Function at 0x406820
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x43d358
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
mov eax, dword [0x45c464]
push ebx
push esi
push edi
mov dword [esp + 0x10], eax
xor ebx, ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x20], ebx
mov byte [esp + 0x20], 1
call fcn.00435a9c
cmp eax, ebx
je 0x406aae
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
cmp eax, ebx
je 0x406aae
mov edi, dword [eax + 0x1c]
cmp edi, ebx
je 0x406aae
mov eax, dword [0x467a98]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0x46778c
push eax
push str.UpdateInternal
push str.DownloadOption
call esi
push 0x46778c
push ebx
push str.UpdateStatus
push str.Common
mov dword [0x467a98], eax
call esi
cmp eax, 1
je 0x406ae0
cmp eax, ebx
jne 0x4068fb
push 0x46778c
call fcn.00405ed0
push 0x467994
call fcn.00405f70
add esp, 8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x467994
call fcn.00435688
call fcn.00406140
add esp, 4
jmp 0x406a98
cmp eax, 2
jne 0x406a63
push 0x46778c
push ebx
push str.LastAction
push str.Common
call esi
cmp eax, ebx
jne 0x406a1e
push 0x46778c
push ebx
push str.MustUpdate
push str.FileUpdate
call esi
cmp eax, ebx
jne 0x406993
cmp byte [0x467168], 2
jne 0x406956
call fcn.00439be1
mov eax, dword [eax + 4]
push 0x1001
push str.zteupdate
push 0x44b0fc
jmp 0x40696d
call fcn.00439be1
mov eax, dword [eax + 4]
push 0x1001
push str.zteupdate
push str._Got_new_file_must_reset_compute_after_update
mov ecx, dword [eax + 0x1c]
call fcn.00433af7
cmp eax, 2
jne 0x406993
push ebx
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x466f80
push ebx
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
jmp 0x406aae
push 0x467278
call fcn.00405f70
add esp, 4
lea ecx, [esp + 0xc]
push str.del
call fcn.004357a3
lea ecx, [esp + 0xc]
push 0x46778c
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.00435849
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 2
call fcn.00435753
lea ecx, [esp + 0x14]
mov byte [esp + 0x20], 1
call fcn.0043561a
push str.__echo_off
push 0x467278
call fcn.00406680
mov eax, dword [esp + 0x14]
push eax
push 0x467278
call fcn.00406680
push str.__systemroot___system32zteprokill.exe_zxcomm.exe
push 0x467278
call fcn.00406680
push str.__systemroot___system32zteprokill.exe_zxupdate.exe
push 0x467278
call fcn.00406680
add esp, 0x20
push 0x14
call fcn.004067a0
add esp, 4
call fcn.00401e00
test eax, eax
je 0x406a57
push 0x15
call fcn.004067a0
push 0x1e
call fcn.004067a0
add esp, 8
call fcn.00404ed0
test eax, eax
push 0x20
jne 0x406a89
call fcn.004067a0
add esp, 4
jmp 0x406aae
push 0x16
call fcn.004067a0
add esp, 4
jmp 0x406aae
cmp eax, 3
jne 0x406a93
push 0x1e
call fcn.004067a0
add esp, 4
call fcn.00404ed0
test eax, eax
jne 0x406a87
push 0x20
call fcn.004067a0
add esp, 4
jmp 0x406aae
push 0x1f
call fcn.004067a0
add esp, 4
jmp 0x406a98
call fcn.00406350
push 0x46778c
push ebx
push str.UpdateStatus
push str.Common
call esi
cmp eax, ebx
je 0x406ae0
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], bl
call fcn.0043561a
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0xffffffff
call fcn.0043561a
xor eax, eax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x18
ret
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], bl
call fcn.0043561a
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0xffffffff
call fcn.0043561a
mov ecx, dword [esp + 0x18]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret