Function at 0x1000c412
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x100729f0
call fcn.1003bd50
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.10053790
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.1000416d
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000ccd6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor edi, edi
push ebx
inc edi
push edi
call fcn.10004022
push 0x14
pop eax
push 0x7d
mov cl, al
mov word [ebp - 0x14b], 0x645b
pop ebx
mov byte [ebp - 0x14c], cl
xor eax, eax
mov byte [ebp - 0x149], 0x60
mov byte [ebp - 0x148], bl
mov dword [ebp - 0x147], 0x5d3a7a7b
mov byte [ebp - 0x143], 0x7a
mov byte [ebp - 0x142], bl
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000c4d4
mov cl, byte [ebp - 0x14c]
jmp 0x1000c4bf
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], 0
push eax
mov edx, 0x10095e30
lea ecx, [ebp - 0x130]
call fcn.1000cdde
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
mov cl, 0x6b
mov dword [ebp - 0x13c], 0x3f332f6b
xor eax, eax
mov dword [ebp - 0x138], 0xe1b12
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000c534
mov cl, byte [ebp - 0x13c]
jmp 0x1000c51f
mov byte [ebp - 0x135], 0
mov cl, 0x11
mov dword [ebp - 0x148], 0x45495511
xor eax, eax
mov dword [ebp - 0x144], 0x746168
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000c568
mov cl, byte [ebp - 0x148]
jmp 0x1000c553
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], 0
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x2321194a
test eax, eax
mov dword [ebp - 0x148], 0x380b2626
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x2b2f
cmovs eax, ecx
mov byte [ebp - 0x142], 0
cmp eax, edi
mov cl, 0x4a
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf60], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000c5ea
mov cl, byte [ebp - 0x14c]
jmp 0x1000c5d5
mov byte [ebp - 0x142], 0
mov cl, 0x48
mov dword [ebp - 0x138], 0x3b210548
xor eax, eax
mov word [ebp - 0x134], 0x2b
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c61d
mov cl, byte [ebp - 0x138]
jmp 0x1000c608
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x19123077
test eax, eax
mov dword [ebp - 0x14c], 0x1e21121e
lea edx, [ebp - 0x130]
mov dword [ebp - 0x148], 0x1b151e04
cmovs eax, ecx
mov word [ebp - 0x144], 0x12
cmp eax, edi
mov cl, 0x77
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf64], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000c69c
mov cl, byte [ebp - 0x150]
jmp 0x1000c687
mov byte [ebp - 0x143], 0
mov cl, 0x10
mov dword [ebp - 0x138], 0x63795d10
xor eax, eax
mov word [ebp - 0x134], 0x73
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c6cf
mov cl, byte [ebp - 0x138]
jmp 0x1000c6ba
push edx
push edi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x14c], bl
test eax, eax
mov byte [ebp - 0x14b], 0x2f
push 0x18
cmovs eax, ecx
mov word [ebp - 0x149], 0x1913
cmp eax, edi
mov dword [ebp - 0x146], 0xd1c3e0f
lea edx, [ebp - 0x130]
mov byte [ebp - 0x141], cl
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf68], eax
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x14a], al
mov byte [ebp - 0x147], al
mov byte [ebp - 0x142], al
xor eax, eax
xor byte [ebp + eax - 0x14b], bl
inc eax
cmp eax, 0xa
jae 0x1000c75f
mov bl, byte [ebp - 0x14c]
jmp 0x1000c74a
xor ebx, ebx
mov dword [ebp - 0x138], 0x352f0b46
mov byte [ebp - 0x141], bl
mov cl, 0x46
mov word [ebp - 0x134], 0x25
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c793
mov cl, byte [ebp - 0x138]
jmp 0x1000c77e
push edx
push edi
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x38370456
test eax, eax
mov word [ebp - 0x14c], 0x3f3d
push 0x31
cmovs eax, ecx
mov byte [ebp - 0x14a], 0x38
cmp eax, edi
mov dword [ebp - 0x148], 0x33303013
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x2235
cmovg eax, edi
mov byte [ebp - 0x142], 0
cmp dword [ebp - 0x11c], 0x10
mov cl, 0x56
pop ebx
cmovae edx, dword [ebp - 0x130]
mov dword [0x1009cf70], eax
xor eax, eax
mov byte [ebp - 0x149], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000c826
mov cl, byte [ebp - 0x150]
jmp 0x1000c811
push 0x74
pop ecx
mov byte [ebp - 0x142], 0
xor eax, eax
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x17071d39
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c85e
mov cl, byte [ebp - 0x138]
jmp 0x1000c849
push edx
push edi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x2f230542
test eax, eax
mov dword [ebp - 0x148], 0x2f2b1627
