Function at 0x406aa0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7aff
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x4fbf50]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
xor ebx, ebx
lea eax, [esi + 4]
mov dword [ebp - 0x1a8], ebx
xor ecx, ecx
mov dword [esi], eax
mov word [eax], cx
push 0x4ed96c
or eax, 0xffffffff
mov dword [ebp - 0x188], esi
call fcn.004083b0
lea esi, [edi + 0x108]
mov dword [ebp - 4], ebx
mov eax, esi
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0xd0], 0xf
mov dword [ebp - 0xd4], ebx
mov byte [ebp - 0xe4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x406b25
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0xe4]
call fcn.00403920
mov dword [ebp - 4], 1
push 6
push str.GB2312
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x1b0], 0xf
mov dword [ebp - 0x1b4], ebx
mov byte [ebp - 0x1c4], bl
call fcn.00403920
lea edx, [ebp - 0x1c4]
push edx
lea ecx, [ebp - 0xe4]
lea esi, [ebp - 0x100]
mov byte [ebp - 4], 2
call fcn.0040d370
mov edi, 8
add esp, 4
cmp dword [eax + 0x14], edi
jb 0x406b95
mov eax, dword [eax]
lea ecx, [ebp - 0x180]
xor edx, edx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x184]
mov dword [ebp - 0x184], ecx
mov word [ebp - 0x180], dx
call fcn.004083b0
cmp dword [ebp - 0xec], edi
jb 0x406bd1
mov eax, dword [ebp - 0x100]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xec], 7
mov dword [ebp - 0xf0], ebx
mov word [ebp - 0x100], cx
mov byte [ebp - 4], 4
cmp dword [ebp - 0x1b0], 0x10
jb 0x406c07
mov edx, dword [ebp - 0x1c4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x1b4], ebx
mov byte [ebp - 0x1c4], bl
push 0x4ed944
lea ebx, [ebp - 0x184]
mov dword [ebp - 0x1b0], edi
call fcn.00408260
push 6
xor ebx, ebx
push str.GB2312
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x190], edi
mov dword [ebp - 0x194], ebx
mov byte [ebp - 0x1a4], bl
call fcn.00403920
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x184]
xor eax, eax
mov word [ebp - 0xc8], ax
mov eax, edx
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0xb8], ebx
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x406c80
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0xc8]
call fcn.00403c20
lea ecx, [ebp - 0xc8]
push ecx
lea ecx, [ebp - 0x1a4]
lea ebx, [ebp - 0x90]
mov byte [ebp - 4], 6
call fcn.0040d2a0
mov esi, 0x10
add esp, 4
cmp dword [eax + 0x14], esi
jb 0x406cc7
mov eax, dword [eax]
push eax
push 0x63
lea edx, [ebp - 0x74]
push edx
push str.2000_01_01
push str.SETUPDATE
push 0x4ed968
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp dword [ebp - 0x7c], esi
jb 0x406cf8
mov eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x7c], edi
xor ebx, ebx
mov edi, 8
mov dword [ebp - 0x80], ebx
mov byte [ebp - 0x90], bl
cmp dword [ebp - 0xb4], edi
jb 0x406d23
mov ecx, dword [ebp - 0xc8]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edx, edx
mov byte [ebp - 4], 4
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0xb8], ebx
mov word [ebp - 0xc8], dx
cmp dword [ebp - 0x190], esi
jb 0x406d58
mov eax, dword [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
lea eax, [ebp - 0x74]
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x406d75
sub eax, edx
push eax
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0xac]
call fcn.00403920
mov byte [ebp - 4], 7
push 6
push str.GB2312
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x190], esi
mov dword [ebp - 0x194], ebx
mov byte [ebp - 0x1a4], bl
call fcn.00403920
lea edx, [ebp - 0x1a4]
push edx
lea ecx, [ebp - 0xac]
lea esi, [ebp - 0x90]
mov byte [ebp - 4], 8
call fcn.0040d370
add esp, 4
cmp dword [eax + 0x14], edi
jb 0x406ddc
mov eax, dword [eax]
cmp eax, ebx
je 0x406df1
mov esi, dword [ebp - 0x188]
push eax
or eax, 0xffffffff
call fcn.004083b0
jmp 0x406e1c
mov edi, dword [ebp - 0x188]
mov eax, dword [edi]
lea esi, [edi + 4]
cmp eax, esi
je 0x406e0a
push eax
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
xor eax, eax
mov dword [edi], esi
mov word [esi], ax
mov esi, dword [ebp - 0x188]
mov edi, 8
cmp dword [ebp - 0x7c], edi
mov edi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
jb 0x406e33
mov ecx, dword [ebp - 0x90]
push ecx
call edi
add esp, 4
xor edx, edx
cmp dword [ebp - 0x190], 0x10
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x90], dx
jb 0x406e5b
mov eax, dword [ebp - 0x1a4]
push eax
call edi
add esp, 4
cmp dword [ebp - 0x98], 0x10
jb 0x406e70
mov ecx, dword [ebp - 0xac]
push ecx
call edi
add esp, 4
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x180]
mov dword [ebp - 0x98], 0xf
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
cmp eax, edx
je 0x406ea0
push eax
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
cmp dword [ebp - 0xd0], 0x10
jb 0x406eb5
mov eax, dword [ebp - 0xe4]
push eax
call edi
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b7299
mov esp, ebp
pop ebp
ret