jne 0x70202dde
push eax
mov esi, str.shdocvw.dll
call fcn.702b45d0
mov ebp, eax
test edi, edi
je 0x70202e08
cmp dword [esp + 0x14], 0
je 0x70202df4
test byte [0x7036f090], 0x10
je 0x70202dfd
jmp 0x70202e08
test byte [0x7036f090], 0x20
jne 0x70202e08
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ebx, [esp + 0x18]
call fcn.70202630
xor esi, esi
cmp ebp, esi
je 0x70202f12
mov dword [0x703593b0], ebp
cmp dword [0x703593ac], esi
jne 0x70202f12
call fcn.70215fb0
mov dword [0x703593ac], 1
cmp dword [0x703593a8], esi
jne 0x70202f12
mov eax, dword [ebp + 0x3c]
add eax, ebp
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], esi
lea esi, [eax + 0x18]
mov ecx, 0x38
lea edi, [esp + 0x18]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x1c]
push eax
push ebp
mov ecx, ebp
call fcn.70202a80
add esp, 8
mov dword [0x703593a8], eax
test eax, eax
jne 0x70202edc
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
mov edx, ebp
call fcn.70225310
add esp, 4
test eax, eax
je 0x70202ed5
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
push edi
push esi
mov ecx, ebp
call fcn.70202a80
add esp, 8
mov dword [0x703593a8], eax
test eax, eax
jbe 0x70202eb9
sub ebp, esi
add eax, ebp
mov dword [0x703593a8], eax
test esi, esi
je 0x70202eda
test edi, edi
je 0x70202eda
push 0x8000
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [0x703593a8]
test eax, eax
jbe 0x70202f12
call fcn.70227d90
mov esi, 0x70202c70
test eax, eax
jne 0x70202ef1
mov esi, 0x70202c50
call fcn.702e0a57
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.702e0e1b
push esi
push 0x703593a8
call fcn.702e0e8a
call fcn.702e0bbd
pop edi
xor eax, eax
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret