Function at 0x18000a520
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180146030]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov dword [rbp - 0x1c], 0x2e3d454e
mov esi, 6
mov dword [rbp - 0x18], 0x210b372a
mov eax, esi
xor ebx, ebx
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov edx, ebx
mov byte [rbp - 0x14], r9b
mov r8b, 0x21
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000a5a9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000a580
mov rdi, qword [0x180147960]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x42e8]
call fcn.18008eb70
mov ecx, eax
test eax, eax
je 0x18000a5e4
lea rax, [rdi + 0x42d8]
cmp ecx, 0xf
jle 0x18000a5da
mov rcx, rax
call fcn.18008eb60
mov rcx, rax
call fcn.18008eba0
jmp 0x18000a5eb
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008ea70
test al, al
je 0x18000ab9a
mov qword [rsp + 0x80], r14
mov r8b, 0x21
mov r14d, 0xc
mov dword [rbp - 0x4c], 0x2e3d454e
mov eax, r14d
mov r9b, 0xea
mov dword [rbp - 0x50], eax
mov edx, ebx
mov dword [rbp - 0x48], 0x382c372a
mov dword [rbp - 0x44], 0x5a382d36
mov dword [rbp - 0x40], 0xea210b
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18000a669
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x18000a640
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0x21
mov dword [rbp - 0x1c], 0x2e3d454e
mov edx, ebx
mov dword [rbp - 0x18], 0x210b372a
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000a6c9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000a6a0
movdqa xmm0, xmmword [0x1801329d0]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea210b32
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18000a719
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18000a6f0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, 0xb
mov dword [rbp - 0x4c], 0x2e3d454e
test eax, eax
mov dword [rbp - 0x48], 0x3237372a
mov eax, edi
mov r8b, 0x21
setne byte [0x180147448]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x44], 0xb5a2e39
mov r9b, 0xea
mov dword [rbp - 0x40], 0xea21
mov edx, ebx
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18000a799
movzx r9d, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
jmp 0x18000a770
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0x21
mov dword [rbp - 0x1c], 0x2e3d454e
mov edx, ebx
mov dword [rbp - 0x18], 0x210b372a
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000a7f9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000a7d0
movdqa xmm0, xmmword [0x1801329d0]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea210b32
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18000a849
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18000a820
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], edi
mov r8b, 0x21
test eax, eax
mov dword [rbp - 0x4c], 0x2e3d454e
mov dword [rbp - 0x48], 0x2a36372a
mov r9b, 0xea
setne byte [0x18014743e]
mov dword [rbp - 0x44], 0xb5a2e34
mov dword [rbp - 0x40], 0xea21
mov edx, ebx
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov edi, dword [rbp - 0x50]
cmp edx, edi
jae 0x18000a8bb
movzx r9d, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
jmp 0x18000a892
mov byte [rbp + rdi - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0x21
mov byte [rbp - 0x14], r9b
mov edx, ebx
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
mov dword [rbp - 0x1c], 0x2e3d454e
mov dword [rbp - 0x18], 0x210b372a
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000a919
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000a8f0
movdqa xmm0, xmmword [0x1801329d0]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea210b32
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18000a969
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18000a940
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], r14d
mov r8b, 0x21
test eax, eax
mov dword [rbp - 0x4c], 0x2e3d454e
mov dword [rbp - 0x48], 0x382c372a
mov r9b, 0xea
setne byte [0x180147449]
mov dword [rbp - 0x44], 0x60382d36
mov dword [rbp - 0x40], 0xea210b
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov r14d, dword [rbp - 0x50]
cmp edx, r14d
jae 0x18000a9eb
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x18000a9c0
mov byte [rbp + r14 - 0x4c], bl
xor eax, eax
mov r14, qword [rsp + 0x80]
mov r9b, 0xea
mov byte [rbp - 0x14], r9b
mov r8b, 0x21
mov word [rbp - 0x13], ax
mov edx, ebx
mov byte [rbp - 0x11], al
mov dword [rbp - 0x20], esi
mov dword [rbp - 0x1c], 0x2e3d454e
mov dword [rbp - 0x18], 0x210b372a
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x20]
cmp edx, esi
jae 0x18000aa49
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000aa20
movdqa xmm0, xmmword [0x1801329d0]
mov dl, 0x21
mov byte [rbp + rsi - 0x1c], bl
mov r8b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xea210b32
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x18000aa97
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x18000aa70
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180147cb8]
test eax, eax
lea rax, [0x180009ac0]
setne byte [0x18014743f]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x180147cc0]
je 0x18000aae2
mov qword [rdx], rax
add qword [0x180147cb8], 8
jmp 0x18000aaf2
lea r8, [rbp - 0x20]
lea rcx, [0x180147cb0]
call fcn.180002710
mov rdx, qword [0x180147ca0]
lea rax, [0x180009b20]
cmp rdx, qword [0x180147ca8]
mov qword [rbp - 0x20], rax
je 0x18000ab1a
mov qword [rdx], rax
add qword [0x180147ca0], 8
jmp 0x18000ab2a
lea r8, [rbp - 0x20]
lea rcx, [0x180147c98]
call fcn.180002710
mov rdx, qword [0x180147e20]
lea rax, [0x180009b30]
cmp rdx, qword [0x180147e28]
mov qword [rbp - 0x20], rax
je 0x18000ab52
mov qword [rdx], rax
add qword [0x180147e20], 8
jmp 0x18000ab62
lea r8, [rbp - 0x20]
lea rcx, [0x180147e18]
call fcn.180002710
mov rdx, qword [0x180147cd0]
lea rax, [0x180009d80]
cmp rdx, qword [0x180147cd8]
mov qword [rbp - 0x20], rax
je 0x18000ab8a
mov qword [rdx], rax
add qword [0x180147cd0], 8
jmp 0x18000ab9a
lea r8, [rbp - 0x20]
lea rcx, [0x180147cc8]
call fcn.180002710
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180122d60
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret