Function at 0x401e00
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x43d120
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [0x45c464]
push ebx
push esi
push edi
mov dword [esp + 0x10], eax
xor ebx, ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x2c], 1
call fcn.00435a9c
cmp eax, ebx
je 0x402141
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
cmp eax, ebx
je 0x402141
cmp dword [eax + 0x1c], ebx
je 0x402141
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x12c
call fcn.0043178d
mov esi, eax
mov al, byte [0x467168]
add esp, 4
cmp al, 2
jne 0x401e82
push 0x44b4c8
jmp 0x401e87
push str.Start_to_update
push esi
call fcn.0042018d
add esp, 8
call fcn.00435a9c
cmp eax, ebx
je 0x401ea2
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x401ea4
xor eax, eax
mov eax, dword [eax + 0x1c]
mov edi, dword [sym.imp.USER32.dll_PostMessageA]
push esi
push 1
push 0xbb8
push eax
call edi
call fcn.00403aa0
cmp eax, ebx
push 0x12c
je 0x402076
call fcn.0043178d
mov esi, eax
mov al, byte [0x467168]
add esp, 4
cmp al, 2
jne 0x401ee4
push 0x44b4a4
jmp 0x401ee9
push str.Update_Files_Successfully_
push esi
call fcn.0042018d
add esp, 8
call fcn.00435a9c
cmp eax, ebx
je 0x401f04
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x401f06
xor eax, eax
mov eax, dword [eax + 0x1c]
push esi
push 1
push 0xbb8
push eax
call edi
push 0x12c
call fcn.0043178d
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x22]
mov esi, eax
mov eax, dword [esp + 0x20]
and ecx, 0xffff
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0x22]
and eax, 0xffff
push edx
mov edx, dword [esp + 0x22]
push eax
mov eax, dword [esp + 0x24]
and ecx, 0xffff
and edx, 0xffff
push ecx
and eax, 0xffff
push edx
push eax
push str.___________________________END_____d__d__d__d:_d:_d
push esi
call fcn.0042018d
add esp, 0x24
call fcn.00435a9c
cmp eax, ebx
je 0x401f80
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x401f82
xor eax, eax
mov eax, dword [eax + 0x1c]
push esi
push 1
push 0xbb8
push eax
call edi
push 0x46778c
push ebx
push str.MustReset
push str.UpdateOption
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
jne 0x402041
cmp byte [0x467168], 2
jne 0x401fcd
push 0x44b44c
lea ecx, [esp + 0x14]
call fcn.004357a3
push 0x44b430
jmp 0x401fe0
push str._Finished_update__Restart_computer_now__
lea ecx, [esp + 0x14]
call fcn.004357a3
push str.Closing_Computer_now_Please_waiting_...
lea ecx, [esp + 0x10]
call fcn.004357a3
call fcn.00439be1
mov esi, dword [eax + 4]
push 0x1001
push 0x44b3d0
push 0x104
lea ecx, [esp + 0x1c]
call fcn.00435970
mov ecx, dword [esi + 0x1c]
push eax
call fcn.00433af7
cmp eax, 1
jne 0x402041
call fcn.00405450
call fcn.00439be1
mov esi, dword [eax + 4]
push ebx
push 0x44b3d0
push 0x104
lea ecx, [esp + 0x18]
call fcn.00435970
mov ecx, dword [esi + 0x1c]
push eax
call fcn.00433af7
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], bl
call fcn.0043561a
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0043561a
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret
call fcn.0043178d
mov esi, eax
mov al, byte [0x467168]
add esp, 4
cmp al, 2
jne 0x402090
push 0x44b3c4
jmp 0x402095
push str.Update_Files_Fail_
push esi
call fcn.0042018d
add esp, 8
call fcn.00435a9c
cmp eax, ebx
je 0x4020b0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x4020b2
xor eax, eax
mov eax, dword [eax + 0x1c]
push esi
push 1
push 0xbb8
push eax
call edi
push 0x12c
call fcn.0043178d
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x22]
mov esi, eax
mov eax, dword [esp + 0x20]
and ecx, 0xffff
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0x22]
and eax, 0xffff
push edx
mov edx, dword [esp + 0x22]
push eax
mov eax, dword [esp + 0x24]
and ecx, 0xffff
and edx, 0xffff
push ecx
and eax, 0xffff
push edx
push eax
push str.___________________________END_____d__d__d__d:_d:_d
push esi
call fcn.0042018d
add esp, 0x24
call fcn.00435a9c
cmp eax, ebx
je 0x40212c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x40212e
xor eax, eax
mov eax, dword [eax + 0x1c]
push esi
push 1
push 0xbb8
push eax
call edi
call fcn.00406350
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], bl
call fcn.0043561a
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0043561a
mov ecx, dword [esp + 0x24]
pop edi
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret