Function at 0x18008b140
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180147030]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov esi, 7
mov dword [rbp - 0x1c], 0x28243012
mov eax, esi
xor ebx, ebx
mov dword [rbp - 0x20], eax
mov r8b, 0x1c
mov dword [rbp - 0x18], 0xcf2c2323
mov r9b, 0xb3
mov dword [rbp - 0x14], 0xb31c
mov edx, ebx
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008b1b9
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008b190
mov rdi, qword [0x180148968]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x4310]
call fcn.18008f520
mov ecx, eax
test eax, eax
je 0x18008b1f4
lea rax, [rdi + 0x4300]
cmp ecx, 0xf
jle 0x18008b1ea
mov rcx, rax
call fcn.18008f510
mov rcx, rax
call fcn.18008f550
jmp 0x18008b1fb
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008f420
test al, al
je 0x18008b804
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
mov dword [rbp - 0x4c], 0x28243032
mov r9b, 0xb3
mov dword [rbp - 0x48], 0x322c2323
mov edx, ebx
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccf00
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008b269
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008b240
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov eax, esi
mov r9b, 0xb3
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x28243032
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008b2b9
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008b290
movdqa xmm0, xmmword [0x1801337e0]
mov r8b, 0x1c
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xb31ccf28
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18008b309
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18008b2e0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
test eax, eax
mov dword [rbp - 0x4c], 0x28243032
mov dword [rbp - 0x48], 0x322c2323
mov r9b, 0xb3
setne byte [0x1801488f8]
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccffe
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008b389
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008b360
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov eax, esi
mov r9b, 0xb3
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x28243032
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008b3d9
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008b3b0
movdqa xmm0, xmmword [0x1801337e0]
mov r8b, 0x1c
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xb31ccf28
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18008b429
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18008b400
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
test eax, eax
mov dword [rbp - 0x4c], 0x28243032
mov dword [rbp - 0x48], 0x322c2323
mov r9b, 0xb3
setne byte [0x1801488fa]
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccf0c
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008b4a9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008b480
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov eax, esi
mov r9b, 0xb3
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x28243032
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008b4f9
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008b4d0
movdqa xmm0, xmmword [0x1801337e0]
mov r8b, 0x1c
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xb31ccf28
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18008b549
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18008b520
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
test eax, eax
mov dword [rbp - 0x4c], 0x28243032
mov dword [rbp - 0x48], 0x322c2323
mov r9b, 0xb3
setne byte [0x180148908]
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccf01
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008b5c9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008b5a0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov dword [rbp - 0x20], esi
mov r9b, 0xb3
mov dword [rbp - 0x1c], 0x28243032
mov edx, ebx
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x20]
cmp edx, esi
jae 0x18008b619
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008b5f0
movdqa xmm0, xmmword [0x1801337e0]
mov dl, 0x1c
mov byte [rbp + rsi - 0x1c], bl
mov r8b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xb31ccf28
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x18008b667
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x18008b640
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180148cd8]
test eax, eax
lea rax, [0x18008a9e0]
setne byte [0x1801488f9]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x180148ce0]
je 0x18008b6b2
mov qword [rdx], rax
add qword [0x180148cd8], 8
jmp 0x18008b6c2
lea r8, [rbp - 0x20]
lea rcx, [0x180148cd0]
call fcn.180002710
mov rdx, qword [0x180148e88]
lea rbx, [0x18008a380]
cmp rdx, qword [0x180148e90]
mov qword [rbp - 0x20], rbx
je 0x18008b6ea
mov qword [rdx], rbx
add qword [0x180148e88], 8
jmp 0x18008b6fa
lea r8, [rbp - 0x20]
lea rcx, [0x180148e80]
call fcn.180002710
mov rdx, qword [0x180148ed0]
cmp rdx, qword [0x180148ed8]
mov qword [rbp - 0x20], rbx
je 0x18008b71b
mov qword [rdx], rbx
add qword [0x180148ed0], 8
jmp 0x18008b72b
lea r8, [rbp - 0x20]
lea rcx, [0x180148ec8]
call fcn.180002710
mov rdx, qword [0x180148ea0]
cmp rdx, qword [0x180148ea8]
mov qword [rbp - 0x20], rbx
je 0x18008b74c
mov qword [rdx], rbx
add qword [0x180148ea0], 8
jmp 0x18008b75c
lea r8, [rbp - 0x20]
lea rcx, [0x180148e98]
call fcn.180002710
mov rdx, qword [0x180148e28]
lea rax, [0x18008a390]
cmp rdx, qword [0x180148e30]
mov qword [rbp - 0x20], rax
je 0x18008b784
mov qword [rdx], rax
add qword [0x180148e28], 8
jmp 0x18008b794
lea r8, [rbp - 0x20]
lea rcx, [0x180148e20]
call fcn.180002710
mov rdx, qword [0x180148ca8]
lea rax, [0x180089e40]
cmp rdx, qword [0x180148cb0]
mov qword [rbp - 0x20], rax
je 0x18008b7bc
mov qword [rdx], rax
add qword [0x180148ca8], 8
jmp 0x18008b7cc
lea r8, [rbp - 0x20]
lea rcx, [0x180148ca0]
call fcn.180002710
mov rdx, qword [0x180148bb0]
lea rax, [0x180089e80]
cmp rdx, qword [0x180148bb8]
mov qword [rbp - 0x20], rax
je 0x18008b7f4
mov qword [rdx], rax
add qword [0x180148bb0], 8
jmp 0x18008b804
lea r8, [rbp - 0x20]
lea rcx, [0x180148ba8]
call fcn.180002710
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180123e40
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret