Function at 0x10008411
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10035311
call fcn.10034586
xor ebx, ebx
lea eax, [ebp - 0x117]
push 0x103
push ebx
push eax
mov byte [ebp - 0x118], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10002604
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.10008d01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10002410
mov cl, 0x25
mov dword [ebp - 0x14c], 0x51556a25
mov dword [ebp - 0x148], 0xb4b4a4c
mov eax, ebx
mov dword [ebp - 0x144], 0x4c4b6c
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x100084b5
mov cl, byte [ebp - 0x14c]
jmp 0x100084a0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x10045468
lea ecx, [ebp - 0x130]
call fcn.10008de0
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
pop ecx
cmova edx, dword [ebp - 0x130]
mov cl, 0xc
mov dword [ebp - 0x13c], 0x5854480c
mov eax, ebx
mov dword [ebp - 0x138], 0x697c75
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x10008514
mov cl, byte [ebp - 0x13c]
jmp 0x100084ff
mov byte [ebp - 0x135], bl
mov cl, 0x68
mov dword [ebp - 0x148], 0x3c302c68
mov eax, ebx
mov dword [ebp - 0x144], 0xd1811
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x10008547
mov cl, byte [ebp - 0x148]
jmp 0x10008532
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push ebx
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], bl
push eax
call edi
mov dword [0x10046384], eax
test eax, eax
jns 0x10008575
mov eax, ebx
mov dword [0x10046384], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008582
mov dword [0x10046384], ecx
cmp dword [ebp - 0x11c], 0xf
lea esi, [ebp - 0x130]
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x7270481b
cmova esi, dword [ebp - 0x130]
mov dword [ebp - 0x148], 0x695a7777
mov word [ebp - 0x144], 0x7a7e
mov byte [ebp - 0x142], bl
call fcn.10001431
mov dl, 0x63
mov dword [ebp - 0x138], 0x100a2e63
mov word [ebp - 0x134], bx
mov ecx, ebx
xor byte [ebp + ecx - 0x137], dl
inc ecx
cmp ecx, 4
jae 0x100085ee
mov dl, byte [ebp - 0x138]
jmp 0x100085d9
push esi
push ebx
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call edi
mov dword [0x1004638c], eax
test eax, eax
jns 0x10008610
mov eax, ebx
mov dword [0x1004638c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000861d
mov dword [0x1004638c], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x3c
mov dword [ebp - 0x150], 0x52597b3c
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x14c], 0x556a5955
mov dword [ebp - 0x148], 0x505e554f
mov word [ebp - 0x144], 0x59
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x10008671
mov cl, byte [ebp - 0x150]
jmp 0x1000865c
mov byte [ebp - 0x143], bl
mov cl, 0x15
mov dword [ebp - 0x138], 0x667c5815
mov eax, ebx
mov word [ebp - 0x134], 0x76
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x100086a3
mov cl, byte [ebp - 0x138]
jmp 0x1000868e
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x10046390], eax
test eax, eax
jns 0x100086cc
mov eax, ebx
mov dword [0x10046390], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x100086d9
mov dword [0x10046390], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x7d
cmova edx, dword [ebp - 0x130]
mov cl, 0x2f
pop ebx
mov byte [ebp - 0x14c], cl
xor eax, eax
mov byte [ebp - 0x14b], bl
mov dword [ebp - 0x14a], 0x4a4b414a
mov dword [ebp - 0x146], 0x5f4e6c5d
mov word [ebp - 0x142], 0x4a
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008732
mov cl, byte [ebp - 0x14c]
jmp 0x1000871d
push 4
mov byte [ebp - 0x141], 0
mov cl, 0x77
mov dword [ebp - 0x138], 0x41e3a77
xor eax, eax
mov word [ebp - 0x134], 0x14
pop esi
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, esi
jae 0x10008767
mov cl, byte [ebp - 0x138]
jmp 0x10008753
push edx
push 1
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x10046398], eax
test eax, eax
jns 0x10008791
xor eax, eax
mov dword [0x10046398], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000879e
mov dword [0x10046398], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov byte [ebp - 0x150], bl
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14f], 0x16131c2f
mov dword [ebp - 0x14b], 0x381a1314
mov dword [ebp - 0x147], 0x1e181b1b
mov word [ebp - 0x143], 9
xor byte [ebp + eax - 0x14f], bl
inc eax
cmp eax, 0xd
jae 0x100087f6
mov bl, byte [ebp - 0x150]
jmp 0x100087e1
xor ebx, ebx
mov dword [ebp - 0x138], 0x42587c31
mov byte [ebp - 0x142], bl
mov cl, 0x31
mov word [ebp - 0x134], 0x52
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, esi
jae 0x10008829
mov cl, byte [ebp - 0x138]
jmp 0x10008815
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x1004639c], eax
test eax, eax
jns 0x10008852
mov eax, ebx
mov dword [0x1004639c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000885f
mov dword [0x1004639c], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x1e
cmova edx, dword [ebp - 0x130]
mov eax, ebx
pop ecx
mov byte [ebp - 0x14c], cl
mov dword [ebp - 0x14b], 0x7b737f59
mov dword [ebp - 0x147], 0x7b73774a
mov byte [ebp - 0x143], bl
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x100088ad
mov cl, byte [ebp - 0x14c]
jmp 0x10008898
push 0x6e
mov byte [ebp - 0x143], bl
mov cl, 0x23
pop ebx
mov byte [ebp - 0x138], cl
xor eax, eax
mov byte [ebp - 0x137], bl
mov dword [ebp - 0x136], 0x40504a
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, esi
jae 0x100088e4
mov cl, byte [ebp - 0x138]
jmp 0x100088d0
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x10046394], eax
test eax, eax
jns 0x1000890e
xor eax, eax
mov dword [0x10046394], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x1000891b
mov dword [0x10046394], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x64
mov dword [ebp - 0x150], 0x9052764
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14c], 0x36051601
mov dword [ebp - 0x148], 0x1030a05
mov byte [ebp - 0x144], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000896d
mov cl, byte [ebp - 0x150]
jmp 0x10008958
mov byte [ebp - 0x144], 0
mov cl, 0x32
mov dword [ebp - 0x138], 0x415b7f32
xor eax, eax
mov word [ebp - 0x134], 0x51
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, esi
jae 0x1000899f
mov cl, byte [ebp - 0x138]
jmp 0x1000898b
push edx
push 0
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x100463a0], eax
test eax, eax
jns 0x100089c9
xor eax, eax
mov dword [0x100463a0], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x100089d6
mov dword [0x100463a0], ecx
push 0xf
pop esi
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
push 0x6c
cmova edx, dword [ebp - 0x130]
xor eax, eax
pop ecx
mov byte [ebp - 0x140], cl
mov dword [ebp - 0x13f], 0x4180d3c
mov dword [ebp - 0x13b], 0x53a1f03
mov word [ebp - 0x137], 0x1b09
mov byte [ebp - 0x135], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x10008a30
mov cl, byte [ebp - 0x140]
jmp 0x10008a1b
mov byte [ebp - 0x135], 0
mov cl, 0x44
mov dword [ebp - 0x148], 0x22220144
xor eax, eax
mov dword [ebp - 0x144], 0x302721
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x10008a64
mov cl, byte [ebp - 0x148]
jmp 0x10008a4f
push edx
push 1
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], 0
push eax
lea eax, [ebp - 0x147]
push eax
call edi
mov dword [0x100463a4], eax
test eax, eax
jns 0x10008a8e
xor eax, eax
mov dword [0x100463a4], eax
cmp eax, 1
jle 0x10008a9a
and dword [0x100463a4], 0
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0x51
mov dword [ebp - 0x138], 0x25241051
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov word [ebp - 0x134], 0x3e
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008ad9
mov cl, byte [ebp - 0x138]
jmp 0x10008ac4
mov byte [ebp - 0x133], 0
mov cl, 1
mov dword [ebp - 0x150], 0x64685101
xor eax, eax
mov dword [ebp - 0x14c], 0x79446462
mov dword [ebp - 0x148], 0x6f606962
mov word [ebp - 0x144], 0x6466
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x10008b27
mov cl, byte [ebp - 0x150]
jmp 0x10008b12
push edx
push 0
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], 0
push eax
lea eax, [ebp - 0x14f]
push eax
call edi
mov dword [0x100463a8], eax
test eax, eax
jns 0x10008b51
xor eax, eax
mov dword [0x100463a8], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008b5e
mov dword [0x100463a8], ecx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0x22
mov dword [ebp - 0x14c], 0x4d567122
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x4c6b4941
mov word [ebp - 0x144], 0x4c
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x10008ba7
mov cl, byte [ebp - 0x14c]
jmp 0x10008b92
mov byte [ebp - 0x143], 0
mov cl, 0x3f
mov dword [ebp - 0x140], 0x5a566f3f
xor eax, eax
mov dword [ebp - 0x13c], 0x477a5a5c
mov dword [ebp - 0x138], 0x515e575c
mov word [ebp - 0x134], 0x5a58
mov byte [ebp - 0x132], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x10008bf5
mov cl, byte [ebp - 0x140]
jmp 0x10008be0
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call edi
mov dword [0x100463ac], eax
test eax, eax
jns 0x10008c1f
xor eax, eax
mov dword [0x100463ac], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008c2c
mov dword [0x100463ac], ecx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov byte [ebp - 0x138], bl
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x137], 0x2020b3d
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x10008c6d
mov bl, byte [ebp - 0x138]
jmp 0x10008c58
xor ebx, ebx
mov dword [ebp - 0x168], 0x262a1343
mov byte [ebp - 0x133], bl
mov cl, 0x43
mov dword [ebp - 0x164], 0x3b062620
mov eax, ebx
mov dword [ebp - 0x160], 0x2d222b20
mov word [ebp - 0x15c], 0x2624
mov byte [ebp - 0x15a], bl
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, 0xd
jae 0x10008cbb
mov cl, byte [ebp - 0x168]
jmp 0x10008ca6
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call edi
mov dword [0x100463b0], eax
test eax, eax
jns 0x10008ce3
mov eax, ebx
mov dword [0x100463b0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008cf0
mov dword [0x100463b0], ecx
lea ecx, [ebp - 0x130]
call fcn.10002410
call fcn.10034544
ret