Function at 0x14000c644
Capabilities:
Read .ini file

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140034ab8]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov r15, rcx
lea rdi, [rbp + 0x10]
xor eax, eax
mov esi, 0x104
mov ecx, esi
rep stosb byte [rdi], al
mov r8d, esi
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14000c994
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x50]
call fcn.140014850
nop
mov dl, 0x5c
lea rcx, [rsp + 0x50]
call fcn.140014b34
mov r8d, eax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.140014cac
nop
lea r8, [0x140027d28]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x58]
call fcn.140014ed8
nop
lea r8, str.AllowCredentialProviders.ini
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140014ed8
nop
lea rcx, [rsp + 0x58]
call fcn.1400149a0
lea rdx, str.AllowList
lea rcx, [rsp + 0x40]
call fcn.140014850
nop
mov ecx, esi
call fcn.140016f60
mov r12, rax
mov rdi, rax
xor eax, eax
mov ecx, esi
rep stosb byte [rdi], al
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], esi
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ebx, eax
cmp eax, 0x102
jne 0x14000c7d4
add esi, esi
test r12, r12
je 0x14000c7ae
mov rcx, r12
call fcn.140016a28
mov ecx, esi
call fcn.140016f60
mov r12, rax
mov rdi, rax
xor eax, eax
mov ecx, esi
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ebx, eax
lea eax, [rsi - 2]
cmp ebx, eax
je 0x14000c760
jmp 0x14000c7d4
lea rcx, [rsp + 0x40]
call fcn.1400149a0
nop
lea rcx, [rsp + 0x38]
call fcn.1400149a0
nop
lea rcx, [rsp + 0x48]
call fcn.1400149a0
nop
jmp 0x14000c98a
lea rdx, [0x1400277a0]
lea rcx, [rsp + 0x30]
call fcn.140014850
nop
lea rdi, [rbp - 0x20]
xor eax, eax
lea ecx, [rax + 0x27]
rep stosb byte [rdi], al
xor esi, esi
movsxd r14, ebx
test ebx, ebx
jle 0x14000c946
mov dl, byte [rsi + r12]
lea rcx, [rsp + 0x30]
test dl, dl
je 0x14000c815
call fcn.140014ebc
jmp 0x14000c93a
call fcn.140014b1c
test eax, eax
jne 0x14000c93a
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x20]
xor r8d, r8d
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov rdx, qword [rsp + 0x30]
mov rcx, r15
call fcn.1400068d0
mov ebx, eax
mov ecx, 0x4e
call fcn.140016f60
mov r13, rax
mov rdi, rax
xor eax, eax
lea edx, [rax + 0x27]
mov ecx, edx
rep stosb byte [rdi], al
and qword [rsp + 0x60], rax
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x20]
mov r8d, edx
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.140016ed0
lea rdx, [rbp - 0x30]
mov rcx, r13
call qword [sym.imp.ole32.dll_CLSIDFromString]
cmp ebx, 0xffffffff
jne 0x14000c918
test eax, eax
jne 0x14000c918
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x74], 0x270f
and dword [rsp + 0x78], eax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x1007
mov rcx, qword [r15 + 0x30]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x78], 1
lea rax, [rbp - 0x20]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x1006
mov rcx, qword [r15 + 0x30]
call qword [sym.imp.USER32.dll_SendMessageA]
lea r8, [rbp - 0x20]
mov rdx, qword [rsp + 0x30]
mov rcx, qword [r15 + 8]
call fcn.140009300
lea rcx, [rsp + 0x30]
call fcn.140014b04
lea rdi, [rbp - 0x20]
xor eax, eax
lea ecx, [rax + 0x27]
rep stosb byte [rdi], al
test r13, r13
je 0x14000c93a
mov rcx, r13
call fcn.140016a28
inc rsi
cmp rsi, r14
jl 0x14000c7fe
test r12, r12
je 0x14000c953
mov rcx, r12
call fcn.140016a28
lea rcx, [rsp + 0x48]
call fcn.140014b04
nop
lea rcx, [rsp + 0x30]
call fcn.1400149a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400149a0
nop
lea rcx, [rsp + 0x38]
call fcn.1400149a0
nop
lea rcx, [rsp + 0x48]
call fcn.1400149a0
nop
lea rcx, [rsp + 0x50]
call fcn.1400149a0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140017020
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret