Function at 0x417404
Capabilities:
Check if file exists
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x423f18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x32c
push edi
mov dword [ebp - 0x338], ecx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x10], 0
mov al, byte [0x439ad0]
mov byte [ebp - 0x328], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x327]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x439ad4]
mov byte [ebp - 0x224], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x223]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x439ad8]
mov byte [ebp - 0x11c], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x11b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea ecx, [ebp - 0x18]
call fcn.0041d630
mov dword [ebp - 4], 0
cmp dword [0x4331a8], 0xffffffff
je 0x4174da
mov eax, dword [0x4331a8]
mov dword [ebp - 0x330], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0041d651
mov eax, dword [ebp - 0x330]
jmp 0x41767d
push str.SOFTWAREKingsoftAntivirusKANServer
push 0x80000002
lea ecx, [ebp - 0x18]
call fcn.0041d66d
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
je 0x41750f
push 0
push str.CheckSystemCenter_RegKey.Open___Fail_
call fcn.00410257
add esp, 8
jmp 0x417648
push 0x104
lea ecx, [ebp - 0x328]
push ecx
push str.Path
lea ecx, [ebp - 0x18]
call fcn.0041d8b2
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jne 0x41754b
push 0
push str.CheckSystemCenter_RegKey.Read___Fail_
call fcn.00410257
add esp, 8
jmp 0x417648
lea edx, [ebp - 0x328]
push edx
push 0x439adc
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x417577
push 0
push str.Server_Path_String_is_Empty_
call fcn.00410257
add esp, 8
jmp 0x417648
push str.serverkservice.exe
lea eax, [ebp - 0x328]
push eax
push 0x4356a0
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
je 0x4175be
push 0
push 0x4356a8
call fcn.00410257
add esp, 8
jmp 0x417648
push str.serverProductType.dat
lea eax, [ebp - 0x328]
push eax
push 0x4356dc
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
je 0x417602
push 0
push str.Server_File_does_not_Exist_
call fcn.00410257
add esp, 8
jmp 0x417648
lea eax, [ebp - 0x11c]
push eax
push 0
push str.ProductID
push str.ProductType
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x99a85b
je 0x41763e
push 0
push str.There_is_not_Small_Enterprise_Version_
call fcn.00410257
add esp, 8
jmp 0x417648
mov dword [ebp - 0x32c], 1
lea ecx, [ebp - 0x18]
call fcn.0041d6c6
mov ecx, dword [ebp - 0x32c]
mov dword [0x4331a8], ecx
mov edx, dword [ebp - 0x32c]
mov dword [ebp - 0x334], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0041d651
mov eax, dword [ebp - 0x334]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret