Function at 0x10001d83
Capabilities:
Check if file exists
Get common file path
Read .ini file

Disassembly:
call fcn.10002024
call fcn.100023ad
call fcn.100026f7
jmp 0x1000284f
mov eax, 0x1000ba0f
call fcn.1000b5d0
mov eax, 0x63138
call fcn.1000b600
push ebx
push esi
mov ebx, 0x10010ff4
push edi
push ebx
mov edi, str.EverChkDefaultBrs
push 0
mov esi, str.main
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, 1
je 0x10002b73
push ebx
push 0x1000e0ec
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [0x1000e020]
xor edi, edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
mov dword [ebp - 4], edi
push eax
call fcn.10002b82
mov esi, dword [sym.imp.MSVCRT.dll__wcsicmp]
mov dword [esp], 0x1000ec10
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
jne 0x100028e9
mov dword [ebp - 0x24], 1
jmp 0x100029c1
push str.360ChromeURL
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
jne 0x10002905
mov dword [ebp - 0x1c], 1
jmp 0x100029c1
push str.htmlfile
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
je 0x100029ba
push 0x1000ebd0
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
je 0x100029ba
push 0x1000ebac
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
je 0x100029b1
push 0x1000eb84
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
je 0x100029b1
push str.QQBrowserHTML
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
je 0x100029a8
push str.QQBrowser.HTTP
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
je 0x100029a8
push str.Max3.Association.HTML
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
jne 0x10002986
mov dword [ebp - 0x2c], 1
jmp 0x100029c1
push str.BaiduBrowserHTML
push dword [ebp - 0x10]
call esi
pop ecx
test eax, eax
pop ecx
jne 0x1000299f
mov dword [ebp - 0x20], 1
jmp 0x100029c1
mov dword [ebp - 0x34], 1
jmp 0x100029c1
mov dword [ebp - 0x28], 1
jmp 0x100029c1
mov dword [ebp - 0x18], 1
jmp 0x100029c1
mov dword [ebp - 0x30], 1
mov esi, 0x81
mov word [ebp - 0x64c], di
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x64a]
push 0x103
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x64c]
mov ecx, 0x10010ed0
push eax
call fcn.100077b9
xor edx, edx
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x23a]
mov word [ebp - 0x23c], dx
push 0x41
rep stosd dword es:[edi], eax
pop ebx
stosw word es:[edi], ax
push edx
lea eax, [ebp - 0x23c]
push 0x1a
push eax
push edx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x23c]
push str.360se360se.ini
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10002ac8
and word [ebp - 0x444], 0
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x442]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x444]
push 0x104
push eax
push str.360se
push 0x1000eac4
push str.Main
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpIW]
lea eax, [ebp - 0x444]
push str.Zdie8
push eax
call esi
test eax, eax
jne 0x10002a9d
push 0x42
jmp 0x10002ac7
lea eax, [ebp - 0x444]
push str.Wdtc
push eax
call esi
test eax, eax
jne 0x10002ab3
push 0x43
jmp 0x10002ac7
lea eax, [ebp - 0x444]
push str.360safei
push eax
call esi
test eax, eax
jne 0x10002ac8
push 0x44
pop ebx
mov eax, dword [0x1000e020]
mov dword [ebp - 0x14], eax
push dword [ebp - 0x34]
lea eax, [ebp - 0x64c]
mov byte [ebp - 4], 1
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push dword [ebp - 0x18]
push dword [ebp - 0x30]
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
push 1
pop esi
push esi
push ebx
push eax
lea eax, [ebp - 0x14]
push str.http:__st.se.360.cn_push.html_ver_snamedecid_dfa_d__d__d__d__d__d__d__d__d
push eax
call fcn.10001865
add esp, 0x34
lea ecx, [ebp - 0x63144]
call fcn.10002d94
push dword [ebp - 0x14]
lea ecx, [ebp - 0x63144]
mov byte [ebp - 4], 2
call fcn.10002d1b
lea ecx, [ebp - 0x63144]
mov dword [ebp - 0x60cdc], esi
mov dword [ebp - 0x60a9c], 0x2710
call fcn.100031bd
lea ecx, [ebp - 0x63144]
call fcn.100034bf
lea ecx, [ebp - 0x63144]
mov byte [ebp - 4], 1
call fcn.10003060
and byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.10001c3a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.10001c3a
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret