Function at 0x1000b94d
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x1003e973
call fcn.1003d7b1
xor ebx, ebx
lea eax, [ebp - 0x117]
push 0x103
push ebx
push eax
mov byte [ebp - 0x118], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10003d99
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000c255
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10003b97
mov cl, 0x2d
mov dword [ebp - 0x14c], 0x595d622d
mov dword [ebp - 0x148], 0x3434244
mov eax, ebx
mov dword [ebp - 0x144], 0x444364
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000b9f1
mov cl, byte [ebp - 0x14c]
jmp 0x1000b9dc
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x10055470
lea ecx, [ebp - 0x130]
call fcn.1000c34d
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
pop ecx
cmova edx, dword [ebp - 0x130]
mov cl, 0x74
mov dword [ebp - 0x13c], 0x202c3074
mov eax, ebx
mov dword [ebp - 0x138], 0x11040d
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000ba50
mov cl, byte [ebp - 0x13c]
jmp 0x1000ba3b
push 0x6a
mov byte [ebp - 0x135], bl
mov cl, 0xf
pop ebx
mov dword [ebp - 0x148], 0x5b574b0f
xor eax, eax
mov word [ebp - 0x144], 0x7f76
mov byte [ebp - 0x142], bl
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000ba92
mov cl, byte [ebp - 0x148]
jmp 0x1000ba7d
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], 0
push eax
call esi
mov dword [0x10057bdc], eax
test eax, eax
jns 0x1000bac2
xor eax, eax
mov dword [0x10057bdc], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bacf
mov dword [0x10057bdc], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x73
mov dword [ebp - 0x14c], 0x1a182073
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x1321f1f
mov word [ebp - 0x144], 0x1216
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000bb20
mov cl, byte [ebp - 0x14c]
jmp 0x1000bb0b
push 4
mov byte [ebp - 0x142], 0
mov cl, 0x3d
mov dword [ebp - 0x138], 0x4e54703d
xor eax, eax
mov word [ebp - 0x134], 0x5e
pop edi
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000bb55
mov cl, byte [ebp - 0x138]
jmp 0x1000bb41
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057be0], eax
test eax, eax
jns 0x1000bb7f
xor eax, eax
mov dword [0x10057be0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bb8c
mov dword [0x10057be0], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x69
mov dword [ebp - 0x150], 0x70c2e69
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14c], 0x3f0c00
mov dword [ebp - 0x148], 0x50b001a
mov word [ebp - 0x144], 0xc
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000bbe0
mov cl, byte [ebp - 0x150]
jmp 0x1000bbcb
mov byte [ebp - 0x143], 0
mov cl, 1
mov dword [ebp - 0x138], 0x72684c01
xor eax, eax
mov word [ebp - 0x134], 0x62
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000bc12
mov cl, byte [ebp - 0x138]
jmp 0x1000bbfe
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057be4], eax
test eax, eax
jns 0x1000bc3c
xor eax, eax
mov dword [0x10057be4], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bc49
mov dword [0x10057be4], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x45
mov dword [ebp - 0x14c], 0x2b201745
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x6372021
mov dword [ebp - 0x144], 0x203524
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000bc94
mov cl, byte [ebp - 0x14c]
jmp 0x1000bc7f
mov byte [ebp - 0x141], 0
mov cl, 0x13
mov dword [ebp - 0x138], 0x607a5e13
xor eax, eax
mov word [ebp - 0x134], 0x70
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000bcc6
mov cl, byte [ebp - 0x138]
jmp 0x1000bcb2
push edx
push 1
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057bec], eax
test eax, eax
jns 0x1000bcf0
xor eax, eax
mov dword [0x10057bec], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bcfd
mov dword [0x10057bec], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x24
mov dword [ebp - 0x150], 0x4a457624
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14c], 0x434a4d4f
mov dword [ebp - 0x148], 0x41424261
mov word [ebp - 0x144], 0x5047
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000bd58
mov cl, byte [ebp - 0x150]
jmp 0x1000bd43
mov byte [ebp - 0x142], 0
xor eax, eax
mov byte [ebp - 0x138], bl
mov dword [ebp - 0x137], 0x9190327
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, edi
jae 0x1000bd8c
mov bl, byte [ebp - 0x138]
jmp 0x1000bd78
push edx
push 1
lea eax, [ebp - 0x14f]
xor ebx, ebx
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call esi
mov dword [0x10057bf0], eax
test eax, eax
jns 0x1000bdb7
mov eax, ebx
mov dword [0x10057bf0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bdc4
mov dword [0x10057bf0], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x14
mov dword [ebp - 0x14c], 0x79755314
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x148], 0x797d4071
mov word [ebp - 0x144], 0x71
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000be0e
