Function at 0x1001b9d0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100ef0f8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100f29c4]
push esi
mov dword [ebp - 0x10], 0x4b5d7200
mov dword [ebp - 0xc], 0x5e5b5a
mov esi, dword [eax + ecx*4]
mov eax, dword [0x10100dd0]
mov dword [ebp - 8], 0x2e474047
cmp eax, dword [esi + 4]
jle 0x1001ba54
push 0x10100dd0
call fcn.10084984
add esp, 4
cmp dword [0x10100dd0], 0xffffffff
jne 0x1001ba54
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x100c32e0
movq qword [0x10100df8], xmm0
mov dword [0x10100e00], eax
call fcn.10084d5f
push 0x10100dd0
call fcn.1008493a
add esp, 8
cmp byte [0x10100e03], 0
je 0x1001ba6d
xor eax, eax
nop
xor byte [eax + 0x10100df8], 0x2e
inc eax
cmp eax, 0xc
jb 0x1001ba60
mov eax, dword [0x10100dc0]
mov dword [ebp - 0x10], 0x4b5c4d7d
mov dword [ebp - 0xc], 0x4b7c404b
mov word [ebp - 8], 0x2e5d
cmp eax, dword [esi + 4]
jle 0x1001bad2
push 0x10100dc0
call fcn.10084984
add esp, 4
cmp dword [0x10100dc0], 0xffffffff
jne 0x1001bad2
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x100c3300
movq qword [0x10100dd8], xmm0
mov word [0x10100de0], ax
call fcn.10084d5f
push 0x10100dc0
call fcn.1008493a
add esp, 8
mov al, byte [0x10100de1]
test al, al
je 0x1001bb21
xor byte [0x10100dd8], 0x2e
xor byte [0x10100dd9], 0x2e
xor byte [0x10100dda], 0x2e
xor byte [0x10100ddb], 0x2e
xor byte [0x10100ddc], 0x2e
xor byte [0x10100ddd], 0x2e
xor byte [0x10100dde], 0x2e
xor byte [0x10100ddf], 0x2e
xor byte [0x10100de0], 0x2e
xor al, 0x2e
mov byte [0x10100de1], al
mov eax, dword [0x10100de8]
mov dword [ebp - 0x10], 0x5e611d6f
mov dword [ebp - 0xc], 0x4041475a
mov dword [ebp - 8], 0x2e566b5d
cmp eax, dword [esi + 4]
jle 0x1001bb85
push 0x10100de8
call fcn.10084984
add esp, 4
cmp dword [0x10100de8], 0xffffffff
jne 0x1001bb85
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x100c3320
movq qword [0x10100e10], xmm0
mov dword [0x10100e18], eax
call fcn.10084d5f
push 0x10100de8
call fcn.1008493a
add esp, 8
cmp byte [0x10100e1b], 0
je 0x1001bb9d
xor eax, eax
xor byte [eax + 0x10100e10], 0x2e
inc eax
cmp eax, 0xc
jb 0x1001bb90
push 0x10100df8
push 0
push 0x10100dd8
push 0x10100e10
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
je 0x1001bc20
mov ecx, eax
movzx eax, ax
sar ecx, 0x10
movzx ecx, cx
mov dword [0x100f33f0], ecx
mov dword [0x100f33f4], eax
cmp ecx, 0x400
jb 0x1001bbde
cmp ecx, 0xf00
jbe 0x1001bbed
mov dword [0x100f33f0], 0x400
mov ecx, 0x400
cmp eax, 0x300
jb 0x1001bbfb
cmp eax, 0x870
jbe 0x1001bc0a
mov dword [0x100f33f4], 0x300
mov eax, 0x300
cmp ecx, 0x400
jne 0x1001bc19
cmp eax, 0x300
je 0x1001bc20
mov byte [0x100f32b5], 1
mov eax, dword [0x10100de4]
mov dword [ebp - 0x10], 0x4b5d7200
mov dword [ebp - 0xc], 0x5e5b5a
mov dword [ebp - 8], 0x2e474047
cmp eax, dword [esi + 4]
jle 0x1001bc84
push 0x10100de4
