Function at 0x180008de0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x18013c030]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov dword [rbp - 0x1c], 0x52696132
mov esi, 6
mov dword [rbp - 0x18], 0xdf74b56
mov eax, esi
xor ebx, ebx
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov edx, ebx
mov byte [rbp - 0x14], r9b
mov r8b, 0xd
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180008e69
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180008e40
mov rdi, qword [0x18013d928]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x4450]
call fcn.1800867a0
mov ecx, eax
test eax, eax
je 0x180008ea4
lea rax, [rdi + 0x4440]
cmp ecx, 0xf
jle 0x180008e9a
mov rcx, rax
call fcn.180086790
mov rcx, rax
call fcn.1800867d0
jmp 0x180008eab
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.1800866a0
test al, al
je 0x18000945a
mov qword [rsp + 0x80], r14
mov r8b, 0xd
mov r14d, 0xc
mov dword [rbp - 0x4c], 0x52696132
mov eax, r14d
mov r9b, 0xea
mov dword [rbp - 0x50], eax
mov edx, ebx
mov dword [rbp - 0x48], 0x4c584b56
mov dword [rbp - 0x44], 0x464c594a
mov dword [rbp - 0x40], 0xea0df7
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x180008f29
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x180008f00
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0xd
mov dword [rbp - 0x1c], 0x52696132
mov edx, ebx
mov dword [rbp - 0x18], 0xdf74b56
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180008f89
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180008f60
movdqa xmm0, xmmword [0x1801288a0]
mov r8b, 0xd
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea0df74e
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180008fd9
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x180008fb0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, 0xb
mov dword [rbp - 0x4c], 0x52696132
test eax, eax
mov dword [rbp - 0x48], 0x4e4b4b56
mov eax, edi
mov r8b, 0xd
setne byte [0x18013d43e]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x44], 0xf746524d
mov r9b, 0xea
mov dword [rbp - 0x40], 0xea0d
mov edx, ebx
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x180009059
movzx r9d, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
jmp 0x180009030
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0xd
mov dword [rbp - 0x1c], 0x52696132
mov edx, ebx
mov dword [rbp - 0x18], 0xdf74b56
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x1800090b9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180009090
movdqa xmm0, xmmword [0x1801288a0]
mov r8b, 0xd
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea0df74e
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180009109
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x1800090e0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], edi
mov r8b, 0xd
test eax, eax
mov dword [rbp - 0x4c], 0x52696132
mov dword [rbp - 0x48], 0x564a4b56
mov r9b, 0xea
setne byte [0x18013d43c]
mov dword [rbp - 0x44], 0xf7465250
mov dword [rbp - 0x40], 0xea0d
mov edx, ebx
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov edi, dword [rbp - 0x50]
cmp edx, edi
jae 0x18000917b
movzx r9d, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
jmp 0x180009152
mov byte [rbp + rdi - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0xd
mov byte [rbp - 0x14], r9b
mov edx, ebx
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
mov dword [rbp - 0x1c], 0x52696132
mov dword [rbp - 0x18], 0xdf74b56
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x1800091d9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x1800091b0
movdqa xmm0, xmmword [0x1801288a0]
mov r8b, 0xd
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea0df74e
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180009229
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x180009200
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], r14d
mov r8b, 0xd
test eax, eax
mov dword [rbp - 0x4c], 0x52696132
mov dword [rbp - 0x48], 0x4c584b56
mov r9b, 0xea
setne byte [0x18013d43f]
mov dword [rbp - 0x44], 0x444c594a
mov dword [rbp - 0x40], 0xea0df7
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov r14d, dword [rbp - 0x50]
cmp edx, r14d
jae 0x1800092ab
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x180009280
mov byte [rbp + r14 - 0x4c], bl
xor eax, eax
mov r14, qword [rsp + 0x80]
mov r9b, 0xea
mov byte [rbp - 0x14], r9b
mov r8b, 0xd
mov word [rbp - 0x13], ax
mov edx, ebx
mov byte [rbp - 0x11], al
mov dword [rbp - 0x20], esi
mov dword [rbp - 0x1c], 0x52696132
mov dword [rbp - 0x18], 0xdf74b56
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x20]
cmp edx, esi
jae 0x180009309
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x1800092e0
movdqa xmm0, xmmword [0x1801288a0]
mov dl, 0xd
mov byte [rbp + rsi - 0x1c], bl
mov r8b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xea0df74e
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x180009357
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x180009330
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x18013dc28]
test eax, eax
lea rax, [0x180008220]
setne byte [0x18013d43d]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x18013dc30]
je 0x1800093a2
mov qword [rdx], rax
add qword [0x18013dc28], 8
jmp 0x1800093b2
lea r8, [rbp - 0x20]
lea rcx, [0x18013dc20]
call fcn.180002720
mov rdx, qword [0x18013dc10]
lea rax, [0x180008280]
cmp rdx, qword [0x18013dc18]
mov qword [rbp - 0x20], rax
je 0x1800093da
mov qword [rdx], rax
add qword [0x18013dc10], 8
jmp 0x1800093ea
lea r8, [rbp - 0x20]
lea rcx, [0x18013dc08]
call fcn.180002720
mov rdx, qword [0x18013dd90]
lea rax, [0x180008290]
cmp rdx, qword [0x18013dd98]
mov qword [rbp - 0x20], rax
je 0x180009412
mov qword [rdx], rax
add qword [0x18013dd90], 8
jmp 0x180009422
lea r8, [rbp - 0x20]
lea rcx, [0x18013dd88]
call fcn.180002720
mov rdx, qword [0x18013dc40]
lea rax, [0x180008640]
cmp rdx, qword [0x18013dc48]
mov qword [rbp - 0x20], rax
je 0x18000944a
mov qword [rdx], rax
add qword [0x18013dc40], 8
jmp 0x18000945a
lea r8, [rbp - 0x20]
lea rcx, [0x18013dc38]
call fcn.180002720
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180118810
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret