Function at 0x100083f5
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10035041
call fcn.10034326
xor ebx, ebx
lea eax, [ebp - 0x117]
push 0x103
push ebx
push eax
mov byte [ebp - 0x118], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x158]
call fcn.10002604
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.10008cd5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10002410
mov cl, 0x5e
mov dword [ebp - 0x14c], 0x2a2e115e
mov dword [ebp - 0x148], 0x70303137
mov eax, ebx
mov dword [ebp - 0x144], 0x373017
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008499
mov cl, byte [ebp - 0x14c]
jmp 0x10008484
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x10045468
lea ecx, [ebp - 0x130]
call fcn.10008db4
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
pop ecx
cmova edx, dword [ebp - 0x130]
mov cl, 0x14
mov dword [ebp - 0x13c], 0x404c5014
mov eax, ebx
mov dword [ebp - 0x138], 0x71646d
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 6
jae 0x100084f8
mov cl, byte [ebp - 0x13c]
jmp 0x100084e3
mov byte [ebp - 0x135], bl
mov cl, 0x1f
mov dword [ebp - 0x148], 0x4b475b1f
mov eax, ebx
mov dword [ebp - 0x144], 0x7a6f66
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x1000852b
mov cl, byte [ebp - 0x148]
jmp 0x10008516
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13b]
push edx
push ebx
push eax
lea eax, [ebp - 0x147]
mov byte [ebp - 0x141], bl
push eax
call edi
mov dword [0x1004637c], eax
test eax, eax
jns 0x10008559
mov eax, ebx
mov dword [0x1004637c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008566
mov dword [0x1004637c], ecx
cmp dword [ebp - 0x11c], 0xf
lea esi, [ebp - 0x130]
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x14162e7d
cmova esi, dword [ebp - 0x130]
mov dword [ebp - 0x148], 0xf3c1111
mov word [ebp - 0x144], 0x1c18
mov byte [ebp - 0x142], bl
call fcn.10001431
mov edx, eax
mov dword [ebp - 0x138], 0x766c4805
mov cl, 5
mov word [ebp - 0x134], 0x66
mov eax, ebx
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x100085d6
mov cl, byte [ebp - 0x138]
jmp 0x100085c1
push esi
push ebx
push edx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call edi
mov dword [0x10046380], eax
test eax, eax
jns 0x100085f8
mov eax, ebx
mov dword [0x10046380], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008605
mov dword [0x10046380], ecx
push 0xf
pop esi
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0x2e
mov dword [ebp - 0x150], 0x404b692e
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x14c], 0x47784b47
mov dword [ebp - 0x148], 0x424c475d
mov word [ebp - 0x144], 0x4b
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000865b
mov cl, byte [ebp - 0x150]
jmp 0x10008646
push 0xb
mov byte [ebp - 0x143], bl
mov cl, 0x46
pop ebx
mov byte [ebp - 0x138], cl
xor eax, eax
mov byte [ebp - 0x137], bl
mov dword [ebp - 0x136], 0x25352f
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008693
mov cl, byte [ebp - 0x138]
jmp 0x1000867e
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x10046384], eax
test eax, eax
jns 0x100086bd
xor eax, eax
mov dword [0x10046384], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x100086ca
mov dword [0x10046384], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x61
mov dword [ebp - 0x14c], 0xf043361
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x22130405
mov dword [ebp - 0x144], 0x41100
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008715
mov cl, byte [ebp - 0x14c]
jmp 0x10008700
mov byte [ebp - 0x141], 0
mov cl, 0x15
mov dword [ebp - 0x138], 0x667c5815
xor eax, eax
mov word [ebp - 0x134], 0x76
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008748
mov cl, byte [ebp - 0x138]
jmp 0x10008733
push edx
push 1
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x1004638c], eax
test eax, eax
jns 0x10008772
xor eax, eax
mov dword [0x1004638c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000877f
mov dword [0x1004638c], ecx
cmp dword [ebp - 0x11c], 0xf
lea edx, [ebp - 0x130]
mov cl, 0x6e
mov dword [ebp - 0x150], 0xf3c6e
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14c], 0x9000705
mov word [ebp - 0x148], 0x82b
mov byte [ebp - 0x146], 8
mov byte [ebp - 0x145], bl
mov word [ebp - 0x144], 0x1a0d
mov byte [ebp - 0x142], al
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x100087e5
mov cl, byte [ebp - 0x150]
jmp 0x100087d0
mov byte [ebp - 0x142], 0
mov cl, 0x44
mov dword [ebp - 0x138], 0x372d0944
xor eax, eax
mov word [ebp - 0x134], 0x27
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008818
mov cl, byte [ebp - 0x138]
jmp 0x10008803
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x10046390], eax
test eax, eax
jns 0x10008842
xor eax, eax
mov dword [0x10046390], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000884f
mov dword [0x10046390], ecx
push 0xf
pop esi
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0x73
mov dword [ebp - 0x14c], 0x1e123473
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x148], 0x1e1a2716
mov word [ebp - 0x144], 0x16
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x1000889b
mov cl, byte [ebp - 0x14c]
jmp 0x10008886
mov byte [ebp - 0x143], 0
mov cl, 0x5d
mov dword [ebp - 0x138], 0x2e34105d
xor eax, eax
mov word [ebp - 0x134], 0x3e
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x100088ce
mov cl, byte [ebp - 0x138]
jmp 0x100088b9
push edx
push 0
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x133], 0
push eax
lea eax, [ebp - 0x137]
push eax
call edi
mov dword [0x10046388], eax
test eax, eax
jns 0x100088f8
xor eax, eax
mov dword [0x10046388], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x10008905
mov dword [0x10046388], ecx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0x4f
mov dword [ebp - 0x150], 0x222e0c4f
cmova edx, dword [ebp - 0x130]
xor eax, eax
mov dword [ebp - 0x14c], 0x1d2e3d2a
mov dword [ebp - 0x148], 0x2a28212e
mov byte [ebp - 0x144], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, ebx
jae 0x10008955
mov cl, byte [ebp - 0x150]
jmp 0x10008941
mov byte [ebp - 0x144], 0
xor eax, eax
mov byte [ebp - 0x138], bl
mov dword [ebp - 0x137], 0x68786246
mov byte [ebp - 0x133], 0
xor byte [ebp + eax - 0x137], bl
inc eax
cmp eax, 4
jae 0x1000898a
mov bl, byte [ebp - 0x138]
jmp 0x10008975
push edx
xor ebx, ebx
lea eax, [ebp - 0x14f]
push ebx
push eax
lea eax, [ebp - 0x137]
mov byte [ebp - 0x133], bl
push eax
call edi
mov dword [0x10046394], eax
test eax, eax
jns 0x100089b4
mov eax, ebx
mov dword [0x10046394], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x100089c1
mov dword [0x10046394], ecx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0xd
mov dword [ebp - 0x140], 0x796c5d0d
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x13c], 0x5b7e6265
mov dword [ebp - 0x138], 0x7a6864
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xa
jae 0x10008a0b
mov cl, byte [ebp - 0x140]
jmp 0x100089f6
mov byte [ebp - 0x135], bl
mov cl, 0x38
mov dword [ebp - 0x148], 0x5e5e7d38
mov eax, ebx
mov dword [ebp - 0x144], 0x4c5b5d
xor byte [ebp + eax - 0x147], cl
inc eax
cmp eax, 6
jae 0x10008a3e
mov cl, byte [ebp - 0x148]
jmp 0x10008a29
push edx
push 1
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x141], bl
push eax
lea eax, [ebp - 0x147]
push eax
call edi
mov dword [0x10046398], eax
test eax, eax
jns 0x10008a67
mov eax, ebx
mov dword [0x10046398], eax
cmp eax, 1
jle 0x10008a72
mov dword [0x10046398], ebx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
push 0x2d
cmova edx, dword [ebp - 0x130]
mov eax, ebx
pop ecx
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x4259586c
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008ab5
mov cl, byte [ebp - 0x138]
jmp 0x10008aa0
mov byte [ebp - 0x133], bl
mov cl, 0x52
mov dword [ebp - 0x150], 0x373b0252
mov eax, ebx
mov dword [ebp - 0x14c], 0x2a173731
mov dword [ebp - 0x148], 0x3c333a31
mov word [ebp - 0x144], 0x3735
mov byte [ebp - 0x142], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x10008b01
mov cl, byte [ebp - 0x150]
jmp 0x10008aec
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call edi
mov dword [0x1004639c], eax
test eax, eax
jns 0x10008b29
mov eax, ebx
mov dword [0x1004639c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008b36
mov dword [0x1004639c], ecx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
mov cl, 0x36
mov dword [ebp - 0x14c], 0x59426536
cmova edx, dword [ebp - 0x130]
mov eax, ebx
mov dword [ebp - 0x148], 0x587f5d55
mov word [ebp - 0x144], 0x58
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 8
jae 0x10008b7f
mov cl, byte [ebp - 0x14c]
jmp 0x10008b6a
mov byte [ebp - 0x143], bl
mov cl, 0x69
mov dword [ebp - 0x140], 0xc003969
mov eax, ebx
mov dword [ebp - 0x13c], 0x112c0c0a
mov dword [ebp - 0x138], 0x708010a
mov word [ebp - 0x134], 0xc0e
mov byte [ebp - 0x132], bl
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 0xd
jae 0x10008bcb
mov cl, byte [ebp - 0x140]
jmp 0x10008bb6
push edx
push ebx
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x132], bl
push eax
lea eax, [ebp - 0x13f]
push eax
call edi
mov dword [0x100463a0], eax
test eax, eax
jns 0x10008bf3
mov eax, ebx
mov dword [0x100463a0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008c00
mov dword [0x100463a0], ecx
cmp dword [ebp - 0x11c], esi
lea edx, [ebp - 0x130]
push 0x13
cmova edx, dword [ebp - 0x130]
mov eax, ebx
pop ecx
mov byte [ebp - 0x138], cl
mov dword [ebp - 0x137], 0x7f7f7640
mov byte [ebp - 0x133], bl
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 4
jae 0x10008c43
mov cl, byte [ebp - 0x138]
jmp 0x10008c2e
mov byte [ebp - 0x133], bl
mov cl, 1
mov dword [ebp - 0x168], 0x64685101
mov eax, ebx
mov dword [ebp - 0x164], 0x79446462
mov dword [ebp - 0x160], 0x6f606962
mov word [ebp - 0x15c], 0x6466
mov byte [ebp - 0x15a], bl
xor byte [ebp + eax - 0x167], cl
inc eax
cmp eax, 0xd
jae 0x10008c8f
mov cl, byte [ebp - 0x168]
jmp 0x10008c7a
push edx
push ebx
lea eax, [ebp - 0x137]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call edi
mov dword [0x100463a4], eax
test eax, eax
jns 0x10008cb7
mov eax, ebx
mov dword [0x100463a4], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008cc4
mov dword [0x100463a4], ecx
lea ecx, [ebp - 0x130]
call fcn.10002410
call fcn.100342e4
ret