Function at 0x10009ed5
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x1003a18b
call fcn.10039093
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.100040a5
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000a7df
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor eax, eax
push ebx
inc eax
push eax
call fcn.10003f51
mov cl, 0x63
mov dword [ebp - 0x14c], 0x17132c63
mov dword [ebp - 0x148], 0x4d0d0c0a
mov eax, ebx
mov dword [ebp - 0x144], 0xa0d2a
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10009f75
mov cl, byte [ebp - 0x14c]
jmp 0x10009f60
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x1004f3d8
lea ecx, [ebp - 0x130]
call fcn.1000a8e7
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
mov cl, 0xb
mov dword [ebp - 0x13c], 0x5f534f0b
mov eax, ebx
mov dword [ebp - 0x138], 0x6e7b72
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x10009fd4
mov cl, byte [ebp - 0x13c]
jmp 0x10009fbf
push 0x18
pop eax
mov byte [ebp - 0x146], al
mov cl, 0x40
push 0x14
pop eax
mov byte [ebp - 0x145], al
mov eax, ebx
mov byte [ebp - 0x135], bl
mov word [ebp - 0x148], 0x440
mov dword [ebp - 0x144], 0x253039
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000a018
mov cl, byte [ebp - 0x148]
jmp 0x1000a003
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push ebx
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], bl
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x7270481b
test eax, eax
mov dword [ebp - 0x148], 0x695a7777
push 0x10
cmovs eax, ecx
mov word [ebp - 0x144], 0x7a7e
inc ecx
mov byte [ebp - 0x142], bl
cmp eax, ecx
lea edx, [ebp - 0x130]
pop edi
cmovg eax, ecx
cmp dword [ebp - 0x11c], edi
mov dword [0x10054478], eax
mov cl, 0x1b
cmovae edx, dword [ebp - 0x130]
mov eax, ebx
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000a09a
mov cl, byte [ebp - 0x14c]
jmp 0x1000a085
xor eax, eax
mov byte [ebp - 0x142], bl
inc eax
mov dword [ebp - 0x136], 0x2f3f25
mov cl, 0x4c
mov byte [ebp - 0x137], al
mov byte [ebp - 0x138], cl
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000a0d2
mov cl, byte [ebp - 0x138]
jmp 0x1000a0bd
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x343f1d5a
test eax, eax
mov dword [ebp - 0x14c], 0x330c3f33
lea edx, [ebp - 0x130]
mov dword [ebp - 0x148], 0x36383329
cmovs eax, ecx
mov word [ebp - 0x144], 0x3f
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], edi
mov dword [0x1005447c], eax
mov cl, 0x5a
cmovae edx, dword [ebp - 0x130]
mov eax, ebx
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000a14f
mov cl, byte [ebp - 0x150]
jmp 0x1000a13a
push 0x58
mov byte [ebp - 0x143], bl
mov cl, 0x3b
pop ebx
mov dword [ebp - 0x138], 0x4852763b
xor eax, eax
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000a188
mov cl, byte [ebp - 0x138]
jmp 0x1000a173
xor eax, eax
mov byte [ebp - 0x133], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x14f]
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0xf043361
test eax, eax
mov dword [ebp - 0x148], 0x22130405
lea edx, [ebp - 0x130]
mov dword [ebp - 0x144], 0x41100
cmovs eax, ecx
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], edi
mov dword [0x10054480], eax
mov cl, 0x61
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000a200
mov cl, byte [ebp - 0x14c]
jmp 0x1000a1eb
mov byte [ebp - 0x141], 0
mov cl, 0x4e
mov dword [ebp - 0x138], 0x3d27034e
xor eax, eax
mov word [ebp - 0x134], 0x2d
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000a233
mov cl, byte [ebp - 0x138]
jmp 0x1000a21e
xor eax, eax
mov byte [ebp - 0x133], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x14b]
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x147], bl
test eax, eax
mov byte [ebp - 0x146], bl
lea edx, [ebp - 0x130]
mov word [ebp - 0x150], 0x6c3e
cmovs eax, ecx
mov byte [ebp - 0x14e], 0x5f
inc ecx
mov word [ebp - 0x14c], 0x5755
cmp eax, ecx
mov word [ebp - 0x149], 0x7b59
push 0x50
cmovg eax, ecx
mov dword [ebp - 0x145], 0x4a5d5b
cmp dword [ebp - 0x11c], edi
mov cl, 0x3e
mov dword [0x10054488], eax
cmovae edx, dword [ebp - 0x130]
xor ebx, ebx
pop eax
mov byte [ebp - 0x14d], al
mov byte [ebp - 0x14a], al
mov eax, ebx
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000a2d6
mov cl, byte [ebp - 0x150]
jmp 0x1000a2c1
mov byte [ebp - 0x142], bl
mov cl, 0x42
mov dword [ebp - 0x138], 0x312b0f42
mov eax, ebx
mov word [ebp - 0x134], 0x21
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000a308
mov cl, byte [ebp - 0x138]
jmp 0x1000a2f3
mov byte [ebp - 0x133], bl
lea eax, [ebp - 0x14f]
push edx
xor ebx, ebx
inc ebx
push ebx
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x2e220443
test eax, eax
mov byte [ebp - 0x148], 0x26
push 0x17
cmovs eax, ecx
mov dword [ebp - 0x146], 0x262e2a
cmp eax, ebx
lea edx, [ebp - 0x130]
mov cl, 0x43
cmovg eax, ebx
cmp dword [ebp - 0x11c], edi
pop ebx
cmovae edx, dword [ebp - 0x130]
mov dword [0x1005448c], eax
xor eax, eax
mov byte [ebp - 0x147], bl
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000a384
mov cl, byte [ebp - 0x14c]
jmp 0x1000a36f
mov cl, bl
mov byte [ebp - 0x143], 0
push 0x74
pop ebx
mov byte [ebp - 0x138], cl
xor eax, eax
mov word [ebp - 0x137], 0x7e5a
mov byte [ebp - 0x135], 0x64
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000a3ca
mov cl, byte [ebp - 0x138]
jmp 0x1000a3b5
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14f], 0x262e2200
test eax, eax
mov dword [ebp - 0x14b], 0x22112231
push 0x18
cmovs eax, ecx
mov dword [ebp - 0x147], 0x26242d
pop ecx
cmp eax, ecx
lea edx, [ebp - 0x130]
push 0x43
cmovg eax, ecx
cmp dword [ebp - 0x11c], edi
pop ecx
cmovae edx, dword [ebp - 0x130]
mov dword [0x10054484], eax
xor eax, eax
mov byte [ebp - 0x150], cl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000a449
mov cl, byte [ebp - 0x150]
jmp 0x1000a434
mov byte [ebp - 0x144], 0
xor eax, eax
mov byte [ebp - 0x138], bl
mov dword [ebp - 0x137], 0x17071d39
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000a47e
mov bl, byte [ebp - 0x138]
jmp 0x1000a469
push edx
xor ebx, ebx
lea eax, [ebp - 0x14f]
push ebx
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x13f], 0x332f3a0b
test eax, eax
mov dword [ebp - 0x13b], 0x320d2834
push 0x14
cmovs eax, ecx
mov word [ebp - 0x137], 0x2c3e
pop ecx
cmp eax, ecx
mov byte [ebp - 0x135], bl
push 0x5b
cmovg eax, ecx
lea edx, [ebp - 0x130]
cmp dword [ebp - 0x11c], edi
pop ecx
cmovae edx, dword [ebp - 0x130]
mov dword [0x10054490], eax
mov eax, ebx
mov byte [ebp - 0x140], cl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x1000a502
mov cl, byte [ebp - 0x140]
jmp 0x1000a4ed
xor eax, eax
mov byte [ebp - 0x135], bl
push 0x64
inc eax
mov word [ebp - 0x147], 0x221
pop ecx
mov byte [ebp - 0x144], al
mov eax, ebx
mov byte [ebp - 0x148], cl
mov byte [ebp - 0x145], 2
mov word [ebp - 0x143], 0x1007
mov byte [ebp - 0x141], bl
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000a550
mov cl, byte [ebp - 0x148]
jmp 0x1000a53b
xor eax, eax
mov byte [ebp - 0x141], bl
push edx
inc eax
push eax
lea eax, [ebp - 0x13f]
push eax
lea eax, [ebp - 0x147]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x137], 0x78636256
test eax, eax
mov byte [ebp - 0x133], bl
push 0x17
cmovs eax, ecx
xor edx, edx
inc edx
cmp eax, edx
pop edx
cmovg eax, ecx
mov byte [ebp - 0x138], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x10054494], eax
mov eax, ebx
cmovae ecx, dword [ebp - 0x130]
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x1000a5c3
mov dl, byte [ebp - 0x138]
jmp 0x1000a5ae
push 0x50
pop edx
mov byte [ebp - 0x133], bl
mov eax, ebx
mov byte [ebp - 0x150], dl
mov dword [ebp - 0x14f], 0x33353900
mov dword [ebp - 0x14b], 0x33281535
mov dword [ebp - 0x147], 0x373e3138
mov word [ebp - 0x143], 0x35
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, 0xd
jae 0x1000a610
mov dl, byte [ebp - 0x150]
jmp 0x1000a5fb
push ecx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x14b], 0x28
test eax, eax
mov dword [ebp - 0x149], 0x32101814
push 0x7b
cmovs eax, ecx
mov word [ebp - 0x145], 0x1515
inc ecx
mov byte [ebp - 0x143], 0
cmp eax, ecx
pop edx
cmovg eax, ecx
mov byte [ebp - 0x14c], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
push 0xf
cmovae ecx, dword [ebp - 0x130]
pop ebx
mov dword [0x10054498], eax
xor eax, eax
mov byte [ebp - 0x14a], bl
xor byte [ebp + eax - 0x14b], dl
inc eax
cmp eax, 8
jae 0x1000a698
mov dl, byte [ebp - 0x14c]
jmp 0x1000a683
push 0x69
xor eax, eax
mov dword [ebp - 0x13f], 0xa0c0039
pop edx
mov byte [ebp - 0x143], al
mov byte [ebp - 0x140], dl
mov dword [ebp - 0x13b], 0xa112c0c
mov dword [ebp - 0x137], 0xe070801
mov word [ebp - 0x133], 0xc
xor byte [ebp + eax - 0x13f], dl
inc eax
cmp eax, 0xd
jae 0x1000a6e5
mov dl, byte [ebp - 0x140]
jmp 0x1000a6d0
push ecx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x138], bl
test eax, eax
mov dword [ebp - 0x137], 0x63636a5c
mov byte [ebp - 0x133], 0
cmovs eax, ecx
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x1005449c], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000a753
mov bl, byte [ebp - 0x138]
jmp 0x1000a73e
push 0x58
xor ebx, ebx
mov dword [ebp - 0x167], 0x3b3d3108
pop edx
mov byte [ebp - 0x133], bl
mov eax, ebx
mov byte [ebp - 0x168], dl
mov dword [ebp - 0x163], 0x3b201d3d
mov dword [ebp - 0x15f], 0x3f363930
mov word [ebp - 0x15b], 0x3d
xor byte [ebp + eax - 0x167], dl
inc eax
cmp eax, 0xd
jae 0x1000a7a2
mov dl, byte [ebp - 0x168]
jmp 0x1000a78d
push ecx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
xor ecx, ecx
test eax, eax
push ebx
cmovs eax, ecx
inc ecx
cmp eax, ecx
push ecx
cmovg eax, ecx
lea ecx, [ebp - 0x130]
mov dword [0x100544a0], eax
call fcn.10003f51
call fcn.1003903d
ret