Function at 0x1000bb2c
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x1003ef5f
call fcn.1003dd61
xor ebx, ebx
lea eax, [ebp - 0x11b]
push 0x103
push ebx
push eax
mov byte [ebp - 0x11c], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x11c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x168]
call fcn.10003d99
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], ebx
call fcn.1000c51a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10003b97
push 0xa
mov cl, 0x5b
mov dword [ebp - 0x15c], 0x2f2b145b
mov dword [ebp - 0x158], 0x75353432
mov eax, ebx
mov dword [ebp - 0x154], 0x323512
pop edi
xor byte [ebp + eax - 0x15b], cl
inc eax
cmp eax, edi
jae 0x1000bbd2
mov cl, byte [ebp - 0x15c]
jmp 0x1000bbbe
lea eax, [ebp - 0x15b]
mov byte [ebp - 0x151], bl
push eax
mov edx, 0x10055488
lea ecx, [ebp - 0x134]
call fcn.1000aca0
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
pop ecx
cmova edx, dword [ebp - 0x134]
mov cl, 0x7e
push 7
pop ebx
mov dword [ebp - 0x13c], 0x2a263a7e
xor eax, eax
mov byte [ebp - 0x138], bl
mov word [ebp - 0x137], 0x1b0e
mov byte [ebp - 0x135], 0
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000bc40
mov cl, byte [ebp - 0x13c]
jmp 0x1000bc2b
mov byte [ebp - 0x135], 0
mov cl, 0x1e
mov dword [ebp - 0x158], 0x4a465a1e
xor eax, eax
mov dword [ebp - 0x154], 0x7b6e67
xor byte [ebp + eax - 0x157], cl
inc eax
cmp eax, 6
jae 0x1000bc74
mov cl, byte [ebp - 0x158]
jmp 0x1000bc5f
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x157]
mov byte [ebp - 0x151], 0
push eax
call esi
mov dword [0x10057be4], eax
test eax, eax
jns 0x1000bca4
xor eax, eax
mov dword [0x10057be4], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bcb1
mov dword [0x10057be4], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x2c
mov dword [ebp - 0x140], 0x42457b2c
cmova edx, dword [ebp - 0x134]
xor eax, eax
mov dword [ebp - 0x13c], 0x615b4348
mov dword [ebp - 0x138], 0x494843
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, edi
jae 0x1000bcfb
mov cl, byte [ebp - 0x140]
jmp 0x1000bce7
mov byte [ebp - 0x135], 0
mov cl, 0x3c
mov dword [ebp - 0x158], 0x4e5f6f3c
xor eax, eax
mov dword [ebp - 0x154], 0x525959
xor byte [ebp + eax - 0x157], cl
inc eax
cmp eax, 6
jae 0x1000bd2f
mov cl, byte [ebp - 0x158]
jmp 0x1000bd1a
push edx
push 0
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x151], 0
push eax
lea eax, [ebp - 0x157]
push eax
call esi
mov dword [0x10057be8], eax
test eax, eax
jns 0x1000bd59
xor eax, eax
mov dword [0x10057be8], eax
cmp eax, 1
jle 0x1000bd68
mov dword [0x10057be8], 1
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x54
mov byte [ebp - 0x15b], bl
cmova edx, dword [ebp - 0x134]
xor eax, eax
mov byte [ebp - 0x15c], cl
mov dword [ebp - 0x15a], 0x38383d3f
mov dword [ebp - 0x156], 0x35312615
mov byte [ebp - 0x152], 0
xor byte [ebp + eax - 0x15b], cl
inc eax
cmp eax, 9
jae 0x1000bdbc
mov cl, byte [ebp - 0x15c]
jmp 0x1000bda7
mov byte [ebp - 0x152], 0
mov cl, 0x27
mov dword [ebp - 0x13c], 0x544e6a27
xor eax, eax
mov word [ebp - 0x138], 0x44
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 4
jae 0x1000bdef
mov cl, byte [ebp - 0x13c]
jmp 0x1000bdda
push edx
push 0
lea eax, [ebp - 0x15b]
mov byte [ebp - 0x137], 0
push eax
lea eax, [ebp - 0x13b]
push eax
call esi
mov dword [0x10057bec], eax
test eax, eax
jns 0x1000be19
xor eax, eax
mov dword [0x10057bec], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000be26
mov dword [0x10057bec], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov byte [ebp - 0x14a], bl
mov cl, 0x51
cmova edx, dword [ebp - 0x134]
xor ebx, ebx
mov dword [ebp - 0x150], 0x3f341651
mov eax, ebx
mov word [ebp - 0x14c], 0x3438
mov dword [ebp - 0x149], 0x33382238
mov word [ebp - 0x145], 0x343d
mov byte [ebp - 0x143], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000be87
mov cl, byte [ebp - 0x150]
jmp 0x1000be72
mov byte [ebp - 0x143], bl
mov cl, 0x3b
mov dword [ebp - 0x13c], 0x4852763b
mov eax, ebx
mov word [ebp - 0x138], 0x58
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 4
jae 0x1000beb9
mov cl, byte [ebp - 0x13c]
jmp 0x1000bea4
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x137], bl
push eax
lea eax, [ebp - 0x13b]
push eax
call esi
mov dword [0x10057bf0], eax
test eax, eax
jns 0x1000bee2
mov eax, ebx
mov dword [0x10057bf0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000beef
mov dword [0x10057bf0], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
push 0x17
cmova edx, dword [ebp - 0x134]
mov cl, 0x72
pop ebx
mov word [ebp - 0x15c], 0x2072
xor eax, eax
mov byte [ebp - 0x15a], bl
mov word [ebp - 0x159], 0x161c
mov byte [ebp - 0x157], bl
mov dword [ebp - 0x156], 0x2133100
mov byte [ebp - 0x152], bl
mov byte [ebp - 0x151], 0
xor byte [ebp + eax - 0x15b], cl
inc eax
cmp eax, edi
jae 0x1000bf53
mov cl, byte [ebp - 0x15c]
jmp 0x1000bf3f
push 7
pop ecx
mov byte [ebp - 0x151], 0
xor eax, eax
mov byte [ebp - 0x13c], cl
mov dword [ebp - 0x13b], 0x64746e4a
mov byte [ebp - 0x137], 0
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 4
jae 0x1000bf8b
mov cl, byte [ebp - 0x13c]
jmp 0x1000bf76
push edx
xor edi, edi
mov byte [ebp - 0x137], 0
inc edi
lea eax, [ebp - 0x15b]
push edi
push eax
lea eax, [ebp - 0x13b]
push eax
call esi
mov dword [0x10057bf8], eax
test eax, eax
jns 0x1000bfb7
xor eax, eax
mov dword [0x10057bf8], eax
cmp eax, edi
jle 0x1000bfc1
mov dword [0x10057bf8], edi
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
push 0x47
cmova edx, dword [ebp - 0x134]
mov cl, 0x21
pop eax
mov byte [ebp - 0x147], al
mov byte [ebp - 0x146], al
xor eax, eax
mov dword [ebp - 0x150], 0x4f407321
mov dword [ebp - 0x14c], 0x464f484a
mov byte [ebp - 0x148], 0x64
mov dword [ebp - 0x145], 0x554244
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000c022
mov cl, byte [ebp - 0x150]
jmp 0x1000c00d
mov byte [ebp - 0x142], 0
mov cl, 0x77
mov dword [ebp - 0x13c], 0x41e3a77
xor eax, eax
