Function at 0x420fed
Capabilities:
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1028
call fcn.00432710
and word [ebp - 0x828], 0
push ebx
push esi
mov esi, ecx
push edi
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x826]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str.Software360360se5
push 0x463d38
lea eax, [ebp - 0x828]
push 0x3ff
push eax
mov dword [ebp - 8], esi
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
mov edi, str.option
push dword [esi + 0x38]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push 0x4651b4
push edi
call esi
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x42107a
lea eax, [ebp - 0x1c]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465198
push eax
push SysReAllocString
call ebx
push dword [ebp + 8]
push 0
push 0x465180
push edi
call esi
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465164
push eax
push SysReAllocString
call ebx
and word [ebp - 0x1028], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x1026]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str.Software360360se5
push str._sdefaultFAV
lea eax, [ebp - 0x1028]
push 0x3ff
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
mov edi, 0x465148
push dword [ebp + 8]
push 1
push edi
push 0x465140
call esi
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push 4
push eax
push 4
push edi
lea eax, [ebp - 0x1028]
mov edi, SysReAllocString
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x465124
push str.option
call esi
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465124
push eax
push edi
call ebx
push dword [ebp + 8]
push 0xfffffffffffffffe
push 0x465104
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465104
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x4650f0
push str.option
call esi
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x4650d4
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x4650b8
push str.option
call esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465098
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x465084
push str.option
call esi
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465060
push eax
push edi
call ebx
push dword [ebp + 8]
push 0
push 0x465050
push str.option
call esi
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x465030
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x46501c
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x464ffc
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x464fe4
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
push 0x464fc4
lea eax, [ebp - 0x828]
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x464fb0
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x464f94
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x464f84
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x464f64
push eax
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x464f54
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x464f3c
push eax
push edi
call ebx
mov eax, dword [ebp - 8]
push dword [eax + 0x38]
push 0x91
push 0x464f2c
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x464f14
push eax
push edi
call ebx
mov eax, dword [ebp - 8]
push dword [eax + 0x38]
push 0xd2
push 0x464f04
push str.option
call esi
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push 4
push eax
push 4
lea eax, [ebp - 0x828]
push 0x464eec
push eax
push edi
call ebx
pop edi
pop esi
pop ebx
leave
ret 4