Function at 0x10034dc7
Capabilities:
Read .ini file

Disassembly:
push ebp
lea ebp, [esp - 0x2b38]
mov eax, 0x2b38
call fcn.10072c80
push 0xffffffffffffffff
push 0x100cf57a
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x1011ac70]
xor eax, ebp
mov dword [ebp + 0x2b34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 8
mov dword [ebp - 0x20], ecx
pop ecx
xor eax, eax
push 8
mov edx, dword [ebp + 0x2b40]
xor ebx, ebx
mov byte [ebp + 0x2b10], bl
lea edi, [ebp + 0x2b11]
rep stosd dword es:[edi], eax
pop ecx
push 8
mov byte [ebp + 0x2aa0], bl
lea edi, [ebp + 0x2aa1]
rep stosd dword es:[edi], eax
pop ecx
mov byte [ebp + 0x2ac4], bl
lea edi, [ebp + 0x2ac5]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x2b10]
push eax
lea eax, [ebp + 0x2ac4]
push eax
lea eax, [ebp + 0x2aa0]
push eax
push str.________________d__d
push edx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
call fcn.10075825
call fcn.1001de77
xor edx, edx
mov ecx, 0xf4240
div ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp + 0x2b10]
push eax
call fcn.10071a00
mov dword [ebp - 0x14], eax
add esp, 0x20
lea eax, [ebp + 0x2b10]
push eax
lea ecx, [ebp + 0x470]
call fcn.10001580
mov esi, 0x103
push esi
lea eax, [ebp + 0x26a9]
push ebx
push eax
mov dword [ebp - 4], ebx
mov byte [ebp + 0x26a8], bl
call fcn.10072750
add esp, 0xc
call fcn.1001de77
mov edi, eax
mov eax, dword [ebp - 0x14]
cmp eax, 6
jle 0x10034f17
push 0xffffffffffffffff
add eax, 0xfffffffa
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp + 0x470]
call fcn.1001eb62
cmp dword [eax + 0x18], 0x10
jb 0x10034ef5
mov eax, dword [eax + 4]
jmp 0x10034ef8
add eax, 4
push eax
call fcn.10075891
mov edi, eax
mov eax, dword [ebp - 0x18]
imul eax, eax, 0xf4240
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x44]
add edi, eax
call fcn.10001770
push 0x206
lea eax, [ebp + 0x1a8e]
push ebx
push eax
mov word [ebp + 0x1a8c], bx
call fcn.10072750
mov eax, edi
cdq
mov ecx, 0x2710
idiv ecx
push 0x64
mov dword [ebp - 0x18], eax
mov ecx, edx
mov eax, edi
pop edi
cdq
idiv edi
mov eax, ecx
push edx
push edi
pop ecx
cdq
idiv ecx
push eax
push dword [ebp - 0x18]
lea eax, [ebp + 0x1a8c]
push str._d__02d__d
push eax
call fcn.100048d5
lea eax, [ebp + 0x1a8c]
push eax
call fcn.1001fc9f
push eax
lea eax, [ebp + 0x26a8]
push 0x100dd9d0
push eax
call fcn.1007517d
add esp, 0x30
cmp dword [ebp + 0x2b44], ebx
je 0x10034ffa
mov edi, dword [ebp - 0x14]
cmp edi, 6
jle 0x10034ffa
push 0x63
lea eax, [ebp + 0x29b5]
push ebx
push eax
mov byte [ebp + 0x29b4], bl
call fcn.10072750
add edi, 0xfffffffa
push edi
lea eax, [ebp + 0x2b10]
push eax
lea eax, [ebp + 0x29b4]
push eax
call fcn.10077fe0
mov ecx, dword [ebp - 0x20]
add esp, 0x18
call fcn.10034b7e
cmp eax, ebx
jle 0x10034fd9
push eax
call fcn.1001ceed
pop ecx
jmp 0x10034fde
call fcn.1001ce66
push eax
lea eax, [ebp + 0x29b4]
push eax
lea eax, [ebp + 0x2b10]
push str._s_d
push eax
call fcn.1007517d
add esp, 0x10
push 0x40
lea eax, [ebp + 0x2a5e]
push ebx
push eax
mov word [ebp + 0x2a5c], bx
call fcn.10072750
push esi
lea eax, [ebp + 0x25a5]
push ebx
push eax
mov byte [ebp + 0x25a4], bl
call fcn.10072750
add esp, 0x18
lea ecx, [ebp]
call fcn.10025e65
lea eax, [ebp + 0x2a5c]
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.100268af
lea eax, [ebp + 0x25a4]
push eax
lea eax, [ebp + 0x2a5c]
push eax
call fcn.1001cd11
pop ecx
pop ecx
call fcn.10004c83
mov ecx, eax
call fcn.1001a6c0
push 0x206
mov dword [ebp - 0x14], eax
lea eax, [ebp + 0x20a6]
push ebx
push eax
mov word [ebp + 0x20a4], bx
call fcn.10072750
add esp, 0xc
lea ecx, [ebp - 0xd]
call fcn.10035790
lea eax, [ebp + 0x20a4]
push eax
mov edi, str.UIdentifier
push edi
lea ecx, [ebp - 0xd]
mov byte [ebp - 4], 2
call fcn.100225df
lea eax, [ebp + 0x2a5c]
push eax
lea eax, [ebp + 0x20a4]
push eax
call fcn.100723c5
test eax, eax
pop ecx
pop ecx
je 0x10035109
lea eax, [ebp + 0x20a4]
push eax
call fcn.100726e4
cmp eax, 0x20
pop ecx
jne 0x100350f9
push dword [ebp - 0x14]
push 0x100d52e0
push str.UIDError
push str.InstallInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp + 0x20a4]
push eax
push str.UID_Error_LastUID__s
call fcn.100237d2
pop ecx
pop ecx
lea eax, [ebp + 0x2a5c]
push eax
push edi
lea ecx, [ebp - 0xd]
call fcn.100226f7
push 0x7ce
lea eax, [ebp + 0x4fe]
push ebx
push eax
mov word [ebp + 0x4fc], bx
call fcn.10072750
add esp, 0xc
push 0x10102ef4
lea ecx, [ebp + 0x4c4]
call fcn.10001580
push str.tjv3.dfshurufa.com
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 3
call fcn.10001580
lea eax, [ebp + 0x4e0]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 4
call fcn.1001f15a
cmp dword [eax + 0x18], 8
pop ecx
pop ecx
jb 0x1003516a
mov eax, dword [eax + 4]
jmp 0x1003516d
add eax, 4
push eax
lea eax, [ebp + 0x4fc]
push str.http:___s_TypewritingJou_reti_cinstalljou
push eax
call fcn.100048d5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 3
call fcn.10001770
lea ecx, [ebp + 0x418]
call fcn.10024ee2
mov byte [ebp - 4], 5
xor edi, edi
jmp 0x100351c3
cmp edi, 1
jge 0x100351e0
push 0x3e8
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x4c4]
push eax
lea eax, [ebp + 0x4fc]
push eax
lea ecx, [ebp + 0x418]
call fcn.10025383
cmp eax, ebx
je 0x100351b2
cmp dword [ebp + 0x4dc], 0x10
mov eax, dword [ebp + 0x4c8]
jae 0x100351f5
lea eax, [ebp + 0x4c8]
push eax
call fcn.10075891
mov edx, eax
push 9
pop ecx
xor eax, eax
mov word [ebp + 0x2ae8], bx
lea edi, [ebp + 0x2aea]
rep stosd dword es:[edi], eax
push edx
stosw word es:[edi], ax
lea eax, [ebp + 0x2ae8]
push 0x100d52e4
push eax
call fcn.100048d5
add esp, 0x10
cmp dword [ebp + 0x2b44], ebx
mov edi, str.Setting
je 0x1003532e
call fcn.10004c83
mov ecx, eax
call fcn.1001a66b
push eax
lea ecx, [ebp + 0x4e0]
call fcn.100015f0
push str.DongFangInfo.ini
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 6
call fcn.10003620
lea eax, [ebp + 0x2b10]
push eax
lea ecx, [ebp - 0x44]
call fcn.10001580
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 7
call fcn.1001f15a
cmp dword [ebp + 0x4f8], 8
pop ecx
pop ecx
mov ecx, dword [ebp + 0x4e4]
jae 0x1003529c
lea ecx, [ebp + 0x4e4]
cmp dword [eax + 0x18], 8
jb 0x100352a7
mov eax, dword [eax + 4]
jmp 0x100352aa
add eax, 4
push ecx
push eax
push str.Spreader
push str.AppInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push ebx
push 1
lea ecx, [ebp - 0x60]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.10001770
push 0x206
lea eax, [ebp + 0x1e9e]
push ebx
push eax
mov word [ebp + 0x1e9c], bx
call fcn.10072750
lea eax, [ebp + 0x2ae8]
push eax
lea eax, [ebp + 0x1e9c]
push 0x100d6110
push eax
call fcn.100048d5
add esp, 0x18
push dword [ebp - 0x14]
lea eax, [ebp + 0x1e9c]
push eax
push str.FirstInstallTime
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push ebx
push 1
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 5
call fcn.100017f0
lea eax, [ebp + 0x2b10]
push str.updsp
push eax
call fcn.100786b0
cmp eax, ebx
pop ecx
pop ecx
jne 0x1003535b
push dword [ebp - 0x14]
lea eax, [ebp + 0x2ae8]
push eax
push str.InstallTime
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0x60]
push ebx
push eax
call fcn.1001f5f5
push eax
lea eax, [ebp + 0x4a8]
push eax
mov byte [ebp - 4], 8
call fcn.1001eb80
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xa
call fcn.100017f0
push 0x10102ef4
lea ecx, [ebp + 0x4e0]
call fcn.10001580
push 0x100ddf9c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb
call fcn.10001580
lea eax, [ebp + 0x4e0]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 0x4a8]
push eax
mov byte [ebp - 4], 0xc
call fcn.1001eb05
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.10001770
push ebx
push 1
lea ecx, [ebp + 0x4e0]
mov byte [ebp - 4], 0xa
call fcn.10001770
push esi
lea eax, [ebp + 0x27ad]
push ebx
push eax
mov byte [ebp + 0x27ac], bl
call fcn.10072750
push 0x206
lea eax, [ebp + 0x1c96]
push ebx
push eax
mov word [ebp + 0x1c94], bx
call fcn.10072750
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
add esp, 0x18
push dword [ebp - 0x14]
lea eax, [ebp + 0x1c94]
push 0x104
push eax
push str.UnKnow
push str.InstallParentName
push str.PreInstall
call edi
lea eax, [ebp + 0x27ac]
push eax
lea eax, [ebp + 0x1c94]
push eax
call fcn.1001cd11
push esi
lea eax, [ebp + 0x28b1]
push ebx
push eax
mov byte [ebp + 0x28b0], bl
call fcn.10072750
push 0x206
mov word [ebp + 0x1884], bx
push ebx
lea eax, [ebp + 0x1886]
push eax
call fcn.10072750
add esp, 0x20
push dword [ebp - 0x14]
lea eax, [ebp + 0x1884]
push 0x104
push eax
push str.UnKnow
push str.InstallParentSign
push str.PreInstall
call edi
lea eax, [ebp + 0x28b0]
push eax
lea eax, [ebp + 0x1884]
push eax
call fcn.1001cd11
push 0x1f3
lea eax, [ebp + 0x22ad]
push ebx
push eax
mov byte [ebp + 0x22ac], bl
call fcn.10072750
push 0x40
lea eax, [ebp + 0x2a1a]
push ebx
push eax
mov word [ebp + 0x2a18], bx
call fcn.10072750
push esi
lea eax, [ebp + 0x24a1]
push ebx
push eax
mov byte [ebp + 0x24a0], bl
call fcn.10072750
add esp, 0x2c
lea ecx, [ebp + 0x20c]
call fcn.10025e65
lea eax, [ebp + 0x2a18]
push eax
lea ecx, [ebp + 0x20c]
mov byte [ebp - 4], 0xd
call fcn.10024bbf
lea eax, [ebp + 0x24a0]
push eax
lea eax, [ebp + 0x2a18]