mov word [ebp - 0x138], 0x14
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 4
jae 0x1000c055
mov cl, byte [ebp - 0x13c]
jmp 0x1000c040
push edx
push edi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x137], 0
push eax
lea eax, [ebp - 0x13b]
push eax
call esi
mov dword [0x10057bfc], eax
test eax, eax
jns 0x1000c07e
xor eax, eax
mov dword [0x10057bfc], eax
cmp eax, edi
jle 0x1000c088
mov dword [0x10057bfc], edi
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x2f
mov dword [ebp - 0x15c], 0x424e682f
cmova edx, dword [ebp - 0x134]
xor eax, eax
mov dword [ebp - 0x158], 0x42467b4a
mov word [ebp - 0x154], 0x4a
xor byte [ebp + eax - 0x15b], cl
inc eax
cmp eax, 8
jae 0x1000c0d2
mov cl, byte [ebp - 0x15c]
jmp 0x1000c0bd
xor ecx, ecx
mov byte [ebp - 0x13c], bl
mov byte [ebp - 0x153], cl
mov eax, ecx
mov dword [ebp - 0x13b], 0x74647e5a
mov byte [ebp - 0x137], cl
xor byte [ebp + eax - 0x13b], bl
inc eax
cmp eax, 4
jae 0x1000c107
mov bl, byte [ebp - 0x13c]
jmp 0x1000c0f2
push edx
push ecx
lea eax, [ebp - 0x15b]
mov byte [ebp - 0x137], cl
push eax
lea eax, [ebp - 0x13b]
push eax
call esi
mov dword [0x10057bf4], eax
test eax, eax
jns 0x1000c12f
xor eax, eax
mov dword [0x10057bf4], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x1000c13c
mov dword [0x10057bf4], ecx
cmp dword [ebp - 0x120], 0xf
lea ecx, [ebp - 0x134]
push 0x13
cmova ecx, dword [ebp - 0x134]
xor eax, eax
pop edx
push 0xb
mov byte [ebp - 0x150], dl
mov dword [ebp - 0x14f], 0x767e7250
mov dword [ebp - 0x14b], 0x72417261
mov dword [ebp - 0x147], 0x76747d
pop ebx
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, ebx
jae 0x1000c190
mov dl, byte [ebp - 0x150]
jmp 0x1000c17c
push 0x61
pop edx
mov byte [ebp - 0x144], 0
xor eax, eax
mov byte [ebp - 0x13c], dl
mov dword [ebp - 0x13b], 0x212082c
mov byte [ebp - 0x137], 0
xor byte [ebp + eax - 0x13b], dl
inc eax
cmp eax, 4
jae 0x1000c1c8
mov dl, byte [ebp - 0x13c]
jmp 0x1000c1b3
push ecx
push 0
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x137], 0
push eax
lea eax, [ebp - 0x13b]
push eax
call esi
mov dword [0x10057c00], eax
test eax, eax
jns 0x1000c1f2
xor eax, eax
mov dword [0x10057c00], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x1000c1ff
mov dword [0x10057c00], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov byte [ebp - 0x150], bl
cmova edx, dword [ebp - 0x134]
xor eax, eax
mov dword [ebp - 0x14f], 0x637f6a5b
mov dword [ebp - 0x14b], 0x625d7864
mov word [ebp - 0x147], 0x7c6e
mov byte [ebp - 0x145], 0
xor byte [ebp + eax - 0x14f], bl
inc eax
cmp eax, 0xa
jae 0x1000c254
mov bl, byte [ebp - 0x150]
jmp 0x1000c23f
xor ebx, ebx
mov dword [ebp - 0x158], 0x2f2f0c49
mov byte [ebp - 0x145], bl
mov cl, 0x49
mov dword [ebp - 0x154], 0x3d2a2c
mov eax, ebx
xor byte [ebp + eax - 0x157], cl
inc eax
cmp eax, 6
jae 0x1000c289
mov cl, byte [ebp - 0x158]
jmp 0x1000c274
push edx
push edi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x151], bl
push eax
lea eax, [ebp - 0x157]
push eax
call esi
mov dword [0x10057c04], eax
test eax, eax
jns 0x1000c2b1
mov eax, ebx
mov dword [0x10057c04], eax
cmp eax, edi
jle 0x1000c2bb
mov dword [0x10057c04], ebx
cmp dword [ebp - 0x120], 0xf
lea ecx, [ebp - 0x134]
push 0x47
cmova ecx, dword [ebp - 0x134]
mov eax, ebx
pop edx
mov byte [ebp - 0x13c], dl
mov dword [ebp - 0x13b], 0x28333206
mov byte [ebp - 0x137], bl
xor byte [ebp + eax - 0x13b], dl
inc eax
cmp eax, 4
jae 0x1000c2ff
mov dl, byte [ebp - 0x13c]
jmp 0x1000c2ea
push 0xa
pop edx
mov byte [ebp - 0x137], bl
mov eax, ebx
mov byte [ebp - 0x150], dl
mov dword [ebp - 0x14f], 0x696f635a
mov dword [ebp - 0x14b], 0x69724f6f
mov dword [ebp - 0x147], 0x6d646b62
mov word [ebp - 0x143], 0x6f
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, 0xd
jae 0x1000c34c
mov dl, byte [ebp - 0x150]
jmp 0x1000c337
push ecx
push ebx
lea eax, [ebp - 0x13b]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
mov dword [0x10057c08], eax
test eax, eax
jns 0x1000c374
mov eax, ebx
mov dword [0x10057c08], eax
cmp eax, edi
jle 0x1000c37e
mov dword [0x10057c08], edi
cmp dword [ebp - 0x120], 0xf
lea ecx, [ebp - 0x134]
push 0x22
cmova ecx, dword [ebp - 0x134]
mov eax, ebx
pop edx
mov byte [ebp - 0x15c], dl
mov dword [ebp - 0x15b], 0x414d5671
mov dword [ebp - 0x157], 0x4c4c6b49
mov byte [ebp - 0x153], bl
xor byte [ebp + eax - 0x15b], dl
inc eax
cmp eax, 8
jae 0x1000c3cc
mov dl, byte [ebp - 0x15c]
jmp 0x1000c3b7
push 0x1e
pop edx
mov byte [ebp - 0x153], bl
mov eax, ebx
mov byte [ebp - 0x150], dl
mov dword [ebp - 0x14f], 0x7d7b774e
mov dword [ebp - 0x14b], 0x7d665b7b
mov dword [ebp - 0x147], 0x79707f76
mov word [ebp - 0x143], 0x7b
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, 0xd
jae 0x1000c419
mov dl, byte [ebp - 0x150]
jmp 0x1000c404
push ecx
push ebx
lea eax, [ebp - 0x15b]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
mov dword [0x10057c0c], eax
test eax, eax
jns 0x1000c441
mov eax, ebx
mov dword [0x10057c0c], eax
cmp eax, edi
jle 0x1000c44b
mov dword [0x10057c0c], edi
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x4b
mov dword [ebp - 0x13c], 0x272e184b
cmova edx, dword [ebp - 0x134]
mov eax, ebx
mov word [ebp - 0x138], 0x27
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 4
jae 0x1000c48b
mov cl, byte [ebp - 0x13c]
jmp 0x1000c476
mov byte [ebp - 0x137], bl
mov cl, 0x10
mov dword [ebp - 0x150], 0x75794010
mov eax, ebx
mov dword [ebp - 0x14c], 0x68557573
mov dword [ebp - 0x148], 0x7e717873
mov word [ebp - 0x144], 0x7577
mov byte [ebp - 0x142], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000c4d7
mov cl, byte [ebp - 0x150]
jmp 0x1000c4c2
push edx
push ebx
lea eax, [ebp - 0x13b]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
mov dword [0x10057c10], eax
test eax, eax
jns 0x1000c4ff
mov eax, ebx
mov dword [0x10057c10], eax
cmp eax, edi
jle 0x1000c509
mov dword [0x10057c10], edi
lea ecx, [ebp - 0x134]
call fcn.10003b97
call fcn.1003dd1f
ret