Function at 0x1000b320
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008c133
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x100b85b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea eax, [ebp - 0x28]
xor bh, bh
push eax
call fcn.10015ff0
xor bl, bl
add esp, 4
cmp byte [esi + 0x3e], bl
je 0x1000b3a9
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmovae eax, dword [ebp - 0x28]
push eax
push 0
push str.BlockPopUpADSManualFlag
push str.general
call edi
test eax, eax
je 0x1000b3a9
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0
push str.BlockPopUpADS
push str.general
call edi
cmp eax, 1
sete bl
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x1000b3e3
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b3d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000bbec
push edx
push ecx
call fcn.1003f91e
add esp, 8
test bl, bl
je 0x1000b521
call fcn.10041ed0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1000b4ac
push 0x69
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_tpi_srcpopularize.cc
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], al
call fcn.1000ed70
push 3
push 0x10094c74
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1000ed70
mov byte [ebp - 4], 1
call fcn.10041ed0
mov edi, eax
lea ecx, [ebp - 0x124]
push 0x183
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10004e80
mov esi, eax
push str.is_sensitive_user
push esi
mov byte [ebp - 4], 2
call fcn.100064e0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x124]
call fcn.100068d0
lea ecx, [ebp - 0x28]
call fcn.100059d0
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0xffffffff
call fcn.100059d0
xor eax, eax
mov dword [ebp - 0x18], 0
push eax
push 0x100946c0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1000ee70
push 0xf
xor eax, eax
mov dword [ebp - 4], 3
push str.break_sensitive
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1000ee70
mov byte [ebp - 4], 4
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10016ee0
add esp, 8
lea ecx, [ebp - 0x44]
call fcn.10005a20
lea ecx, [ebp - 0x28]
call fcn.10005a20
jmp 0x1000bbce
mov eax, dword [0x100bccbc]
test al, 1
jne 0x1000b5f9
or eax, 1
mov dword [0x100bccbc], eax
push 3
xorps xmm0, xmm0
mov dword [ebp - 4], 5
push 0x10095320
lea ecx, [ebp - 0x5c]
movq qword [0x100bccb0], xmm0
mov dword [0x100bccb8], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.1000ed70
push 9
push str.mater_pdf
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 6
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.1000ed70
push dword [ebp - 0x2c]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x5c]
mov dword [0x100bccb0], 0
push eax
mov ecx, 0x100bccb0
mov dword [0x100bccb4], 0
mov dword [0x100bccb8], 0
call fcn.10004370
push fcn.100059d0
push 2
push 0x18
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 5
push eax
call fcn.1003f7f0
push 0x10092e80
call fcn.1003fc88
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [esi + 0x38], 0
je 0x1000b72e
push 0x100bccb0
call fcn.10016100
add esp, 4
test al, al
je 0x1000b72e
call fcn.10041ed0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1000b6d9
push 0x69
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_tpi_srcpopularize.cc
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.1000ed70
push 3
push 0x10094c74
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.1000ed70
mov byte [ebp - 4], 9
call fcn.10041ed0
mov edi, eax
lea ecx, [ebp - 0x124]
push 0x188
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10004e80
mov esi, eax
push str.is_vip__no_need_popularize
push esi
mov byte [ebp - 4], 0xa
call fcn.100064e0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x124]
call fcn.100068d0
lea ecx, [ebp - 0x44]
call fcn.100059d0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.100059d0
xor eax, eax
mov dword [ebp - 0x18], 0
push eax
push 0x100946c0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1000ee70
push 9
xor eax, eax
mov dword [ebp - 4], 0xb
push str.break_vip
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1000ee70
mov byte [ebp - 4], 0xc
jmp 0x1000b4fc
cmp byte [esi + 0x3b], 0
je 0x1000b8d6
push 2
push 0x1009457c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1000ed70
mov dword [ebp - 4], 0xd
call fcn.1002d190
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x28]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x1000b7b6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b7ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000bbf1
push edx
push ecx
call fcn.1003f91e
add esp, 8
cmp dword [ebp - 0x2c], 1
jne 0x1000b8d6
call fcn.10041ed0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1000b881
push 0x69
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_tpi_srcpopularize.cc
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.1000ed70
push 3
push 0x10094c74
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.1000ed70
mov byte [ebp - 4], 0xf
call fcn.10041ed0
mov edi, eax
lea ecx, [ebp - 0x124]
push 0x18d
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10004e80
mov esi, eax
push str.is_vm
push esi
mov byte [ebp - 4], 0x10
call fcn.100064e0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x124]
call fcn.100068d0
lea ecx, [ebp - 0x44]
call fcn.100059d0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.100059d0
xor eax, eax
mov dword [ebp - 0x18], 0
push eax
push 0x100946c0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1000ee70
push 8
xor eax, eax
mov dword [ebp - 4], 0x11
push str.break_vm
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1000ee70
mov byte [ebp - 4], 0x12
jmp 0x1000b4fc
cmp byte [esi + 0x3c], 0
je 0x1000ba7e
push 3
push 0x10094580
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1000ed70
mov dword [ebp - 4], 0x13
call fcn.1002d190
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x28]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x1000b95e
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b954
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000bbf6
push edx
push ecx
call fcn.1003f91e
add esp, 8
cmp dword [ebp - 0x2c], 1
jne 0x1000ba7e
call fcn.10041ed0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1000ba29
push 0x69
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_tpi_srcpopularize.cc
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.1000ed70
push 3
push 0x10094c74
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.1000ed70
mov byte [ebp - 4], 0x15
call fcn.10041ed0
mov edi, eax
lea ecx, [ebp - 0x124]
push 0x192
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10004e80
mov esi, eax
push str.is_dev
push esi
mov byte [ebp - 4], 0x16
call fcn.100064e0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x124]
call fcn.100068d0
lea ecx, [ebp - 0x44]
call fcn.100059d0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.100059d0
xor eax, eax
mov dword [ebp - 0x18], 0
push eax
push 0x100946c0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1000ee70
push 9
xor eax, eax
mov dword [ebp - 4], 0x17
push str.break_dev
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1000ee70
mov byte [ebp - 4], 0x18
jmp 0x1000b4fc
mov ecx, esi
call fcn.10007000
test al, al
je 0x1000bbcc
call fcn.10041ed0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1000bb4e
push 0x69
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_tpi_srcpopularize.cc
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.1000ed70
push 3
push 0x10094c74
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.1000ed70
mov byte [ebp - 4], 0x1a
call fcn.10041ed0
mov edi, eax
lea ecx, [ebp - 0x124]
push 0x197
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10004e80
mov esi, eax
push str.avoid_sr
push esi
mov byte [ebp - 4], 0x1b
call fcn.100064e0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x124]
call fcn.100068d0
lea ecx, [ebp - 0x44]
call fcn.100059d0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.100059d0
xor eax, eax
mov dword [ebp - 0x7c], 0
push eax
push 0x100946c0
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
call fcn.1000ee70
push 8
xor eax, eax
mov dword [ebp - 4], 0x1c
push str.break_sr
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
call fcn.1000ee70
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.10016ee0
add esp, 8
lea ecx, [ebp - 0x74]
call fcn.10005a20
lea ecx, [ebp - 0x8c]
call fcn.10005a20
jmp 0x1000bbce
mov bh, 1
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003fc9d
mov esp, ebp
pop ebp
ret
call fcn.1006958e
call fcn.1006958e
call fcn.1006958e
int3