Function at 0x1000b949
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x1003e993
call fcn.1003d7e1
xor ebx, ebx
lea eax, [ebp - 0x117]
push 0x103
push ebx
push eax
mov byte [ebp - 0x118], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10003d9a
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000c2c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10003b98
mov cl, 0x4b
mov dword [ebp - 0x14c], 0x3f3b044b
mov dword [ebp - 0x148], 0x65252422
mov eax, ebx
mov dword [ebp - 0x144], 0x222502
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000b9ed
mov cl, byte [ebp - 0x14c]
jmp 0x1000b9d8
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x10055470
lea ecx, [ebp - 0x130]
call fcn.1000c3bf
pop ecx
push 0xf
pop edi
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
mov cl, 0x59
mov dword [ebp - 0x13c], 0xd011d59
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x138], 0x3c2920
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000ba4e
mov cl, byte [ebp - 0x13c]
jmp 0x1000ba39
push 0x45
mov byte [ebp - 0x135], bl
mov cl, 0x11
pop ebx
mov word [ebp - 0x148], 0x5511
xor eax, eax
mov byte [ebp - 0x146], 0x49
mov byte [ebp - 0x145], bl
mov dword [ebp - 0x144], 0x746168
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000ba90
mov cl, byte [ebp - 0x148]
jmp 0x1000ba7b
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], 0
push eax
call esi
mov dword [0x10057bdc], eax
test eax, eax
jns 0x1000bac0
xor eax, eax
mov dword [0x10057bdc], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bacd
mov dword [0x10057bdc], ecx
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
mov cl, 9
mov dword [ebp - 0x14c], 0x60625a09
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x7b486565
mov word [ebp - 0x144], 0x686c
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000bb1d
mov cl, byte [ebp - 0x14c]
jmp 0x1000bb08
mov byte [ebp - 0x142], 0
xor eax, eax
mov byte [ebp - 0x138], bl
mov dword [ebp - 0x137], 0x26362c08
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000bb52
mov bl, byte [ebp - 0x138]
jmp 0x1000bb3d
push edx
xor ebx, ebx
lea eax, [ebp - 0x14b]
push ebx
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call esi
mov dword [0x10057be0], eax
test eax, eax
jns 0x1000bb7c
mov eax, ebx
mov dword [0x10057be0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bb89
mov dword [0x10057be0], ecx
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
push 0x24
cmova edx, dword [ebp - 0x130]
mov eax, ebx
pop ecx
mov byte [ebp - 0x150], cl
mov dword [ebp - 0x14f], 0x4d4a4163
mov dword [ebp - 0x14b], 0x574d7241
mov dword [ebp - 0x147], 0x4148464d
mov byte [ebp - 0x143], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000bbe0
mov cl, byte [ebp - 0x150]
jmp 0x1000bbcb
mov byte [ebp - 0x143], bl
mov cl, 0x27
mov dword [ebp - 0x138], 0x544e6a27
mov eax, ebx
mov word [ebp - 0x134], 0x44
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000bc12
mov cl, byte [ebp - 0x138]
jmp 0x1000bbfd
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057be4], eax
test eax, eax
jns 0x1000bc3b
mov eax, ebx
mov dword [0x10057be4], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bc48
mov dword [0x10057be4], ecx
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
push 0x60
cmova edx, dword [ebp - 0x130]
mov cl, 5
pop ebx
mov word [ebp - 0x14c], 0x5705
xor eax, eax
mov byte [ebp - 0x14a], bl
mov word [ebp - 0x149], 0x616b
mov byte [ebp - 0x147], bl
mov dword [ebp - 0x146], 0x75644677
mov byte [ebp - 0x142], bl
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000bcac
mov cl, byte [ebp - 0x14c]
jmp 0x1000bc97
mov byte [ebp - 0x141], 0
mov cl, 0x13
mov word [ebp - 0x138], 0x5e13
xor eax, eax
mov byte [ebp - 0x136], 0x7a
mov byte [ebp - 0x135], bl
mov word [ebp - 0x134], 0x70
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000bceb
mov cl, byte [ebp - 0x138]
jmp 0x1000bcd6
push edx
xor ebx, ebx
mov byte [ebp - 0x133], 0
inc ebx
lea eax, [ebp - 0x14b]
push ebx
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057bec], eax
test eax, eax
jns 0x1000bd17
xor eax, eax
mov dword [0x10057bec], eax
cmp eax, ebx
jle 0x1000bd21
mov dword [0x10057bec], ebx
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
push 0x76
cmova edx, dword [ebp - 0x130]
mov cl, 0x18
pop ebx
mov word [ebp - 0x150], 0x4a18
xor eax, eax
mov byte [ebp - 0x14e], 0x79
mov byte [ebp - 0x14d], bl
mov word [ebp - 0x14c], 0x7173
mov byte [ebp - 0x14a], bl
mov dword [ebp - 0x149], 0x7e7e5d7f
mov dword [ebp - 0x145], 0x6c7b7d
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000bd89
mov cl, byte [ebp - 0x150]
jmp 0x1000bd74
mov byte [ebp - 0x142], 0
mov al, 0x3f
mov dword [ebp - 0x138], 0x4c56723f
xor ecx, ecx
mov word [ebp - 0x134], 0x5c
xor byte [ebp + ecx - 0x137], al
inc ecx
cmp ecx, 4
jae 0x1000bdbc
mov al, byte [ebp - 0x138]
jmp 0x1000bda7
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057bf0], eax
test eax, eax
jns 0x1000bde6
xor eax, eax
mov dword [0x10057bf0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000bdf3
mov dword [0x10057bf0], ecx
cmp dword [ebp - 0x11c], edi
lea ecx, [ebp - 0x130]
push 0x60
cmova ecx, dword [ebp - 0x130]
xor eax, eax
pop edx
mov byte [ebp - 0x14c], dl
mov dword [ebp - 0x14b], 0x50d0127
mov dword [ebp - 0x147], 0x50d0934
mov byte [ebp - 0x143], 0
xor byte [ebp + eax - 0x14b], dl
inc eax
cmp eax, 8
jae 0x1000be41
mov dl, byte [ebp - 0x14c]
jmp 0x1000be2c
push 0x3f
pop edx
mov byte [ebp - 0x143], 0
xor eax, eax
mov byte [ebp - 0x138], dl
mov dword [ebp - 0x137], 0x5c4c5672
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x1000be79
mov dl, byte [ebp - 0x138]
jmp 0x1000be64
push ecx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057be8], eax
test eax, eax
jns 0x1000bea3
xor eax, eax
mov dword [0x10057be8], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x1000beb0
mov dword [0x10057be8], ecx
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
mov cl, 0x2a
mov dword [ebp - 0x150], 0x474b692a
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14c], 0x784b584f
mov dword [ebp - 0x148], 0x4f4d444b
mov byte [ebp - 0x144], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x1000bf01
mov cl, byte [ebp - 0x150]
jmp 0x1000beec
push 0x20
pop ecx
mov byte [ebp - 0x144], 0
xor eax, eax
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x4353496d
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000bf39
mov cl, byte [ebp - 0x138]
jmp 0x1000bf24
push edx
push 0
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
mov dword [0x10057bf4], eax
test eax, eax
jns 0x1000bf63
xor eax, eax
mov dword [0x10057bf4], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x1000bf70
mov dword [0x10057bf4], ecx
cmp dword [ebp - 0x11c], edi
lea ecx, [ebp - 0x130]
push 0xc
cmova ecx, dword [ebp - 0x130]
xor eax, eax
pop edx
mov byte [ebp - 0x140], dl
mov dword [ebp - 0x13f], 0x64786d5c
mov dword [ebp - 0x13b], 0x655a7f63
mov word [ebp - 0x137], 0x7b69
mov byte [ebp - 0x135], 0
xor byte [ebp + eax - 0x13f], dl
inc eax
