Function at 0x1000cddc
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x1005a694]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x38], 0x3e71
inc eax
mov dword [ebp - 0x35], 0x1f1e1805
mov byte [ebp - 0x36], al
mov cl, 0x71
mov dword [ebp - 0x31], 0x181f385f
xor eax, eax
mov byte [ebp - 0x2d], 0
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000ce1d
mov cl, byte [ebp - 0x38]
jmp 0x1000ce0e
push ebx
push esi
push edi
lea eax, [ebp - 0x37]
mov byte [ebp - 0x2d], 0
push eax
lea eax, [ebp - 0x1c]
push 0x1005a3f0
push eax
call fcn.100058b7
add esp, 0xc
mov dword [ebp - 0x38], 0x7070531f
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x33], 0x6f7e7a48
mov cl, 0x1f
mov word [ebp - 0x2f], 0x7170
mov byte [ebp - 0x2d], 0
push 0x10
pop edi
cmp dword [ebp - 8], edi
push 0x6b
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
pop ebx
mov byte [ebp - 0x34], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000ce77
mov cl, byte [ebp - 0x38]
jmp 0x1000ce68
mov byte [ebp - 0x2d], 0
mov cl, 0x3c
mov dword [ebp - 0x28], 0x48596c3c
xor eax, eax
mov dword [ebp - 0x24], 0x48535370
mov dword [ebp - 0x20], 0x5b5255
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000cea3
mov cl, byte [ebp - 0x28]
jmp 0x1000ce94
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xor eax, eax
push edx
inc eax
mov byte [ebp - 0x1d], 0
push eax
lea eax, [ebp - 0x37]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x34], 0x2a2a0945
cmp al, dl
mov dword [ebp - 0x30], 0x28370431
mov word [ebp - 0x2c], 0x372a
cmova ecx, edx
mov byte [ebp - 0x2a], 0
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1c8], cl
mov cl, 0x45
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000cf02
mov cl, byte [ebp - 0x34]
jmp 0x1000cef3
mov byte [ebp - 0x2a], 0
mov cl, 0x32
mov dword [ebp - 0x28], 0x46576232
xor eax, eax
mov dword [ebp - 0x24], 0x465d5d7e
mov dword [ebp - 0x20], 0x555c5b
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000cf2e
mov cl, byte [ebp - 0x28]
jmp 0x1000cf1f
xor eax, eax
mov byte [ebp - 0x1d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x33]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x38], 0x7a7a5915
cmp al, dl
mov dword [ebp - 0x34], 0x76765461
mov dword [ebp - 0x30], 0x7a666670
cmova ecx, edx
mov word [ebp - 0x2c], 0x6c67
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1c9], cl
mov cl, 0x15
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
mov byte [ebp - 0x2a], 0
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x1000cf8e
mov cl, byte [ebp - 0x38]
jmp 0x1000cf7f
mov byte [ebp - 0x2a], 0
mov cl, 0x72
mov dword [ebp - 0x28], 0x6172272
xor eax, eax
mov dword [ebp - 0x24], 0x61d1d3e
mov dword [ebp - 0x20], 0x151c1b
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000cfba
mov cl, byte [ebp - 0x28]
jmp 0x1000cfab
xor eax, eax
mov byte [ebp - 0x1d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x37]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x27], 0x1b000023
cmp al, dl
mov dword [ebp - 0x23], 0x21d0021
push 0x6f
cmova ecx, edx
mov word [ebp - 0x1f], 0x30e
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1ca], cl
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
pop ecx
mov byte [ebp - 0x28], cl
mov byte [ebp - 0x1d], al
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000d016
mov cl, byte [ebp - 0x28]
jmp 0x1000d007
mov byte [ebp - 0x1d], 0
mov cl, 0x46
mov dword [ebp - 0x38], 0x32231646
xor eax, eax
mov dword [ebp - 0x34], 0x3229290a
mov dword [ebp - 0x30], 0x21282f
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000d042
mov cl, byte [ebp - 0x38]
jmp 0x1000d033
xor eax, eax
mov byte [ebp - 0x2d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x27]
push eax
lea eax, [ebp - 0x37]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x34], 0x1515367a
cmp al, dl
mov dword [ebp - 0x30], 0x1d1b370e
mov word [ebp - 0x2c], 0x1913
cmova ecx, edx
mov byte [ebp - 0x2a], 0
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1cb], cl
mov cl, 0x7a
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000d09b
mov cl, byte [ebp - 0x34]
jmp 0x1000d08c
mov byte [ebp - 0x2a], 0
