Function at 0x100083f0
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x15c
mov eax, 0x10035071
call fcn.10034356
xor ebx, ebx
lea eax, [ebp - 0x11b]
push 0x103
push ebx
push eax
mov byte [ebp - 0x11c], bl
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x11c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x158]
call fcn.10002607
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.10008d20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10002413
mov cl, 0x65
mov dword [ebp - 0x14c], 0x11152a65
mov dword [ebp - 0x148], 0x4b0b0a0c
mov eax, ebx
mov dword [ebp - 0x144], 0xc0b2c
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008494
mov cl, byte [ebp - 0x14c]
jmp 0x1000847f
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x141], bl
push eax
mov edx, 0x10045468
lea ecx, [ebp - 0x134]
call fcn.10008dff
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
pop ecx
cmova edx, dword [ebp - 0x134]
mov cl, 0x13
mov dword [ebp - 0x140], 0x474b5713
mov eax, ebx
mov dword [ebp - 0x13c], 0x76636a
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 6
jae 0x100084f3
mov cl, byte [ebp - 0x140]
jmp 0x100084de
mov byte [ebp - 0x139], bl
mov cl, 0x78
mov dword [ebp - 0x164], 0x2c203c78
mov eax, ebx
mov dword [ebp - 0x160], 0x1d0801
xor byte [ebp + eax - 0x163], cl
inc eax
cmp eax, 6
jae 0x10008526
mov cl, byte [ebp - 0x164]
jmp 0x10008511
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x13f]
push edx
push ebx
push eax
lea eax, [ebp - 0x163]
mov byte [ebp - 0x15d], bl
push eax
call edi
mov dword [0x1004637c], eax
test eax, eax
jns 0x10008554
mov eax, ebx
mov dword [0x1004637c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008561
mov dword [0x1004637c], ecx
cmp dword [ebp - 0x120], 0xf
lea esi, [ebp - 0x134]
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x66645c0f
cmova esi, dword [ebp - 0x134]
mov dword [ebp - 0x148], 0x7d4e6363
mov word [ebp - 0x144], 0x6e6a
mov byte [ebp - 0x142], bl
call fcn.10001431
mov edx, eax
mov dword [ebp - 0x13c], 0x4a507439
mov cl, 0x39
mov word [ebp - 0x138], 0x5a
mov eax, ebx
mov dword [ebp - 0x160], 4
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, 4
jae 0x100085db
mov cl, byte [ebp - 0x13c]
jmp 0x100085c6
push esi
push ebx
push edx
lea eax, [ebp - 0x13b]
mov byte [ebp - 0x137], bl
push eax
call edi
mov dword [0x10046380], eax
test eax, eax
jns 0x100085fd
mov eax, ebx
mov dword [0x10046380], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000860a
mov dword [0x10046380], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x7d
mov dword [ebp - 0x150], 0x13183a7d
cmova edx, dword [ebp - 0x134]
mov eax, ebx
mov dword [ebp - 0x14c], 0x142b1814
mov dword [ebp - 0x148], 0x111f140e
mov word [ebp - 0x144], 0x18
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xc
jae 0x1000865e
mov cl, byte [ebp - 0x150]
jmp 0x10008649
mov esi, dword [ebp - 0x160]
mov cl, 0xf
mov byte [ebp - 0x143], bl
mov eax, ebx
mov dword [ebp - 0x13c], 0x7c66420f
mov word [ebp - 0x138], 0x6c
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, esi
jae 0x10008695
mov cl, byte [ebp - 0x13c]
jmp 0x10008681
push edx
push 1
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x137], bl
push eax
lea eax, [ebp - 0x13b]
push eax
call edi
mov dword [0x10046384], eax
test eax, eax
jns 0x100086be
mov eax, ebx
mov dword [0x10046384], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x100086cb
mov dword [0x10046384], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
push 0x41
cmova edx, dword [ebp - 0x134]
mov cl, 0x33
pop ebx
mov dword [ebp - 0x14c], 0x5d566133
xor eax, eax
mov word [ebp - 0x148], 0x5657
mov byte [ebp - 0x146], bl
mov dword [ebp - 0x145], 0x56435270
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008725
mov cl, byte [ebp - 0x14c]
jmp 0x10008710
mov byte [ebp - 0x141], 0
mov cl, 0x48
mov dword [ebp - 0x13c], 0x3b210548
xor eax, eax
mov word [ebp - 0x138], 0x2b
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, esi
jae 0x10008757
mov cl, byte [ebp - 0x13c]
jmp 0x10008743
push edx
push 1
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x137], 0
push eax
lea eax, [ebp - 0x13b]
push eax
call edi
mov dword [0x1004638c], eax
test eax, eax
jns 0x10008781
xor eax, eax
mov dword [0x1004638c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x1000878e
mov dword [0x1004638c], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0xb
mov dword [ebp - 0x150], 0x656a590b
cmova edx, dword [ebp - 0x134]
xor eax, eax
mov dword [ebp - 0x14c], 0x6c656260
mov dword [ebp - 0x148], 0x6e6d6d4e
mov word [ebp - 0x144], 0x7f68
mov byte [ebp - 0x142], 0
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x100087e9
mov cl, byte [ebp - 0x150]
jmp 0x100087d4
xor ecx, ecx
mov byte [ebp - 0x13c], bl
mov byte [ebp - 0x142], cl
mov eax, ecx
mov dword [ebp - 0x13b], 0x2232280c
mov byte [ebp - 0x137], cl
xor byte [ebp + eax - 0x13b], bl
inc eax
cmp eax, esi
jae 0x1000881d
mov bl, byte [ebp - 0x13c]
jmp 0x10008809
push edx
xor ebx, ebx
mov byte [ebp - 0x137], cl
inc ebx
lea eax, [ebp - 0x14f]
push ebx
push eax
lea eax, [ebp - 0x13b]
push eax
call edi
mov dword [0x10046390], eax
test eax, eax
jns 0x10008848
xor eax, eax
mov dword [0x10046390], eax
cmp eax, ebx
jle 0x10008852
mov dword [0x10046390], ebx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
push 0x48
cmova edx, dword [ebp - 0x134]
mov cl, 0x25
pop ebx
mov word [ebp - 0x164], 0x6225
xor eax, eax
mov byte [ebp - 0x162], 0x44
mov byte [ebp - 0x161], bl
mov word [ebp - 0x160], 0x7140
mov byte [ebp - 0x15e], 0x4c
mov byte [ebp - 0x15d], bl
mov word [ebp - 0x15c], 0x40
xor byte [ebp + eax - 0x163], cl
inc eax
cmp eax, 8
jae 0x100088b7
mov cl, byte [ebp - 0x164]
jmp 0x100088a2
mov byte [ebp - 0x15b], 0
xor eax, eax
mov byte [ebp - 0x13c], bl
mov dword [ebp - 0x13b], 0x2b3b2105
mov byte [ebp - 0x137], 0
xor byte [ebp + eax - 0x13b], bl
inc eax
cmp eax, esi
jae 0x100088eb
mov bl, byte [ebp - 0x13c]
jmp 0x100088d7
push edx
xor ebx, ebx
lea eax, [ebp - 0x163]
push ebx
push eax
lea eax, [ebp - 0x13b]
mov byte [ebp - 0x137], bl
push eax
call edi
mov dword [0x10046388], eax
test eax, eax
jns 0x10008915
mov eax, ebx
mov dword [0x10046388], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x10008922
mov dword [0x10046388], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x1c
mov dword [ebp - 0x150], 0x717d5f1c
cmova edx, dword [ebp - 0x134]
mov eax, ebx
mov dword [ebp - 0x14c], 0x4e7d6e79
mov dword [ebp - 0x148], 0x797b727d
mov byte [ebp - 0x144], bl
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xb
jae 0x10008973
mov cl, byte [ebp - 0x150]
jmp 0x1000895e
mov byte [ebp - 0x144], bl
mov cl, 0x58
mov dword [ebp - 0x13c], 0x2b311558
mov eax, ebx
mov word [ebp - 0x138], 0x3b
xor byte [ebp + eax - 0x13b], cl
inc eax
cmp eax, esi
jae 0x100089a4
mov cl, byte [ebp - 0x13c]
jmp 0x10008990
push edx
push ebx
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x137], bl
push eax
lea eax, [ebp - 0x13b]
push eax
call edi
mov dword [0x10046394], eax
test eax, eax
jns 0x100089cc
mov eax, ebx
mov dword [0x10046394], eax
push 0x14
pop ecx
cmp eax, ecx
jle 0x100089d9
mov dword [0x10046394], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
push 0x32
cmova edx, dword [ebp - 0x134]
mov cl, 0x5a
pop ebx
mov dword [ebp - 0x14c], 0x2e3b0a5a
xor eax, eax
mov byte [ebp - 0x148], bl
mov dword [ebp - 0x147], 0x330c2935
mov word [ebp - 0x143], 0x2d3f
mov byte [ebp - 0x141], 0
xor byte [ebp + eax - 0x14b], cl
inc eax
cmp eax, 0xa
jae 0x10008a33
mov cl, byte [ebp - 0x14c]
jmp 0x10008a1e
push 0x61
pop ecx
mov byte [ebp - 0x141], 0
xor eax, eax
mov byte [ebp - 0x140], cl
mov dword [ebp - 0x13f], 0x4070724
mov word [ebp - 0x13b], 0x1502
mov byte [ebp - 0x139], 0
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 6
jae 0x10008a74
mov cl, byte [ebp - 0x140]
jmp 0x10008a5f
push edx
push 1
lea eax, [ebp - 0x14b]
mov byte [ebp - 0x139], 0
push eax
lea eax, [ebp - 0x13f]
push eax
call edi
mov dword [0x10046398], eax
test eax, eax
jns 0x10008a9e
xor eax, eax
mov dword [0x10046398], eax
cmp eax, 1
jle 0x10008aaa
and dword [0x10046398], 0
cmp dword [ebp - 0x120], 0xf
lea ecx, [ebp - 0x134]
push 0x5d
cmova ecx, dword [ebp - 0x134]
xor eax, eax
pop edx
mov byte [ebp - 0x13c], dl
mov word [ebp - 0x13b], 0x281c
mov byte [ebp - 0x139], 0x29
mov byte [ebp - 0x138], bl
mov byte [ebp - 0x137], 0
xor byte [ebp + eax - 0x13b], dl
inc eax
cmp eax, 4
jae 0x10008afb
mov dl, byte [ebp - 0x13c]
jmp 0x10008ae6
mov byte [ebp - 0x137], 0
xor eax, eax
mov byte [ebp - 0x150], bl
mov dword [ebp - 0x14f], 0x51575b62
mov dword [ebp - 0x14b], 0x514a7757
mov dword [ebp - 0x147], 0x555c535a
mov word [ebp - 0x143], 0x57
xor byte [ebp + eax - 0x14f], bl
inc eax
cmp eax, 0xd
jae 0x10008b46
mov bl, byte [ebp - 0x150]
jmp 0x10008b31
push ecx
xor ebx, ebx
lea eax, [ebp - 0x13b]
push ebx
push eax
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x142], bl
push eax
call edi
mov dword [0x1004639c], eax
test eax, eax
jns 0x10008b70
mov eax, ebx
mov dword [0x1004639c], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008b7d
mov dword [0x1004639c], ecx
cmp dword [ebp - 0x120], 0xf
lea edx, [ebp - 0x134]
mov cl, 0x75
mov dword [ebp - 0x140], 0x1a012675
cmova edx, dword [ebp - 0x134]
mov eax, ebx
mov dword [ebp - 0x13c], 0x1b3c1e16
mov word [ebp - 0x138], 0x1b
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 8
jae 0x10008bc7
mov cl, byte [ebp - 0x140]
jmp 0x10008bb2
push 0x6c
pop ecx
mov byte [ebp - 0x137], bl
mov eax, ebx
mov byte [ebp - 0x150], cl
mov dword [ebp - 0x14f], 0xf09053c
mov dword [ebp - 0x14b], 0xf142909
mov dword [ebp - 0x147], 0xb020d04
mov word [ebp - 0x143], 9
xor byte [ebp + eax - 0x14f], cl
inc eax
cmp eax, 0xd
jae 0x10008c14
mov cl, byte [ebp - 0x150]
jmp 0x10008bff
push edx
push ebx
lea eax, [ebp - 0x13f]
mov byte [ebp - 0x142], bl
push eax
lea eax, [ebp - 0x14f]
push eax
call edi
mov dword [0x100463a0], eax
test eax, eax
jns 0x10008c3c
mov eax, ebx
mov dword [0x100463a0], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008c49
mov dword [0x100463a0], ecx
cmp dword [ebp - 0x120], 0xf
lea ecx, [ebp - 0x134]
push 0x78
cmova ecx, dword [ebp - 0x134]
mov eax, ebx
pop edx
mov byte [ebp - 0x13c], dl
mov dword [ebp - 0x13b], 0x14141d2b
mov byte [ebp - 0x137], bl
xor byte [ebp + eax - 0x13b], dl
inc eax
cmp eax, 4
jae 0x10008c8d
mov dl, byte [ebp - 0x13c]
jmp 0x10008c78
push 0x47
pop edx
mov byte [ebp - 0x137], bl
mov eax, ebx
mov byte [ebp - 0x168], dl
mov dword [ebp - 0x167], 0x24222e17
mov dword [ebp - 0x163], 0x243f0222
mov dword [ebp - 0x15f], 0x2029262f
mov word [ebp - 0x15b], 0x22
xor byte [ebp + eax - 0x167], dl
inc eax
cmp eax, 0xd
jae 0x10008cda
mov dl, byte [ebp - 0x168]
jmp 0x10008cc5
push ecx
push ebx
lea eax, [ebp - 0x13b]
mov byte [ebp - 0x15a], bl
push eax
lea eax, [ebp - 0x167]
push eax
call edi
mov dword [0x100463a4], eax
test eax, eax
jns 0x10008d02
mov eax, ebx
mov dword [0x100463a4], eax
xor ecx, ecx
inc ecx
cmp eax, ecx
jle 0x10008d0f
mov dword [0x100463a4], ecx
lea ecx, [ebp - 0x134]
call fcn.10002413
call fcn.10034314
ret