Function at 0x4bd220
Capabilities:
Link many functions at runtime
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x954
mov eax, dword [0x53f4a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push esi
mov esi, ecx
mov dword [esi + 0x14], ebx
mov eax, 0xf
mov dword [esi + 0x18], eax
mov byte [esi + 4], bl
mov dword [esi + 0x34], eax
mov dword [esi + 0x30], ebx
mov byte [esi + 0x20], bl
mov dword [esi + 0x50], eax
push edi
lea edi, [esi + 0x38]
mov dword [edi + 0x14], ebx
mov byte [edi + 4], bl
push 0x104
lea eax, [ebp - 0x210]
push eax
push ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x210]
push 0x5c
push ecx
call fcn.004ea650
xor edx, edx
mov word [eax + 2], dx
add esp, 8
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 0x52b19c
mov ecx, esi
call fcn.00401900
push 1
push 0x52b19c
lea ecx, [esi + 0x1c]
call fcn.00401900
push 6
push str.11.0.0
mov ecx, edi
call fcn.00401900
lea ecx, [ebp - 0x934]
call fcn.004bd990
push ecx
mov ecx, esp
push str.Version
call fcn.00470300
push ecx
mov ecx, esp
push str.SOFTWARESuper_RabbitMagicSet
call fcn.00470300
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x934]
call fcn.004bdb50
test al, al
je 0x4bd382
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebx
lea eax, [ebp - 0x92c]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [ebp - 0x938], edx
mov edi, edi
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x4bd330
sub eax, dword [ebp - 0x938]
sar eax, 1
push eax
lea eax, [ebp - 0x92c]
push eax
call fcn.00403060
lea ecx, [ebp - 0x954]
push ecx
call fcn.004be920
add esp, 0x20
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.004015f0
cmp dword [ebp - 0x93c], 0x10
jb 0x4bd382
mov edx, dword [ebp - 0x950]
push edx
call fcn.004ea481
add esp, 4
push ecx
mov ecx, esp
push str.OEMID
call fcn.00470300
push ecx
mov ecx, esp
push str.SOFTWARESuper_RabbitMagicSet
call fcn.00470300
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x934]
call fcn.004bdb50
test al, al
je 0x4bd41f
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [ebp - 0x92c]
lea edi, [eax + 2]
mov edi, edi
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x4bd3d0
sub eax, edi
sar eax, 1
push eax
lea edx, [ebp - 0x92c]
push edx
call fcn.00403060
lea eax, [ebp - 0x954]
push eax
call fcn.004be920
add esp, 0x20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x1c]
call fcn.004015f0
cmp dword [ebp - 0x93c], 0x10
jb 0x4bd41f
mov ecx, dword [ebp - 0x950]
push ecx
call fcn.004ea481
add esp, 4
push str.TutuTongji.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esi + 0x54], eax
cmp eax, ebx
je 0x4bd491
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.OpenTutuLog
push eax
call edi
mov edx, dword [esi + 0x54]
push str.CloseTutuLog
push edx
mov dword [esi + 0x58], eax
call edi
mov dword [esi + 0x5c], eax
mov eax, dword [esi + 0x54]
push str.TutuSubmitLog2Srv
push eax
call edi
mov ecx, dword [esi + 0x54]
push str.TutuWriteLog
push ecx
mov dword [esi + 0x60], eax
call edi
mov edx, dword [esi + 0x54]
push str.TutuSubmitBaohuo
push edx
mov dword [esi + 0x64], eax
call edi
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x54]
push str.TutuGetHSID
push eax
call edi
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x4bd491
call eax
lea ecx, [ebp - 0x934]
call fcn.004bd9b0
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.004ea5a8
mov esp, ebp
pop ebp
ret