Function at 0x100075e9
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10030691
call fcn.1002fc16
xor ebx, ebx
lea eax, [ebp - 0x117]
push 0x103
push ebx
push eax
mov byte [ebp - 0x118], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10003ec3
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.10007f32
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.100026bd
push 0x73
mov cl, 0x3c
mov dword [ebp - 0x14a], 0x5355484c
pop ebx
mov byte [ebp - 0x14c], cl
xor eax, eax
mov byte [ebp - 0x14b], bl
mov dword [ebp - 0x146], 0x52751252
mov word [ebp - 0x142], 0x55
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000769b
mov cl, byte [ebp - 0x14c]
jmp 0x10007686
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], 0
push eax
mov edx, 0x1003f468
lea ecx, [ebp - 0x130]
call fcn.10008042
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
pop ecx
cmova edx, dword [ebp - 0x130]
mov cl, 0x11
mov dword [ebp - 0x13c], 0x45495511
xor eax, eax
mov dword [ebp - 0x138], 0x746168
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x100076fb
mov cl, byte [ebp - 0x13c]
jmp 0x100076e6
mov byte [ebp - 0x142], bl
mov cl, 0x16
xor ebx, ebx
mov byte [ebp - 0x135], 0
mov dword [ebp - 0x148], 0x424e5216
mov eax, ebx
mov word [ebp - 0x144], 0x666f
mov byte [ebp - 0x141], bl
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000773c
mov cl, byte [ebp - 0x148]
jmp 0x10007727
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push ebx
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], bl
push eax
call edi
mov dword [0x1003ff34], eax
test eax, eax
jns 0x1000776a
mov eax, ebx
mov dword [0x1003ff34], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10007777
mov dword [0x1003ff34], ecx
cmp dword [ebp - 0x11c], 0xf
lea esi, [ebp - 0x130]
push 0x62
cmova esi, dword [ebp - 0x130]
lea ecx, [ebp - 0x14c]
pop eax
mov dword [ebp - 0x14c], 0x67655d0e
mov byte [ebp - 0x148], al
mov byte [ebp - 0x147], al
mov dword [ebp - 0x146], 0x6f6b7c4f
mov byte [ebp - 0x142], bl
call fcn.10001401
mov edx, eax
mov dword [ebp - 0x138], 0x574d6924
mov cl, 0x24
mov word [ebp - 0x134], 0x47
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x100077ed
mov cl, byte [ebp - 0x138]
jmp 0x100077d8
push esi
push ebx
push edx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call edi
mov dword [0x1003ff38], eax
test eax, eax
jns 0x1000780f
mov eax, ebx
mov dword [0x1003ff38], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000781c
mov dword [0x1003ff38], ecx
cmp dword [ebp - 0x11c], 0xf
lea esi, [ebp - 0x130]
push 0x7d
cmova esi, dword [ebp - 0x130]
mov cl, 0x2b
pop edx
mov dword [ebp - 0x150], 0x454e6c2b
mov eax, ebx
mov word [ebp - 0x14c], 0x4e42
mov byte [ebp - 0x14a], dl
mov dword [ebp - 0x149], 0x49425842
mov word [ebp - 0x145], 0x4e47
mov byte [ebp - 0x143], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000787e
mov cl, byte [ebp - 0x150]
jmp 0x10007869
push 0x1e
mov byte [ebp - 0x143], bl
xor eax, eax
pop ebx
mov byte [ebp - 0x138], dl
mov word [ebp - 0x137], 0x1430
mov byte [ebp - 0x135], 0xe
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x100078c1
mov dl, byte [ebp - 0x138]
jmp 0x100078ac
push esi
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x1003ff3c], eax
test eax, eax
jns 0x100078eb
xor eax, eax
mov dword [0x1003ff3c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x100078f8
mov dword [0x1003ff3c], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov byte [ebp - 0x14c], bl
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14b], 0x7a707b4c
mov dword [ebp - 0x147], 0x7f5d6c7b
mov word [ebp - 0x143], 0x7b6e
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], bl
inc eax
cmp eax, 0xa
jae 0x1000794d
mov bl, byte [ebp - 0x14c]
jmp 0x10007938
xor ebx, ebx
mov dword [ebp - 0x138], 0x617b5f12
mov byte [ebp - 0x141], bl
mov cl, 0x12
mov word [ebp - 0x134], 0x71
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10007981
mov cl, byte [ebp - 0x138]
jmp 0x1000796c
push edx
push 1
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x1003ff44], eax
test eax, eax
jns 0x100079aa
mov eax, ebx
mov dword [0x1003ff44], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x100079b7
mov dword [0x1003ff44], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x73
cmova edx, dword [ebp - 0x130]
mov cl, 0x15
pop eax
push 0xd
mov byte [ebp - 0x147], al
mov byte [ebp - 0x146], al
mov eax, ebx
mov dword [ebp - 0x150], 0x7b744715
mov dword [ebp - 0x14c], 0x727b7c7e
mov byte [ebp - 0x148], 0x50
mov dword [ebp - 0x145], 0x617670
pop esi
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, esi
jae 0x10007a1a
mov cl, byte [ebp - 0x150]
jmp 0x10007a06
mov byte [ebp - 0x142], bl
mov cl, 5
mov dword [ebp - 0x138], 0x766c4805
mov eax, ebx
mov word [ebp - 0x134], 0x66
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10007a4c
mov cl, byte [ebp - 0x138]
jmp 0x10007a37
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x1003ff48], eax
test eax, eax
jns 0x10007a75
mov eax, ebx
mov dword [0x1003ff48], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10007a82
mov dword [0x1003ff48], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x62
cmova edx, dword [ebp - 0x130]
mov cl, 0xb
pop ebx
