Function at 0x10001bf0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3f8
mov eax, dword [0x100190cc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push 0x104
lea eax, [ebp - 0x320]
push eax
push 0x10000000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x10001c25
xor eax, eax
jmp 0x10001ecb
lea ecx, [ebp - 0x320]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
test eax, eax
jne 0x10001c3d
xor eax, eax
jmp 0x10001ecb
mov byte [ebp - 0x370], 0x31
mov byte [ebp - 0x36f], 0x62
mov byte [ebp - 0x36e], 0x63
mov byte [ebp - 0x36d], 0
mov byte [ebp - 0x36c], 0
mov byte [ebp - 0x36b], 0x34
mov byte [ebp - 0x36a], 0x35
mov byte [ebp - 0x369], 0x36
mov byte [ebp - 0x368], 0x37
mov byte [ebp - 0x367], 0
mov byte [ebp - 0x366], 0
mov byte [ebp - 0x365], 0x33
mov byte [ebp - 0x364], 0
mov byte [ebp - 0x363], 0
mov byte [ebp - 0x362], 0x34
mov byte [ebp - 0x361], 0x35
mov byte [ebp - 0x360], 0x36
mov byte [ebp - 0x35f], 0x31
mov byte [ebp - 0x35e], 0x32
mov byte [ebp - 0x35d], 0x33
mov byte [ebp - 0x35c], 0
mov byte [ebp - 0x35b], 0
mov byte [ebp - 0x35a], 0x34
mov byte [ebp - 0x359], 0x35
mov byte [ebp - 0x358], 0x36
mov byte [ebp - 0x357], 0x37
mov byte [ebp - 0x356], 0
mov byte [ebp - 0x355], 0
mov byte [ebp - 0x354], 0x33
mov byte [ebp - 0x353], 0
mov byte [ebp - 0x352], 0
mov byte [ebp - 0x351], 0x61
mov byte [ebp - 0x350], 0x62
mov byte [ebp - 0x34f], 0x63
push str.DgServiceConfig.ini
lea edx, [ebp - 0x320]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
test eax, eax
jne 0x10001d48
xor eax, eax
jmp 0x10001ecb
mov byte [ebp - 0x344], 0x31
mov byte [ebp - 0x343], 0x62
mov byte [ebp - 0x342], 0x63
mov byte [ebp - 0x341], 0
mov byte [ebp - 0x340], 0
mov byte [ebp - 0x33f], 0x34
mov byte [ebp - 0x33e], 0x35
mov byte [ebp - 0x33d], 0x36
mov byte [ebp - 0x33c], 0x37
mov byte [ebp - 0x33b], 0
mov byte [ebp - 0x33a], 0
mov byte [ebp - 0x339], 0x33
mov byte [ebp - 0x338], 0
mov byte [ebp - 0x337], 0
mov byte [ebp - 0x336], 0x34
mov byte [ebp - 0x335], 0x35
mov byte [ebp - 0x334], 0x36
mov byte [ebp - 0x333], 0x31
mov byte [ebp - 0x332], 0x32
mov byte [ebp - 0x331], 0x33
mov byte [ebp - 0x330], 0
mov byte [ebp - 0x32f], 0
mov byte [ebp - 0x32e], 0x34
mov byte [ebp - 0x32d], 0x35
mov byte [ebp - 0x32c], 0x36
mov byte [ebp - 0x32b], 0x37
mov byte [ebp - 0x32a], 0
mov byte [ebp - 0x329], 0
mov byte [ebp - 0x328], 0x33
mov byte [ebp - 0x327], 0
mov byte [ebp - 0x326], 0
mov byte [ebp - 0x325], 0x61
mov byte [ebp - 0x324], 0x62
mov byte [ebp - 0x323], 0x63
mov word [ebp - 0x218], 0
push 0x206
push 0
lea eax, [ebp - 0x216]
push eax
call fcn.1000a200
add esp, 0xc
push 7
push str.Vm0xd1MyUXhVWGhWV0dST1UwZDRWRmxyWkRSV01XeHpZVVZPYVUxV1dsaFdWbWhyVlVaV1ZVMUVhejA9
lea ecx, [ebp - 0x218]
push ecx
call fcn.10003720
add esp, 0xc
call fcn.100026e0
mov dword [ebp - 0x348], eax
lea edx, [ebp - 0x320]
push edx
push 0
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x3f4]
call fcn.10002820
mov dword [ebp - 0x3f8], eax
mov ecx, dword [ebp - 0x3f8]
call fcn.10002880
push eax
push str.dgswitch
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x3f4]
call fcn.10002850
cmp dword [ebp - 8], 1
jne 0x10001ec9
mov eax, 1
jmp 0x10001ecb
xor eax, eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000a1e2
mov esp, ebp
pop ebp
ret