call fcn.10084984
add esp, 4
cmp dword [0x10100de4], 0xffffffff
jne 0x1001bc84
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x100c3290
movq qword [0x10100e04], xmm0
mov dword [0x10100e0c], eax
call fcn.10084d5f
push 0x10100de4
call fcn.1008493a
add esp, 8
cmp byte [0x10100e0f], 0
je 0x1001bc9d
xor eax, eax
nop
xor byte [eax + 0x10100e04], 0x2e
inc eax
cmp eax, 0xc
jb 0x1001bc90
mov eax, dword [0x10100dc4]
mov dword [ebp - 0xc], 0x40575d78
mov word [ebp - 8], 0x2e4d
cmp eax, dword [esi + 4]
jle 0x1001bcf6
push 0x10100dc4
call fcn.10084984
add esp, 4
cmp dword [0x10100dc4], 0xffffffff
jne 0x1001bcf6
mov eax, dword [ebp - 0xc]
mov dword [0x10100dc8], eax
mov ax, word [ebp - 8]
push 0x100c32b0
mov word [0x10100dcc], ax
call fcn.10084d5f
push 0x10100dc4
call fcn.1008493a
add esp, 8
mov al, byte [0x10100dcd]
test al, al
je 0x1001bd29
xor byte [0x10100dc8], 0x2e
xor byte [0x10100dc9], 0x2e
xor byte [0x10100dca], 0x2e
xor byte [0x10100dcb], 0x2e
xor byte [0x10100dcc], 0x2e
xor al, 0x2e
mov byte [0x10100dcd], al
mov eax, dword [0x10100dd4]
cmp eax, dword [esi + 4]
mov dword [ebp - 0x10], 0x5e611d6f
mov dword [ebp - 0xc], 0x4041475a
mov dword [ebp - 8], 0x2e566b5d
pop esi
jle 0x1001bd8e
push 0x10100dd4
call fcn.10084984
add esp, 4
cmp dword [0x10100dd4], 0xffffffff
jne 0x1001bd8e
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x100c32c0
movq qword [0x10100dec], xmm0
mov dword [0x10100df4], eax
call fcn.10084d5f
push 0x10100dd4
call fcn.1008493a
add esp, 8
cmp byte [0x10100df7], 0
je 0x1001bdad
xor eax, eax
nop dword [eax]
xor byte [eax + 0x10100dec], 0x2e
inc eax
cmp eax, 0xc
jb 0x1001bda0
push 0x10100e04
push 0
push 0x10100dc8
push 0x10100dec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
sete byte [0x100f32b6]
cmp byte [0x100f32b5], 0
je 0x1001bee6
mov eax, dword [0x100f33f0]
cmp eax, 0x640
jne 0x1001be10
cmp dword [0x100f33f4], 0x384
jne 0x1001bed2
mov dword [0x100efb7c], 0x10
mov dword [0x100efb80], 0x12
jmp 0x1001bedc
cmp eax, 0x780
jne 0x1001be40
cmp dword [0x100f33f4], 0x438
jne 0x1001bed2
mov dword [0x100efb7c], 0x12
mov dword [0x100efb80], 0xa
jmp 0x1001bedc
cmp eax, 0xa00
jne 0x1001be84
cmp dword [0x100f33f4], 0x5a0
jne 0x1001bed2
mov dword [0x100efb78], 0x32
mov dword [0x100efb80], 0
mov dword [0x100efb7c], 0x19
call fcn.1001ca10
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10084864
mov esp, ebp
pop ebp
ret
cmp eax, 0xf00
jne 0x1001bed2
cmp dword [0x100f33f4], 0x870
jne 0x1001bed2
mov dword [0x100efb78], 0x32
mov dword [0x100efb80], 0
mov dword [0x100efb74], 0x55
mov dword [0x100efb7c], 0x24
call fcn.1001ca10
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10084864
mov esp, ebp
pop ebp
ret
mov dword [0x100efb80], 0x18
mov dword [0x100efb78], 0x36
call fcn.1001ca10
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10084864
mov esp, ebp
pop ebp
ret