mov cl, byte [ebp - 0x14c]
jmp 0x1000bdf9
push 0x72
pop ecx
mov byte [ebp - 0x143], bl
mov eax, ebx
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x11011b3f
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000be43
mov cl, byte [ebp - 0x138]
jmp 0x1000be2f
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057be8], eax
test eax, eax
jns 0x1000be6b
mov eax, ebx
mov dword [0x10057be8], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x1000be78
mov dword [0x10057be8], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x63
mov dword [ebp - 0x150], 0xe022063
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x14c], 0x31021106
mov dword [ebp - 0x148], 0x6040d02
mov byte [ebp - 0x144], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000bec9
mov cl, byte [ebp - 0x150]
jmp 0x1000beb4
push 4
mov byte [ebp - 0x144], bl
mov cl, 0x79
mov dword [ebp - 0x138], 0xa103479
mov eax, ebx
mov word [ebp - 0x134], 0x1a
pop edi
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000befd
mov cl, byte [ebp - 0x138]
jmp 0x1000bee9
push edx
push ebx
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057bf4], eax
test eax, eax
jns 0x1000bf25
mov eax, ebx
mov dword [0x10057bf4], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x1000bf32
mov dword [0x10057bf4], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x50
cmova edx, dword [ebp - 0x130]
mov eax, ebx
pop ecx
mov byte [ebp - 0x140], cl
mov dword [ebp - 0x13f], 0x38243100
mov dword [ebp - 0x13b], 0x3906233f
mov word [ebp - 0x137], 0x2735
mov byte [ebp - 0x135], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x1000bf89
mov cl, byte [ebp - 0x140]
jmp 0x1000bf74
mov byte [ebp - 0x135], bl
mov cl, 0x1b
mov dword [ebp - 0x148], 0x7d7d5e1b
mov eax, ebx
mov dword [ebp - 0x144], 0x6f787e
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000bfbc
mov cl, byte [ebp - 0x148]
jmp 0x1000bfa7
push edx
push 1
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], bl
push eax
lea eax, [ebp - 0x147]
push eax
call esi
mov dword [0x10057bf8], eax
test eax, eax
jns 0x1000bfe5
mov eax, ebx
mov dword [0x10057bf8], eax
cmp eax, 1
jle 0x1000bff0
mov dword [0x10057bf8], ebx
cmp dword [ebp - 0x11c], 0xf
lea ecx, [ebp - 0x130]
push 0x59
cmova ecx, dword [ebp - 0x130]
mov eax, ebx
pop edx
mov byte [ebp - 0x138], dl
mov dword [ebp - 0x137], 0x362d2c18
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, edi
jae 0x1000c033
mov dl, byte [ebp - 0x138]
jmp 0x1000c01f
push 0x73
pop edx
mov byte [ebp - 0x133], bl
mov eax, ebx
mov byte [ebp - 0x150], dl
mov dword [ebp - 0x14f], 0x10161a23
mov dword [ebp - 0x14b], 0x100b3616
mov dword [ebp - 0x147], 0x141d121b
mov word [ebp - 0x143], 0x16
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, 0xd
jae 0x1000c080
mov dl, byte [ebp - 0x150]
jmp 0x1000c06b
push ecx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
mov dword [0x10057bfc], eax
test eax, eax
jns 0x1000c0a8
mov eax, ebx
mov dword [0x10057bfc], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000c0b5
mov dword [0x10057bfc], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0xf
mov dword [ebp - 0x14c], 0x607b5c0f
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x148], 0x6146646c
mov word [ebp - 0x144], 0x61
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000c0ff
mov cl, byte [ebp - 0x14c]
jmp 0x1000c0ea
mov byte [ebp - 0x143], bl
mov cl, 0x56
mov dword [ebp - 0x140], 0x333f0656
mov eax, ebx
mov dword [ebp - 0x13c], 0x2e133335
mov dword [ebp - 0x138], 0x38373e35
mov word [ebp - 0x134], 0x3331
mov byte [ebp - 0x132], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x1000c14b
mov cl, byte [ebp - 0x140]
jmp 0x1000c136
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], bl
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
mov dword [0x10057c00], eax
test eax, eax
jns 0x1000c173
mov eax, ebx
mov dword [0x10057c00], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000c180
mov dword [0x10057c00], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x3d
cmova edx, dword [ebp - 0x130]
mov eax, ebx
pop ecx
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x5151586e
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000c1c3
mov cl, byte [ebp - 0x138]
jmp 0x1000c1af
mov byte [ebp - 0x133], bl
mov cl, 0x1e
mov dword [ebp - 0x168], 0x7b774e1e
mov eax, ebx
mov dword [ebp - 0x164], 0x665b7b7d
mov dword [ebp - 0x160], 0x707f767d
mov word [ebp - 0x15c], 0x7b79
mov byte [ebp - 0x15a], bl
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, 0xd
jae 0x1000c20f
mov cl, byte [ebp - 0x168]
jmp 0x1000c1fa
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
mov dword [0x10057c04], eax
test eax, eax
jns 0x1000c237
mov eax, ebx
mov dword [0x10057c04], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000c244
mov dword [0x10057c04], ecx
lea ecx, [ebp - 0x130]
call fcn.10003b97
call fcn.1003d76f
ret