Function at 0x10036a6b
Capabilities:
Read .ini file

Disassembly:
push ebp
lea ebp, [esp - 0x2b38]
mov eax, 0x2b38
call fcn.10076ab0
push 0xffffffffffffffff
push 0x1016d3ae
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x101f1dd0]
xor eax, ebp
mov dword [ebp + 0x2b34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 8
mov dword [ebp - 0x20], ecx
pop ecx
xor eax, eax
push 8
mov edx, dword [ebp + 0x2b40]
xor ebx, ebx
mov byte [ebp + 0x2b10], bl
lea edi, [ebp + 0x2b11]
rep stosd dword es:[edi], eax
pop ecx
push 8
mov byte [ebp + 0x2aa0], bl
lea edi, [ebp + 0x2aa1]
rep stosd dword es:[edi], eax
pop ecx
mov byte [ebp + 0x2ac4], bl
lea edi, [ebp + 0x2ac5]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x2b10]
push eax
lea eax, [ebp + 0x2ac4]
push eax
lea eax, [ebp + 0x2aa0]
push eax
push str.________________d__d
push edx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
call fcn.10079691
call fcn.1001edd8
xor edx, edx
mov ecx, 0xf4240
div ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp + 0x2b10]
push eax
call fcn.100757d0
mov dword [ebp - 0x14], eax
add esp, 0x20
lea eax, [ebp + 0x2b10]
push eax
lea ecx, [ebp + 0x470]
call fcn.10001580
mov esi, 0x103
push esi
lea eax, [ebp + 0x26a9]
push ebx
push eax
mov dword [ebp - 4], ebx
mov byte [ebp + 0x26a8], bl
call fcn.10076580
add esp, 0xc
call fcn.1001edd8
mov edi, eax
mov eax, dword [ebp - 0x14]
cmp eax, 6
jle 0x10036bbb
push 0xffffffffffffffff
add eax, 0xfffffffa
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp + 0x470]
call fcn.1001faca
cmp dword [eax + 0x18], 0x10
jb 0x10036b99
mov eax, dword [eax + 4]
jmp 0x10036b9c
add eax, 4
push eax
call fcn.100796c1
mov edi, eax
mov eax, dword [ebp - 0x18]
imul eax, eax, 0xf4240
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x44]
add edi, eax
call fcn.10001770
push 0x206
lea eax, [ebp + 0x1e9e]
push ebx
push eax
mov word [ebp + 0x1e9c], bx
call fcn.10076580
mov eax, edi
cdq
mov ecx, 0x2710
idiv ecx
push 0x64
mov dword [ebp - 0x18], eax
mov ecx, edx
mov eax, edi
pop edi
cdq
idiv edi
mov eax, ecx
push edx
push edi
pop ecx
cdq
idiv ecx
push eax
push dword [ebp - 0x18]
lea eax, [ebp + 0x1e9c]
push str._d__02d__d
push eax
call fcn.100048d5
lea eax, [ebp + 0x1e9c]
push eax
call fcn.10020ce3
push eax
lea eax, [ebp + 0x26a8]
push 0x1017e158
push eax
call fcn.10078fad
add esp, 0x30
cmp dword [ebp + 0x2b44], ebx
je 0x10036c9e
mov edi, dword [ebp - 0x14]
cmp edi, 6
jle 0x10036c9e
push 0x63
lea eax, [ebp + 0x29b5]
push ebx
push eax
mov byte [ebp + 0x29b4], bl
call fcn.10076580
add edi, 0xfffffffa
push edi
lea eax, [ebp + 0x2b10]
push eax
lea eax, [ebp + 0x29b4]
push eax
call fcn.1007be20
mov ecx, dword [ebp - 0x20]
add esp, 0x18
call fcn.10036822
cmp eax, ebx
jle 0x10036c7d
push eax
call fcn.1001dc76
pop ecx
jmp 0x10036c82
call fcn.1001dbef
push eax
lea eax, [ebp + 0x29b4]
push eax
lea eax, [ebp + 0x2b10]
push str._s_d
push eax
call fcn.10078fad
add esp, 0x10
push 0x40
lea eax, [ebp + 0x2a5e]
push ebx
push eax
mov word [ebp + 0x2a5c], bx
call fcn.10076580
push esi
