Function at 0x1000ed09
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x1009a078]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x55
pop eax
push 0x75
pop ebx
mov byte [ebp - 0x34], al
mov cl, 0x3c
mov byte [ebp - 0x2e], al
xor eax, eax
mov dword [ebp - 0x38], 0x484c733c
mov word [ebp - 0x33], 0x5253
mov byte [ebp - 0x31], 0x12
mov byte [ebp - 0x30], bl
mov byte [ebp - 0x2f], 0x52
mov byte [ebp - 0x2d], 0
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000ed57
mov cl, byte [ebp - 0x38]
jmp 0x1000ed48
lea eax, [ebp - 0x37]
mov byte [ebp - 0x2d], 0
push eax
mov edx, 0x1009bd28
lea ecx, [ebp - 0x1c]
call fcn.10009fc4
pop ecx
push 0x10
pop edi
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov cl, 0x38
mov dword [ebp - 0x38], 0x57577438
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x34], 0x595d6f4c
mov dword [ebp - 0x30], 0x565748
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000eda2
mov cl, byte [ebp - 0x38]
jmp 0x1000ed93
mov byte [ebp - 0x2d], 0
mov cl, 0x18
mov dword [ebp - 0x28], 0x6c7d4818
xor eax, eax
mov dword [ebp - 0x24], 0x6c777754
mov dword [ebp - 0x20], 0x7f7671
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000edce
mov cl, byte [ebp - 0x28]
jmp 0x1000edbf
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xor eax, eax
push edx
inc eax
mov byte [ebp - 0x1d], 0
push eax
lea eax, [ebp - 0x37]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x34], 0x68684b07
cmp al, dl
mov word [ebp - 0x30], 0x4673
mov byte [ebp - 0x2e], bl
cmova ecx, edx
mov word [ebp - 0x2d], 0x686a
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1009bdb0], cl
mov cl, 7
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
mov byte [ebp - 0x2b], bl
mov byte [ebp - 0x2a], 0
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000ee32
mov cl, byte [ebp - 0x34]
jmp 0x1000ee23
mov byte [ebp - 0x2a], 0
mov cl, 0x13
mov dword [ebp - 0x28], 0x67764313
xor eax, eax
mov dword [ebp - 0x24], 0x677c7c5f
mov dword [ebp - 0x20], 0x747d7a
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000ee5e
mov cl, byte [ebp - 0x28]
jmp 0x1000ee4f
push edx
xor edx, edx
mov byte [ebp - 0x1d], 0
inc edx
lea eax, [ebp - 0x33]
push edx
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov word [ebp - 0x38], 0x6c20
cmp al, dl
mov dword [ebp - 0x34], 0x43436154
push 0x4f
cmova ecx, edx
mov word [ebp - 0x30], 0x5345
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
pop eax
cmovae edx, dword [ebp - 0x1c]
mov byte [0x1009bdb1], cl
mov cl, 0x20
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], al
mov byte [ebp - 0x2d], al
xor eax, eax
mov byte [ebp - 0x2e], 0x53
mov word [ebp - 0x2c], 0x5952
mov byte [ebp - 0x2a], 0
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x1000eecc
mov cl, byte [ebp - 0x38]
jmp 0x1000eebd
push 0x24
pop eax
mov byte [ebp - 0x23], al
mov cl, 0x4b
mov byte [ebp - 0x22], al
xor eax, eax
mov byte [ebp - 0x2a], 0
mov dword [ebp - 0x28], 0x3f2e1b4b
mov byte [ebp - 0x24], 7
mov dword [ebp - 0x21], 0x2c25223f
mov byte [ebp - 0x1d], 0
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000ef02
mov cl, byte [ebp - 0x28]
jmp 0x1000eef3
xor eax, eax
mov byte [ebp - 0x1d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x37]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov byte [ebp - 0x28], bl
cmp al, dl
mov word [ebp - 0x27], 0x1a39
push edx
pop eax
cmova ecx, eax
mov byte [ebp - 0x24], al
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1009bdb2], cl
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
mov byte [ebp - 0x25], 0x1a
mov dword [ebp - 0x23], 0x18071a3b
mov word [ebp - 0x1f], 0x1914
mov byte [ebp - 0x1d], 0
xor byte [ebp + eax - 0x27], bl
inc eax
cmp eax, 0xa
jae 0x1000ef64
mov bl, byte [ebp - 0x28]
jmp 0x1000ef55
xor ebx, ebx
mov dword [ebp - 0x37], 0x19213005
push 0x55
pop ecx
mov byte [ebp - 0x1d], bl
mov eax, ebx
mov byte [ebp - 0x38], cl
mov dword [ebp - 0x33], 0x3c213a3a
mov word [ebp - 0x2f], 0x323b
mov byte [ebp - 0x2d], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000ef97
mov cl, byte [ebp - 0x38]
jmp 0x1000ef88
xor eax, eax
mov byte [ebp - 0x2d], bl
push edx
inc eax
push eax
lea eax, [ebp - 0x27]
push eax
lea eax, [ebp - 0x37]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x34], 0x5e5e7d31
cmp al, dl
mov dword [ebp - 0x30], 0x56507c45
mov word [ebp - 0x2c], 0x5258
mov eax, ebx
cmova ecx, edx
mov byte [ebp - 0x2a], bl
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1009bdb3], cl
mov cl, 0x31
cmovae edx, dword [ebp - 0x1c]
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000efee
mov cl, byte [ebp - 0x34]
jmp 0x1000efdf
push 0x2e
pop ecx
mov byte [ebp - 0x2a], bl
mov eax, ebx
mov byte [ebp - 0x28], cl
mov dword [ebp - 0x27], 0x625a4b7e
mov dword [ebp - 0x23], 0x475a4141
mov word [ebp - 0x1f], 0x4940
mov byte [ebp - 0x1d], bl
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000f01f
mov cl, byte [ebp - 0x28]
jmp 0x1000f010
xor eax, eax
mov byte [ebp - 0x1d], bl
push edx
inc eax
push eax
lea eax, [ebp - 0x33]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x34], 0x5a5a7935
cmp al, dl
mov dword [ebp - 0x30], 0x47546741
mov word [ebp - 0x2c], 0x50
mov eax, ebx
cmova ecx, edx
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1009bdb4], cl
cmovae edx, dword [ebp - 0x1c]
mov cl, 0x35
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x1000f073
mov cl, byte [ebp - 0x34]
jmp 0x1000f064
push 0x24
mov byte [ebp - 0x2b], bl
mov cl, 0x4a
pop ebx
mov dword [ebp - 0x28], 0x3e2f1a4a
xor eax, eax
mov dword [ebp - 0x24], 0x3e252506
mov byte [ebp - 0x20], 0x23
mov byte [ebp - 0x1f], bl
mov word [ebp - 0x1e], 0x2d
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000f0a7
mov cl, byte [ebp - 0x28]
jmp 0x1000f098
xor eax, eax
mov byte [ebp - 0x1d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x33]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x37], 0x38232300
cmp al, dl
mov dword [ebp - 0x33], 0x3e2b3c19
push 0x4c
cmova ecx, edx
mov dword [ebp - 0x2f], 0x29282d
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1009bdb5], cl
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
pop ecx
mov byte [ebp - 0x38], cl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000f101
mov cl, byte [ebp - 0x38]
jmp 0x1000f0f2
xor eax, eax
mov dword [ebp - 0x28], 0x11003565
mov byte [ebp - 0x2c], al
mov cl, 0x65
mov dword [ebp - 0x24], 0x110a0a29
mov dword [ebp - 0x20], 0x20b0c
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000f12c
mov cl, byte [ebp - 0x28]
jmp 0x1000f11d
xor eax, eax
mov byte [ebp - 0x1d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x37]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x28], 0x5c5c7f33
cmp al, dl
mov dword [ebp - 0x24], 0x5a5d6647
mov dword [ebp - 0x20], 0x564642
cmova ecx, edx
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1009bdb6], cl
cmovae edx, dword [ebp - 0x1c]
mov cl, 0x33
xor eax, eax
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000f182
mov cl, byte [ebp - 0x28]
jmp 0x1000f173
push 0x4f
pop ecx
mov byte [ebp - 0x1d], 0
xor eax, eax
mov byte [ebp - 0x38], cl
mov dword [ebp - 0x37], 0x33b2a1f
mov dword [ebp - 0x33], 0x263b2020
mov word [ebp - 0x2f], 0x2821
mov byte [ebp - 0x2d], 0
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000f1b5
mov cl, byte [ebp - 0x38]
jmp 0x1000f1a6
xor eax, eax
mov byte [ebp - 0x2d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x27]
push eax
lea eax, [ebp - 0x37]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x33], 0x1e050526
cmp al, dl
mov dword [ebp - 0x2f], 0xc0b1829
push 0x6a
cmova ecx, edx
mov word [ebp - 0x2b], 0x1e
cmp dword [ebp - 8], edi
mov byte [0x1009bdb7], cl
lea ecx, [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x1c]
xor eax, eax
pop edx
mov byte [ebp - 0x34], dl
xor byte [ebp + eax - 0x33], dl
inc eax
cmp eax, 9
jae 0x1000f20e
mov dl, byte [ebp - 0x34]
jmp 0x1000f1ff
xor edx, edx
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x2a], dl
mov eax, edx
mov dword [ebp - 0x27], 0x68504174
mov dword [ebp - 0x23], 0x4d504b4b
mov word [ebp - 0x1f], 0x434a
mov byte [ebp - 0x1d], dl
xor byte [ebp + eax - 0x27], bl
inc eax
cmp eax, 0xa
jae 0x1000f23e
mov bl, byte [ebp - 0x28]
jmp 0x1000f22f
push ecx
xor ebx, ebx
mov byte [ebp - 0x1d], dl
inc ebx
lea eax, [ebp - 0x33]
push ebx
push eax
lea eax, [ebp - 0x27]
push eax
call esi
cmp al, bl
movzx ecx, al
push 0
cmova ecx, ebx
mov byte [0x1009bdb8], cl
lea ecx, [ebp - 0x1c]
push ebx
call fcn.10001e1f
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100454d5
mov esp, ebp
pop ebp
ret