mov cl, 0x1f
mov word [ebp - 0x28], 0x4f1f
xor eax, eax
mov byte [ebp - 0x26], 0x7a
mov byte [ebp - 0x25], bl
mov word [ebp - 0x24], 0x7053
mov byte [ebp - 0x22], 0x70
mov byte [ebp - 0x21], bl
mov dword [ebp - 0x20], 0x787176
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000d0d3
mov cl, byte [ebp - 0x28]
jmp 0x1000d0c4
push edx
xor ebx, ebx
mov byte [ebp - 0x1d], 0
inc ebx
lea eax, [ebp - 0x33]
push ebx
push eax
lea eax, [ebp - 0x27]
push eax
call esi
cmp al, bl
movzx ecx, al
push 0x3a
cmova ecx, ebx
mov dword [ebp - 0x34], 0x2121024e
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
pop ebx
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
mov byte [0x1005b1cc], cl
mov cl, 0x4e
mov byte [ebp - 0x30], bl
mov dword [ebp - 0x2f], 0x2b3c2f1c
mov byte [ebp - 0x2b], 0
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x1000d129
mov cl, byte [ebp - 0x34]
jmp 0x1000d11a
xor eax, eax
mov dword [ebp - 0x28], 0x112474
mov byte [ebp - 0x2b], al
mov cl, 0x74
mov dword [ebp - 0x24], 0x1b1b38
mov dword [ebp - 0x20], 0x131a1d
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000d154
mov cl, byte [ebp - 0x28]
jmp 0x1000d145
xor eax, eax
mov byte [ebp - 0x1d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x33]
push eax
lea eax, [ebp - 0x27]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x38], 0x29290a46
cmp al, dl
mov dword [ebp - 0x34], 0x21361332
mov dword [ebp - 0x30], 0x23222734
cmova ecx, edx
mov byte [ebp - 0x2c], 0
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1cd], cl
mov cl, 0x46
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000d1ae
mov cl, byte [ebp - 0x38]
jmp 0x1000d19f
xor ecx, ecx
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x2c], cl
mov eax, ecx
mov dword [ebp - 0x27], 0x764e5f6a
mov dword [ebp - 0x23], 0x534e5555
mov word [ebp - 0x1f], 0x5d54
mov byte [ebp - 0x1d], cl
xor byte [ebp + eax - 0x27], bl
inc eax
cmp eax, 0xa
jae 0x1000d1de
mov bl, byte [ebp - 0x28]
jmp 0x1000d1cf
push edx
xor ebx, ebx
mov byte [ebp - 0x1d], cl
inc ebx
lea eax, [ebp - 0x37]
push ebx
push eax
lea eax, [ebp - 0x27]
push eax
call esi
cmp al, bl
movzx ecx, al
push 0x6b
cmova ecx, ebx
mov dword [ebp - 0x26], 0x72534848
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1ce], cl
mov cl, 0x27
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
pop ebx
mov byte [ebp - 0x28], cl
mov byte [ebp - 0x27], bl
mov dword [ebp - 0x22], 0x52564e49
mov word [ebp - 0x1e], 0x42
xor byte [ebp + eax - 0x27], cl
inc eax
cmp eax, 0xa
jae 0x1000d238
mov cl, byte [ebp - 0x28]
jmp 0x1000d229
mov byte [ebp - 0x1d], 0
mov cl, 0x58
mov dword [ebp - 0x38], 0x2c3d0858
xor eax, eax
mov dword [ebp - 0x34], 0x2c373714
mov dword [ebp - 0x30], 0x3f3631
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x1000d264
mov cl, byte [ebp - 0x38]
jmp 0x1000d255
xor eax, eax
mov byte [ebp - 0x2d], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x27]
push eax
lea eax, [ebp - 0x37]
push eax
call esi
xor edx, edx
movzx ecx, al
inc edx
mov dword [ebp - 0x34], 0x6565460a
cmp al, dl
mov word [ebp - 0x30], 0x497e
mov byte [ebp - 0x2e], 0x78
cmova ecx, edx
mov byte [ebp - 0x2d], bl
cmp dword [ebp - 8], edi
lea edx, [ebp - 0x1c]
mov byte [0x1005b1cf], cl
mov cl, 0xa
cmovae edx, dword [ebp - 0x1c]
xor eax, eax
mov word [ebp - 0x2c], 0x7e6c
mov byte [ebp - 0x2a], 0
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000d2c3
mov cl, byte [ebp - 0x34]
jmp 0x1000d2b4
xor ecx, ecx
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x2a], cl
mov eax, ecx
mov dword [ebp - 0x27], 0x271f0e3b
mov dword [ebp - 0x23], 0x21f0404
mov word [ebp - 0x1f], 0xc05
mov byte [ebp - 0x1d], cl
xor byte [ebp + eax - 0x27], bl
inc eax
cmp eax, 0xa
jae 0x1000d2f3
mov bl, byte [ebp - 0x28]
jmp 0x1000d2e4
push edx
xor ebx, ebx
mov byte [ebp - 0x1d], cl
inc ebx
lea eax, [ebp - 0x33]
push ebx
push eax
lea eax, [ebp - 0x27]
push eax
call esi
cmp al, bl
movzx ecx, al
push 0
cmova ecx, ebx
mov byte [0x1005b1d0], cl
lea ecx, [ebp - 0x1c]
push ebx
call fcn.10001cd4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10044a5e
mov esp, ebp
pop ebp
ret