Function at 0x1000c3ee
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read .ini file

Disassembly:
push 0x1a0
mov eax, 0x10046b0e
call fcn.10044ac9
mov esi, 0x104
lea eax, [ebp - 0x15c]
push esi
xor ebx, ebx
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x15c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.100012e0
lea eax, [ebp - 0x1ac]
mov dword [ebp - 4], ebx
push eax
call fcn.1000d32f
or dword [ebp - 4], 0xffffffff
xor esi, esi
pop ecx
push ebx
inc esi
lea ecx, [ebp - 0x1ac]
push esi
call fcn.10001cd4
push 0xa
mov cl, 0xc
mov dword [ebp - 0x1a0], 0x787c430c
mov dword [ebp - 0x19c], 0x22626365
mov eax, ebx
mov dword [ebp - 0x198], 0x656245
pop edx
xor byte [ebp + eax - 0x19f], cl
inc eax
cmp eax, edx
jae 0x1000c492
mov cl, byte [ebp - 0x1a0]
jmp 0x1000c47e
lea eax, [ebp - 0x19f]
mov byte [ebp - 0x195], bl
push eax
lea eax, [ebp - 0x174]
push 0x1005a3f0
push eax
call fcn.100058b7
add esp, 0xc
cmp dword [ebp - 0x160], 0x10
lea edx, [ebp - 0x174]
push 0x28
cmovae edx, dword [ebp - 0x174]
mov cl, 0x5c
pop ebx
mov dword [ebp - 4], esi
xor eax, eax
mov dword [ebp - 0x17c], 0x29331f5c
mov byte [ebp - 0x178], 0x32
mov byte [ebp - 0x177], bl
mov byte [ebp - 0x176], 0
xor byte [ebp + eax - 0x17b], cl
inc eax
cmp eax, 5
jae 0x1000c504
mov cl, byte [ebp - 0x17c]
jmp 0x1000c4ef
push 0xb
pop eax
mov cl, 0x6d
mov byte [ebp - 0x18a], al
push 6
mov byte [ebp - 0x189], al
xor eax, eax
mov byte [ebp - 0x176], 0
mov byte [ebp - 0x18c], cl
mov byte [ebp - 0x18b], bl
mov dword [ebp - 0x188], 0x190e08
pop edi
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, edi
jae 0x1000c54b
mov cl, byte [ebp - 0x18c]
jmp 0x1000c537
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x17b]
push edx
push 0
push eax
lea eax, [ebp - 0x18b]
mov byte [ebp - 0x185], 0
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x180], 0x55526c3b
test eax, eax
mov dword [ebp - 0x17c], 0x5e526d5c
lea edx, [ebp - 0x174]
mov word [ebp - 0x178], 0x4c
cmovs eax, ecx
mov ecx, 0x1388
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1a0], eax
mov cl, 0x3b
cmovae edx, dword [ebp - 0x174]
xor eax, eax
xor byte [ebp + eax - 0x17f], cl
inc eax
cmp eax, 8
jae 0x1000c5cb
mov cl, byte [ebp - 0x180]
jmp 0x1000c5b6
mov byte [ebp - 0x177], 0
mov cl, 0x4d
mov dword [ebp - 0x18c], 0x2b2b084d
xor eax, eax
mov byte [ebp - 0x188], bl
mov word [ebp - 0x187], 0x392e
mov byte [ebp - 0x185], 0
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, edi
jae 0x1000c60a
mov cl, byte [ebp - 0x18c]
jmp 0x1000c5f6
xor eax, eax
mov byte [ebp - 0x185], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x17f]
push eax
lea eax, [ebp - 0x18b]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x180], 0x222d0540
test eax, eax
mov dword [ebp - 0x17c], 0x162d252c
lea edx, [ebp - 0x174]
mov dword [ebp - 0x178], 0x372529
cmovs eax, ecx
inc ecx
cmp eax, ecx
cmovg eax, ecx
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1a4], eax
mov cl, 0x40
cmovae edx, dword [ebp - 0x174]
xor eax, eax
xor byte [ebp + eax - 0x17f], cl
inc eax
cmp eax, 0xa
jae 0x1000c683
mov cl, byte [ebp - 0x180]
jmp 0x1000c66e
mov byte [ebp - 0x175], 0
mov cl, 0x2c
mov dword [ebp - 0x18c], 0x4a4a692c
xor eax, eax
mov dword [ebp - 0x188], 0x584f49
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, edi
jae 0x1000c6b6
mov cl, byte [ebp - 0x18c]
jmp 0x1000c6a2
xor eax, eax
mov byte [ebp - 0x185], 0
push edx
inc eax
push eax
lea eax, [ebp - 0x17f]
push eax
lea eax, [ebp - 0x18b]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x179], bl
test eax, eax
mov dword [ebp - 0x180], 0xa1f2e7e
push 0x17
cmovs eax, ecx
mov word [ebp - 0x17c], 0x1116
inc ecx
mov byte [ebp - 0x17a], 0xd
cmp eax, ecx
mov word [ebp - 0x176], 9
lea edx, [ebp - 0x174]
cmovg eax, ecx
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1a8], eax
mov cl, 0x7e
cmovae edx, dword [ebp - 0x174]
pop eax
push 0x1b
pop ebx
mov byte [ebp - 0x178], al
xor eax, eax
mov byte [ebp - 0x177], bl
xor byte [ebp + eax - 0x17f], cl
inc eax
cmp eax, 0xa
jae 0x1000c74c
mov cl, byte [ebp - 0x180]
jmp 0x1000c737
push 0x17
pop eax
mov byte [ebp - 0x18a], al
mov cl, 0x71
mov byte [ebp - 0x189], al
xor eax, eax
mov byte [ebp - 0x175], 0
mov word [ebp - 0x18c], 0x3471
mov dword [ebp - 0x188], 0x51214
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, edi
jae 0x1000c78d
mov cl, byte [ebp - 0x18c]
jmp 0x1000c779
push edx
xor edi, edi
mov byte [ebp - 0x185], 0
inc edi
lea eax, [ebp - 0x17f]
push edi
push eax
lea eax, [ebp - 0x18b]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x18c], 0x43406e2c
test eax, eax
mov dword [ebp - 0x188], 0x7c78474f
lea edx, [ebp - 0x174]
mov byte [ebp - 0x184], 0
cmovs eax, ecx
mov cl, 0x2c
cmp eax, edi
cmovg eax, edi
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1ac], eax
cmovae edx, dword [ebp - 0x174]
xor eax, eax
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, 7
jae 0x1000c802
mov cl, byte [ebp - 0x18c]
jmp 0x1000c7ed
push 4
mov byte [ebp - 0x184], 0
mov cl, 0x70
mov dword [ebp - 0x17c], 0x3193d70
xor eax, eax
mov word [ebp - 0x178], 0x13
pop edi
xor byte [ebp + eax - 0x17b], cl
inc eax
cmp eax, edi
jae 0x1000c837
mov cl, byte [ebp - 0x17c]
jmp 0x1000c823
push edx
push 0
lea eax, [ebp - 0x18b]
mov byte [ebp - 0x177], 0
push eax
lea eax, [ebp - 0x17b]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x18c], bl
test eax, eax
mov word [ebp - 0x18b], 0x7048
push 0x77
cmovs eax, ecx
mov byte [ebp - 0x189], 0x72
inc ecx
mov dword [ebp - 0x186], 0x7a7e695a
cmp eax, ecx
mov byte [ebp - 0x182], 0
lea edx, [ebp - 0x174]
cmovg eax, ecx
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1b0], eax
cmovae edx, dword [ebp - 0x174]
pop eax
mov byte [ebp - 0x188], al
mov byte [ebp - 0x187], al
xor eax, eax
xor byte [ebp + eax - 0x18b], bl
inc eax
cmp eax, 9
jae 0x1000c8c4
mov bl, byte [ebp - 0x18c]
jmp 0x1000c8af
xor ebx, ebx
mov dword [ebp - 0x17c], 0x4e54703d
mov byte [ebp - 0x182], bl
mov cl, 0x3d
mov word [ebp - 0x178], 0x5e
mov eax, ebx
xor byte [ebp + eax - 0x17b], cl
inc eax
cmp eax, edi
jae 0x1000c8f7
mov cl, byte [ebp - 0x17c]
jmp 0x1000c8e3
push edx
push ebx
lea eax, [ebp - 0x18b]
mov byte [ebp - 0x177], bl
push eax
lea eax, [ebp - 0x17b]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x18f], 0x7020d3e
test eax, eax
mov dword [ebp - 0x18b], 0x290b0205
push 0x6c
cmovs eax, ecx
mov dword [ebp - 0x185], 0x180f09
inc ecx
cmp eax, ecx
pop edx
cmovg eax, ecx
mov byte [ebp - 0x190], dl
cmp dword [ebp - 0x160], 0x10
lea ecx, [ebp - 0x174]
mov dword [0x1005b1b4], eax
cmovae ecx, dword [ebp - 0x174]
push 0xa
pop eax
mov byte [ebp - 0x187], al
mov byte [ebp - 0x186], al
mov eax, ebx
xor byte [ebp + eax - 0x18f], dl
inc eax
cmp eax, 0xd
jae 0x1000c982
mov dl, byte [ebp - 0x190]
jmp 0x1000c96d
push 0x58
pop edx
mov byte [ebp - 0x182], bl
mov eax, ebx
mov byte [ebp - 0x17c], dl
mov dword [ebp - 0x17b], 0x3b2b3115
mov byte [ebp - 0x177], bl
xor byte [ebp + eax - 0x17b], dl
inc eax
cmp eax, edi
jae 0x1000c9b7
mov dl, byte [ebp - 0x17c]
jmp 0x1000c9a3
push ecx
push ebx
lea eax, [ebp - 0x18f]
mov byte [ebp - 0x177], bl
push eax
lea eax, [ebp - 0x17b]
push eax
call esi
xor ecx, ecx
mov byte [ebp - 0x18f], 0x6b
test eax, eax
mov word [ebp - 0x18d], 0x4d45
push 0x28
cmovs eax, ecx
mov byte [ebp - 0x18b], 0x5a
inc ecx
mov byte [ebp - 0x189], 0x7a
cmp eax, ecx
mov dword [ebp - 0x187], 0x4d4f46
lea edx, [ebp - 0x174]
cmovg eax, ecx
cmp dword [ebp - 0x160], 0x10
pop ecx
cmovae edx, dword [ebp - 0x174]
push 0x49
pop ebx
mov dword [0x1005b1b8], eax
xor eax, eax
mov byte [ebp - 0x190], cl
mov byte [ebp - 0x18e], bl
mov byte [ebp - 0x18a], bl
mov byte [ebp - 0x188], bl
xor byte [ebp + eax - 0x18f], cl
inc eax
cmp eax, 0xb
jae 0x1000ca52
mov cl, byte [ebp - 0x190]
jmp 0x1000ca3d
mov byte [ebp - 0x184], 0
mov cl, 0x4f
mov dword [ebp - 0x17c], 0x3c26024f
xor eax, eax
mov word [ebp - 0x178], 0x2c
xor byte [ebp + eax - 0x17b], cl
inc eax
cmp eax, edi
jae 0x1000ca84
mov cl, byte [ebp - 0x17c]
jmp 0x1000ca70
push edx
push 0
lea eax, [ebp - 0x18f]
mov byte [ebp - 0x177], 0
push eax
lea eax, [ebp - 0x17b]
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x18b], 0x121a1630
test eax, eax
mov dword [ebp - 0x187], 0x121a1e23
push 0xa
cmovs eax, ecx
mov byte [ebp - 0x183], 0
pop ecx
cmp eax, ecx
push 0x77
cmovg eax, ecx
lea ecx, [ebp - 0x174]
cmp dword [ebp - 0x160], 0x10
pop edx
cmovae ecx, dword [ebp - 0x174]
mov dword [0x1005b1c0], eax
xor eax, eax
mov byte [ebp - 0x18c], dl
xor byte [ebp + eax - 0x18b], dl
inc eax
cmp eax, 8
jae 0x1000cb01
mov dl, byte [ebp - 0x18c]
jmp 0x1000caec
mov byte [ebp - 0x183], 0
xor eax, eax
mov byte [ebp - 0x17c], bl
mov dword [ebp - 0x17b], 0x2a3a2004
mov byte [ebp - 0x177], 0
xor byte [ebp + eax - 0x17b], bl
inc eax
cmp eax, 4
jae 0x1000cb36
mov bl, byte [ebp - 0x17c]
jmp 0x1000cb21
push ecx
xor ebx, ebx
lea eax, [ebp - 0x18b]
push ebx
push eax
lea eax, [ebp - 0x17b]
mov byte [ebp - 0x177], bl
push eax
call esi
xor ecx, ecx
mov dword [ebp - 0x180], 0x71794e1c
test eax, eax
mov dword [ebp - 0x17c], 0x797e7179
push 0x17
cmovs eax, ecx
mov word [ebp - 0x178], 0x6e
pop ecx
cmp eax, ecx
lea edx, [ebp - 0x174]
cmovg eax, ecx
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1bc], eax
mov cl, 0x1c
cmovae edx, dword [ebp - 0x174]
mov eax, ebx
xor byte [ebp + eax - 0x17f], cl
inc eax
cmp eax, 8
jae 0x1000cbae
mov cl, byte [ebp - 0x180]
jmp 0x1000cb99
push 0x4c
pop ecx
mov byte [ebp - 0x177], bl
mov eax, ebx
mov byte [ebp - 0x18c], cl
mov dword [ebp - 0x18b], 0x232f2f0d
mov dword [ebp - 0x187], 0x382239
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, 7
jae 0x1000cbe8
mov cl, byte [ebp - 0x18c]
jmp 0x1000cbd3
push edx
push ebx
lea eax, [ebp - 0x17f]
mov byte [ebp - 0x184], bl
push eax
lea eax, [ebp - 0x18b]
push eax
call esi
xor ecx, ecx
mov word [ebp - 0x194], 3
test eax, eax
mov byte [ebp - 0x193], bl
push 0xb
cmovs eax, ecx
mov dword [ebp - 0x17f], 0x6468684a
xor edi, edi
mov dword [ebp - 0x17b], 0x427f657e
inc edi
mov word [ebp - 0x177], 0x4f
cmp eax, edi
lea edx, [ebp - 0x174]
pop ecx
cmovg eax, edi
mov byte [ebp - 0x180], cl
cmp dword [ebp - 0x160], 0x10
mov dword [0x1005b1c4], eax
mov eax, ebx
cmovae edx, dword [ebp - 0x174]
xor byte [ebp + eax - 0x17f], cl
inc eax
cmp eax, 9
jae 0x1000cc74
mov cl, byte [ebp - 0x180]
jmp 0x1000cc5f
mov byte [ebp - 0x176], bl
mov cl, 0x5e
mov dword [ebp - 0x18c], 0x3d3d1f5e
mov eax, ebx
mov dword [ebp - 0x188], 0x2a302b31
mov byte [ebp - 0x184], bl
xor byte [ebp + eax - 0x18b], cl
inc eax
cmp eax, 7
jae 0x1000ccad
mov cl, byte [ebp - 0x18c]
jmp 0x1000cc98
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x28]
push edx
push 0x15
push eax
lea eax, [ebp - 0x193]
mov byte [ebp - 0x184], bl
push eax
lea eax, [ebp - 0x17f]
push eax
lea eax, [ebp - 0x18b]
push eax
call esi
lea eax, [ebp - 0x28]
push eax
call fcn.10001edd
pop ecx
push eax
lea eax, [ebp - 0x28]
mov ecx, 0x1005b170
push eax
call fcn.10001dbf
cmp dword [ebp - 0x160], 0x10
lea ecx, [ebp - 0x174]
push 0xc
cmovae ecx, dword [ebp - 0x174]
xor eax, eax
pop edx
push 0xe
mov byte [ebp - 0x193], bl
pop ebx
mov byte [ebp - 0x194], dl
mov byte [ebp - 0x180], bl
mov dword [ebp - 0x17f], 0x7d7d6f5e
mov dword [ebp - 0x17b], 0x6a7c6159
mov byte [ebp - 0x177], 0
xor byte [ebp + eax - 0x17f], bl
inc eax
cmp eax, 8
jae 0x1000cd4e
mov bl, byte [ebp - 0x180]
jmp 0x1000cd39
xor ebx, ebx
mov byte [ebp - 0x18c], dl
mov byte [ebp - 0x177], bl
mov eax, ebx
mov dword [ebp - 0x18b], 0x636f6f4d
mov dword [ebp - 0x187], 0x786279
xor byte [ebp + eax - 0x18b], dl
inc eax
cmp eax, 7
jae 0x1000cd87
mov dl, byte [ebp - 0x18c]
jmp 0x1000cd72
push ecx
push 0x30
lea eax, [ebp - 0x58]
mov byte [ebp - 0x184], bl
push eax
lea eax, [ebp - 0x193]
push eax
lea eax, [ebp - 0x17f]
push eax
lea eax, [ebp - 0x18b]
push eax
call esi
lea eax, [ebp - 0x58]
push eax
call fcn.10001edd
pop ecx
push eax
lea eax, [ebp - 0x58]
mov ecx, 0x1005b188
push eax
call fcn.10001dbf
call fcn.1000cddc
push ebx
push edi
lea ecx, [ebp - 0x174]
call fcn.10001cd4
call fcn.10044a84
ret