Function at 0x1002e112
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x10056bef
call fcn.10052270
sub esp, 0x3a0
mov eax, dword [0x10070040]
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x18], eax
and dword [ebp - 4], 0
mov dword [ebp - 0x14], eax
cmp dword [ebp + 0xc], 0
push 1
mov byte [ebp - 4], 1
pop eax
je 0x1002e146
push 5
pop eax
push eax
push str..URL
push dword [ebp + 8]
lea ecx, [ebp - 0x3ac]
call fcn.1002c683
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 2
call fcn.1002c72a
test eax, eax
je 0x1002e430
mov esi, 0x10078b14
cmp dword [ebp - 0x160], 0
je 0x1002e187
mov eax, dword [ebp - 0x38c]
jmp 0x1002e18c
xor eax, eax
and dword [ebp - 0x40], eax
cmp eax, 0x19000
jg 0x1002e41d
test eax, eax
je 0x1002e41d
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x3ac]
push eax
call fcn.1000bae8
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call fcn.10003640
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 2
call fcn.1000349d
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x3ac]
push eax
call fcn.1000bb68
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.10003640
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.1000349d
push dword [ebp - 0x14]
mov ecx, ebx
call fcn.1004b088
test eax, eax
jne 0x1002e41d
and byte [ebp - 0x148], al
push 0x40
pop ecx
lea edi, [ebp - 0x147]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x148]
push 0x104
push eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp dword [ebp + 0xc], 0
jne 0x1002e255
push 1
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.1001e895
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x40], esp
push dword [ebp + 8]
call fcn.100034da
jmp 0x1002e278
push 3
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x40], esp
push eax
call fcn.1001e895
push ecx
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x1c], esp
push dword [ebp + 8]
call fcn.100034da
mov ecx, ebx
mov byte [ebp - 4], 2
call fcn.1002e659
test eax, eax
je 0x1002e430
mov al, byte [ebp + 0xb]
xor edi, edi
mov byte [ebp - 0x30], al
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
lea eax, [ebp - 0x148]
lea ecx, [ebp - 0x20]
push eax
mov byte [ebp - 4], 9
call fcn.100034da
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0xa
push dword [ebp - 0x28]
call fcn.100038e6
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.1000349d
push 0x1f01ff
push edi
push dword [ebp - 0x14]
lea ecx, [ebx + 0x9c]
call fcn.100014a6
mov eax, dword [0x10070040]
mov dword [ebp - 0x10], eax
mov edi, 0x200
lea ecx, [ebp - 0x10]
push edi
mov byte [ebp - 4], 0xb
call fcn.100037f3
test eax, eax
je 0x1002e313
mov eax, dword [ebp - 0x10]
mov dword [eax - 8], edi
mov eax, dword [ebp - 0x10]
and byte [eax + 0x200], 0
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x14]
push edi
push eax
push esi
push 0x10074cf0
push str.InternetShortcut
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.10003892
lea ecx, [ebp - 0x10]
call fcn.1000334b
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_CharLowerA]
push dword [ebp - 0x10]
lea ecx, [ebx + 0xa0]
push esi
push esi
push esi
push 0xbf
call fcn.1001c880
push eax
mov ecx, ebx
call fcn.1002e495
mov edi, eax
cmp edi, 1
je 0x1002e405
push dword [ebp - 0x14]
mov ecx, ebx
call fcn.1004b088
test eax, eax
jne 0x1002e477
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x38]
push 0x10074b08
push eax
call fcn.10018353
mov eax, dword [eax]
push edi
lea ecx, [ebp - 0x30]
push 0
push ecx
push 0
push 0x10074ac0
push 0x10070cfc
push 0x10074a84
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xe
call fcn.1004ac01
lea ecx, [ebp - 0x38]
mov edi, eax
mov byte [ebp - 4], 0xb
call fcn.1000349d
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push esi
call fcn.100034da
push ecx
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x148]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.100034da
push 2
push edi
mov ecx, ebx
mov byte [ebp - 4], 0xb
call fcn.1002e4b9
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 9
call fcn.1000349d
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.10003457
lea ecx, [ebp - 0x3ac]
call fcn.1002c72a
test eax, eax
jne 0x1002e176
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x15c]
call fcn.1002eb43
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 1
call fcn.1000bd32
and byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.1000349d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.1000349d
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 9
call fcn.1000349d
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.10003457
mov byte [ebp - 4], 0xc
jmp 0x1002e434