Function at 0x1000135d
Capabilities:
Delete file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x270
mov eax, dword [0x1002f060]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
xor edi, edi
mov esi, ecx
mov dword [ebp - 0x264], esi
cmp dword [0x1003400c], edi
je 0x10001902
cmp dword [0x10034018], edi
je 0x10001902
call fcn.10001a22
test eax, eax
jne 0x100013b1
push edi
mov eax, esi
call fcn.100156c0
mov eax, esi
call fcn.10015700
jmp 0x10001902
cmp dword [esi + 0x48], edi
je 0x100013bf
call fcn.1000128c
test eax, eax
je 0x1000139d
add esi, 0x68
push ebx
mov byte [ebp - 0x240], 0
mov dword [ebp - 0x254], esi
call fcn.10015ba0
push dword [0x1003400c]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0xffffffffffffffff
push str.back
mov ebx, str.Requested
push ebx
call esi
push dword [0x1003400c]
mov dword [ebp - 0x260], eax
push edi
push str.front
push ebx
call esi
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x248], eax
cmp eax, edi
jl 0x10001478
cmp eax, dword [ebp - 0x260]
jge 0x10001478
push dword [ebp - 0x248]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x38]
push str.url_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x240]
push 0x1f3
push eax
push 0x10026ab8
lea eax, [ebp - 0x38]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0x240], 0
jne 0x1000147e
inc dword [ebp - 0x248]
mov eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0x260]
jl 0x1000141d
jmp 0x1000147e
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
push dword [ebp - 0x248]
lea eax, [ebp - 0x38]
push str.persist_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0xffffffffffffffff
push eax
push ebx
call esi
push dword [ebp - 0x248]
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x38]
push str.notifyid_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
push ebx
call esi
push dword [ebp - 0x248]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x38]
push str.prog_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
push ebx
call esi
mov esi, dword [ebp - 0x254]
mov dword [ebp - 0x26c], eax
call fcn.10015bf0
cmp byte [ebp - 0x240], 0
je 0x10001901
mov cl, 0x20
mov dl, 0x3d
lea eax, [ebp - 0x240]
call fcn.10015dc0
cmp dword [ebp - 0x25c], 0xffffffff
je 0x1000153b
cmp dword [ebp - 0x25c], 0xfffffffe
je 0x1000153b
and dword [ebp - 0x268], 0
jmp 0x10001545
mov dword [ebp - 0x268], 1
xor esi, esi
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], esi
cmp dword [ebp - 0x268], esi
je 0x10001689
mov eax, dword [0x10034010]
add eax, 0x14
push 0x10033210
push eax
call fcn.10017ff4
pop ecx
pop ecx
mov dword [ebp - 0x24c], eax
cmp eax, esi
je 0x10001689
push dword [0x1003400c]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x10034010]
add eax, esi
lea ebx, [ebp - 0x240]
mov dword [ebp - 0x250], eax
call fcn.100022b3
push eax
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x4c]
push str.Reuse____s
push eax
call edi
mov esi, dword [ebp - 0x254]
add esp, 0xc
call fcn.10015b40
push dword [0x1003400c]
mov ebx, str.count
push 0
push ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, eax
dec esi
js 0x1000163b
push esi
lea eax, [ebp - 0x38]
push 0x10026a64
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0x14
push dword [ebp - 0x250]
push 0x10026ab8
push eax
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push esi
lea edi, [ebp - 0x4c]
call fcn.10003057
pop ecx
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
mov eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp - 0x254]
call fcn.10015b90
test esi, esi
js 0x10001655
mov eax, dword [ebp - 0x250]
cmp byte [eax], 0
jne 0x10001684
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
push dword [ebp - 0x258]
push ebx
push str._0.8X_s
push dword [ebp - 0x250]
call edi
mov esi, dword [ebp - 0x24c]
add esp, 0x10
inc ebx
call fcn.10004100
test eax, eax
jne 0x1000165d
mov ebx, str.Requested
mov eax, dword [ebp - 0x270]
mov esi, dword [ebp - 0x264]
mov dword [esi + 0x84], eax
mov eax, dword [ebp - 0x26c]
neg eax
sbb eax, eax
and eax, esi
je 0x100016ae
add eax, 0x3c
jmp 0x100016b0
xor eax, eax
mov ecx, dword [0x10034018]
mov edx, dword [ecx]
push 0
push 0
push 0
push 0
push eax
push 1
push 0
push dword [ebp - 0x24c]
lea eax, [ebp - 0x240]
push eax
call dword [edx + 8]
and dword [esi + 0x84], 0
xor ecx, ecx
test eax, eax
sete cl
mov dl, 0x20
lea eax, [ebp - 0x240]
mov dword [ebp - 0x258], ecx
mov cl, 0x3d
call fcn.10015dc0
mov esi, dword [ebp - 0x254]
call fcn.10015b40
xor eax, eax
cmp dword [ebp - 0x258], eax
je 0x100017ca
cmp dword [ebp - 0x268], eax
je 0x100017dc
cmp dword [ebp - 0x24c], eax
je 0x100017dc
cmp dword [ebp - 0x25c], 0xffffffff
mov eax, str.Session
je 0x1000173c
mov eax, str.Index
push dword [0x1003400c]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push dword [ebp - 0x250]
lea ecx, [ebp - 0x240]
push ecx
push eax
call esi
cmp dword [ebp - 0x25c], 0xffffffff
jne 0x10001873
push dword [0x1003400c]
mov ebx, str.count
push 0
push ebx
push 0x10026950
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push eax
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x38]
push 0x10026a64
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push dword [ebp - 0x250]
push eax
push 0x10026950
call esi
mov eax, dword [ebp - 0x26c]
inc eax
push eax
mov edi, 0x10026950
call fcn.10003057
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
mov ebx, str.Requested
jmp 0x100017dc
mov ecx, dword [ebp - 0x264]
cmp dword [ecx + 0x80], eax
jne 0x10001896
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x10001873
lea eax, [ebp - 0x38]
push str.url_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
push ebx
call esi
push dword [ebp - 0x244]
lea eax, [ebp - 0x38]
push str.persist_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
push ebx
call esi
push dword [ebp - 0x244]
lea eax, [ebp - 0x38]
push str.notifyid_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
push ebx
call esi
push dword [ebp - 0x244]
lea eax, [ebp - 0x38]
push str.prog_d
push eax
call edi
add esp, 0xc
push dword [0x1003400c]
lea eax, [ebp - 0x38]
push 0
push eax
push ebx
call esi
inc dword [ebp - 0x244]
mov eax, dword [ebp - 0x244]
push eax
cmp eax, dword [ebp - 0x248]
jle 0x100017e7
mov ebx, str.front
mov edi, str.Requested
call fcn.10003057
pop ecx
mov eax, dword [ebp - 0x254]
call fcn.10015b90
push dword [ebp - 0x270]
mov eax, dword [ebp - 0x258]
and eax, 0x7fffffff
push eax
xor esi, esi
push esi
push 1
call fcn.100025ce
mov eax, dword [ebp - 0x244]
add esp, 0x10
cmp eax, dword [ebp - 0x260]
jge 0x100018d9
mov eax, dword [ebp - 0x264]
call fcn.10015700
cmp dword [ebp - 0x24c], esi
je 0x10001901
cmp dword [ebp - 0x258], esi
jne 0x100018f5
push dword [ebp - 0x24c]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push dword [ebp - 0x24c]
call fcn.10017a6b
pop ecx
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10017a76
leave
ret 4