Function at 0x18008a790
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180146030]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov esi, 7
mov dword [rbp - 0x1c], 0x28243012
mov eax, esi
xor ebx, ebx
mov dword [rbp - 0x20], eax
mov r8b, 0x1c
mov dword [rbp - 0x18], 0xcf2c2323
mov r9b, 0xb3
mov dword [rbp - 0x14], 0xb31c
mov edx, ebx
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008a809
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008a7e0
mov rdi, qword [0x180147960]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x42e8]
call fcn.18008eb70
mov ecx, eax
test eax, eax
je 0x18008a844
lea rax, [rdi + 0x42d8]
cmp ecx, 0xf
jle 0x18008a83a
mov rcx, rax
call fcn.18008eb60
mov rcx, rax
call fcn.18008eba0
jmp 0x18008a84b
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008ea70
test al, al
je 0x18008ae54
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
mov dword [rbp - 0x4c], 0x28243032
mov r9b, 0xb3
mov dword [rbp - 0x48], 0x322c2323
mov edx, ebx
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccf00
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008a8b9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008a890
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov eax, esi
mov r9b, 0xb3
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x28243032
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008a909
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008a8e0
movdqa xmm0, xmmword [0x180132790]
mov r8b, 0x1c
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xb31ccf28
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18008a959
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18008a930
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
test eax, eax
mov dword [rbp - 0x4c], 0x28243032
mov dword [rbp - 0x48], 0x322c2323
mov r9b, 0xb3
setne byte [0x1801478f2]
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccffe
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008a9d9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008a9b0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov eax, esi
mov r9b, 0xb3
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x28243032
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008aa29
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008aa00
movdqa xmm0, xmmword [0x180132790]
mov r8b, 0x1c
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xb31ccf28
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18008aa79
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18008aa50
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
test eax, eax
mov dword [rbp - 0x4c], 0x28243032
mov dword [rbp - 0x48], 0x322c2323
mov r9b, 0xb3
setne byte [0x180147901]
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccf0c
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008aaf9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008aad0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov eax, esi
mov r9b, 0xb3
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x28243032
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18008ab49
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008ab20
movdqa xmm0, xmmword [0x180132790]
mov r8b, 0x1c
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xb31ccf28
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18008ab99
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18008ab70
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x1c
test eax, eax
mov dword [rbp - 0x4c], 0x28243032
mov dword [rbp - 0x48], 0x322c2323
mov r9b, 0xb3
setne byte [0x180147902]
mov dword [rbp - 0x44], 0x26312426
mov dword [rbp - 0x40], 0xb31ccf01
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18008ac19
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18008abf0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x1c
mov dword [rbp - 0x20], esi
mov r9b, 0xb3
mov dword [rbp - 0x1c], 0x28243032
mov edx, ebx
mov dword [rbp - 0x18], 0xcf2c2323
mov dword [rbp - 0x14], 0xb31c
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x20]
cmp edx, esi
jae 0x18008ac69
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18008ac40
movdqa xmm0, xmmword [0x180132790]
mov dl, 0x1c
mov byte [rbp + rsi - 0x1c], bl
mov r8b, 0xb3
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xb31ccf28
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x18008acb7
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x18008ac90
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180147cd0]
test eax, eax
lea rax, [0x18008a030]
setne byte [0x1801478f3]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x180147cd8]
je 0x18008ad02
mov qword [rdx], rax
add qword [0x180147cd0], 8
jmp 0x18008ad12
lea r8, [rbp - 0x20]
lea rcx, [0x180147cc8]
call fcn.180002710
mov rdx, qword [0x180147e80]
lea rbx, [0x1800899d0]
cmp rdx, qword [0x180147e88]
mov qword [rbp - 0x20], rbx
je 0x18008ad3a
mov qword [rdx], rbx
add qword [0x180147e80], 8
jmp 0x18008ad4a
lea r8, [rbp - 0x20]
lea rcx, [0x180147e78]
call fcn.180002710
mov rdx, qword [0x180147ec8]
cmp rdx, qword [0x180147ed0]
mov qword [rbp - 0x20], rbx
je 0x18008ad6b
mov qword [rdx], rbx
add qword [0x180147ec8], 8
jmp 0x18008ad7b
lea r8, [rbp - 0x20]
lea rcx, [0x180147ec0]
call fcn.180002710
mov rdx, qword [0x180147e98]
cmp rdx, qword [0x180147ea0]
mov qword [rbp - 0x20], rbx
je 0x18008ad9c
mov qword [rdx], rbx
add qword [0x180147e98], 8
jmp 0x18008adac
lea r8, [rbp - 0x20]
lea rcx, [0x180147e90]
call fcn.180002710
mov rdx, qword [0x180147e20]
lea rax, [0x1800899e0]
cmp rdx, qword [0x180147e28]
mov qword [rbp - 0x20], rax
je 0x18008add4
mov qword [rdx], rax
add qword [0x180147e20], 8
jmp 0x18008ade4
lea r8, [rbp - 0x20]
lea rcx, [0x180147e18]
call fcn.180002710
mov rdx, qword [0x180147ca0]
lea rax, [0x180089490]
cmp rdx, qword [0x180147ca8]
mov qword [rbp - 0x20], rax
je 0x18008ae0c
mov qword [rdx], rax
add qword [0x180147ca0], 8
jmp 0x18008ae1c
lea r8, [rbp - 0x20]
lea rcx, [0x180147c98]
call fcn.180002710
mov rdx, qword [0x180147ba8]
lea rax, [0x1800894d0]
cmp rdx, qword [0x180147bb0]
mov qword [rbp - 0x20], rax
je 0x18008ae44
mov qword [rdx], rax
add qword [0x180147ba8], 8
jmp 0x18008ae54
lea r8, [rbp - 0x20]
lea rcx, [0x180147ba0]
call fcn.180002710
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180122d60
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret