Function at 0x1000c421
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10072c70
call fcn.1003bfa0
mov esi, 0x104
lea eax, [ebp - 0x118]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.100539e0
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10004179
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.1000cd67
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
xor eax, eax
push ebx
inc eax
push eax
call fcn.1000402e
push 0x4d
pop ebx
mov cl, bl
mov dword [ebp - 0x14b], 0x24393d02
mov byte [ebp - 0x14c], cl
xor eax, eax
mov dword [ebp - 0x147], 0x4632322
mov word [ebp - 0x143], 0x2423
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000c4d0
mov cl, byte [ebp - 0x14c]
jmp 0x1000c4bb
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], 0
push eax
mov edx, 0x10096e30
lea ecx, [ebp - 0x130]
call fcn.1000ce6f
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
pop ecx
cmovae edx, dword [ebp - 0x130]
mov cl, 0x70
mov dword [ebp - 0x13c], 0x24283470
xor eax, eax
mov dword [ebp - 0x138], 0x150009
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x1000c530
mov cl, byte [ebp - 0x13c]
jmp 0x1000c51b
push 0x18
pop eax
mov cl, al
mov byte [ebp - 0x135], 0
mov byte [ebp - 0x148], cl
xor eax, eax
mov dword [ebp - 0x147], 0x614c405c
mov word [ebp - 0x143], 0x7d68
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000c573
mov cl, byte [ebp - 0x148]
jmp 0x1000c55e
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push 0
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], 0
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14c], 0x383a0251
test eax, eax
mov dword [ebp - 0x148], 0x23103d3d
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x3034
cmovs eax, ecx
mov byte [ebp - 0x142], 0
xor edi, edi
mov cl, 0x51
inc edi
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009df68], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 9
jae 0x1000c5f8
mov cl, byte [ebp - 0x14c]
jmp 0x1000c5e3
mov byte [ebp - 0x142], 0
mov cl, 0x58
mov dword [ebp - 0x138], 0x2b311558
xor eax, eax
mov word [ebp - 0x134], 0x3b
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c62b
mov cl, byte [ebp - 0x138]
jmp 0x1000c616
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov word [ebp - 0x150], 0x3671
test eax, eax
mov byte [ebp - 0x14d], 0x1f
push 0x14
cmovs eax, ecx
mov word [ebp - 0x14b], 0x2714
cmp eax, edi
mov byte [ebp - 0x148], 2
lea edx, [ebp - 0x130]
mov dword [ebp - 0x146], 0x141d13
cmovg eax, edi
mov cl, 0x71
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009df6c], eax
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x14e], al
push 0x18
pop eax
mov byte [ebp - 0x14c], al
mov byte [ebp - 0x149], al
mov byte [ebp - 0x147], al
xor eax, eax
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000c6cb
mov cl, byte [ebp - 0x150]
jmp 0x1000c6b6
mov byte [ebp - 0x143], 0
mov cl, 0x2f
mov dword [ebp - 0x138], 0x5c46622f
xor eax, eax
mov word [ebp - 0x134], 0x4c
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c6fe
mov cl, byte [ebp - 0x138]
jmp 0x1000c6e9
push edx
push edi
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x14b], 0x7a
test eax, eax
mov byte [ebp - 0x14a], bl
push 0x28
cmovs eax, ecx
mov word [ebp - 0x149], 0x4c46
cmp eax, edi
mov byte [ebp - 0x147], bl
lea edx, [ebp - 0x130]
mov dword [ebp - 0x146], 0x58496b5a
cmovg eax, edi
mov byte [ebp - 0x142], bl
cmp dword [ebp - 0x11c], 0x10
pop ecx
cmovae edx, dword [ebp - 0x130]
mov dword [0x1009df70], eax
xor eax, eax
mov byte [ebp - 0x14c], cl
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x1000c78f
mov cl, byte [ebp - 0x14c]
jmp 0x1000c77a
xor ecx, ecx
mov byte [ebp - 0x138], bl
mov byte [ebp - 0x141], cl
mov eax, ecx
mov dword [ebp - 0x137], 0x2e3e2400
mov byte [ebp - 0x133], cl
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000c7c4
mov bl, byte [ebp - 0x138]
jmp 0x1000c7af
push edx
xor ebx, ebx
mov byte [ebp - 0x133], cl
inc ebx
lea eax, [ebp - 0x14b]
push ebx
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x150], 0x333c0f5d
test eax, eax
mov dword [ebp - 0x14c], 0x3a333436
push 0x18
cmovs eax, ecx
mov dword [ebp - 0x147], 0x3e383b3b
cmp eax, ebx
mov word [ebp - 0x143], 0x29
lea edx, [ebp - 0x130]
mov cl, 0x5d
cmovg eax, ebx
cmp dword [ebp - 0x11c], 0x10
pop ebx
cmovae edx, dword [ebp - 0x130]
mov dword [0x1009df78], eax
xor eax, eax
mov byte [ebp - 0x148], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000c84d
mov cl, byte [ebp - 0x150]
jmp 0x1000c838
push 8
mov byte [ebp - 0x135], bl
mov cl, 0x6b
pop ebx
mov byte [ebp - 0x142], 0
xor eax, eax
mov word [ebp - 0x138], 0x266b
mov byte [ebp - 0x136], 2
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c893
mov cl, byte [ebp - 0x138]
jmp 0x1000c87e
push edx
xor edi, edi
mov byte [ebp - 0x133], 0
inc edi
lea eax, [ebp - 0x14f]
push edi
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov word [ebp - 0x14c], 0x7235
test eax, eax
mov byte [ebp - 0x14a], 0x54
push 0x58
cmovs eax, ecx
mov word [ebp - 0x148], 0x6150
cmp eax, edi
mov byte [ebp - 0x146], 0x5c
lea edx, [ebp - 0x130]
mov word [ebp - 0x144], 0x50
cmovg eax, edi
mov cl, 0x35
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009df7c], eax
cmovae edx, dword [ebp - 0x130]
pop eax
mov byte [ebp - 0x149], al
mov byte [ebp - 0x145], al
xor eax, eax
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, ebx
jae 0x1000c924
mov cl, byte [ebp - 0x14c]
jmp 0x1000c910
xor ebx, ebx
mov dword [ebp - 0x138], 0xd17337e
mov byte [ebp - 0x143], bl
mov cl, 0x7e
mov word [ebp - 0x134], 0x1d
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x1000c958
mov cl, byte [ebp - 0x138]
jmp 0x1000c943
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x14f], 0x6c64684a
test eax, eax
mov dword [ebp - 0x14b], 0x685b687b
push 0x18
cmovs eax, ecx
mov dword [ebp - 0x147], 0x6c6e67
pop ecx
cmp eax, ecx
push 9
cmovg eax, ecx
lea ecx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 0x10
pop edx
cmovae ecx, dword [ebp - 0x130]
mov dword [0x1009df74], eax
mov eax, ebx
mov byte [ebp - 0x150], dl
xor byte [ebp + eax - 0x14f], dl
inc eax
cmp eax, 0xb
jae 0x1000c9d6
mov dl, byte [ebp - 0x150]
jmp 0x1000c9c1
push 0x30
pop edx
mov byte [ebp - 0x144], bl
mov eax, ebx
mov byte [ebp - 0x138], dl
mov dword [ebp - 0x137], 0x5343597d
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], dl
inc eax
cmp eax, 4
jae 0x1000ca0c
mov dl, byte [ebp - 0x138]
jmp 0x1000c9f7
push ecx
push ebx
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], bl
push eax
lea eax, [ebp - 0x137]
push eax
call esi
xor ecx, ecx
mov word [ebp - 0x140], 0x5e0e
test eax, eax
mov dword [ebp - 0x13d], 0x7d61667a
push 0x14
cmovs eax, ecx
mov dword [ebp - 0x139], 0x796b6758
pop ecx
cmp eax, ecx
mov byte [ebp - 0x135], 0
push 0x6f
cmovg eax, ecx
lea edx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 0x10
mov cl, 0xe
pop ebx
cmovae edx, dword [ebp - 0x130]
mov dword [0x1009df80], eax
xor eax, eax
mov byte [ebp - 0x13e], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x1000ca92
mov cl, byte [ebp - 0x140]
jmp 0x1000ca7d
push 0x58
pop ecx
mov byte [ebp - 0x135], 0
xor eax, eax
mov byte [ebp - 0x148], cl
mov dword [ebp - 0x147], 0x3d3e3e1d
mov word [ebp - 0x143], 0x2c3b
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000cad3
mov cl, byte [ebp - 0x148]
jmp 0x1000cabe
push edx
push edi
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], 0
push eax
lea eax, [ebp - 0x147]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x138], bl
test eax, eax
mov dword [ebp - 0x137], 0x1b1a2e
lea edx, [ebp - 0x130]
mov byte [ebp - 0x133], cl
cmovs eax, ecx
cmp eax, edi
cmovg eax, ecx
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009df84], eax
cmovae edx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000cb3e
mov bl, byte [ebp - 0x138]
jmp 0x1000cb29
xor ebx, ebx
mov dword [ebp - 0x150], 0x5f536a3a
mov byte [ebp - 0x133], bl
mov cl, 0x3a
mov dword [ebp - 0x14c], 0x427f5f59
mov eax, ebx
mov dword [ebp - 0x148], 0x545b5259
mov word [ebp - 0x144], 0x5f5d
mov byte [ebp - 0x142], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x1000cb8c
mov cl, byte [ebp - 0x150]
jmp 0x1000cb77
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x143], bl
test eax, eax
mov dword [ebp - 0x14b], 0x323e2502
push 0x51
cmovs eax, ecx
mov dword [ebp - 0x147], 0x3f3f183a
cmp eax, edi
lea edx, [ebp - 0x130]
pop ecx
cmovg eax, edi
mov byte [ebp - 0x14c], cl
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009df88], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x130]
push 8
pop ebx
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, ebx
jae 0x1000cc05
mov cl, byte [ebp - 0x14c]
jmp 0x1000cbf1
mov byte [ebp - 0x143], 0
mov cl, 3
mov dword [ebp - 0x140], 0x666a5303
xor eax, eax
mov dword [ebp - 0x13c], 0x7b466660
mov dword [ebp - 0x138], 0x6d626b60
mov word [ebp - 0x134], 0x6664
mov byte [ebp - 0x132], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x1000cc53
mov cl, byte [ebp - 0x140]
jmp 0x1000cc3e
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x138], bl
test eax, eax
mov dword [ebp - 0x137], 0x64646d5b
mov byte [ebp - 0x133], 0
cmovs eax, ecx
lea ecx, [ebp - 0x130]
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x11c], 0x10
mov dword [0x1009df8c], eax
cmovae ecx, dword [ebp - 0x130]
xor eax, eax
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000ccc0
mov bl, byte [ebp - 0x138]
jmp 0x1000ccab
xor ebx, ebx
mov word [ebp - 0x167], 0xb32
xor eax, eax
mov byte [ebp - 0x133], bl
inc eax
mov byte [ebp - 0x165], 7
push 0x62
pop edx
mov byte [ebp - 0x164], al
mov byte [ebp - 0x160], al
mov eax, ebx
mov byte [ebp - 0x168], dl
mov word [ebp - 0x163], 0x2707
mov byte [ebp - 0x161], 0x1a
mov dword [ebp - 0x15f], 0x50c030a
mov word [ebp - 0x15b], 7
xor byte [ebp + eax - 0x167], dl
inc eax
cmp eax, 0xd
jae 0x1000cd2a
mov dl, byte [ebp - 0x168]
jmp 0x1000cd15
push ecx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call esi
xor ecx, ecx
test eax, eax
push ebx
cmovs eax, ecx
inc ecx
cmp eax, ecx
push ecx
cmovg eax, ecx
lea ecx, [ebp - 0x130]
mov dword [0x1009df90], eax
call fcn.1000402e
call fcn.1003bf4a
ret