Function at 0x1000c42f
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10074060
call fcn.1003d3a0
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.10054de0
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10004179
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000cd4b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor eax, eax
push ebx
inc eax
push eax
call fcn.1000402e
push 0x18
pop eax
push 0x23
mov cl, 0x57
mov byte [ebp - 0x14b], al
pop ebx
mov byte [ebp - 0x14c], cl
xor eax, eax
mov byte [ebp - 0x14a], 0x27
mov byte [ebp - 0x149], bl
mov dword [ebp - 0x148], 0x7939383e
mov dword [ebp - 0x144], 0x3e391e
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000c4e4
mov cl, byte [ebp - 0x14c]
jmp 0x1000c4cf
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], 0
push eax
mov edx, 0x1009be40
lea ecx, [ebp - 0x130]
call fcn.1000ce53
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
xor eax, eax
mov byte [ebp - 0x13c], bl
mov dword [ebp - 0x13b], 0x5a777b67
mov word [ebp - 0x137], 0x4653
mov byte [ebp - 0x135], 0
xor byte [ebp + eax - 0x13b], bl
inc eax
cmp eax, 6
jae 0x1000c54e
mov bl, byte [ebp - 0x13c]
jmp 0x1000c539
xor ebx, ebx
mov dword [ebp - 0x148], 0xa061a5e
mov byte [ebp - 0x135], bl
mov cl, 0x5e
mov dword [ebp - 0x144], 0x3b2e27
mov eax, ebx
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000c583
mov cl, byte [ebp - 0x148]
jmp 0x1000c56e
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push ebx
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], bl
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x5f5d6536
test eax, eax
mov dword [ebp - 0x146], 0x57534477
push 0x5a
cmovs eax, ecx
mov byte [ebp - 0x142], bl
xor edi, edi
lea edx, [ebp - 0x130]
inc edi
mov cl, 0x36
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a3038], eax
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x148], al
mov byte [ebp - 0x147], al
mov eax, ebx
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000c60b
mov cl, byte [ebp - 0x14c]
jmp 0x1000c5f6
push 0x55
mov byte [ebp - 0x142], bl
mov cl, 0x3c
pop ebx
mov word [ebp - 0x138], 0x713c
xor eax, eax
mov byte [ebp - 0x136], bl
mov word [ebp - 0x135], 0x5f4f
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c64c
mov cl, byte [ebp - 0x138]
jmp 0x1000c637
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x5d567433
test eax, eax
mov word [ebp - 0x14b], 0x6556
push 0x5a
cmovs eax, ecx
mov byte [ebp - 0x148], 0x40
cmp eax, edi
mov dword [ebp - 0x146], 0x565f51
lea edx, [ebp - 0x130]
mov cl, 0x33
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a303c], eax
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x14c], al
mov byte [ebp - 0x149], al
mov byte [ebp - 0x147], al
xor eax, eax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000c6dd
mov cl, byte [ebp - 0x150]
jmp 0x1000c6c8
mov byte [ebp - 0x143], 0
mov cl, 4
mov dword [ebp - 0x138], 0x776d4904
xor eax, eax
mov word [ebp - 0x134], 0x67
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c710
mov cl, byte [ebp - 0x138]
jmp 0x1000c6fb
push edx
push edi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x14c], bl
test eax, eax
mov byte [ebp - 0x14b], 7
push 0x30
cmovs eax, ecx
mov word [ebp - 0x149], 0x313b
cmp eax, edi
mov dword [ebp - 0x146], 0x25341627
pop ecx
cmovg eax, edi
mov byte [ebp - 0x14a], cl
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
mov dword [0x100a3040], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
mov byte [ebp - 0x147], cl
mov byte [ebp - 0x142], cl
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], bl
inc eax
cmp eax, 0xa
jae 0x1000c7a1
mov bl, byte [ebp - 0x14c]
jmp 0x1000c78c
xor ebx, ebx
mov byte [ebp - 0x138], cl
mov byte [ebp - 0x141], bl
mov eax, ebx
mov dword [ebp - 0x137], 0x5343597d
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c7d6
mov cl, byte [ebp - 0x138]
jmp 0x1000c7c1
mov byte [ebp - 0x133], bl
lea eax, [ebp - 0x14b]
push edx
xor ebx, ebx
inc ebx
push ebx
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x515e6d3f
test eax, eax
mov dword [ebp - 0x14c], 0x58515654
push 0x5a
cmovs eax, ecx
mov word [ebp - 0x148], 0x597a
cmp eax, ebx
mov byte [ebp - 0x146], 0x59
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x4b5c
cmovg eax, ebx
mov byte [ebp - 0x142], 0
cmp dword [ebp - 0x11c], 0x10
mov cl, 0x3f
pop ebx
cmovae edx, dword [ebp - 0x130]
mov dword [0x100a3048], eax
xor eax, eax
mov byte [ebp - 0x145], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000c86c
mov cl, byte [ebp - 0x150]
jmp 0x1000c857
mov byte [ebp - 0x142], 0
mov cl, 0x12
mov dword [ebp - 0x138], 0x617b5f12
xor eax, eax
mov word [ebp - 0x134], 0x71
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c89f
mov cl, byte [ebp - 0x138]
jmp 0x1000c88a
push edx
xor edi, edi
mov byte [ebp - 0x133], 0
inc edi
lea eax, [ebp - 0x14f]
push edi
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x30f296e
test eax, eax
mov dword [ebp - 0x148], 0x3073a0b
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0xb
cmovs eax, ecx
mov cl, 0x6e
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a304c], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000c916
mov cl, byte [ebp - 0x14c]
jmp 0x1000c901
xor ecx, ecx
mov byte [ebp - 0x138], bl
mov byte [ebp - 0x143], cl
mov eax, ecx
mov dword [ebp - 0x137], 0x39293317
mov byte [ebp - 0x133], cl
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000c94b
mov bl, byte [ebp - 0x138]
jmp 0x1000c936
push edx
push ecx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], cl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x8042665
test eax, eax
mov dword [ebp - 0x14c], 0x37041700
push 0x18
cmovs eax, ecx
mov word [ebp - 0x148], 0xb04
pop ecx
cmp eax, ecx
lea edx, [ebp - 0x130]
push 2
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a3044], eax
mov cl, 0x65
cmovae edx, dword [ebp - 0x130]
xor eax, eax
pop ebx
mov byte [ebp - 0x146], bl
mov word [ebp - 0x145], ax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000c9d1
mov cl, byte [ebp - 0x150]
jmp 0x1000c9bc
mov byte [ebp - 0x144], 0
mov cl, 0x4e
mov dword [ebp - 0x138], 0x3d27034e
xor eax, eax
mov word [ebp - 0x134], 0x2d
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000ca04
mov cl, byte [ebp - 0x138]
jmp 0x1000c9ef
push edx
push 0
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x13f], bl
test eax, eax
mov dword [ebp - 0x13e], 0x3d3a2633
push 0x14
cmovs eax, ecx
mov dword [ebp - 0x13a], 0x373b0421
pop ecx
cmp eax, ecx
mov word [ebp - 0x136], 0x25
lea edx, [ebp - 0x130]
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov cl, 0x52
mov dword [0x100a3050], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
mov byte [ebp - 0x140], cl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x1000ca88
mov cl, byte [ebp - 0x140]
jmp 0x1000ca73
push 0x65
xor eax, eax
mov dword [ebp - 0x147], 0x30320
pop ecx
mov byte [ebp - 0x135], al
mov byte [ebp - 0x148], cl
mov word [ebp - 0x143], 0x1106
mov byte [ebp - 0x141], al
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000cac7
mov cl, byte [ebp - 0x148]
jmp 0x1000cab2
push edx
push edi
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], 0
push eax
lea eax, [ebp - 0x147]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x138], 0x73724607
test eax, eax
mov word [ebp - 0x134], 0x68
lea edx, [ebp - 0x130]
cmovs eax, ecx
cmp eax, edi
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a3054], eax
mov cl, 7
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000cb31
mov cl, byte [ebp - 0x138]
jmp 0x1000cb1c
xor eax, eax
mov dword [ebp - 0x150], 0x60a3363
mov byte [ebp - 0x133], al
mov cl, 0x63
mov dword [ebp - 0x14c], 0x1b260600
mov word [ebp - 0x148], 0xb00
mov byte [ebp - 0x146], bl
mov dword [ebp - 0x145], 0x6040d
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000cb7d
mov cl, byte [ebp - 0x150]
jmp 0x1000cb68
push edx
push 0
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], 0
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14b], 0x5c504b6c
test eax, eax
mov dword [ebp - 0x147], 0x51517654
push 0x3f
cmovs eax, ecx
mov byte [ebp - 0x143], 0
cmp eax, edi
lea edx, [ebp - 0x130]
pop ecx
cmovg eax, edi
mov byte [ebp - 0x14c], cl
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a3058], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000cbf7
mov cl, byte [ebp - 0x14c]
jmp 0x1000cbe2
mov byte [ebp - 0x143], 0
mov cl, 0x2b
mov dword [ebp - 0x140], 0x4e427b2b
xor eax, eax
mov dword [ebp - 0x13c], 0x536e4e48
mov dword [ebp - 0x138], 0x454a4348
mov word [ebp - 0x134], 0x4e4c
mov byte [ebp - 0x132], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x1000cc45
mov cl, byte [ebp - 0x140]
jmp 0x1000cc30
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x138], bl
test eax, eax
mov dword [ebp - 0x137], 0x6e6e6751
lea edx, [ebp - 0x130]
mov byte [ebp - 0x133], cl
cmovs eax, ecx
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x100a305c], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000ccb1
mov bl, byte [ebp - 0x138]
jmp 0x1000cc9c
xor ebx, ebx
mov dword [ebp - 0x168], 0x70b3262
xor eax, eax
mov byte [ebp - 0x133], bl
inc eax
mov word [ebp - 0x163], 0x2707
mov byte [ebp - 0x164], al
mov cl, 0x62
mov byte [ebp - 0x160], al
mov eax, ebx
mov byte [ebp - 0x161], 0x1a
mov dword [ebp - 0x15f], 0x50c030a
mov word [ebp - 0x15b], 7
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, 0xd
jae 0x1000cd0e
mov cl, byte [ebp - 0x168]
jmp 0x1000ccf9
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
xor ecx, ecx
test eax, eax
push ebx
cmovs eax, ecx
inc ecx
cmp eax, ecx
push ecx
cmovg eax, ecx
lea ecx, [ebp - 0x130]
mov dword [0x100a3060], eax
call fcn.1000402e
call fcn.1003d34a
ret