Function at 0x4b8490
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x57ed47
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5d7050]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x2c]
test byte [0x6198b8], 1
jne 0x4b84d0
or dword [0x6198b8], 1
call fcn.0043b8d0
mov eax, 0x619894
call fcn.0043b920
cmp eax, 1
jne 0x4b852e
mov eax, dword [0x619880]
test eax, eax
jne 0x4b84f2
call fcn.00418600
mov dword [0x619880], eax
cmp eax, 6
jne 0x4b852e
test byte [0x6199c8], 1
jne 0x4b8519
or dword [0x6199c8], 1
call fcn.0046c480
push 0x580670
call fcn.0056a011
add esp, 4
cmp byte [0x6199f0], 0
jne 0x4b852e
mov ecx, ebp
call fcn.004bc0a0
jmp 0x4b8965
lea esi, [ebp + 0x1a8c]
mov edi, 8
cmp dword [esi + 0x18], edi
mov dword [esp + 0x2c], esi
jb 0x4b8547
mov eax, dword [esi + 4]
jmp 0x4b854a
lea eax, [esi + 4]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push eax
push 0
push str.360loacllan
push str.softtip
call ebx
test eax, eax
jne 0x4b85eb
call fcn.0043ae50
test eax, eax
je 0x4b85eb
cmp dword [ebp + 0x1874], 0
jne 0x4b85c2
push 0x3ac
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov dword [esp + 0x24], 0
je 0x4b859e
push eax
call fcn.004a6060
jmp 0x4b85a0
xor eax, eax
mov dword [esp + 0x24], 0xffffffff
push 0
mov dword [ebp + 0x1874], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
mov eax, dword [ebp + 0x1874]
call fcn.004817c0
mov eax, dword [ebp + 0x1874]
mov ecx, dword [ebp + 0x1c]
mov dword [eax + 0x370], ecx
mov ecx, dword [ebp + 0x1874]
mov eax, 0xf
call fcn.004a6860
mov ebx, str.360loacllan
jmp 0x4b8954
cmp dword [esi + 0x18], edi
jb 0x4b85f5
mov eax, dword [esi + 4]
jmp 0x4b85f8
lea eax, [esi + 4]
push eax
push 0
push str.proxy
push str.softtip
call ebx
test eax, eax
jne 0x4b8693
call fcn.0043a950
test eax, eax
je 0x4b8693
cmp dword [ebp + 0x1874], 0
jne 0x4b866a
push 0x3ac
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov dword [esp + 0x24], 1
je 0x4b8646
push eax
call fcn.004a6060
jmp 0x4b8648
xor eax, eax
mov dword [esp + 0x24], 0xffffffff
push 0
mov dword [ebp + 0x1874], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
mov eax, dword [ebp + 0x1874]
call fcn.004817c0
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x1874]
mov dword [edx + 0x370], eax
mov ecx, dword [ebp + 0x1874]
mov eax, 0xe
call fcn.004a6860
mov ebx, str.proxy
jmp 0x4b8954
cmp dword [esi + 0x18], edi
jb 0x4b869d
mov eax, dword [esi + 4]
jmp 0x4b86a0
lea eax, [esi + 4]
push eax
push 0
push str.devdriveupdate
push str.softtip
call ebx
cmp eax, 2
jae 0x4b87de
test byte [0x6199c8], 1
jne 0x4b86da
or dword [0x6199c8], 1
call fcn.0046c480
push 0x580670
call fcn.0056a011
add esp, 4
cmp byte [0x6199da], 0
jne 0x4b87de
call fcn.0046c550
mov edi, eax
push 0x527ca0
mov ecx, edi
call fcn.005278d0
cmp eax, 1
jne 0x4b87d9
mov eax, dword [edi + 0x14]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
je 0x4b87d9
mov eax, dword [0x619880]
test eax, eax
jne 0x4b8727
call fcn.00418600
mov dword [0x619880], eax
cmp eax, 6
jle 0x4b87d9
cmp dword [ebp + 0x1874], 0
jne 0x4b8782
push 0x3ac
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov dword [esp + 0x24], 2
je 0x4b875e
push eax
call fcn.004a6060
jmp 0x4b8760
xor eax, eax
mov dword [esp + 0x24], 0xffffffff
push 0
mov dword [ebp + 0x1874], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
mov eax, dword [ebp + 0x1874]
call fcn.004817c0
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x1874]
mov dword [edx + 0x370], eax
mov ecx, dword [ebp + 0x1874]
mov eax, 0x13
call fcn.004a6860
push 0
mov ecx, str.devdriveupdate
mov edx, str.softtip
mov eax, esi
call fcn.0040b6e0
add eax, 1
mov ecx, eax
mov ebx, str.devdriveupdate
mov edi, str.softtip
mov edx, esi
call fcn.0040b800
mov dword [ebp + 0xaa4], 1
jmp 0x4b8965
mov edi, 8
cmp dword [esi + 0x18], edi
jb 0x4b87e8
mov eax, dword [esi + 4]
jmp 0x4b87eb
lea eax, [esi + 4]
push eax
push 0
push str.avast
push str.softtip
call ebx
test eax, eax
jne 0x4b888f
xor esi, esi
call fcn.004a61f0
test eax, eax
je 0x4b888b
cmp dword [ebp + 0x1874], esi
jne 0x4b885e
push 0x3ac
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24], 3
je 0x4b883a
push eax
call fcn.004a6060
jmp 0x4b883c
xor eax, eax
mov dword [esp + 0x24], 0xffffffff
push 0
mov dword [ebp + 0x1874], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
mov eax, dword [ebp + 0x1874]
call fcn.004817c0
mov ecx, dword [ebp + 0x1874]
mov edx, dword [ebp + 0x1c]
mov dword [ecx + 0x370], edx
mov ecx, dword [ebp + 0x1874]
mov eax, 0xd
call fcn.004a6860
mov edx, dword [esp + 0x2c]
mov ebx, str.avast
jmp 0x4b8956
mov esi, dword [esp + 0x2c]
cmp dword [esi + 0x18], edi
jb 0x4b8899
mov eax, dword [esi + 4]
jmp 0x4b889c
lea eax, [esi + 4]
push eax
push 0
push str.androidsearch
push str.softtip
call ebx
test eax, eax
jne 0x4b8965
mov eax, dword [0x619880]
test eax, eax
jne 0x4b88c6
call fcn.00418600
mov dword [0x619880], eax
cmp eax, 6
jg 0x4b8965
call fcn.0046c450
cmp byte [eax + 0x24], 0
jne 0x4b8965
cmp dword [ebp + 0x1874], 0
jne 0x4b8930
push 0x3ac
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov dword [esp + 0x24], 4
je 0x4b890c
push eax
call fcn.004a6060
jmp 0x4b890e
xor eax, eax
mov dword [esp + 0x24], 0xffffffff
push 0
mov dword [ebp + 0x1874], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
mov eax, dword [ebp + 0x1874]
call fcn.004817c0
mov eax, dword [ebp + 0x1874]
mov ecx, dword [ebp + 0x1c]
mov dword [eax + 0x370], ecx
mov ecx, dword [ebp + 0x1874]
mov eax, 0x1b
call fcn.004a6860
mov ebx, str.androidsearch
mov edx, esi
mov ecx, 1
mov edi, str.softtip
call fcn.0040b800
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4