Function at 0x1001c070
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x100f7040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dl, 0x57
mov dword [ebp - 0x48], 0x23271857
mov dword [ebp - 0x44], 0x7939383e
xor ecx, ecx
mov dword [ebp - 0x40], 0x3e391e
nop dword [eax + eax]
xor byte [ebp + ecx - 0x47], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c0af
mov dl, byte [ebp - 0x48]
jmp 0x1001c0a0
mov edx, dword [0x100fb420]
lea ecx, [ebp - 0x47]
mov byte [ebp - 0x3d], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001c0c0
mov eax, 0x7fffffff
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x1001c5e0
cmp dword [0x100fb424], 0xf
mov eax, 0x100fb410
push ecx
cmova eax, dword [0x100fb410]
lea ecx, [ebp - 0x47]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x20]
call fcn.10014930
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x26
mov dword [ebp - 0x3c], 0x49496a26
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x38], 0x47437152
mov dword [ebp - 0x34], 0x484956
xor byte [ebp + ecx - 0x3b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c131
mov dl, byte [ebp - 0x3c]
jmp 0x1001c122
mov byte [ebp - 0x31], 0
mov dl, 0x2e
mov dword [ebp - 0x2c], 0x5a4b7e2e
xor ecx, ecx
mov dword [ebp - 0x28], 0x5a414162
mov dword [ebp - 0x24], 0x494047
nop
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c15f
mov dl, byte [ebp - 0x2c]
jmp 0x1001c150
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x3b]
push esi
push 1
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x21], 0
push eax
call edi
mov byte [0x100fb4a8], al
cmp al, 1
jbe 0x1001c186
mov byte [0x100fb4a8], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x47
mov dword [ebp - 0x38], 0x28280b47
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x34], 0x2a350633
mov word [ebp - 0x30], 0x3528
mov byte [ebp - 0x2e], 0
nop dword [eax]
xor byte [ebp + ecx - 0x37], dl
inc ecx
cmp ecx, 9
jae 0x1001c1bf
mov dl, byte [ebp - 0x38]
jmp 0x1001c1b0
mov byte [ebp - 0x2e], 0
mov dl, 0x50
mov dword [ebp - 0x2c], 0x24350050
xor ecx, ecx
mov dword [ebp - 0x28], 0x243f3f1c
mov dword [ebp - 0x24], 0x373e39
nop dword [eax]
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c1ef
mov dl, byte [ebp - 0x2c]
jmp 0x1001c1e0
push esi
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100fb4a9], al
cmp al, 1
jbe 0x1001c210
mov byte [0x100fb4a9], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x11
mov dword [ebp - 0x3c], 0x7e7e5d11
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x38], 0x72725065
mov dword [ebp - 0x34], 0x7e626274
mov word [ebp - 0x30], 0x6863
mov byte [ebp - 0x2e], 0
nop
xor byte [ebp + ecx - 0x3b], dl
inc ecx
cmp ecx, 0xd
jae 0x1001c24f
mov dl, byte [ebp - 0x3c]
jmp 0x1001c240
mov byte [ebp - 0x2e], 0
mov dl, 0x7e
mov dword [ebp - 0x2c], 0xa1b2e7e
xor ecx, ecx
mov dword [ebp - 0x28], 0xa111132
mov dword [ebp - 0x24], 0x191017
nop dword [eax]
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c27f
mov dl, byte [ebp - 0x2c]
jmp 0x1001c270
push esi
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100fb4aa], al
cmp al, 1
jbe 0x1001c2a0
mov byte [0x100fb4aa], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x39
mov dword [ebp - 0x2c], 0x56567539
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x28], 0x4b56774d
mov dword [ebp - 0x24], 0x555854
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c2d3
mov dl, byte [ebp - 0x2c]
jmp 0x1001c2c4
mov byte [ebp - 0x21], 0
mov dl, 0x53
mov dword [ebp - 0x3c], 0x27360353
xor ecx, ecx
mov dword [ebp - 0x38], 0x273c3c1f
mov dword [ebp - 0x34], 0x343d3a
xor byte [ebp + ecx - 0x3b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c2ff
mov dl, byte [ebp - 0x3c]
jmp 0x1001c2f0
push esi
push 1
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x31], 0
push eax
lea eax, [ebp - 0x3b]
push eax
call edi
mov byte [0x100fb4ab], al
cmp al, 1
jbe 0x1001c320
mov byte [0x100fb4ab], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x6d
mov dword [ebp - 0x38], 0x202216d
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x34], 0xa0c2019
mov word [ebp - 0x30], 0xe04
mov byte [ebp - 0x2e], 0
xor byte [ebp + ecx - 0x37], dl
inc ecx
cmp ecx, 9
jae 0x1001c356
mov dl, byte [ebp - 0x38]
jmp 0x1001c347
mov byte [ebp - 0x2e], 0
mov dl, 0x26
mov dword [ebp - 0x2c], 0x52437626
xor ecx, ecx
mov dword [ebp - 0x28], 0x5249496a
mov dword [ebp - 0x24], 0x41484f
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c382
mov dl, byte [ebp - 0x2c]
jmp 0x1001c373
push esi
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100fb4ac], al
cmp al, 1
jbe 0x1001c3a3
mov byte [0x100fb4ac], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x3f
mov dword [ebp - 0x38], 0x5050733f
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x34], 0x4d5e6d4b
mov word [ebp - 0x30], 0x5a
xor byte [ebp + ecx - 0x37], dl
inc ecx
cmp ecx, 8
jae 0x1001c3d5
mov dl, byte [ebp - 0x38]
jmp 0x1001c3c6
mov byte [ebp - 0x2f], 0
mov dl, 0x2e
mov dword [ebp - 0x2c], 0x5a4b7e2e
xor ecx, ecx
mov dword [ebp - 0x28], 0x5a414162
mov dword [ebp - 0x24], 0x494047
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c401
mov dl, byte [ebp - 0x2c]
jmp 0x1001c3f2
push esi
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100fb4ad], al
cmp al, 1
jbe 0x1001c422
mov byte [0x100fb4ad], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x14
mov dword [ebp - 0x3c], 0x7b7b5814
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x38], 0x73644160
mov dword [ebp - 0x34], 0x71707566
mov byte [ebp - 0x30], 0
nop word [eax + eax]
xor byte [ebp + ecx - 0x3b], dl
inc ecx
cmp ecx, 0xb
jae 0x1001c45f
mov dl, byte [ebp - 0x3c]
jmp 0x1001c450
mov byte [ebp - 0x30], 0
mov dl, 0x70
mov dword [ebp - 0x2c], 0x4152070
xor ecx, ecx
mov dword [ebp - 0x28], 0x41f1f3c
mov dword [ebp - 0x24], 0x171e19
nop dword [eax]
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c48f
mov dl, byte [ebp - 0x2c]
jmp 0x1001c480
push esi
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100fb4ae], al
cmp al, 1
jbe 0x1001c4b0
mov byte [0x100fb4ae], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x34
mov dword [ebp - 0x2c], 0x5b5b7834
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x28], 0x5d5a6140
mov dword [ebp - 0x24], 0x514145
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c4e3
mov dl, byte [ebp - 0x2c]
jmp 0x1001c4d4
mov byte [ebp - 0x21], 0
mov dl, 7
mov dword [ebp - 0x3c], 0x73625707
xor ecx, ecx
mov dword [ebp - 0x38], 0x7368684b
mov dword [ebp - 0x34], 0x60696e
xor byte [ebp + ecx - 0x3b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c50f
mov dl, byte [ebp - 0x3c]
jmp 0x1001c500
push esi
push 1
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x31], 0
push eax
lea eax, [ebp - 0x3b]
push eax
call edi
mov byte [0x100fb4af], al
cmp al, 1
jbe 0x1001c530
mov byte [0x100fb4af], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov dl, 0x33
mov dword [ebp - 0x38], 0x5c5c7f33
cmova esi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x34], 0x52417047
mov word [ebp - 0x30], 0x4755
mov byte [ebp - 0x2e], 0
xor byte [ebp + ecx - 0x37], dl
inc ecx
cmp ecx, 9
jae 0x1001c566
mov dl, byte [ebp - 0x38]
jmp 0x1001c557
mov byte [ebp - 0x2e], 0
mov dl, 0x62
mov dword [ebp - 0x2c], 0x16073262
xor ecx, ecx
mov dword [ebp - 0x28], 0x160d0d2e
mov dword [ebp - 0x24], 0x50c0b
xor byte [ebp + ecx - 0x2b], dl
inc ecx
cmp ecx, 0xa
jae 0x1001c592
mov dl, byte [ebp - 0x2c]
jmp 0x1001c583
push esi
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100fb4b0], al
cmp al, 1
jbe 0x1001c5b3
mov byte [0x100fb4b0], 1
lea ecx, [ebp - 0x20]
call fcn.10002f50
mov eax, dword [ebp - 0x20]
push 8
push eax
mov dword [ebp - 0x20], 0
call fcn.10089370
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
pop edi
pop esi
call fcn.100892c0
mov esp, ebp
pop ebp
ret
call fcn.10003040
int3