cmp eax, 0xa
jae 0x1000bfc7
mov dl, byte [ebp - 0x140]
jmp 0x1000bfb2
push 0x48
pop edx
mov byte [ebp - 0x135], 0
xor eax, eax
mov byte [ebp - 0x148], dl
mov dword [ebp - 0x147], 0x2d2e2e0d
mov word [ebp - 0x143], 0x3c2b
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x147], dl
inc eax
cmp eax, 6
jae 0x1000c008
mov dl, byte [ebp - 0x148]
jmp 0x1000bff3
push ecx
push 1
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], 0
push eax
lea eax, [ebp - 0x147]
push eax
call esi
mov dword [0x10057bf8], eax
test eax, eax
jns 0x1000c032
xor eax, eax
mov dword [0x10057bf8], eax
cmp eax, 1
jle 0x1000c03e
and dword [0x10057bf8], 0
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
push 0x5c
cmova edx, dword [ebp - 0x130]
xor eax, eax
pop ecx
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x3328291d
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c082
mov cl, byte [ebp - 0x138]
jmp 0x1000c06d
mov byte [ebp - 0x133], 0
mov cl, 0x13
mov word [ebp - 0x150], 0x4313
xor eax, eax
mov byte [ebp - 0x14e], 0x7a
mov byte [ebp - 0x14d], bl
mov byte [ebp - 0x14c], 0x70
mov byte [ebp - 0x14b], bl
mov dword [ebp - 0x14a], 0x7b706b56
mov word [ebp - 0x146], 0x7d72
mov byte [ebp - 0x144], 0x74
mov byte [ebp - 0x143], bl
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000c0ec
mov cl, byte [ebp - 0x150]
jmp 0x1000c0d7
push edx
push 0
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], 0
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
mov dword [0x10057bfc], eax
test eax, eax
jns 0x1000c116
xor eax, eax
mov dword [0x10057bfc], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000c123
mov dword [0x10057bfc], ecx
cmp dword [ebp - 0x11c], edi
lea edx, [ebp - 0x130]
mov cl, 0x49
mov dword [ebp - 0x14c], 0x263d1a49
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x2700222a
mov word [ebp - 0x144], 0x27
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000c16c
mov cl, byte [ebp - 0x14c]
jmp 0x1000c157
mov byte [ebp - 0x143], 0
mov cl, 0x40
mov dword [ebp - 0x140], 0x25291040
xor eax, eax
mov dword [ebp - 0x13c], 0x38052523
mov dword [ebp - 0x138], 0x2e212823
mov word [ebp - 0x134], 0x2527
mov byte [ebp - 0x132], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x1000c1ba
mov cl, byte [ebp - 0x140]
jmp 0x1000c1a5
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
mov dword [0x10057c00], eax
test eax, eax
jns 0x1000c1e4
xor eax, eax
mov dword [0x10057c00], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000c1f1
mov dword [0x10057c00], ecx
cmp dword [ebp - 0x11c], edi
lea ecx, [ebp - 0x130]
push 0x49
cmova ecx, dword [ebp - 0x130]
xor eax, eax
pop edx
mov byte [ebp - 0x138], dl
mov dword [ebp - 0x137], 0x25252c1a
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x1000c235
mov dl, byte [ebp - 0x138]
jmp 0x1000c220
xor edx, edx
mov byte [ebp - 0x168], bl
mov byte [ebp - 0x133], dl
mov eax, edx
mov dword [ebp - 0x167], 0x15131f26
mov dword [ebp - 0x163], 0x150e3313
mov dword [ebp - 0x15f], 0x1118171e
mov word [ebp - 0x15b], 0x13
xor byte [ebp + eax - 0x167], bl
inc eax
cmp eax, 0xd
jae 0x1000c281
mov bl, byte [ebp - 0x168]
jmp 0x1000c26c
push ecx
push edx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], dl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
mov dword [0x10057c04], eax
test eax, eax
jns 0x1000c2a9
xor eax, eax
mov dword [0x10057c04], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000c2b6
mov dword [0x10057c04], ecx
lea ecx, [ebp - 0x130]
call fcn.10003b98
call fcn.1003d79f
ret