Function at 0x10007ffc
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x100224ee
call fcn.100215d1
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10004090
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.10008896
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor esi, esi
push ebx
inc esi
push esi
call fcn.10003f3c
mov cl, 0x23
mov dword [ebp - 0x14c], 0x57536c23
mov dword [ebp - 0x148], 0xd4d4c4a
mov eax, ebx
mov dword [ebp - 0x144], 0x4a4d6a
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000809c
mov cl, byte [ebp - 0x14c]
jmp 0x10008087
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x100303e0
lea ecx, [ebp - 0x130]
call fcn.1000899e
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
mov cl, 0x3e
mov dword [ebp - 0x13c], 0x6a667a3e
mov eax, ebx
mov dword [ebp - 0x138], 0x5b4e47
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x100080fb
mov cl, byte [ebp - 0x13c]
jmp 0x100080e6
mov byte [ebp - 0x135], bl
mov cl, 0x67
mov dword [ebp - 0x148], 0x333f2367
mov eax, ebx
mov dword [ebp - 0x144], 0x2171e
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000812e
mov cl, byte [ebp - 0x148]
jmp 0x10008119
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push ebx
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], bl
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x14c], 0xa083063
test eax, eax
mov dword [ebp - 0x148], 0x11220f0f
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x206
cmovs eax, ecx
mov byte [ebp - 0x142], bl
cmp eax, esi
mov cl, 0x63
cmovg eax, esi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10035418], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x130]
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x100081ad
mov cl, byte [ebp - 0x14c]
jmp 0x10008198
push 0x61
mov byte [ebp - 0x142], bl
xor eax, eax
pop ebx
mov cl, bl
mov dword [ebp - 0x137], 0x212082c
mov byte [ebp - 0x138], cl
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x100081e6
mov cl, byte [ebp - 0x138]
jmp 0x100081d1
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x14f], 0x80f0426
test eax, eax
mov dword [ebp - 0x14b], 0x12083704
lea edx, [ebp - 0x130]
mov dword [ebp - 0x147], 0x40d0308
cmovs eax, ecx
mov byte [ebp - 0x143], 0
cmp eax, esi
mov cl, bl
mov byte [ebp - 0x150], cl
cmovg eax, esi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1003541c], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x10008269
mov cl, byte [ebp - 0x150]
jmp 0x10008254
mov byte [ebp - 0x143], 0
mov cl, 0x2d
mov dword [ebp - 0x138], 0x5e44602d
xor eax, eax
mov word [ebp - 0x134], 0x4e
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000829c
mov cl, byte [ebp - 0x138]
jmp 0x10008287
push edx
push esi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x42497e2c
test eax, eax
mov dword [ebp - 0x148], 0x6f5e4948
lea edx, [ebp - 0x130]
mov dword [ebp - 0x144], 0x495c4d
cmovs eax, ecx
mov cl, 0x2c
cmp eax, esi
cmovg eax, esi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10035420], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008311
mov cl, byte [ebp - 0x14c]
jmp 0x100082fc
push 0x18
pop eax
mov byte [ebp - 0x136], al
mov cl, 0x71
mov byte [ebp - 0x141], 0
xor eax, eax
mov word [ebp - 0x138], 0x3c71
mov word [ebp - 0x135], 0x1202
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008353
mov cl, byte [ebp - 0x138]
jmp 0x1000833e
push edx
push esi
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x150], 0x343b085a
test eax, eax
mov dword [ebp - 0x14c], 0x3d343331
push 0x2e
cmovs eax, ecx
mov dword [ebp - 0x148], 0x3f3c3c1f
cmp eax, esi
mov byte [ebp - 0x144], 0x39
pop ecx
cmovg eax, esi
mov byte [ebp - 0x143], cl
cmp dword [ebp - 0x11c], 0x10
lea esi, [ebp - 0x130]
mov dword [0x10035428], eax
mov dl, 0x5a
cmovae esi, dword [ebp - 0x130]
xor eax, eax
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, 0xd
jae 0x100083df
mov dl, byte [ebp - 0x150]
jmp 0x100083ca
xor edx, edx
mov byte [ebp - 0x138], cl
mov byte [ebp - 0x142], dl
mov eax, edx
mov dword [ebp - 0x137], 0x4d5d4763
mov byte [ebp - 0x133], dl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008414
mov cl, byte [ebp - 0x138]
jmp 0x100083ff
push esi
xor esi, esi
mov byte [ebp - 0x133], dl
inc esi
lea eax, [ebp - 0x14f]
push esi
push eax
lea eax, [ebp - 0x137]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x28240245
test eax, eax
mov dword [ebp - 0x148], 0x282c1120
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x20
cmovs eax, ecx
mov cl, 0x45
cmp eax, esi
cmovg eax, esi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1003542c], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000848a
mov cl, byte [ebp - 0x14c]
jmp 0x10008475
mov byte [ebp - 0x143], 0
mov cl, 0x3d
mov dword [ebp - 0x138], 0x4e54703d
xor eax, eax
mov word [ebp - 0x134], 0x5e
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x100084bd
mov cl, byte [ebp - 0x138]
jmp 0x100084a8
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
xor ecx, ecx
mov byte [ebp - 0x150], bl
test eax, eax
mov dword [ebp - 0x14f], 0x40c0022
push 0x18
cmovs eax, ecx
mov dword [ebp - 0x14b], 0x330013
pop ecx
cmp eax, ecx
mov dword [ebp - 0x147], 0x4060f
lea edx, [ebp - 0x130]
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10035424], eax
cmovae edx, dword [ebp - 0x130]
xor ecx, ecx
mov eax, ecx
xor byte [ebp + eax - 0x14f], bl
inc eax
cmp eax, 0xb
jae 0x1000853c
mov bl, byte [ebp - 0x150]
jmp 0x10008527
xor ebx, ebx
mov byte [ebp - 0x144], cl
mov cl, 0x29
mov dword [ebp - 0x138], 0x5a406429
mov word [ebp - 0x134], 0x4a
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008570
mov cl, byte [ebp - 0x138]
jmp 0x1000855b
push edx
push ebx
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x140], 0x64714010
test eax, eax
mov dword [ebp - 0x13c], 0x46637f78
push 0x14
cmovs eax, ecx
mov word [ebp - 0x138], 0x7579
pop ecx
cmp eax, ecx
mov byte [ebp - 0x135], 0
push 0x67
cmovg eax, ecx
lea edx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 0x10
mov cl, 0x10
pop ebx
cmovae edx, dword [ebp - 0x130]
mov dword [0x10035430], eax
xor eax, eax
mov byte [ebp - 0x136], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x100085f6
mov cl, byte [ebp - 0x140]
jmp 0x100085e1
mov byte [ebp - 0x135], 0
mov cl, 0x40
mov dword [ebp - 0x148], 0x26260540
xor eax, eax
mov dword [ebp - 0x144], 0x342325
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000862a
mov cl, byte [ebp - 0x148]
jmp 0x10008615
push edx
push esi
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], 0
push eax
lea eax, [ebp - 0x147]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x137], 0x514a4b7f
test eax, eax
mov byte [ebp - 0x133], 0
push 0x3e
cmovs eax, ecx
cmp eax, esi
pop edx
cmovg eax, ecx
mov byte [ebp - 0x138], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x10035434], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x10008699
mov dl, byte [ebp - 0x138]
jmp 0x10008684
xor eax, eax
mov byte [ebp - 0x150], bl
mov byte [ebp - 0x133], al
mov dword [ebp - 0x14f], 0x4020e37
mov dword [ebp - 0x14b], 0x41f2202
mov dword [ebp - 0x147], 0x9060f
mov word [ebp - 0x143], 2
xor byte [ebp + eax - 0x14f], bl
inc eax
cmp eax, 0xd
jae 0x100086e3
mov bl, byte [ebp - 0x150]
jmp 0x100086ce
push ecx
xor ebx, ebx
lea eax, [ebp - 0x137]
push ebx
push eax
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x142], bl
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x405b7c2f
test eax, eax
mov dword [ebp - 0x148], 0x4166444c
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x41
cmovs eax, ecx
mov cl, 0x2f
cmp eax, esi
cmovg eax, esi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10035438], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x130]
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x10008758
mov cl, byte [ebp - 0x14c]
jmp 0x10008743
mov byte [ebp - 0x143], bl
mov cl, 0x73
mov dword [ebp - 0x140], 0x161a2373
mov eax, ebx
mov dword [ebp - 0x13c], 0xb361610
mov dword [ebp - 0x138], 0x1d121b10
mov word [ebp - 0x134], 0x1614
mov byte [ebp - 0x132], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x100087a4
mov cl, byte [ebp - 0x140]
jmp 0x1000878f
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], bl
push eax
lea eax, [ebp - 0x13f]
push eax
call edi
xor ecx, ecx
mov dword [ebp - 0x138], 0x343d0b58
test eax, eax
mov word [ebp - 0x134], 0x34
lea edx, [ebp - 0x130]
cmovs eax, ecx
mov cl, 0x58
cmp eax, esi
cmovg eax, esi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1003543c], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x130]
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000880d
mov cl, byte [ebp - 0x138]
jmp 0x100087f8
push 0x7a
pop ecx
mov byte [ebp - 0x133], bl
mov eax, ebx
mov byte [ebp - 0x168], cl
mov dword [ebp - 0x167], 0x191f132a
mov dword [ebp - 0x163], 0x19023f1f
mov dword [ebp - 0x15f], 0x1d141b12
mov word [ebp - 0x15b], 0x1f
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, 0xd
jae 0x1000885a
mov cl, byte [ebp - 0x168]
jmp 0x10008845
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call edi
xor ecx, ecx
test eax, eax
push ebx
cmovs eax, ecx
lea ecx, [ebp - 0x130]
cmp eax, esi
push esi
cmovg eax, esi
mov dword [0x10035440], eax
call fcn.10003f3c
call fcn.1002157b
ret