Function at 0x42cd60
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x58b4c9
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x5e173c]
xor eax, esp
mov dword [esp + 0x304], eax
push ebx
push esi
push edi
mov eax, dword [0x5e173c]
xor eax, esp
push eax
lea eax, [esp + 0x318]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [esp + 0x320], 0
xor eax, eax
mov dword [esp + 0x14], 0
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
mov dword [esp + 0x30], edi
mov word [edi], ax
mov dword [esp + 0x320], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], eax
mov word [esp + 0x64], ax
mov dword [esp + 0x320], 1
lea ecx, [esp + 0xac]
push 0x34
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall_
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], eax
mov word [esp + 0xb4], ax
call fcn.00404a80
mov byte [esp + 0x320], 2
lea ecx, [esp + 0xac]
push 0xffffffffffffffff
push 0
push esi
call fcn.004047c0
push 0xf
xor eax, eax
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
lea ecx, [esp + 0x98]
push str.UninstallString
mov dword [esp + 0xb0], 7
mov dword [esp + 0xac], 0
mov word [esp + 0x9c], ax
call fcn.00404a80
mov byte [esp + 0x320], 3
push 7
push str.QQPCMgr
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
je 0x42cf82
push 8
push str.PPStream
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
je 0x42cf82
push 6
push str.qqlive
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
je 0x42cf82
mov edx, str.KwMusic7
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, str.YoukuClient
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, 0x5aa84c
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, str.WeChat
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, str.LoveCloud
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, str.052CFB79_9D62_42E3_8A15_DE66C2C97C3E
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, str.thunder_is1
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, str.7D04FD44_8AEB_11EC_A605_1402EC34E358
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42cf82
mov edx, 0x5ac578
mov ecx, esi
call fcn.0040d190
test al, al
je 0x42cf95
push 0xe
push str.DisplayVersion
lea ecx, [esp + 0x9c]
call fcn.00404a80
push 5
push 0x5ac7d8
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
je 0x42cfc1
push 0xc
push str.2345GameHall
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
jne 0x42cfd4
push 0xb
push str.DisplayIcon
lea ecx, [esp + 0x9c]
call fcn.00404a80
lea eax, [esp + 0x64]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [esp + 0x98]
push 0
push eax
lea edx, [esp + 0xb8]
call fcn.0042cc40
add esp, 0xc
cmp dword [esp + 0x74], 0
jne 0x42d084
lea eax, [esp + 0x64]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [esp + 0x98]
push 1
push eax
lea edx, [esp + 0xb8]
call fcn.0042cc40
add esp, 0xc
cmp dword [esp + 0x74], 0
jne 0x42d084
lea eax, [esp + 0x64]
mov ecx, SysReAllocString
push eax
lea eax, [esp + 0x98]
push 0
push eax
lea edx, [esp + 0xb8]
call fcn.0042cc40
add esp, 0xc
cmp dword [esp + 0x74], 0
jne 0x42d084
lea eax, [esp + 0x64]
mov ecx, SysReAllocString
push eax
lea eax, [esp + 0x98]
push 1
push eax
lea edx, [esp + 0xb8]
call fcn.0042cc40
add esp, 0xc
cmp dword [esp + 0x74], 0
je 0x42d7a5
push 0xc
push str.2345Explorer
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
jne 0x42d5b6
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], eax
mov word [esp + 0x7c], ax
mov byte [esp + 0x320], 4
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x64]
call fcn.004b26b0
push str.chrome.dll
lea ecx, [esp + 0x50]
call fcn.00403a70
mov byte [esp + 0x320], 5
lea eax, [esp + 0x4c]
push eax
