Function at 0x4200a0
Capabilities:
Check if file exists
Get common file path
Get file attributes
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30c
push ebx
push esi
push edi
xor ebx, ebx
push 0x18
mov edi, eax
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
cmp eax, ebx
je 0x420847
mov dword [ebp - 0x20], eax
mov dword [eax], eax
mov eax, dword [ebp - 0x20]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x20]
mov dword [eax + 8], eax
mov ecx, dword [ebp - 0x20]
mov al, 1
mov byte [ecx + 0x14], al
mov edx, dword [ebp - 0x20]
mov byte [edx + 0x15], al
lea esi, [ebp - 0x78]
mov eax, edi
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x44], bl
call fcn.0041fe60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x44]
call fcn.00420b50
mov esi, 0x10
cmp dword [ebp - 0x64], esi
jb 0x42011f
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], esi
jae 0x42012a
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x24]
mov dword [ebp - 0xc], 0x49b214
mov dword [ebp - 8], eax
call fcn.00420900
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0xc]
call fcn.00407b90
mov eax, dword [ebp - 0x44]
mov ebx, esi
mov dword [ebp - 0x34], 0
cmp dword [ebp - 0x30], ebx
jae 0x420160
lea eax, [ebp - 0x44]
mov byte [eax], 0
lea esi, [ebp - 0x78]
mov eax, edi
call fcn.0041ff30
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x44]
call fcn.00420b50
cmp dword [ebp - 0x64], ebx
jb 0x42018c
mov edx, dword [ebp - 0x78]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], ebx
jae 0x420197
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x24]
mov dword [ebp - 0xc], str.OSVersion
mov dword [ebp - 8], eax
call fcn.00420900
push eax
lea eax, [ebp - 0x24]
push eax
lea ebx, [ebp - 0xc]
call fcn.00407b90
mov eax, dword [ebp - 0x44]
mov ebx, 0x10
mov dword [ebp - 0x34], 0
cmp dword [ebp - 0x30], ebx
jae 0x4201d0
lea eax, [ebp - 0x44]
mov byte [eax], 0
lea esi, [ebp - 0x78]
mov eax, edi
call fcn.00420030
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x44]
call fcn.00420b50
cmp dword [ebp - 0x64], ebx
jb 0x4201fc
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], ebx
jae 0x420207
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x24]
mov dword [ebp - 0xc], str.CPUArchitecture
mov dword [ebp - 8], eax
call fcn.00420900
push eax
lea edx, [ebp - 0x24]
push edx
lea ebx, [ebp - 0xc]
call fcn.00407b90
xor eax, eax
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x78], al
lea eax, [edi + 0x34]
mov esi, 0xf
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], esi
call fcn.00415870
cmp dword [ebp - 0x64], 0x10
mov eax, dword [ebp - 0x78]
jae 0x420254
lea eax, [ebp - 0x78]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x24]
mov dword [ebp - 0xc], str.CPUString
mov dword [ebp - 8], eax
call fcn.00420900
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0xc]
call fcn.00407b90
cmp dword [ebp - 0x64], 0x10
jb 0x420289
mov edx, dword [ebp - 0x78]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [0x4ae214]
mov edx, dword [eax + 0xc]
mov ecx, 0x4ae214
call edx
mov edi, dword [edi + 0x6c]
add eax, 0x10
push edi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 0x497c54
push eax
call fcn.00407630
mov eax, dword [ebp - 4]
add eax, 0xfffffff0
add esp, 0xc
push eax
mov dword [ebp - 0x4c], str.CPUCore
mov dword [ebp - 8], eax
call fcn.00406aa0
lea edi, [eax + 0x10]
add esp, 4
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x48], edi
call fcn.00408690
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0x4c]
call fcn.00407b90
lea eax, [edi - 0x10]
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x420306
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x44]
xor ebx, ebx
mov edi, 0x10
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x30], edi
jae 0x42031b
lea eax, [ebp - 0x44]
push 0x49b18c
push ecx
mov byte [eax], bl
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x68], ebx
mov byte [ebp - 0x78], bl
call fcn.0041fdf0
add esp, 4
push eax
push str._d_s
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push 0x80
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf_s]
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
add esp, 0x14
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x420358
sub eax, edx
push eax
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
lea ecx, [ebp - 0x78]
call fcn.00415960
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x44]
call fcn.00420b50
cmp dword [ebp - 0x64], edi
jb 0x420392
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], edi
jae 0x42039d
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x4c], str.Memory
mov dword [ebp - 0x48], eax
call fcn.00420900
push eax
lea edx, [ebp - 0x24]
push edx
lea ebx, [ebp - 0x4c]
call fcn.00407b90
mov eax, dword [0x4ae214]
mov edx, dword [eax + 0xc]
mov ecx, 0x4ae214
call edx
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
add eax, 0x10
push 0
mov dword [ebp - 4], eax
call esi
push 1
mov edi, eax
call esi
push eax
push edi
lea eax, [ebp - 4]
push str._d_d
push eax
call fcn.00407630
mov eax, dword [ebp - 4]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x14], str.ScreenResolution
mov dword [ebp - 0x48], eax
call fcn.00406aa0
lea esi, [eax + 0x10]
add esp, 0x14
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x10], esi
call fcn.00408690
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0x14]
call fcn.00407b90
lea eax, [esi - 0x10]
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x420447
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
lea ecx, [ebp - 4]
call fcn.00405690
push 0x19
push str._baidu_browserconfig.ini
lea ebx, [ebp - 4]
call fcn.004064e0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, reloc.NETAPI32.dll_NetApiBufferFree
je 0x420586
test al, 0x10
jne 0x420586
lea ecx, [ebp - 0x28]
push ecx
mov ecx, ebx
call fcn.00419390
mov edx, dword [ebp - 0x28]
add esp, 4
push edx
push 0
push str.REPORT
push 0x497cb8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, eax
mov eax, dword [0x4ae214]
mov edx, dword [eax + 0xc]
mov ecx, 0x4ae214
call edx
add eax, 0x10
mov dword [ebp - 0x50], eax
mov edx, 0x497858
test esi, esi
jne 0x4204de
mov edx, 0x497cbc
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4204e3
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x50]
call fcn.004069f0
mov esi, dword [ebp - 0x50]
add esi, 0xfffffff0
push esi
mov dword [ebp - 0x14], str.usercheck
call fcn.00406aa0
lea edi, [eax + 0x10]
add esp, 4
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x10], edi
call fcn.00408690
push eax
lea eax, [ebp - 0x24]
push eax
lea ebx, [ebp - 0x14]
call fcn.00407b90
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42054c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esi + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x420565
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4205ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4205ac
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x14], str.usercheck
mov dword [ebp - 0x10], 0x497858
call fcn.00408760
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0x14]
call fcn.00407b90
mov eax, dword [ebp - 4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4205cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
lea ecx, [ebp - 4]
add eax, 0x10
push ecx
mov dword [ebp - 4], eax
call fcn.00415b70
mov eax, dword [ebp - 4]
add esp, 4
push 0xfde9
push eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
call fcn.00414950
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push edx
lea ecx, [ebp - 0x28]
call fcn.00405690
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
cmp eax, ecx
je 0x420637
push eax
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
mov dword [ebp - 0x5c], 0
call eax
mov edx, dword [0x4ae214]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
add eax, 0x10
lea ebx, [ebp - 0x5c]
mov dword [ebp - 0x54], eax
call fcn.00404100
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff0
push eax
call fcn.00406aa0
add esp, 4
mov dword [ebp - 0x50], eax
call fcn.00404100
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x80], eax
call fcn.00406aa0
add esp, 4
push str.bdstatreport.dll
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 3
lea ecx, [ebp - 0x24]
push ecx
mov edi, eax
mov eax, dword [ebp - 0x28]
push 2
push ecx
add eax, 0xfffffff0
mov ebx, esp
push eax
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x10], eax
call fcn.00406aa0
add eax, 0x10
mov dword [ebx], eax
mov ebx, esp
push esi
call fcn.00406aa0
add eax, 0x10
mov dword [ebx], eax
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x28], esp
push ebx
call fcn.00406aa0
mov edx, dword [ebp - 0x28]
add eax, 0x10
mov ecx, esp
push str.Util
mov dword [edx], eax
call fcn.00405690
push ecx
mov ecx, esp
push str.General
call fcn.00405690
lea eax, [ebp - 0x7c]
push eax
call fcn.00419f80
test edi, edi
je 0x42071a
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [esi + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x420733
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
lea eax, [ebx + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42074c
mov ecx, dword [ebx]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebx
call eax
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42076b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x80]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x420787
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4207a3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4207c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x48]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4207de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 8]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4207fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [ebp - 0x30], 0x10
jb 0x42080d
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x44], 0
mov ecx, dword [eax]
push eax
push ecx
lea edi, [ebp - 8]
lea esi, [ebp - 0x24]
call fcn.00406b10
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 8], ebx
call dword [sym.imp.MSVCR100.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
push 0x4aa228
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x5c], vtable.std::bad_alloc.0
call sub.MSVCR100.dll__CxxThrowException
int3