lea eax, [ebp + 0x20a5]
push ebx
push eax
mov byte [ebp + 0x20a4], bl
call fcn.10076580
add esp, 0x18
lea ecx, [ebp]
call fcn.10024d7d
lea eax, [ebp + 0x2a5c]
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.10026ade
lea eax, [ebp + 0x20a4]
push eax
lea eax, [ebp + 0x2a5c]
push eax
call fcn.1001da9a
pop ecx
pop ecx
call fcn.10004cf1
mov ecx, eax
call fcn.1001b47e
push 0x206
mov dword [ebp - 0x14], eax
lea eax, [ebp + 0x21aa]
push ebx
push eax
mov word [ebp + 0x21a8], bx
call fcn.10076580
add esp, 0xc
lea ecx, [ebp - 0xd]
call fcn.100237f8
lea eax, [ebp + 0x21a8]
push eax
mov edi, str.UIdentifier
push edi
lea ecx, [ebp - 0xd]
mov byte [ebp - 4], 2
call fcn.100235cc
lea eax, [ebp + 0x2a5c]
push eax
lea eax, [ebp + 0x21a8]
push eax
call fcn.100761f5
test eax, eax
pop ecx
pop ecx
je 0x10036dad
lea eax, [ebp + 0x21a8]
push eax
call fcn.10076514
cmp eax, 0x20
pop ecx
jne 0x10036d9d
push dword [ebp - 0x14]
push 0x1017432c
push str.UIDError
push str.InstallInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp + 0x21a8]
push eax
push str.UID_Error_LastUID__s
call fcn.100247c2
pop ecx
pop ecx
lea eax, [ebp + 0x2a5c]
push eax
push edi
lea ecx, [ebp - 0xd]
call fcn.100236e4
push 0x7ce
lea eax, [ebp + 0x4fe]
push ebx
push eax
mov word [ebp + 0x4fc], bx
call fcn.10076580
add esp, 0xc
push 0x101d87c8
lea ecx, [ebp + 0x4c4]
call fcn.10001580
push str.tjv3.znyshurufa.com
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 3
call fcn.10001580
lea eax, [ebp + 0x4e0]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 4
call fcn.100201b9
cmp dword [eax + 0x18], 8
pop ecx
pop ecx
jb 0x10036e0e
mov eax, dword [eax + 4]
jmp 0x10036e11
add eax, 4
push eax
lea eax, [ebp + 0x4fc]
push str.http:___s_TypewritingJou_reti_cinstalljou
push eax
call fcn.100048d5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 3
call fcn.10001770
lea ecx, [ebp + 0x418]
call fcn.10035c17
mov byte [ebp - 4], 5
xor edi, edi
jmp 0x10036e67
cmp edi, 1
jge 0x10036e84
push 0x3e8
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x4c4]
push eax
lea eax, [ebp + 0x4fc]
push eax
lea ecx, [ebp + 0x418]
call fcn.10036053
cmp eax, ebx
je 0x10036e56
cmp dword [ebp + 0x4dc], 0x10
mov eax, dword [ebp + 0x4c8]
jae 0x10036e99
lea eax, [ebp + 0x4c8]
push eax
call fcn.100796c1
mov edx, eax
push 9
pop ecx
xor eax, eax
mov word [ebp + 0x2ae8], bx
lea edi, [ebp + 0x2aea]
rep stosd dword es:[edi], eax
push edx
stosw word es:[edi], ax
lea eax, [ebp + 0x2ae8]
push 0x10174330
push eax
call fcn.100048d5
add esp, 0x10
cmp dword [ebp + 0x2b44], ebx
mov edi, str.Setting
je 0x10036fd2
call fcn.10004cf1
mov ecx, eax
call fcn.1001b43a
push eax
lea ecx, [ebp + 0x4e0]
call fcn.100015f0
push str.SmartCloudInfo.ini
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 6
call fcn.10003540
lea eax, [ebp + 0x2b10]
push eax
lea ecx, [ebp - 0x44]
call fcn.10001580
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 7
call fcn.100201b9
cmp dword [ebp + 0x4f8], 8
pop ecx
pop ecx
mov ecx, dword [ebp + 0x4e4]
jae 0x10036f40
lea ecx, [ebp + 0x4e4]
cmp dword [eax + 0x18], 8
jb 0x10036f4b
mov eax, dword [eax + 4]
jmp 0x10036f4e
add eax, 4
push ecx
push eax
push str.Spreader
push str.AppInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push ebx
push 1
lea ecx, [ebp - 0x60]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.10001770
push 0x206
lea eax, [ebp + 0x1a8e]
push ebx
push eax
mov word [ebp + 0x1a8c], bx
call fcn.10076580
lea eax, [ebp + 0x2ae8]
push eax
lea eax, [ebp + 0x1a8c]
push 0x10175610
push eax
call fcn.100048d5
add esp, 0x18
push dword [ebp - 0x14]
lea eax, [ebp + 0x1a8c]
push eax
push str.FirstInstallTime
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push ebx
push 1
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 5
call fcn.100017f0
lea eax, [ebp + 0x2b10]
push str.updsp
push eax
call fcn.1007c4f0
cmp eax, ebx
pop ecx
pop ecx
jne 0x10036fff
push dword [ebp - 0x14]
lea eax, [ebp + 0x2ae8]
push eax
push str.InstallTime
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0x60]
push ebx
push eax
call fcn.10020654
push eax
lea eax, [ebp + 0x4a8]
push eax
mov byte [ebp - 4], 8
call fcn.1001fb72
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xa
call fcn.100017f0
push 0x101d87c8
lea ecx, [ebp + 0x4e0]
call fcn.10001580
push 0x1017d404
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb
call fcn.10001580
lea eax, [ebp + 0x4e0]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 0x4a8]
push eax
mov byte [ebp - 4], 0xc
call fcn.1001fa6d
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.10001770
push ebx
push 1
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 0xa
call fcn.10001770
push esi
lea eax, [ebp + 0x25a5]
push ebx
push eax
mov byte [ebp + 0x25a4], bl
call fcn.10076580
push 0x206
lea eax, [ebp + 0x1c96]
push ebx
push eax
mov word [ebp + 0x1c94], bx
call fcn.10076580
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
add esp, 0x18
push dword [ebp - 0x14]
lea eax, [ebp + 0x1c94]
push 0x104
push eax
push str.UnKnow
push str.InstallParentName
push str.PreInstall
call edi
lea eax, [ebp + 0x25a4]
push eax
lea eax, [ebp + 0x1c94]
push eax
call fcn.1001da9a
push esi
lea eax, [ebp + 0x27ad]
push ebx
push eax
mov byte [ebp + 0x27ac], bl
call fcn.10076580
push 0x206
mov word [ebp + 0x1884], bx
push ebx
lea eax, [ebp + 0x1886]
push eax
call fcn.10076580
add esp, 0x20
push dword [ebp - 0x14]
lea eax, [ebp + 0x1884]
push 0x104
push eax
push str.UnKnow
push str.InstallParentSign
push str.PreInstall
call edi
lea eax, [ebp + 0x27ac]
push eax
lea eax, [ebp + 0x1884]
push eax
call fcn.1001da9a
push 0x1f3
lea eax, [ebp + 0x23b1]
push ebx
push eax
mov byte [ebp + 0x23b0], bl
call fcn.10076580
push 0x40
lea eax, [ebp + 0x2a1a]
push ebx
push eax
mov word [ebp + 0x2a18], bx
call fcn.10076580
push esi
lea eax, [ebp + 0x28b1]
push ebx
push eax
mov byte [ebp + 0x28b0], bl
call fcn.10076580
add esp, 0x2c
lea ecx, [ebp + 0x20c]
call fcn.10024d7d
lea eax, [ebp + 0x2a18]
push eax
lea ecx, [ebp + 0x20c]
mov byte [ebp - 4], 0xd
call fcn.100258c6
lea eax, [ebp + 0x28b0]
push eax
lea eax, [ebp + 0x2a18]
push eax
call fcn.1001da9a
pop ecx
pop ecx
push str.ShuRuFa
lea ecx, [ebp - 0x44]
call fcn.100015f0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 0x4e0]
push eax
mov byte [ebp - 4], 0xe
call fcn.1001fb72
cmp dword [ebp + 0x4c0], 0x10
mov edx, dword [ebp + 0x4ac]
pop ecx
pop ecx
jae 0x10037207
lea edx, [ebp + 0x4ac]
cmp dword [ebp + 0x4dc], 0x10
mov ecx, dword [ebp + 0x4c8]
jae 0x1003721c
lea ecx, [ebp + 0x4c8]
cmp dword [eax + 0x18], 0x10
jb 0x10037227
mov eax, dword [eax + 4]
jmp 0x1003722a
add eax, 4
lea esi, [ebp + 0x27ac]
push esi
lea esi, [ebp + 0x25a4]
push esi
lea esi, [ebp + 0x26a8]
push esi
push edx
lea edx, [ebp + 0x28b0]
push edx
push ecx
push dword [ebp - 0x24]
lea ecx, [ebp + 0x2ac4]
push dword [ebp - 0x1c]
push ecx
lea ecx, [ebp + 0x2aa0]
push ecx
push eax
lea eax, [ebp + 0x2b10]
push eax
mov eax, edx
push eax
lea eax, [ebp + 0x23b0]
push str._s_t_s_t_s_t_s_t_s_t_d_t_d_t_s_t_s_t_s_t_s_t_s_t_s
push eax
call fcn.10078fad
add esp, 0x3c
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp + 0x4e0]
call fcn.10001770
push ebx
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call fcn.100017f0
push 0x7ce
lea eax, [ebp + 0xcce]
push ebx
push eax
mov word [ebp + 0xccc], bx
call fcn.10076580
lea eax, [ebp + 0xccc]
push eax
lea eax, [ebp + 0x23b0]
push eax
call fcn.1001da71
lea eax, [ebp + 0xccc]
push eax
push str.Install_Data:_s
call fcn.100247c2
push 0x3e7
lea eax, [ebp + 0x149d]
push ebx
push eax
mov byte [ebp + 0x149c], bl
call fcn.10076580
add esp, 0x28
push 0x101d87c8
lea ecx, [ebp + 0x48c]
call fcn.10001580
lea eax, [ebp + 0x23b0]
push eax
mov byte [ebp - 4], 0xf
call fcn.100757d0
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp + 0x149c]
push ecx
push eax
lea eax, [ebp + 0x23b0]
push eax
mov dword [ebp - 0x28], 0x3e8
call fcn.1001b0e4
add esp, 0x14
push 0x1017e1f0
lea ecx, [ebp + 0x48c]
call fcn.10001740
push str.tjv3.znyshurufa.com
lea ecx, [ebp + 0x48c]
call fcn.1001d2e0
push str._TypewritingJou_installjou.v_param
lea ecx, [ebp + 0x48c]
call fcn.1001d2e0
sub esp, 0x1c
lea eax, [ebp + 0x149c]
mov ecx, esp
mov dword [ebp - 0x20], esp
push eax
call fcn.10001580
sub esp, 0x1c
lea eax, [ebp + 0x48c]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 0x10
call fcn.100034c0
lea ecx, [ebp + 0x418]
mov byte [ebp - 4], 0xf
call fcn.1003676a
push ebx
push esi
lea ecx, [ebp + 0x48c]
mov edi, eax
call fcn.10001770
lea ecx, [ebp + 0x20c]
mov byte [ebp - 4], 0xa
call sym.Plugin.dll_CleanUpPluginSystemManager
push ebx
push esi
lea ecx, [ebp + 0x4a8]
call fcn.10001770
lea ecx, [ebp + 0x418]
mov byte [ebp - 4], 3
call fcn.10035bef
push ebx
push esi
lea ecx, [ebp + 0x4c4]
call fcn.10001770
lea ecx, [ebp - 0xd]
mov byte [ebp - 4], 1
call sym.Plugin.dll_CleanUpPluginSystemManager
lea ecx, [ebp]
mov byte [ebp - 4], bl
call sym.Plugin.dll_CleanUpPluginSystemManager
push ebx
push esi
lea ecx, [ebp + 0x470]
call fcn.10001770
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2b34]
xor ecx, ebp
call fcn.10075e13
add ebp, 0x2b38
leave
ret 8