mov dword [ebp - 0x14c], 0x666a4c0b
xor eax, eax
mov word [ebp - 0x148], 0x5f6e
mov byte [ebp - 0x146], bl
mov word [ebp - 0x145], 0x6e66
mov byte [ebp - 0x143], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x10007adb
mov cl, byte [ebp - 0x14c]
jmp 0x10007ac6
mov byte [ebp - 0x143], 0
xor eax, eax
mov byte [ebp - 0x138], bl
mov dword [ebp - 0x137], 0x1110b2f
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x10007b10
mov bl, byte [ebp - 0x138]
jmp 0x10007afb
push edx
xor ebx, ebx
lea eax, [ebp - 0x14b]
push ebx
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call edi
mov dword [0x1003ff40], eax
test eax, eax
jns 0x10007b3a
mov eax, ebx
mov dword [0x1003ff40], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x10007b47
mov dword [0x1003ff40], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x45
mov dword [ebp - 0x150], 0x28240645
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x14c], 0x17243720
mov dword [ebp - 0x148], 0x20222b24
mov byte [ebp - 0x144], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x10007b98
mov cl, byte [ebp - 0x150]
jmp 0x10007b83
push 0x19
mov byte [ebp - 0x144], bl
mov cl, 0x70
pop ebx
mov word [ebp - 0x138], 0x3d70
xor eax, eax
mov byte [ebp - 0x136], bl
mov word [ebp - 0x135], 0x1303
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10007bd9
mov cl, byte [ebp - 0x138]
jmp 0x10007bc4
push edx
push 0
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x1003ff4c], eax
test eax, eax
jns 0x10007c03
xor eax, eax
mov dword [0x1003ff4c], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x10007c10
mov dword [0x1003ff4c], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
push 0x73
cmova edx, dword [ebp - 0x130]
xor eax, eax
pop ecx
mov byte [ebp - 0x140], cl
mov dword [ebp - 0x13f], 0x1b071223
mov dword [ebp - 0x13b], 0x1a25001c
mov word [ebp - 0x137], 0x416
mov byte [ebp - 0x135], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x10007c68
mov cl, byte [ebp - 0x140]
jmp 0x10007c53
mov byte [ebp - 0x135], 0
mov cl, 0xa
mov dword [ebp - 0x148], 0x6c6c4f0a
xor eax, eax
mov dword [ebp - 0x144], 0x7e696f
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x10007c9c
mov cl, byte [ebp - 0x148]
jmp 0x10007c87
push edx
push 1
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], 0
push eax
lea eax, [ebp - 0x147]
push eax
call edi
mov dword [0x1003ff50], eax
test eax, eax
jns 0x10007cc6
xor eax, eax
mov dword [0x1003ff50], eax
cmp eax, 1
jle 0x10007cd2
and dword [0x1003ff50], 0
cmp dword [ebp - 0x11c], 0xf
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x138], bl
cmova ecx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x137], 0x766d6c58
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x10007d14
mov bl, byte [ebp - 0x138]
jmp 0x10007cff
push 0x17
xor ebx, ebx
mov dword [ebp - 0x14f], 0x74727e47
pop edx
mov byte [ebp - 0x133], bl
mov eax, ebx
mov byte [ebp - 0x150], dl
mov dword [ebp - 0x14b], 0x746f5272
mov dword [ebp - 0x147], 0x7079767f
mov word [ebp - 0x143], 0x72
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, esi
jae 0x10007d62
mov dl, byte [ebp - 0x150]
jmp 0x10007d4e
push ecx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call edi
mov dword [0x1003ff54], eax
test eax, eax
jns 0x10007d8a
mov eax, ebx
mov dword [0x1003ff54], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10007d97
mov dword [0x1003ff54], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x7e
mov dword [ebp - 0x14c], 0x110a2d7e
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x148], 0x1037151d
mov word [ebp - 0x144], 0x10
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x10007de1
mov cl, byte [ebp - 0x14c]
jmp 0x10007dcc
mov byte [ebp - 0x143], bl
mov cl, 0x3b
mov dword [ebp - 0x140], 0x5e526b3b
mov eax, ebx
mov dword [ebp - 0x13c], 0x437e5e58
mov dword [ebp - 0x138], 0x555a5358
mov word [ebp - 0x134], 0x5e5c
mov byte [ebp - 0x132], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, esi
jae 0x10007e2c
mov cl, byte [ebp - 0x140]
jmp 0x10007e18
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], bl
push eax
lea eax, [ebp - 0x13f]
push eax
call edi
mov dword [0x1003ff58], eax
test eax, eax
jns 0x10007e54
mov eax, ebx
mov dword [0x1003ff58], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10007e61
mov dword [0x1003ff58], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x29
mov dword [ebp - 0x138], 0x454c7a29
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov word [ebp - 0x134], 0x45
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10007ea1
mov cl, byte [ebp - 0x138]
jmp 0x10007e8c
mov byte [ebp - 0x133], bl
mov cl, 0x2e
mov dword [ebp - 0x168], 0x4b477e2e
mov eax, ebx
mov dword [ebp - 0x164], 0x566b4b4d
mov dword [ebp - 0x160], 0x404f464d
mov word [ebp - 0x15c], 0x4b49
mov byte [ebp - 0x15a], bl
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, esi
jae 0x10007eec
mov cl, byte [ebp - 0x168]
jmp 0x10007ed8
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call edi
mov dword [0x1003ff5c], eax
test eax, eax
jns 0x10007f14
mov eax, ebx
mov dword [0x1003ff5c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10007f21
mov dword [0x1003ff5c], ecx
lea ecx, [ebp - 0x130]
call fcn.100026bd
call fcn.1002fbd4
ret