Function at 0x44ece0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x538892
mov eax, dword fs:[0]
push eax
sub esp, 0x1b4
mov eax, dword [0x58c758]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.0041c0d0
add esp, 4
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1a8]
call fcn.0043e290
push eax
push 1
push str.ReportDetail
push str.360safe
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x58bfa8], eax
lea ecx, [ebp - 0x19c]
call fcn.00452390
mov byte [ebp - 4], 1
push 0x100000
mov ecx, 0x58f750
call fcn.00404590
push 0
push 1
push 1
push str.360EntExam.log
lea ecx, [ebp - 0x1ac]
push ecx
call fcn.0041acc0
add esp, 8
mov dword [ebp - 0x1b4], eax
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1b8]
call fcn.0043e290
push eax
mov ecx, 0x58f750
call fcn.00403fb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1ac]
call fcn.00401eb0
push 0x100000
mov ecx, 0x58fb60
call fcn.00404590
push 0
push 1
push 1
push str.EntClientExamFixHistory.log
lea eax, [ebp - 0x1b0]
push eax
call fcn.0041acc0
add esp, 8
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c0]
call fcn.0043e290
push eax
mov ecx, 0x58fb60
call fcn.00403fb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1b0]
call fcn.00401eb0
push 0x544b60
push 0x58f750
call fcn.004045b0
add esp, 8
mov dword [ebp - 0x1a4], 0
lea ecx, [ebp - 0x19c]
call fcn.004530f0
add eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a4], eax
lea ecx, [ebp - 0x19c]
call fcn.00456320
lea ecx, [ebp - 0x19c]
call fcn.00453330
lea ecx, [ebp - 0x19c]
call fcn.00457100
lea ecx, [ebp - 0x19c]
call fcn.00453bd0
push 0
push 0
lea ecx, [ebp - 0x19c]
call fcn.00456630
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x44eeb5
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x19c]
call fcn.00452e40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.00401eb0
jmp 0x44f039
cmp dword [ebp - 0x194], 0
jne 0x44eecb
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44eeb5
lea ecx, [ebp - 0x1a0]
call fcn.00403840
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x170]
push edx
mov eax, dword [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
mov edx, dword [ebp - 0x17c]
push edx
mov eax, dword [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x184]
push ecx
mov edx, dword [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0x188]
push eax
mov ecx, dword [ebp - 0x190]
push ecx
push str.exp_dexl_dexm_dexd_dexo_dem_ded_del_dee_d
lea edx, [ebp - 0x1a0]
push edx
call fcn.00409170
add esp, 0x2c
lea ecx, [ebp - 0x1a8]
call fcn.0043e290
push eax
lea ecx, [ebp - 0x1a0]
call fcn.0043e290
push eax
push str.result
push str.360EntExam
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov dword [ebp - 0x14], 0
cmp dword [ebp + 0xc], 0
jne 0x44ef89
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x19c]
call fcn.004553b0
lea ecx, [ebp - 0x19c]
call fcn.00456ee0
lea ecx, [ebp - 0x19c]
call fcn.00457300
jmp 0x44ef9b
push 0x544ab4
push 0x58f750
call fcn.004045b0
add esp, 8
cmp dword [0x58fb58], 0
je 0x44efc5
mov dword [0x58fb58], 0
lea ecx, [ebp - 0x19c]
call fcn.00453250
add eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x14], 0
jg 0x44efd4
cmp dword [ebp - 0x1a4], 0
jle 0x44effe
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x1a4]
push ecx
push str._Fix_
push 0x58f750
call fcn.004045b0
add esp, 0xc
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x1a4]
mov eax, dword [ebp + 8]
mov dword [eax], edx
lea ecx, [ebp - 0x19c]
call fcn.004534a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a0]
call fcn.00401eb0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x19c]
call fcn.00452e40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.00401eb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret