Function at 0x1000ac64
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10070674
call fcn.10039b20
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.10051560
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10002907
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000b539
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor eax, eax
push ebx
inc eax
push eax
call fcn.100027bc
mov cl, 2
mov dword [ebp - 0x14c], 0x76724d02
mov dword [ebp - 0x148], 0x2c6c6d6b
mov eax, ebx
mov dword [ebp - 0x144], 0x6b6c4b
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000ad04
mov cl, byte [ebp - 0x14c]
jmp 0x1000acef
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x10092e30
lea ecx, [ebp - 0x130]
call fcn.1000b641
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
mov cl, 0x6a
push 0xf
pop ebx
mov dword [ebp - 0x13c], 0x3e322e6a
xor eax, eax
mov word [ebp - 0x138], 0x1a13
mov byte [ebp - 0x136], bl
mov byte [ebp - 0x135], 0
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000ad72
mov cl, byte [ebp - 0x13c]
jmp 0x1000ad5d
mov byte [ebp - 0x135], 0
mov cl, 0x1b
mov dword [ebp - 0x148], 0x4f435f1b
xor eax, eax
mov dword [ebp - 0x144], 0x7e6b62
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000ada6
mov cl, byte [ebp - 0x148]
jmp 0x1000ad91
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], 0
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x14c], bl
test eax, eax
mov dword [ebp - 0x14b], 0x6366645c
lea edx, [ebp - 0x130]
mov dword [ebp - 0x147], 0x6a7d4e63
cmovs eax, ecx
mov word [ebp - 0x143], 0x6e
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10099f64], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], bl
inc eax
cmp eax, 9
jae 0x1000ae26
mov bl, byte [ebp - 0x14c]
jmp 0x1000ae11
xor ebx, ebx
mov dword [ebp - 0x138], 0x766c4805
push 4
mov byte [ebp - 0x142], bl
mov cl, 5
mov word [ebp - 0x134], 0x66
mov eax, ebx
pop edi
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000ae5c
mov cl, byte [ebp - 0x138]
jmp 0x1000ae48
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x6b604205
test eax, eax
mov dword [ebp - 0x14c], 0x6c53606c
lea edx, [ebp - 0x130]
mov dword [ebp - 0x148], 0x69676c76
cmovs eax, ecx
mov word [ebp - 0x144], 0x60
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10099f68], eax
mov cl, 5
cmovae edx, dword [ebp - 0x130]
mov eax, ebx
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000aeda
mov cl, byte [ebp - 0x150]
jmp 0x1000aec5
xor eax, eax
mov byte [ebp - 0x143], bl
inc eax
mov dword [ebp - 0x138], 0x110b2f62
mov byte [ebp - 0x134], al
mov cl, 0x62
mov byte [ebp - 0x133], bl
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000af11
mov cl, byte [ebp - 0x138]
jmp 0x1000aefd
xor eax, eax
mov byte [ebp - 0x133], bl
push edx
inc eax
push eax
lea eax, [ebp - 0x14f]
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14b], 0x161c1720
test eax, eax
mov dword [ebp - 0x147], 0x13310017
push 0x72
cmovs eax, ecx
mov word [ebp - 0x143], 0x1702
inc ecx
mov byte [ebp - 0x141], bl
cmp eax, ecx
lea edx, [ebp - 0x130]
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
pop ecx
cmovae edx, dword [ebp - 0x130]
mov dword [0x10099f6c], eax
mov eax, ebx
mov byte [ebp - 0x14c], cl
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000af95
mov cl, byte [ebp - 0x14c]
jmp 0x1000af80
mov byte [ebp - 0x141], bl
mov cl, 0x78
mov dword [ebp - 0x138], 0xb113578
mov eax, ebx
mov word [ebp - 0x134], 0x1b
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000afc6
mov cl, byte [ebp - 0x138]
jmp 0x1000afb2
mov byte [ebp - 0x133], bl
lea eax, [ebp - 0x14b]
push edx
xor ebx, ebx
inc ebx
push ebx
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14f], 0x595c5360
test eax, eax
mov dword [ebp - 0x14b], 0x77555c5b
push 0x32
cmovs eax, ecx
mov dword [ebp - 0x145], 0x465157
cmp eax, ebx
lea edx, [ebp - 0x130]
pop ecx
cmovg eax, ebx
mov byte [ebp - 0x150], cl
cmp dword [ebp - 0x11c], 0x10
push 0x54
cmovae edx, dword [ebp - 0x130]
pop ebx
mov dword [0x10099f74], eax
xor eax, eax
mov byte [ebp - 0x147], bl
mov byte [ebp - 0x146], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000b053
mov cl, byte [ebp - 0x150]
jmp 0x1000b03e
mov byte [ebp - 0x142], 0
mov cl, 0x61
mov dword [ebp - 0x138], 0x12082c61
xor eax, eax
mov word [ebp - 0x134], 2
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000b085
mov cl, byte [ebp - 0x138]
jmp 0x1000b071
xor eax, eax
mov byte [ebp - 0x133], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x14f]
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x161a3c7b
test eax, eax
mov dword [ebp - 0x148], 0x16122f1e
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x1e
cmovs eax, ecx
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10099f78], eax
mov cl, 0x7b
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000b0fd
mov cl, byte [ebp - 0x14c]
jmp 0x1000b0e8
mov byte [ebp - 0x134], bl
mov cl, 0x37
xor ebx, ebx
mov byte [ebp - 0x143], 0
mov dword [ebp - 0x138], 0x445e7a37
mov eax, ebx
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000b134
mov cl, byte [ebp - 0x138]
jmp 0x1000b120
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x767a581b
test eax, eax
mov dword [ebp - 0x14b], 0x7a497a69
push 0x18
cmovs eax, ecx
mov word [ebp - 0x147], 0x7c75
pop ecx
cmp eax, ecx
mov byte [ebp - 0x144], bl
push 0x7e
cmovg eax, ecx
lea edx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 0x10
mov cl, 0x1b
mov dword [0x10099f70], eax
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x14c], al
mov byte [ebp - 0x145], al
mov eax, ebx
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000b1bf
mov cl, byte [ebp - 0x150]
jmp 0x1000b1aa
xor eax, eax
mov byte [ebp - 0x144], bl
inc eax
mov dword [ebp - 0x138], 0x110b2f62
mov byte [ebp - 0x134], al
mov cl, 0x62
mov byte [ebp - 0x133], bl
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000b1f6
mov cl, byte [ebp - 0x138]
jmp 0x1000b1e2
push edx
push ebx
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x13f], 0x263a2f1e
test eax, eax
mov dword [ebp - 0x13b], 0x27183d21
push 0x14
cmovs eax, ecx
mov word [ebp - 0x137], 0x392b
pop ecx
cmp eax, ecx
mov byte [ebp - 0x135], bl
push 0x4e
cmovg eax, ecx
lea edx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 0x10
pop ecx
cmovae edx, dword [ebp - 0x130]
mov dword [0x10099f7c], eax
mov eax, ebx
mov byte [ebp - 0x140], cl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x1000b279
mov cl, byte [ebp - 0x140]
jmp 0x1000b264
push 3
mov byte [ebp - 0x135], bl
mov cl, 0x66
pop ebx
mov dword [ebp - 0x148], 0x2366
xor eax, eax
mov byte [ebp - 0x144], bl
mov word [ebp - 0x143], 0x1205
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000b2bb
mov cl, byte [ebp - 0x148]
jmp 0x1000b2a6
xor eax, eax
mov byte [ebp - 0x141], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x13f]
push eax
lea eax, [ebp - 0x147]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x138], 0xd0c3879
test eax, eax
mov word [ebp - 0x134], 0x16
lea edx, [ebp - 0x130]
cmovs eax, ecx
cmp eax, 1
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x10099f80], eax
mov cl, 0x79
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, edi
jae 0x1000b328
mov cl, byte [ebp - 0x138]
jmp 0x1000b314
push 0x7e
pop ecx
mov byte [ebp - 0x133], 0
xor eax, eax
mov byte [ebp - 0x150], cl
mov dword [ebp - 0x14f], 0x1d1b172e
mov dword [ebp - 0x14b], 0x1d063b1b
mov dword [ebp - 0x147], 0x19101f16
mov word [ebp - 0x143], 0x1b
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000b376
mov cl, byte [ebp - 0x150]
jmp 0x1000b361
push edx
push 0
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], 0
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14b], 0x1b170c2b
test eax, eax
mov dword [ebp - 0x147], 0x16163113
push 0x78
cmovs eax, ecx
mov byte [ebp - 0x143], 0
inc ecx
cmp eax, ecx
pop edx
cmovg eax, ecx
mov byte [ebp - 0x14c], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x10099f84], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], dl
inc eax
cmp eax, 8
jae 0x1000b3f1
mov dl, byte [ebp - 0x14c]
jmp 0x1000b3dc
push 0x3e
pop edx
mov byte [ebp - 0x143], 0
xor eax, eax
mov byte [ebp - 0x140], dl
mov dword [ebp - 0x13f], 0x5d5b576e
mov dword [ebp - 0x13b], 0x5d467b5b
mov dword [ebp - 0x137], 0x59505f56
mov word [ebp - 0x133], 0x5b
xor byte [ebp + eax - 0x13f], dl
inc eax
cmp eax, 0xd
jae 0x1000b43f
mov dl, byte [ebp - 0x140]
jmp 0x1000b42a
push ecx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x137], 0x38383107
test eax, eax
mov byte [ebp - 0x133], 0
push 0x54
cmovs eax, ecx
inc ecx
cmp eax, ecx
pop edx
cmovg eax, ecx
mov byte [ebp - 0x138], dl
cmp dword [ebp - 0x11c], 0x10
lea ecx, [ebp - 0x130]
mov dword [0x10099f88], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, edi
jae 0x1000b4af
mov dl, byte [ebp - 0x138]
jmp 0x1000b49b
xor edx, edx
mov byte [ebp - 0x168], bl
mov byte [ebp - 0x133], dl
mov eax, edx
mov dword [ebp - 0x167], 0x60666a53
mov dword [ebp - 0x163], 0x607b4666
mov dword [ebp - 0x15f], 0x646d626b
mov word [ebp - 0x15b], 0x66
xor byte [ebp + eax - 0x167], bl
inc eax
cmp eax, 0xd
jae 0x1000b4fb
mov bl, byte [ebp - 0x168]
jmp 0x1000b4e6
push ecx
push edx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], dl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
xor ecx, ecx
test eax, eax
push 0
cmovs eax, ecx
inc ecx
cmp eax, ecx
push ecx
cmovg eax, ecx
lea ecx, [ebp - 0x130]
mov dword [0x10099f8c], eax
call fcn.100027bc
call fcn.10039aca
ret