Function at 0x1000abf0
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x1006a4f4
call fcn.10035d00
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.1004d6e0
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.1000289a
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000b4ce
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor eax, eax
push ebx
inc eax
push eax
call fcn.1000274f
mov cl, 0x56
mov dword [ebp - 0x14c], 0x22261956
mov dword [ebp - 0x148], 0x7838393f
mov eax, ebx
mov dword [ebp - 0x144], 0x3f381f
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000ac90
mov cl, byte [ebp - 0x14c]
jmp 0x1000ac7b
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x1008be30
lea ecx, [ebp - 0x130]
call fcn.1000b5d6
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
mov cl, 0x6c
push 0x1c
pop ebx
mov dword [ebp - 0x13c], 0x3834286c
xor eax, eax
mov byte [ebp - 0x138], 0x15
mov byte [ebp - 0x137], bl
mov word [ebp - 0x136], 9
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000acfe
mov cl, byte [ebp - 0x13c]
jmp 0x1000ace9
mov byte [ebp - 0x135], 0
mov cl, 0x7e
mov dword [ebp - 0x148], 0x2a263a7e
xor eax, eax
mov dword [ebp - 0x144], 0x1b0e07
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000ad32
mov cl, byte [ebp - 0x148]
jmp 0x1000ad1d
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], 0
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x14a], bl
test eax, eax
mov word [ebp - 0x14c], 0x2477
lea edx, [ebp - 0x130]
mov dword [ebp - 0x149], 0x361b1b1e
cmovs eax, ecx
mov dword [ebp - 0x145], 0x161205
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10092e88], eax
mov cl, 0x77
cmovae edx, dword [ebp - 0x130]
xor ebx, ebx
mov eax, ebx
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000adb6
mov cl, byte [ebp - 0x14c]
jmp 0x1000ada1
mov byte [ebp - 0x142], bl
mov cl, 0x7a
mov dword [ebp - 0x138], 0x913377a
mov eax, ebx
mov word [ebp - 0x134], 0x19
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000ade8
mov cl, byte [ebp - 0x138]
jmp 0x1000add3
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x666d4f08
test eax, eax
mov word [ebp - 0x14b], 0x5e6d
push 0x61
cmovs eax, ecx
mov byte [ebp - 0x148], 0x7b
inc ecx
mov dword [ebp - 0x146], 0x6d646a
cmp eax, ecx
lea edx, [ebp - 0x130]
pop ebx
cmovg eax, ecx
mov byte [ebp - 0x14c], bl
cmp dword [ebp - 0x11c], 0x10
mov cl, 8
mov dword [0x10092e8c], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
mov byte [ebp - 0x149], bl
mov byte [ebp - 0x147], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000ae78
mov cl, byte [ebp - 0x150]
jmp 0x1000ae63
mov byte [ebp - 0x143], 0
mov cl, 0x2d
mov dword [ebp - 0x138], 0x5e44602d
xor eax, eax
mov word [ebp - 0x134], 0x4e
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000aeab
mov cl, byte [ebp - 0x138]
jmp 0x1000ae96
push edx
xor edi, edi
mov byte [ebp - 0x133], 0
inc edi
lea eax, [ebp - 0x14f]
push edi
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x4a417624
test eax, eax
mov dword [ebp - 0x148], 0x67564140
lea edx, [ebp - 0x130]
mov dword [ebp - 0x144], 0x415445
cmovs eax, ecx
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10092e90], eax
mov cl, 0x24
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000af24
mov cl, byte [ebp - 0x14c]
jmp 0x1000af0f
mov byte [ebp - 0x141], 0
mov cl, 0x66
mov dword [ebp - 0x138], 0x150f2b66
xor eax, eax
mov word [ebp - 0x134], 5
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000af57
mov cl, byte [ebp - 0x138]
jmp 0x1000af42
push edx
xor edi, edi
mov byte [ebp - 0x133], 0
inc edi
lea eax, [ebp - 0x14b]
push edi
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x212e1d4f
test eax, eax
mov dword [ebp - 0x14c], 0x28212624
lea edx, [ebp - 0x130]
mov dword [ebp - 0x148], 0x2a29290a
cmovs eax, ecx
mov word [ebp - 0x144], 0x3b2c
inc ecx
mov byte [ebp - 0x142], 0
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10092e98], eax
mov cl, 0x4f
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000afe0
mov cl, byte [ebp - 0x150]
jmp 0x1000afcb
mov byte [ebp - 0x142], 0
xor eax, eax
mov byte [ebp - 0x138], bl
mov dword [ebp - 0x137], 0x212082c
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000b015
mov bl, byte [ebp - 0x138]
jmp 0x1000b000
push edx
xor edi, edi
lea eax, [ebp - 0x14f]
inc edi
xor ebx, ebx
push edi
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14a], 0x7363e32
test eax, eax
mov dword [ebp - 0x146], 0x363e3a
push 0x14
cmovs eax, ecx
lea edx, [ebp - 0x130]
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10092e9c], eax
mov cl, 0x53
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x14b], al
mov eax, ebx
mov byte [ebp - 0x14c], cl
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000b094
mov cl, byte [ebp - 0x14c]
jmp 0x1000b07f
push 0x2a
pop ecx
mov byte [ebp - 0x143], bl
mov eax, ebx
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x49594367
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000b0ca
mov cl, byte [ebp - 0x138]
jmp 0x1000b0b5
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x666a480b
test eax, eax
mov dword [ebp - 0x14c], 0x596a796e
push 0x18
cmovs eax, ecx
mov dword [ebp - 0x148], 0x6e6c656a
pop ecx
cmp eax, ecx
mov byte [ebp - 0x144], bl
lea edx, [ebp - 0x130]
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10092e94], eax
mov cl, 0xb
cmovae edx, dword [ebp - 0x130]
mov eax, ebx
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000b147
mov cl, byte [ebp - 0x150]
jmp 0x1000b132
mov byte [ebp - 0x144], bl
mov cl, 0x74
mov dword [ebp - 0x138], 0x71d3974
mov eax, ebx
mov word [ebp - 0x134], 0x17
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000b179
mov cl, byte [ebp - 0x138]
jmp 0x1000b164
push edx
push ebx
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x140], 0x6d784919
test eax, eax
mov dword [ebp - 0x13c], 0x4f6a7671
push 0x14
cmovs eax, ecx
mov dword [ebp - 0x138], 0x6e7c70
pop ecx
cmp eax, ecx
lea edx, [ebp - 0x130]
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10092ea0], eax
mov cl, 0x19
cmovae edx, dword [ebp - 0x130]
mov eax, ebx
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x1000b1f0
mov cl, byte [ebp - 0x140]
jmp 0x1000b1db
push 0x60
mov byte [ebp - 0x135], bl
xor eax, eax
pop ebx
mov cl, bl
mov dword [ebp - 0x147], 0x5060625
mov byte [ebp - 0x148], cl
mov word [ebp - 0x143], 0x1403
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000b232
mov cl, byte [ebp - 0x148]
jmp 0x1000b21d
push edx
xor edi, edi
mov byte [ebp - 0x141], 0
inc edi
lea eax, [ebp - 0x13f]
push edi
push eax
lea eax, [ebp - 0x147]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x137], 0x7368695d
test eax, eax
mov byte [ebp - 0x133], 0
push 0x1c
cmovs eax, ecx
cmp eax, edi
pop edx
cmovg eax, ecx
mov byte [ebp - 0x138], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x10092ea4], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x1000b2a4
mov dl, byte [ebp - 0x138]
jmp 0x1000b28f
xor edx, edx
mov byte [ebp - 0x150], bl
xor eax, eax
mov byte [ebp - 0x133], dl
inc eax
mov dword [ebp - 0x14f], 0x3050930
mov byte [ebp - 0x146], al
mov eax, edx
mov dword [ebp - 0x14b], 0x3182505
mov byte [ebp - 0x147], 8
mov dword [ebp - 0x145], 0x5070e
xor byte [ebp + eax - 0x14f], bl
inc eax
cmp eax, 0xd
jae 0x1000b2f7
mov bl, byte [ebp - 0x150]
jmp 0x1000b2e2
push ecx
push edx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], dl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14b], 0x19150e29
test eax, eax
mov byte [ebp - 0x147], 0x11
push 0x7a
cmovs eax, ecx
mov byte [ebp - 0x143], 0
inc ecx
pop edx
cmp eax, ecx
mov byte [ebp - 0x14c], dl
push 0x33
cmovg eax, ecx
lea ecx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 0x10
pop ebx
cmovae ecx, dword [ebp - 0x130]
mov dword [0x10092ea8], eax
push 0x14
pop eax
mov byte [ebp - 0x145], al
mov byte [ebp - 0x144], al
xor eax, eax
mov byte [ebp - 0x146], bl
xor byte [ebp + eax - 0x14b], dl
inc eax
cmp eax, 8
jae 0x1000b385
mov dl, byte [ebp - 0x14c]
jmp 0x1000b370
push 0x2b
pop edx
mov byte [ebp - 0x143], 0
xor eax, eax
mov byte [ebp - 0x140], dl
mov dword [ebp - 0x13f], 0x484e427b
mov dword [ebp - 0x13b], 0x48536e4e
mov dword [ebp - 0x137], 0x4c454a43
mov word [ebp - 0x133], 0x4e
xor byte [ebp + eax - 0x13f], dl
inc eax
cmp eax, 0xd
jae 0x1000b3d3
mov dl, byte [ebp - 0x140]
jmp 0x1000b3be
push ecx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x137], 0x42424b7d
test eax, eax
mov byte [ebp - 0x133], 0
push 0x2e
cmovs eax, ecx
inc ecx
cmp eax, ecx
pop edx
cmovg eax, ecx
mov byte [ebp - 0x138], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x10092eac], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x1000b444
mov dl, byte [ebp - 0x138]
jmp 0x1000b42f
xor edx, edx
mov byte [ebp - 0x168], bl
mov byte [ebp - 0x133], dl
mov eax, edx
mov dword [ebp - 0x167], 0x50565a63
mov dword [ebp - 0x163], 0x504b7656
mov dword [ebp - 0x15f], 0x545d525b
mov word [ebp - 0x15b], 0x56
xor byte [ebp + eax - 0x167], bl
inc eax
cmp eax, 0xd
jae 0x1000b490
mov bl, byte [ebp - 0x168]
jmp 0x1000b47b
push ecx
push edx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], dl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
xor ecx, ecx
test eax, eax
push 0
cmovs eax, ecx
inc ecx
cmp eax, ecx
push ecx
cmovg eax, ecx
lea ecx, [ebp - 0x130]
mov dword [0x10092eb0], eax
call fcn.1000274f
call fcn.10035caa
ret