push eax
call fcn.1001cd11
pop ecx
pop ecx
push str.ShuRuFa
lea ecx, [ebp - 0x44]
call fcn.100015f0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 0x4e0]
push eax
mov byte [ebp - 4], 0xe
call fcn.1001eb80
cmp dword [ebp + 0x4c0], 0x10
mov edx, dword [ebp + 0x4ac]
pop ecx
pop ecx
jae 0x10035563
lea edx, [ebp + 0x4ac]
cmp dword [ebp + 0x4dc], 0x10
mov ecx, dword [ebp + 0x4c8]
jae 0x10035578
lea ecx, [ebp + 0x4c8]
cmp dword [eax + 0x18], 0x10
jb 0x10035583
mov eax, dword [eax + 4]
jmp 0x10035586
add eax, 4
lea esi, [ebp + 0x28b0]
push esi
lea esi, [ebp + 0x27ac]
push esi
lea esi, [ebp + 0x26a8]
push esi
push edx
lea edx, [ebp + 0x24a0]
push edx
push ecx
push dword [ebp - 0x24]
lea ecx, [ebp + 0x2ac4]
push dword [ebp - 0x1c]
push ecx
lea ecx, [ebp + 0x2aa0]
push ecx
push eax
lea eax, [ebp + 0x2b10]
push eax
lea eax, [ebp + 0x25a4]
push eax
lea eax, [ebp + 0x22ac]
push str._s_t_s_t_s_t_s_t_s_t_d_t_d_t_s_t_s_t_s_t_s_t_s_t_s
push eax
call fcn.1007517d
add esp, 0x3c
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp + 0x4e0]
call fcn.10001770
push ebx
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call fcn.100017f0
push 0x7ce
lea eax, [ebp + 0xcce]
push ebx
push eax
mov word [ebp + 0xccc], bx
call fcn.10072750
lea eax, [ebp + 0xccc]
push eax
lea eax, [ebp + 0x22ac]
push eax
call fcn.1001cce8
lea eax, [ebp + 0xccc]
push eax
push str.Install_Data:_s
call fcn.100237d2
push 0x3e7
lea eax, [ebp + 0x149d]
push ebx
push eax
mov byte [ebp + 0x149c], bl
call fcn.10072750
add esp, 0x28
push 0x10102ef4
lea ecx, [ebp + 0x48c]
call fcn.10001580
lea eax, [ebp + 0x22ac]
push eax
mov byte [ebp - 4], 0xf
call fcn.10071a00
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp + 0x149c]
push ecx
push eax
lea eax, [ebp + 0x22ac]
push eax
mov dword [ebp - 0x28], 0x3e8
call fcn.1001a315
add esp, 0x14
push 0x100dda0c
lea ecx, [ebp + 0x48c]
call fcn.10001740
push str.tjv3.dfshurufa.com
lea ecx, [ebp + 0x48c]
call fcn.1001c4cd
push str._TypewritingJou_installjou.v_param
lea ecx, [ebp + 0x48c]
call fcn.1001c4cd
sub esp, 0x1c
lea eax, [ebp + 0x149c]
mov ecx, esp
mov dword [ebp - 0x20], esp
push eax
call fcn.10001580
sub esp, 0x1c
lea eax, [ebp + 0x48c]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 0x10
call fcn.100034c0
lea ecx, [ebp + 0x418]
mov byte [ebp - 4], 0xf
call fcn.10025a9a
push ebx
push esi
lea ecx, [ebp + 0x48c]
mov edi, eax
call fcn.10001770
lea ecx, [ebp + 0x20c]
mov byte [ebp - 4], 0xa
call sym.Plugin.dll_CleanUpPluginSystemManager
push ebx
push esi
lea ecx, [ebp + 0x4a8]
call fcn.10001770
lea ecx, [ebp + 0x418]
mov byte [ebp - 4], 3
call fcn.10024e8a
push ebx
push esi
lea ecx, [ebp + 0x4c4]
call fcn.10001770
lea ecx, [ebp - 0xd]
mov byte [ebp - 4], 1
call sym.Plugin.dll_CleanUpPluginSystemManager
lea ecx, [ebp]
mov byte [ebp - 4], bl
call sym.Plugin.dll_CleanUpPluginSystemManager
push ebx
push esi
lea ecx, [ebp + 0x470]
call fcn.10001770
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2b34]
xor ecx, ebp
call fcn.10071fee
add ebp, 0x2b38
leave
ret 8