Function at 0x18000aee0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180147030]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov dword [rbp - 0x1c], 0x2e3d454e
mov esi, 6
mov dword [rbp - 0x18], 0x210b372a
mov eax, esi
xor ebx, ebx
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov edx, ebx
mov byte [rbp - 0x14], r9b
mov r8b, 0x21
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000af69
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000af40
mov rdi, qword [0x180148968]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x4310]
call fcn.18008f520
mov ecx, eax
test eax, eax
je 0x18000afa4
lea rax, [rdi + 0x4300]
cmp ecx, 0xf
jle 0x18000af9a
mov rcx, rax
call fcn.18008f510
mov rcx, rax
call fcn.18008f550
jmp 0x18000afab
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008f420
test al, al
je 0x18000b55a
mov qword [rsp + 0x80], r14
mov r8b, 0x21
mov r14d, 0xc
mov dword [rbp - 0x4c], 0x2e3d454e
mov eax, r14d
mov r9b, 0xea
mov dword [rbp - 0x50], eax
mov edx, ebx
mov dword [rbp - 0x48], 0x382c372a
mov dword [rbp - 0x44], 0x5a382d36
mov dword [rbp - 0x40], 0xea210b
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18000b029
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x18000b000
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0x21
mov dword [rbp - 0x1c], 0x2e3d454e
mov edx, ebx
mov dword [rbp - 0x18], 0x210b372a
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000b089
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000b060
movdqa xmm0, xmmword [0x180133a10]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea210b32
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18000b0d9
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18000b0b0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, 0xb
mov dword [rbp - 0x4c], 0x2e3d454e
test eax, eax
mov dword [rbp - 0x48], 0x3237372a
mov eax, edi
mov r8b, 0x21
setne byte [0x18014844a]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x44], 0xb5a2e39
mov r9b, 0xea
mov dword [rbp - 0x40], 0xea21
mov edx, ebx
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x18000b159
movzx r9d, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
jmp 0x18000b130
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0x21
mov dword [rbp - 0x1c], 0x2e3d454e
mov edx, ebx
mov dword [rbp - 0x18], 0x210b372a
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000b1b9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000b190
movdqa xmm0, xmmword [0x180133a10]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea210b32
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18000b209
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18000b1e0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], edi
mov r8b, 0x21
test eax, eax
mov dword [rbp - 0x4c], 0x2e3d454e
mov dword [rbp - 0x48], 0x2a36372a
mov r9b, 0xea
setne byte [0x180148448]
mov dword [rbp - 0x44], 0xb5a2e34
mov dword [rbp - 0x40], 0xea21
mov edx, ebx
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov edi, dword [rbp - 0x50]
cmp edx, edi
jae 0x18000b27b
movzx r9d, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
jmp 0x18000b252
mov byte [rbp + rdi - 0x4c], bl
xor ecx, ecx
mov eax, esi
mov r9b, 0xea
mov dword [rbp - 0x20], eax
mov r8b, 0x21
mov byte [rbp - 0x14], r9b
mov edx, ebx
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
mov dword [rbp - 0x1c], 0x2e3d454e
mov dword [rbp - 0x18], 0x210b372a
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x18000b2d9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000b2b0
movdqa xmm0, xmmword [0x180133a10]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xea210b32
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x18000b329
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x18000b300
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], r14d
mov r8b, 0x21
test eax, eax
mov dword [rbp - 0x4c], 0x2e3d454e
mov dword [rbp - 0x48], 0x382c372a
mov r9b, 0xea
setne byte [0x18014844b]
mov dword [rbp - 0x44], 0x60382d36
mov dword [rbp - 0x40], 0xea210b
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov r14d, dword [rbp - 0x50]
cmp edx, r14d
jae 0x18000b3ab
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x18000b380
mov byte [rbp + r14 - 0x4c], bl
xor eax, eax
mov r14, qword [rsp + 0x80]
mov r9b, 0xea
mov byte [rbp - 0x14], r9b
mov r8b, 0x21
mov word [rbp - 0x13], ax
mov edx, ebx
mov byte [rbp - 0x11], al
mov dword [rbp - 0x20], esi
mov dword [rbp - 0x1c], 0x2e3d454e
mov dword [rbp - 0x18], 0x210b372a
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x20]
cmp edx, esi
jae 0x18000b409
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x18000b3e0
movdqa xmm0, xmmword [0x180133a10]
mov dl, 0x21
mov byte [rbp + rsi - 0x1c], bl
mov r8b, 0xea
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xea210b32
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x18000b457
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x18000b430
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180148cc0]
test eax, eax
lea rax, [0x18000a480]
setne byte [0x180148449]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x180148cc8]
je 0x18000b4a2
mov qword [rdx], rax
add qword [0x180148cc0], 8
jmp 0x18000b4b2
lea r8, [rbp - 0x20]
lea rcx, [0x180148cb8]
call fcn.180002710
mov rdx, qword [0x180148ca8]
lea rax, [0x18000a4e0]
cmp rdx, qword [0x180148cb0]
mov qword [rbp - 0x20], rax
je 0x18000b4da
mov qword [rdx], rax
add qword [0x180148ca8], 8
jmp 0x18000b4ea
lea r8, [rbp - 0x20]
lea rcx, [0x180148ca0]
call fcn.180002710
mov rdx, qword [0x180148e28]
lea rax, [0x18000a4f0]
cmp rdx, qword [0x180148e30]
mov qword [rbp - 0x20], rax
je 0x18000b512
mov qword [rdx], rax
add qword [0x180148e28], 8
jmp 0x18000b522
lea r8, [rbp - 0x20]
lea rcx, [0x180148e20]
call fcn.180002710
mov rdx, qword [0x180148cd8]
lea rax, [0x18000a740]
cmp rdx, qword [0x180148ce0]
mov qword [rbp - 0x20], rax
je 0x18000b54a
mov qword [rdx], rax
add qword [0x180148cd8], 8
jmp 0x18000b55a
lea r8, [rbp - 0x20]
lea rcx, [0x180148cd0]
call fcn.180002710
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180123e40
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret