Function at 0x1800429c0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180146030]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov dword [rbp - 0x1c], 0x4d57425c
mov edi, 6
mov dword [rbp - 0x18], 0x30294a3b
mov eax, edi
xor ebx, ebx
mov r9b, 0xf9
mov dword [rbp - 0x20], eax
mov edx, ebx
mov byte [rbp - 0x14], r9b
mov r8b, 0x30
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180042a49
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180042a20
mov rsi, qword [0x180147960]
mov byte [rbp + rax - 0x1c], bl
lea rcx, [rsi + 0x42e8]
call fcn.18008eb70
mov ecx, eax
test eax, eax
je 0x180042a84
lea rax, [rsi + 0x42d8]
cmp ecx, 0xf
jle 0x180042a7a
mov rcx, rax
call fcn.18008eb60
mov rcx, rax
call fcn.18008eba0
jmp 0x180042a8b
lea rax, str.null
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.18008ea70
test al, al
je 0x180043034
mov esi, 0xc
mov dword [rbp - 0x4c], 0x4d57423c
mov eax, esi
mov r8b, 0x30
mov dword [rbp - 0x50], eax
mov r9b, 0xf9
mov dword [rbp - 0x48], 0x584c4a3b
mov edx, ebx
mov dword [rbp - 0x44], 0x5a584b56
mov dword [rbp - 0x40], 0xf93029
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x180042af9
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x180042ad0
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, edi
mov r9b, 0xf9
mov dword [rbp - 0x20], eax
mov r8b, 0x30
mov dword [rbp - 0x1c], 0x4d57425c
mov edx, ebx
mov dword [rbp - 0x18], 0x30294a3b
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180042b59
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180042b30
movdqa xmm0, xmmword [0x180132c40]
mov r8b, 0x30
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xf9
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xf9302952
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180042ba9
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x180042b80
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x4c], 0x4d57423c
mov r8b, 0x30
test eax, eax
mov dword [rbp - 0x48], 0x584c4a3b
mov eax, esi
mov r9b, 0xf9
setne byte [0x18014765f]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x44], 0x60584b56
mov edx, ebx
mov dword [rbp - 0x40], 0xf93029
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x180042c29
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x180042c00
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, edi
mov r9b, 0xf9
mov dword [rbp - 0x20], eax
mov r8b, 0x30
mov dword [rbp - 0x1c], 0x4d57425c
mov edx, ebx
mov dword [rbp - 0x18], 0x30294a3b
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180042c89
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180042c60
movdqa xmm0, xmmword [0x180132c40]
mov r8b, 0x30
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xf9
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xf9302952
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180042cd9
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x180042cb0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x4c], 0x4d57423c
mov r8b, 0x30
test eax, eax
mov dword [rbp - 0x48], 0x584c4a3b
mov eax, esi
mov r9b, 0xf9
setne byte [0x18014765c]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x44], 0x6e584b56
mov edx, ebx
mov dword [rbp - 0x40], 0xf93029
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x50]
cmp edx, eax
jae 0x180042d59
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x180042d30
mov byte [rbp + rax - 0x4c], bl
xor ecx, ecx
mov eax, edi
mov r9b, 0xf9
mov dword [rbp - 0x20], eax
mov r8b, 0x30
mov dword [rbp - 0x1c], 0x4d57425c
mov edx, ebx
mov dword [rbp - 0x18], 0x30294a3b
mov byte [rbp - 0x14], r9b
mov word [rbp - 0x13], cx
mov byte [rbp - 0x11], cl
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x20]
cmp edx, eax
jae 0x180042db9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180042d90
movdqa xmm0, xmmword [0x180132c40]
mov r8b, 0x30
mov byte [rbp + rax - 0x1c], bl
mov r9b, 0xf9
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov edx, ebx
mov dword [rbp - 0x24], 0xf9302952
mov eax, edx
lea rcx, [rbp - 0x34]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp edx, eax
jae 0x180042e09
movzx r9d, byte [rbp - 0x21]
movzx r8d, byte [rbp - 0x22]
jmp 0x180042de0
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], bl
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [rbp - 0x50], esi
mov r8b, 0x30
test eax, eax
mov dword [rbp - 0x4c], 0x4d57423c
mov dword [rbp - 0x48], 0x584c4a3b
mov r9b, 0xf9
setne byte [0x18014765d]
mov dword [rbp - 0x44], 0x5b584b56
mov dword [rbp - 0x40], 0xf93029
mov edx, ebx
mov eax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov esi, dword [rbp - 0x50]
cmp edx, esi
jae 0x180042e7b
movzx r9d, byte [rbp - 0x3e]
movzx r8d, byte [rbp - 0x3f]
jmp 0x180042e52
mov byte [rbp + rsi - 0x4c], bl
xor eax, eax
mov r9b, 0xf9
mov word [rbp - 0x13], ax
mov byte [rbp - 0x14], r9b
mov r8b, 0x30
mov byte [rbp - 0x11], al
mov edx, ebx
mov dword [rbp - 0x20], edi
mov dword [rbp - 0x1c], 0x4d57425c
mov dword [rbp - 0x18], 0x30294a3b
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
inc edx
movzx eax, byte [rcx]
sub al, r9b
xor al, r8b
mov byte [rcx], al
mov edi, dword [rbp - 0x20]
cmp edx, edi
jae 0x180042ed9
movzx r9d, byte [rbp - 0x14]
movzx r8d, byte [rbp - 0x15]
jmp 0x180042eb0
movdqa xmm0, xmmword [0x180132c40]
mov dl, 0x30
mov byte [rbp + rdi - 0x1c], bl
mov r8b, 0xf9
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x38], 0x11
mov dword [rbp - 0x24], 0xf9302952
nop dword [rax]
mov eax, ebx
lea rcx, [rbp - 0x34]
add rcx, rax
inc ebx
movzx eax, byte [rcx]
sub al, r8b
xor al, dl
mov byte [rcx], al
mov eax, dword [rbp - 0x38]
cmp ebx, eax
jae 0x180042f27
movzx r8d, byte [rbp - 0x21]
movzx edx, byte [rbp - 0x22]
jmp 0x180042f00
lea r9, [rbp - 0x34]
mov byte [rbp + rax - 0x34], 0
xor r8d, r8d
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov rdx, qword [0x180147cd0]
test eax, eax
lea rax, [0x180042260]
setne byte [0x18014765e]
mov qword [rbp - 0x20], rax
cmp rdx, qword [0x180147cd8]
je 0x180042f72
mov qword [rdx], rax
add qword [0x180147cd0], 8
jmp 0x180042f82
lea r8, [rbp - 0x20]
lea rcx, [0x180147cc8]
call fcn.180002710
mov rdx, qword [0x180147d48]
lea rax, [0x1800412e0]
cmp rdx, qword [0x180147d50]
mov qword [rbp - 0x20], rax
je 0x180042faa
mov qword [rdx], rax
add qword [0x180147d48], 8
jmp 0x180042fba
lea r8, [rbp - 0x20]
lea rcx, [0x180147d40]
call fcn.180002710
mov rdx, qword [0x180147e20]
lea rax, [0x180041220]
cmp rdx, qword [0x180147e28]
mov qword [rbp - 0x20], rax
je 0x180042fec
mov qword [rdx], rax
mov rdx, qword [0x180147e20]
add rdx, 8
mov qword [0x180147e20], rdx
jmp 0x180043003
lea r8, [rbp - 0x20]
lea rcx, [0x180147e18]
call fcn.180002710
mov rdx, qword [0x180147e20]
cmp rdx, qword [0x180147e28]
lea rax, [0x180041630]
mov qword [rbp - 0x20], rax
je 0x180043024
mov qword [rdx], rax
add qword [0x180147e20], 8
jmp 0x180043034
lea r8, [rbp - 0x20]
lea rcx, [0x180147e18]
call fcn.180002710
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180122d60
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret