Function at 0x402b60
Capabilities:
Accept command line arguments
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41fb27
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
mov eax, dword [0x42b014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x114], edi
cmp byte [edi + 4], 0
mov dword [ebp - 0x108], 0
je 0x402bda
cmp dword [edi + 0x2c4], 0
je 0x402bda
cmp dword [edi + 0xcc], 0
je 0x402bda
cmp dword [edi + 0x144], 0
je 0x402bda
cmp dword [edi + 0xfc], 0
jne 0x402bd3
cmp dword [edi + 0x174], 0
je 0x402bda
xor eax, eax
jmp 0x403714
mov byte [edi + 4], 0
mov dword [edi + 8], 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
test eax, eax
je 0x402cc6
cmp word [eax], 0
je 0x402cc6
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x100], 0
push ecx
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
mov eax, dword [ebp - 0x100]
test eax, eax
je 0x402cc6
test ebx, ebx
je 0x402cc6
xor esi, esi
test eax, eax
jle 0x402cc6
nop word [eax + eax]
push 0x423384
push dword [ebx]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x402d57
lea eax, [esi + 1]
cmp eax, dword [ebp - 0x100]
jge 0x402d57
push dword [ebx + 4]
add ebx, 4
mov dword [ebp - 0xfc], eax
lea esi, [edi + 0x2c]
mov ecx, esi
call fcn.00405a00
cmp dword [edi + 0x3c], 1
jne 0x402d2e
cmp dword [esi + 0x14], 8
jb 0x402c91
mov eax, dword [esi]
jmp 0x402c93
mov eax, esi
cmp word [eax], 0x30
jne 0x402d2e
push 0x42338c
mov ecx, esi
mov dword [edi + 8], 0
call fcn.00405a00
mov esi, dword [ebp - 0xfc]
inc esi
add ebx, 4
cmp esi, dword [ebp - 0x100]
jl 0x402c40
push ecx
mov ecx, edi
call fcn.00404b50
cmp dword [edi + 8], 0xc7
ja 0x402cec
push ecx
push 0x42342c
push 0x423444
mov ecx, edi
call fcn.00404ac0
add dword [edi + 8], eax
push 0x80
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x90]
push dword [edi + 8]
push 0x423454
push eax
call fcn.0040a660
add esp, 0xc
cmp word [ebp - 0x90], 0
jne 0x402f0d
xor ecx, ecx
jmp 0x402f25
cmp dword [esi + 0x14], 8
jb 0x402d36
mov esi, dword [esi]
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov dword [edi + 8], eax
test eax, eax
jne 0x402cb0
or dword [ebp - 0x108], 1
jmp 0x402cb0
push 0x423390
push dword [ebx]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x402d7a
mov dword [edi + 0x318], 1
jmp 0x402cb6
push str._from
push dword [ebx]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x402ed1
lea eax, [esi + 1]
cmp eax, dword [ebp - 0x100]
jge 0x402ed1
push dword [ebx + 4]
add ebx, 4
mov dword [ebp - 0xfc], eax
lea ecx, [edi + 0x44]
mov dword [ebp - 0xf8], ebx
call fcn.00405a00
cmp dword [edi + 0x58], 8
lea eax, [edi + 0x44]
jb 0x402dc8
mov esi, dword [eax]
jmp 0x402dca
mov esi, eax
cmp dword [eax + 0x14], 8
jb 0x402dda
mov ecx, dword [eax]
mov dword [ebp - 0x104], ecx
jmp 0x402de0
mov dword [ebp - 0x104], eax
lea ecx, [ebp - 0x118]
push ecx
mov ecx, eax
call fcn.004059d0
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x110], 0
mov eax, dword [eax]
mov edx, eax
sub edx, ecx
inc edx
shr edx, 1
cmp ecx, eax
cmova edx, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], edx
test edx, edx
je 0x402e59
mov edi, dword [ebp - 0x110]
mov ebx, ecx
sub ebx, esi
nop
movzx eax, word [ebx + esi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
inc edi
mov word [esi], ax
add esp, 4
lea esi, [esi + 2]
cmp edi, dword [ebp - 0x10c]
jne 0x402e30
mov edi, dword [ebp - 0x114]
mov ebx, dword [ebp - 0xf8]
mov dword [ebp - 0xac], str.PCQQ
xor esi, esi
mov dword [ebp - 0xa8], str.QQLive
mov dword [ebp - 0xa4], str.QQBrowser
mov dword [ebp - 0xa0], str.5566
mov dword [ebp - 0x9c], str.IQIYI
mov dword [ebp - 0x98], str.WEGAME
mov dword [ebp - 0x94], 0x423414
push dword [ebp + esi*4 - 0xac]
push dword [ebx]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x402ec2
inc esi
cmp esi, 7
jb 0x402ea1
jmp 0x402cb0
mov dword [edi + 0x31c], 1
jmp 0x402cb0
push str._engine
push dword [ebx]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x402cb6
lea eax, [esi + 1]
cmp eax, dword [ebp - 0x100]
jge 0x402cb6
push dword [ebx + 4]
add ebx, 4
lea ecx, [edi + 0x14]
mov esi, eax
call fcn.00405a00
jmp 0x402cb6
lea ecx, [ebp - 0x90]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402f16
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x90]
push eax
lea ecx, [edi + 0x2c]
call fcn.00406520
mov ecx, edi
call fcn.004039f0
lea eax, [edi + 0x10]
mov ecx, edi
push eax
call fcn.004041b0
mov ecx, edi
call fcn.00404270
mov ecx, edi
call fcn.00404370
mov ecx, edi
call fcn.00404470
push str.Product
lea eax, [ebp - 0xc4]
mov ecx, edi
push eax
call fcn.00404f90
cmp dword [edi + 0x2e0], 8
lea ecx, [edi + 0x2cc]
jb 0x402f80
mov ecx, dword [ecx]
cmp dword [eax + 0x14], 8
jb 0x402f88
mov eax, dword [eax]
push ecx
push 0
push str.VMIndexBase
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov esi, eax
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x402fb1
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
push ecx
push str.SOFTWAREAndroidTBox
lea eax, [ebp - 0xc4]
mov dword [edi + 0xc], esi
push eax
call fcn.004038a0
mov ebx, eax
lea esi, [edi + 0xd4]
cmp esi, ebx
je 0x40300b
cmp dword [esi + 0x14], 8
jb 0x402fe4
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x402ffc
mov eax, dword [esi]
jmp 0x402ffe
mov eax, esi
xor ecx, ecx
mov word [eax], cx
mov ecx, esi
push ebx
call fcn.00406740
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x40302a
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00401330
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], 8
jb 0x403047
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004038a0
mov ebx, eax
lea esi, [edi + 0xbc]
cmp esi, ebx
je 0x40309a
cmp dword [esi + 0x14], 8
jb 0x403073
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x40308b
mov eax, dword [esi]
jmp 0x40308d
mov eax, esi
xor ecx, ecx
mov word [eax], cx
mov ecx, esi
push ebx
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x4030b2
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x4030ee
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00401370
mov dword [ebp - 4], 3
cmp dword [eax + 0x14], 8
jb 0x40310b
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004038a0
mov esi, eax
lea ebx, [edi + 0xec]
cmp ebx, esi
je 0x40315e
cmp dword [ebx + 0x14], 8
jb 0x403137
mov eax, dword [ebx + 0x14]
inc eax
push eax
push dword [ebx]
call fcn.004078f0
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x40314f
mov eax, dword [ebx]
jmp 0x403151
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
mov ecx, ebx
push esi
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x403176
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x4031b2
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.004013b0
mov dword [ebp - 4], 5
cmp dword [eax + 0x14], 8
jb 0x4031cf
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004038a0
mov ecx, eax
lea esi, [edi + 0x104]
mov dword [ebp - 0xf8], ecx
cmp esi, ecx
je 0x40322e
cmp dword [esi + 0x14], 8
jb 0x403207
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov ecx, dword [ebp - 0xf8]
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x40321f
mov eax, dword [esi]
jmp 0x403221
mov eax, esi
xor edx, edx
push ecx
mov ecx, esi
mov word [eax], dx
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x403246
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x403282
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00401430
mov dword [ebp - 4], 7
cmp dword [eax + 0x14], 8
jb 0x40329f
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004038a0
mov ecx, eax
lea esi, [edi + 0x164]
mov dword [ebp - 0xf8], ecx
cmp esi, ecx
je 0x4032fe
cmp dword [esi + 0x14], 8
jb 0x4032d7
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov ecx, dword [ebp - 0xf8]
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x4032ef
mov eax, dword [esi]
jmp 0x4032f1
mov eax, esi
xor edx, edx
push ecx
mov ecx, esi
mov word [eax], dx
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x403316
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x403352
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.00401470
mov dword [ebp - 4], 9
cmp dword [eax + 0x14], 8
jb 0x40336f
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004038a0
mov ecx, eax
lea esi, [edi + 0x17c]
mov dword [ebp - 0xf8], ecx
cmp esi, ecx
je 0x4033ce
cmp dword [esi + 0x14], 8
jb 0x4033a7
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov ecx, dword [ebp - 0xf8]
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x4033bf
mov eax, dword [esi]
jmp 0x4033c1
mov eax, esi
xor edx, edx
push ecx
mov ecx, esi
mov word [eax], dx
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x4033e6
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x403422
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.004013f0
mov dword [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
jb 0x40343f
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004038a0
mov ecx, eax
lea esi, [edi + 0x134]
mov dword [ebp - 0xf8], ecx
cmp esi, ecx
je 0x40349e
cmp dword [esi + 0x14], 8
jb 0x403477
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov ecx, dword [ebp - 0xf8]
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x40348f
mov eax, dword [esi]
jmp 0x403491
mov eax, esi
xor edx, edx
push ecx
mov ecx, esi
mov word [eax], dx
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x4034b6
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x4034f2
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.004013b0
mov dword [ebp - 4], 0xd
cmp dword [eax + 0x14], 8
jb 0x40350f
mov eax, dword [eax]
push 0x80000002
push 0x42345c
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.00403740
mov ecx, eax
lea esi, [edi + 0x194]
mov dword [ebp - 0xf8], ecx
cmp esi, ecx
je 0x403577
cmp dword [esi + 0x14], 8
jb 0x403550
mov eax, dword [esi + 0x14]
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov ecx, dword [ebp - 0xf8]
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x403568
mov eax, dword [esi]
jmp 0x40356a
mov eax, esi
xor edx, edx
push ecx
mov ecx, esi
mov word [eax], dx
call fcn.00406740
mov eax, dword [ebp - 0xb0]
cmp eax, 8
jb 0x40358f
inc eax
push eax
push dword [ebp - 0xc4]
call fcn.004078f0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
cmp eax, 8
jb 0x4035cb
inc eax
push eax
push dword [ebp - 0xdc]
call fcn.004078f0
cmp dword [ebx + 0x10], 0
lea esi, [edi + 0x11c]
mov eax, 0x134
mov ecx, 0xec
cmovne eax, ecx
add eax, edi
cmp esi, eax
je 0x4035f4
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00406620
sub esp, 8
mov dword [ebp - 0xf8], 0x5c
lea eax, [ebp - 0xf8]
mov ecx, esi
push eax
call fcn.00406480
test eax, eax
jle 0x403637
cmp eax, dword [esi + 0x10]
ja 0x40362b
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], eax
jb 0x403623
mov esi, dword [esi]
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x403637
sub eax, dword [esi + 0x10]
push ecx
push eax
mov ecx, esi
call fcn.00407b10
mov ecx, edi
call fcn.00404ef0
mov ecx, edi
call fcn.004051c0
lea eax, [ebp - 0xa8]
mov ecx, edi
push eax
call fcn.004012f0
mov dword [ebp - 4], 0xf
cmp dword [eax + 0x14], 8
jb 0x403662
mov eax, dword [eax]
push 0x80000001
push 0x423464
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00403740
mov ebx, eax
lea esi, [edi + 0x14c]
cmp esi, ebx
je 0x4036bd
mov eax, dword [esi + 0x14]
cmp eax, 8
jb 0x403696
inc eax
push eax
push dword [esi]
call fcn.004078f0
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x4036ae
mov eax, dword [esi]
jmp 0x4036b0
mov eax, esi
xor ecx, ecx
mov word [eax], cx
mov ecx, esi
push ebx
call fcn.00406740
mov eax, dword [ebp - 0xe0]
cmp eax, 8
jb 0x4036d5
inc eax
push eax
push dword [ebp - 0xf4]
call fcn.004078f0
mov ecx, dword [ebp - 0x94]
xor eax, eax
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], 0
mov word [ebp - 0xf4], ax
cmp ecx, 8
jb 0x40370a
inc ecx
push ecx
push dword [ebp - 0xa8]
call fcn.004078f0
mov eax, dword [ebp - 0x108]
mov byte [edi + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e4c9
mov esp, ebp
pop ebp
ret 8