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x27
cmovs eax, ecx
mov cl, 0x42
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf74], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000c8d2
mov cl, byte [ebp - 0x14c]
jmp 0x1000c8bd
mov byte [ebp - 0x143], 0
mov cl, 0x1b
mov dword [ebp - 0x138], 0x6872561b
xor eax, eax
mov word [ebp - 0x134], 0x78
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c905
mov cl, byte [ebp - 0x138]
jmp 0x1000c8f0
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0xf032162
test eax, eax
mov dword [ebp - 0x14c], 0x30031007
push 0x18
cmovs eax, ecx
mov dword [ebp - 0x148], 0x7050c03
pop ecx
cmp eax, ecx
mov byte [ebp - 0x144], 0
lea edx, [ebp - 0x130]
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf6c], eax
mov cl, 0x62
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000c985
mov cl, byte [ebp - 0x150]
jmp 0x1000c970
mov byte [ebp - 0x144], 0
mov cl, 0x45
mov dword [ebp - 0x138], 0x362c0845
xor eax, eax
mov word [ebp - 0x134], 0x26
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c9b8
mov cl, byte [ebp - 0x138]
jmp 0x1000c9a3
push edx
push 0
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x140], bl
test eax, eax
mov dword [ebp - 0x13f], 0x59455061
push 0x14
cmovs eax, ecx
mov dword [ebp - 0x13b], 0x5867425e
pop ecx
cmp eax, ecx
mov word [ebp - 0x137], 0x4654
lea edx, [ebp - 0x130]
mov byte [ebp - 0x135], 0
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf78], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x13f], bl
inc eax
cmp eax, 0xa
jae 0x1000ca3b
mov bl, byte [ebp - 0x140]
jmp 0x1000ca26
xor ebx, ebx
mov dword [ebp - 0x148], 0x35351653
mov byte [ebp - 0x135], bl
mov cl, 0x53
mov dword [ebp - 0x144], 0x273036
mov eax, ebx
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000ca70
mov cl, byte [ebp - 0x148]
jmp 0x1000ca5b
push edx
push edi
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], bl
push eax
lea eax, [ebp - 0x147]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x138], 0x4d4c7839
test eax, eax
mov word [ebp - 0x134], 0x56
lea edx, [ebp - 0x130]
cmovs eax, ecx
cmp eax, edi
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf7c], eax
mov cl, 0x39
cmovae edx, dword [ebp - 0x130]
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000cad9
mov cl, byte [ebp - 0x138]
jmp 0x1000cac4
mov byte [ebp - 0x133], bl
mov cl, 0x5c
mov dword [ebp - 0x150], 0x39350c5c
mov eax, ebx
mov dword [ebp - 0x14c], 0x2419393f
mov dword [ebp - 0x148], 0x323d343f
mov word [ebp - 0x144], 0x393b
mov byte [ebp - 0x142], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000cb25
mov cl, byte [ebp - 0x150]
jmp 0x1000cb10
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x1f042370
test eax, eax
mov dword [ebp - 0x148], 0x1e391b13
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x1e
cmovs eax, ecx
mov cl, 0x70
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf80], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x130]
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000cb98
mov cl, byte [ebp - 0x14c]
jmp 0x1000cb83
push 9
pop ecx
mov byte [ebp - 0x143], bl
mov eax, ebx
mov byte [ebp - 0x140], cl
mov dword [ebp - 0x13f], 0x6a6c6059
mov dword [ebp - 0x13b], 0x6a714c6c
mov dword [ebp - 0x137], 0x6e676861
mov word [ebp - 0x133], 0x6c
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x1000cbe5
mov cl, byte [ebp - 0x140]
jmp 0x1000cbd0
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], bl
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x138], 0x272e184b
test eax, eax
mov word [ebp - 0x134], 0x27
lea edx, [ebp - 0x130]
cmovs eax, ecx
mov cl, 0x4b
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009cf84], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x130]
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000cc4e
mov cl, byte [ebp - 0x138]
jmp 0x1000cc39
mov byte [ebp - 0x133], bl
mov cl, 0x29
mov dword [ebp - 0x168], 0x4c407929
mov eax, ebx
mov dword [ebp - 0x164], 0x516c4c4a
mov dword [ebp - 0x160], 0x4748414a
mov word [ebp - 0x15c], 0x4c4e
mov byte [ebp - 0x15a], bl
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, 0xd
jae 0x1000cc9a
mov cl, byte [ebp - 0x168]
jmp 0x1000cc85
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
xor ecx, ecx
test eax, eax
push ebx
cmovs eax, ecx
lea ecx, [ebp - 0x130]
cmp eax, edi
push edi
cmovg eax, edi
mov dword [0x1009cf88], eax
call fcn.10004022
call fcn.1003bcfa
ret