lea edx, [esp + 0x80]
lea ecx, [esp + 0xc8]
call fcn.004b2290
add esp, 4
mov byte [esp + 0x320], 7
cmp dword [esp + 0x60], 8
jb 0x42d124
push dword [esp + 0x4c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
lea edx, [esp + 0x7c]
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
lea ecx, [eax + 0x1c]
call fcn.00411f00
push str.2345Explorer
lea ecx, [esp + 0x50]
call fcn.00403a70
mov byte [esp + 0x320], 8
lea eax, [esp + 0x4c]
push eax
lea edx, [esp + 0x80]
lea ecx, [esp + 0x38]
call fcn.004b2290
add esp, 4
mov ebx, eax
mov byte [esp + 0x320], 9
lea eax, [esp + 0x7c]
cmp eax, ebx
je 0x42d1ca
cmp dword [esp + 0x90], 8
jb 0x42d19d
push dword [esp + 0x7c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
push ebx
lea ecx, [esp + 0x80]
mov dword [esp + 0x90], 0
mov word [esp + 0x80], ax
call fcn.00404150
mov byte [esp + 0x320], 8
cmp dword [esp + 0x48], 8
jb 0x42d1e5
push dword [esp + 0x34]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
mov byte [esp + 0x320], 7
cmp dword [esp + 0x60], 8
jb 0x42d217
push dword [esp + 0x4c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
push str.Application
lea ecx, [esp + 0x50]
mov dword [esp + 0x60], 0
mov word [esp + 0x50], ax
call fcn.00403a70
mov byte [esp + 0x320], 0xa
lea eax, [esp + 0x4c]
push eax
lea edx, [esp + 0x80]
lea ecx, [esp + 0xe0]
call fcn.004b2290
add esp, 4
mov byte [esp + 0x320], 0xc
cmp dword [esp + 0x60], 8
jb 0x42d27a
push dword [esp + 0x4c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
lea ecx, [esp + 0xdc]
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
call fcn.004b3080
test al, al
je 0x42d483
push str.config.ini
lea ecx, [esp + 0x38]
call fcn.00403a70
mov byte [esp + 0x320], 0xd
lea eax, [esp + 0x34]
push eax
lea edx, [esp + 0x80]
lea ecx, [esp + 0x50]
call fcn.004b2290
add esp, 4
mov byte [esp + 0x320], 0xf
cmp dword [esp + 0x48], 8
jb 0x42d2ee
push dword [esp + 0x34]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x48], 7
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
call fcn.004b24f0
test al, al
je 0x42d451
xor eax, eax
push 0x206
push eax
mov word [esp + 0x114], ax
lea eax, [esp + 0x116]
push eax
call fcn.0056cbb0
add esp, 0xc
lea eax, [esp + 0x4c]
cmp dword [esp + 0x60], 8
cmovae eax, dword [esp + 0x4c]
push eax
push 0x104
lea eax, [esp + 0x114]
push eax
push 0
push str.Version
push str.AppLoadInfo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x42d451
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x1c]
call fcn.00403a70
mov byte [esp + 0x320], 0x10
lea edx, [esp + 0xdc]
push eax
lea ecx, [esp + 0x38]
call fcn.004b2290
add esp, 4
mov byte [esp + 0x320], 0x12
lea ecx, [esp + 0x18]
call fcn.00403b40
lea ecx, [esp + 0x34]
call fcn.004b3080
test al, al
je 0x42d440
push str.chrome.dll
lea ecx, [esp + 0x1c]
call fcn.00403a70
mov byte [esp + 0x320], 0x13
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x38]
lea ecx, [esp + 0xf8]
call fcn.004b2290
add esp, 4
mov byte [esp + 0x320], 0x15
lea ecx, [esp + 0x18]
call fcn.00403b40
lea ecx, [esp + 0xf4]
call fcn.004b24f0
test al, al
je 0x42d42c
push 0xffffffffffffffff
push 0
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0xd0]
call fcn.00404960
mov byte [esp + 0x320], 0x12
lea ecx, [esp + 0xf4]
call fcn.00403b40
mov byte [esp + 0x320], 0xf
lea ecx, [esp + 0x34]
call fcn.00403b40
mov byte [esp + 0x320], 0xc
cmp dword [esp + 0x60], 8
jb 0x42d46c
push dword [esp + 0x4c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
lea ecx, [esp + 0xc4]
call fcn.004b24f0
lea ecx, [esp + 0x34]
test al, al
je 0x42d4ad
lea edx, [esp + 0xc4]
call fcn.004b8b90
mov byte [esp + 0x320], 0x16
jmp 0x42d4be
lea edx, [esp + 0x64]
call fcn.004b8b90
mov byte [esp + 0x320], 0x17
push eax
mov ecx, edi
call fcn.00403b00
mov byte [esp + 0x320], 0xc
cmp dword [esp + 0x48], 8
jb 0x42d4e1
push dword [esp + 0x34]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x48], 7
mov word [esp + 0x34], ax
mov dword [esp + 0x44], eax
mov byte [esp + 0x320], 7
cmp dword [esp + 0xf0], 8
jb 0x42d515
push dword [esp + 0xdc]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xf0], 7
mov dword [esp + 0xec], 0
mov word [esp + 0xdc], ax
mov byte [esp + 0x320], 4
cmp dword [esp + 0xd8], 8
jb 0x42d556
push dword [esp + 0xc4]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xd8], 7
mov dword [esp + 0xd4], 0
mov word [esp + 0xc4], ax
mov byte [esp + 0x320], 3
cmp dword [esp + 0x90], 8
jb 0x42d594
push dword [esp + 0x7c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
jmp 0x42d7a5
push 7
push str.QQPCMgr
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
je 0x42d791
mov edx, str.PPStream
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.qqlive
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.YoukuClient
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.KwMusic7
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, 0x5aa84c
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.WeChat
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.LoveCloud
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.052CFB79_9D62_42E3_8A15_DE66C2C97C3E
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.thunder_is1
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.7D04FD44_8AEB_11EC_A605_1402EC34E358
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, 0x5ac578
mov ecx, esi
call fcn.0040d190
test al, al
jne 0x42d791
mov edx, str.e2371ebd_7734_58dc_97bd_f6c9d997b351
mov ecx, esi
call fcn.0040d190
lea ecx, [esp + 0x64]
test al, al
je 0x42d749
push 0
push 0x5a9aa8
call fcn.0042a590
add eax, 4
lea ecx, [esp + 0x64]
push eax
push 0
lea eax, [esp + 0x3c]
push eax
call fcn.00403c50
mov byte [esp + 0x320], 0x18
mov edx, 0x5a8f9c
lea ecx, [esp + 0x34]
call fcn.004afdd0
mov edx, 0x5a8f9c
lea ecx, [esp + 0x34]
call fcn.004afe40
lea edx, [esp + 0x34]
lea ecx, [esp + 0x18]
call fcn.004b8b90
mov byte [esp + 0x320], 0x19
mov ecx, edi
push eax
call fcn.00403b00
mov byte [esp + 0x320], 0x18
lea ecx, [esp + 0x18]
call fcn.00403b40
mov byte [esp + 0x320], 3
lea ecx, [esp + 0x34]
call fcn.00403b40
jmp 0x42d7a5
mov edx, 0x5a8f9c
call fcn.004afdd0
mov edx, 0x5a8f9c
lea ecx, [esp + 0x64]
call fcn.004afe40
lea edx, [esp + 0x64]
lea ecx, [esp + 0x18]
call fcn.004b8b90
mov byte [esp + 0x320], 0x1a
mov ecx, edi
push eax
call fcn.00403b00
mov byte [esp + 0x320], 3
lea ecx, [esp + 0x18]
call fcn.00403b40
jmp 0x42d7a5
lea eax, [esp + 0x64]
cmp edi, eax
je 0x42d7a5
push 0xffffffffffffffff
push 0
push eax
mov ecx, edi
call fcn.00404960
push 0xd
push str.StellarPlayer
push dword [esi + 0x10]
push ecx
mov ecx, esi
call fcn.0040d0c0
test eax, eax
jne 0x42d7cf
push 0x5ac8f0
mov edx, 0x5ac8f4
mov ecx, edi
call fcn.004afc90
add esp, 4
mov byte [esp + 0x320], 2
cmp dword [esp + 0xa8], 8
jb 0x42d7f0
push dword [esp + 0x94]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], 0
mov word [esp + 0x94], ax
mov byte [esp + 0x320], 1
cmp dword [esp + 0xc0], 8
jb 0x42d831
push dword [esp + 0xac]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
mov byte [esp + 0x320], al
cmp dword [esp + 0x78], 8
jb 0x42d86b
push dword [esp + 0x64]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov eax, edi
mov ecx, dword [esp + 0x318]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x304]
xor ecx, esp
call fcn.00564de8
add esp, 0x314
ret