Function at 0x180030eb0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x180147030]
xor rax, rsp
mov qword [rbp - 8], rax
xor ebx, ebx
mov dword [rbp - 0x20], 5
mov edx, ebx
mov dword [rbp - 0x1c], 0x36343d66
mov dword [rbp - 0x18], 0xf4211542
mov r8b, 0x21
mov r9b, 0xf4
nop dword [rax]
nop word [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x1c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x1c], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180030f26
movzx r9d, byte [rbp - 0x15]
movzx r8d, byte [rbp - 0x16]
jmp 0x180030f00
mov rdi, qword [0x180148968]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rdi + 0x4310]
call fcn.18008f520
mov ecx, eax
test eax, eax
je 0x180030f61
lea rax, [rdi + 0x4300]
cmp ecx, 0xf
jle 0x180030f57
mov rcx, rax
call fcn.18008f510
mov rcx, rax
call fcn.18008f550
jmp 0x180030f68
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008f420
test al, al
je 0x1800313f1
mov dword [rbp - 0x20], 9
mov r8b, 0x21
mov dword [rbp - 0x1c], 0x36343d66
mov r9b, 0xf4
mov dword [rbp - 0x18], 0x54586b42
mov edx, ebx
mov dword [rbp - 0x14], 0xf4211564
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x1c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x1c], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180030fc6
movzx r9d, byte [rbp - 0x11]
movzx r8d, byte [rbp - 0x12]
jmp 0x180030fa0
movdqa xmm0, xmmword [0x180133af0]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xf4
movdqu xmmword [rbp - 0x4c], xmm0
mov dword [rbp - 0x50], 0x11
mov edx, ebx
mov dword [rbp - 0x3c], 0xf421153c
nop dword [rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x4c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x4c], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x180031016
movzx r9d, byte [rbp - 0x39]
movzx r8d, byte [rbp - 0x3a]
jmp 0x180030ff0
mov rcx, qword [0x180148970]
lea r9, [rbp - 0x4c]
xor r8d, r8d
mov byte [rbp + rax - 0x4c], bl
lea rdx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, 6
mov dword [rbp - 0x5c], 0x36343d66
test eax, eax
mov dword [rbp - 0x58], 0x21156a42
mov eax, edi
mov r9b, 0xf4
setne byte [0x1801485a7]
mov dword [rbp - 0x60], eax
xor ecx, ecx
mov byte [rbp - 0x54], r9b
mov word [rbp - 0x53], cx
mov r8b, 0x21
mov byte [rbp - 0x51], cl
mov edx, ebx
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x5c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x5c], al
mov eax, dword [rbp - 0x60]
cmp edx, eax
jae 0x180031096
movzx r9d, byte [rbp - 0x54]
movzx r8d, byte [rbp - 0x55]
jmp 0x180031070
movdqa xmm0, xmmword [0x180133af0]
mov r8b, 0x21
mov byte [rbp + rax - 0x5c], bl
mov r9b, 0xf4
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xf421153c
nop dword [rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x34]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x34], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x1800310e6
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x1800310c0
mov rcx, qword [0x180148970]
lea r9, [rbp - 0x34]
xor r8d, r8d
mov byte [rbp + rax - 0x34], bl
lea rdx, [rbp - 0x5c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov r9b, 0xf4
mov dword [rbp - 0x1c], 0x36343d66
test eax, eax
mov dword [rbp - 0x18], 0x21155842
mov eax, edi
mov r8b, 0x21
setne byte [0x1801485ae]
mov dword [rbp - 0x20], eax
xor ecx, ecx
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov edx, ebx
mov byte [rbp - 0x11], cl
nop dword [rax]
nop word [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x1c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x1c], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180031166
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180031140
movdqa xmm0, xmmword [0x180133af0]
mov r8b, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xf4
movdqu xmmword [rbp - 0x4c], xmm0
mov dword [rbp - 0x50], 0x11
mov edx, ebx
mov dword [rbp - 0x3c], 0xf421153c
nop dword [rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x4c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x4c], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x1800311b6
movzx r9d, byte [rbp - 0x39]
movzx r8d, byte [rbp - 0x3a]
jmp 0x180031190
mov rcx, qword [0x180148970]
lea r9, [rbp - 0x4c]
xor r8d, r8d
mov byte [rbp + rax - 0x4c], bl
lea rdx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov r9b, 0xf4
mov dword [rbp - 0x60], edi
test eax, eax
mov dword [rbp - 0x5c], 0x36343d66
mov dword [rbp - 0x58], 0x21156742
mov r8b, 0x21
setne byte [0x1801485ac]
mov byte [rbp - 0x54], r9b
xor eax, eax
mov edx, ebx
mov word [rbp - 0x53], ax
mov byte [rbp - 0x51], al
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x5c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x5c], al
mov edi, dword [rbp - 0x60]
cmp edx, edi
jae 0x180031227
movzx r9d, byte [rbp - 0x54]
movzx r8d, byte [rbp - 0x55]
jmp 0x180031201
movdqa xmm0, xmmword [0x180133af0]
mov r8b, 0x21
mov byte [rbp + rdi - 0x5c], bl
mov r9b, 0xf4
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xf421153c
nop
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x34]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x34], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180031276
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x180031250
mov rcx, qword [0x180148970]
lea r9, [rbp - 0x34]
xor r8d, r8d
mov byte [rbp + rax - 0x34], bl
lea rdx, [rbp - 0x5c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov r9b, 0xf4
mov dword [rbp - 0x1c], 0x36343d66
test eax, eax
mov dword [rbp - 0x18], 0x546b5842
mov eax, 0xe
mov r8b, 0x21
setne byte [0x1801485ad]
mov dword [rbp - 0x20], eax
xor ecx, ecx
mov dword [rbp - 0x14], 0x47343a64
mov dword [rbp - 0x10], 0x21153839
mov edx, ebx
mov byte [rbp - 0xc], r9b
mov word [rbp - 0xb], cx
mov byte [rbp - 9], cl
test eax, eax
je 0x180031306
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 0x1c]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 0x1c], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180031306
movzx r9d, byte [rbp - 0xc]
movzx r8d, byte [rbp - 0xd]
jmp 0x1800312e0
movdqa xmm0, xmmword [0x180133af0]
mov dl, 0x21
mov byte [rbp + rax - 0x1c], bl
mov r8b, 0xf4
movdqu xmmword [rbp - 0x4c], xmm0
mov dword [rbp - 0x50], 0x11
mov dword [rbp - 0x3c], 0xf421153c
nop word [rax + rax]
movzx eax, byte [rbp + rbx - 0x4c]
sub al, r8b
xor al, dl
mov byte [rbp + rbx - 0x4c], al
inc ebx
mov eax, dword [rbp - 0x50]
cmp ebx, eax
jae 0x180031352
movzx r8d, byte [rbp - 0x39]
movzx edx, byte [rbp - 0x3a]
jmp 0x180031330
mov rcx, qword [0x180148970]
lea r9, [rbp - 0x4c]
xor r8d, r8d
mov byte [rbp + rax - 0x4c], 0
lea rdx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180148cd8]
xorps xmm0, xmm0
cmp rdx, qword [0x180148ce0]
mov eax, eax
cvtsi2ss xmm0, rax
lea rax, [0x180030660]
mov qword [rbp - 0x20], rax
movss dword [0x1801485b4], xmm0
je 0x1800313a9
mov qword [rdx], rax
add qword [0x180148cd8], 8
jmp 0x1800313b9
lea r8, [rbp - 0x20]
lea rcx, [0x180148cd0]
call fcn.180002710
mov rdx, qword [0x180148e28]
lea rax, [0x180030510]
cmp rdx, qword [0x180148e30]
mov qword [rbp - 0x20], rax
je 0x1800313e1
mov qword [rdx], rax
add qword [0x180148e28], 8
jmp 0x1800313f1
lea r8, [rbp - 0x20]
lea rcx, [0x180148e20]
call fcn.180002710
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.180123e40
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret