Function at 0x18007b5a0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180141030]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov esi, 7
mov dword [rbp - 0x1c], 0x47333a49
mov eax, esi
xor ebx, ebx
mov dword [rbp - 0x20], eax
mov r8b, 0x36
mov dword [rbp - 0x18], 0x11343239
mov r9b, 0xdb
mov dword [rbp - 0x14], 0xdb36
mov edx, ebx
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18007b619
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18007b5f0
mov rdi, qword [0x180142948]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x4570]
call fcn.18008bbd0
mov ecx, eax
test eax, eax
je 0x18007b654
lea rax, [rdi + 0x4560]
cmp ecx, 0xf
jle 0x18007b64a
mov rcx, rax
call fcn.18008bbc0
mov rcx, rax
call fcn.18008bc00
jmp 0x18007b65b
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008bad0
test al, al
je 0x18007bc02
mov dword [rbp - 0x50], 0xd
mov r8b, 0x36
mov dword [rbp - 0x4c], 0x47333a49
mov r9b, 0xdb
mov dword [rbp - 0x48], 0x30343239
mov edx, ebx
mov dword [rbp - 0x44], 0x342f3634
mov dword [rbp - 0x40], 0xdb361142
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18007b6c9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18007b6a0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x36
mov eax, esi
mov r9b, 0xdb
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x47333a49
mov dword [rbp - 0x18], 0x11343239
mov dword [rbp - 0x14], 0xdb36
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18007b719
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18007b6f0
movdqa xmm0, xmmword [0x18012d9a0]
mov r8b, 0x36
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xdb
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xdb36113a
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18007b769
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18007b740
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x36
test eax, eax
mov dword [rbp - 0x4c], 0x47333a49
mov dword [rbp - 0x48], 0x30343239
mov r9b, 0xdb
setne byte [0x180142876]
mov dword [rbp - 0x44], 0x342f3634
mov dword [rbp - 0x40], 0xdb36113c
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18007b7e9
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18007b7c0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x36
mov eax, esi
mov r9b, 0xdb
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x47333a49
mov dword [rbp - 0x18], 0x11343239
mov dword [rbp - 0x14], 0xdb36
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18007b839
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18007b810
movdqa xmm0, xmmword [0x18012d9a0]
mov r8b, 0x36
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xdb
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xdb36113a
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18007b889
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18007b860
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x36
test eax, eax
mov dword [rbp - 0x4c], 0x47333a49
mov dword [rbp - 0x48], 0x30343239
mov r9b, 0xdb
setne byte [0x18014287c]
mov dword [rbp - 0x44], 0x342f3634
mov dword [rbp - 0x40], 0xdb36114e
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18007b909
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18007b8e0
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x36
mov eax, esi
mov r9b, 0xdb
mov dword [rbp - 0x20], eax
mov edx, ebx
mov dword [rbp - 0x1c], 0x47333a49
mov dword [rbp - 0x18], 0x11343239
mov dword [rbp - 0x14], 0xdb36
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18007b959
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18007b930
movdqa xmm0, xmmword [0x18012d9a0]
mov r8b, 0x36
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xdb
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xdb36113a
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18007b9a9
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18007b980
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], 0xd
mov r8b, 0x36
test eax, eax
mov dword [rbp - 0x4c], 0x47333a49
mov dword [rbp - 0x48], 0x30343239
mov r9b, 0xdb
setne byte [0x180142875]
mov dword [rbp - 0x44], 0x342f3634
mov dword [rbp - 0x40], 0xdb36113f
mov edx, ebx
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18007ba29
movzx r9d, byte [rbp - 0x3d]
movzx r8d, byte [rbp - 0x3e]
jmp 0x18007ba00
mov byte [rbp + rax - 0x4c], bl
mov r8b, 0x36
mov dword [rbp - 0x20], esi
mov r9b, 0xdb
mov dword [rbp - 0x1c], 0x47333a49
mov edx, ebx
mov dword [rbp - 0x18], 0x11343239
mov dword [rbp - 0x14], 0xdb36
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x20]
cmp edx, esi
jae 0x18007ba79
movzx r9d, byte [rbp - 0x13]
movzx r8d, byte [rbp - 0x14]
jmp 0x18007ba50
movdqa xmm0, xmmword [0x18012d9a0]
mov dl, 0x36
mov byte [rbp + rsi - 0x1c], bl
mov r8b, 0xdb
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xdb36113a
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x18007bac7
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x18007baa0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180142c78]
test eax, eax
lea rax, [0x18007ae40]
setne byte [0x180142877]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x180142c80]
je 0x18007bb12
mov qword [rdx], rax
add qword [0x180142c78], 8
jmp 0x18007bb22
lea r8, [rbp - 0x20]
lea rcx, [0x180142c70]
call fcn.180002720
mov rdx, qword [0x180142c48]
lea rax, [0x18002c980]
cmp rdx, qword [0x180142c50]
mov qword [rbp - 0x20], rax
je 0x18007bb4a
mov qword [rdx], rax
add qword [0x180142c48], 8
jmp 0x18007bb5a
lea r8, [rbp - 0x20]
lea rcx, [0x180142c40]
call fcn.180002720
mov rdx, qword [0x180142b50]
lea rax, [0x18002c990]
cmp rdx, qword [0x180142b58]
mov qword [rbp - 0x20], rax
je 0x18007bb82
mov qword [rdx], rax
add qword [0x180142b50], 8
jmp 0x18007bb92
lea r8, [rbp - 0x20]
lea rcx, [0x180142b48]
call fcn.180002720
mov rdx, qword [0x180142dc8]
lea rax, [0x18007aa90]
cmp rdx, qword [0x180142dd0]
mov qword [rbp - 0x20], rax
je 0x18007bbba
mov qword [rdx], rax
add qword [0x180142dc8], 8
jmp 0x18007bbca
lea r8, [rbp - 0x20]
lea rcx, [0x180142dc0]
call fcn.180002720
mov rdx, qword [0x180142e28]
lea rax, [0x18007aa60]
cmp rdx, qword [0x180142e30]
mov qword [rbp - 0x20], rax
je 0x18007bbf2
mov qword [rdx], rax
add qword [0x180142e28], 8
jmp 0x18007bc02
lea r8, [rbp - 0x20]
lea rcx, [0x180142e20]
call fcn.180002720
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.18011e040
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret