Function at 0x140015860
Capabilities:
Read .ini file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c8]
sub rsp, 0x3c8
mov rax, qword [0x140093010]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r14, qword [rbp + 0x330]
mov r15, r9
mov r13, qword [rbp + 0x338]
mov rdi, rdx
mov rsi, qword [rbp + 0x348]
mov r12, rcx
movsxd rbx, r8d
cmp ebx, 0xa
ja 0x140015d4b
mov eax, dword [0x140082ad8]
mov dword [rsp + 0x40], eax
movzx eax, word [0x140082adc]
mov word [rsp + 0x44], ax
xor eax, eax
mov qword [rsp + 0x46], rax
mov word [rsp + 0x4e], ax
mov eax, dword [0x140082ae0]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140082ae4]
mov word [rsp + 0x54], ax
xor eax, eax
mov qword [rsp + 0x56], rax
mov word [rsp + 0x5e], ax
mov eax, dword [0x140082ae8]
mov dword [rsp + 0x60], eax
movzx eax, word [0x140082aec]
mov word [rsp + 0x64], ax
xor eax, eax
mov qword [rsp + 0x66], rax
mov word [rsp + 0x6e], ax
mov eax, dword [0x140082af0]
mov dword [rsp + 0x70], eax
movzx eax, word [0x140082af4]
mov word [rsp + 0x74], ax
xor eax, eax
mov qword [rsp + 0x76], rax
mov word [rsp + 0x7e], ax
mov eax, dword [0x140082af8]
mov dword [rbp - 0x80], eax
movzx eax, word [0x140082afc]
mov word [rbp - 0x7c], ax
xor eax, eax
mov qword [rbp - 0x7a], rax
mov word [rbp - 0x72], ax
mov eax, dword [0x140082b00]
mov dword [rbp - 0x70], eax
movzx eax, word [0x140082b04]
mov word [rbp - 0x6c], ax
xor eax, eax
mov qword [rbp - 0x6a], rax
mov word [rbp - 0x62], ax
mov eax, dword [0x140082b08]
mov dword [rbp - 0x60], eax
movzx eax, word [0x140082b0c]
mov word [rbp - 0x5c], ax
xor eax, eax
mov qword [rbp - 0x5a], rax
mov word [rbp - 0x52], ax
mov eax, dword [0x140082b10]
mov dword [rbp - 0x50], eax
movzx eax, word [0x140082b14]
mov word [rbp - 0x4c], ax
xor eax, eax
mov qword [rbp - 0x4a], rax
mov word [rbp - 0x42], ax
mov eax, dword [0x140082b18]
mov dword [rbp - 0x40], eax
movzx eax, word [0x140082b1c]
mov word [rbp - 0x3c], ax
xor eax, eax
mov qword [rbp - 0x3a], rax
mov word [rbp - 0x32], ax
mov eax, dword [0x140082b20]
mov dword [rbp - 0x30], eax
movzx eax, word [0x140082b24]
mov word [rbp - 0x2c], ax
xor eax, eax
mov qword [rbp - 0x2a], rax
mov word [rbp - 0x22], ax
mov eax, dword [0x140082b28]
mov dword [rbp - 0x20], eax
movzx eax, word [0x140082b2c]
mov word [rbp - 0x1c], ax
xor eax, eax
mov qword [rbp - 0x1a], rax
mov word [rbp - 0x12], ax
test rcx, rcx
je 0x140015d70
movups xmm0, xmmword [str.Wallpaper]
mov eax, dword [0x140081a28]
movsd xmm1, qword [0x140081a40]
mov dword [rbp], eax
xor eax, eax
mov qword [rbp + 4], rax
mov qword [rbp + 0xc], rax
mov qword [rbp + 0x14], rax
mov qword [rbp + 0x1c], rax
mov qword [rbp + 0x24], rax
mov dword [rbp + 0x2c], eax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rax
movzx eax, word [0x140081a60]
movaps xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [str.Screensaver]
mov word [rbp + 0x88], ax
xor eax, eax
mov qword [rbp + 0x8a], rax
movaps xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [str.HighContrast]
mov qword [rbp + 0x92], rax
mov qword [rbp + 0x9a], rax
mov qword [rbp + 0xa2], rax
mov dword [rbp + 0xaa], eax
mov word [rbp + 0xae], ax
mov eax, dword [0x140081a78]
movaps xmmword [rbp + 0x70], xmm0
movups xmm0, xmmword [str.Bookmarks]
mov dword [rbp + 0xc0], eax
xor eax, eax
mov qword [rbp + 0xc4], rax
movaps xmmword [rbp + 0xb0], xmm0
movups xmm0, xmmword [str.Timezone]
mov qword [rbp + 0xcc], rax
mov qword [rbp + 0xd4], rax
mov qword [rbp + 0xdc], rax
mov qword [rbp + 0xe4], rax
mov dword [rbp + 0xec], eax
movzx eax, word [0x140081a90]
movaps xmmword [rbp + 0xf0], xmm0
movups xmm0, xmmword [str.WiFiProfile]
mov word [rbp + 0x100], ax
xor eax, eax
movsd qword [rbp + 0x40], xmm1
movsd xmm1, qword [0x140081a58]
movaps xmmword [rbp + 0x130], xmm0
movups xmm0, xmmword [str.LANProxy]
mov qword [rbp + 0x102], rax
movsd qword [rbp + 0x80], xmm1
movsd xmm1, qword [0x140081aa8]
mov qword [rbp + 0x10a], rax
mov qword [rbp + 0x112], rax
mov qword [rbp + 0x11a], rax
mov qword [rbp + reloc.api_ms_win_shell_shdirectory_l1_1_0.dll_Ordinal_290], rax
mov dword [rbp + 0x12a], eax
mov word [rbp + 0x12e], ax
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
movzx eax, word [0x140081ac0]
movaps xmmword [rbp + 0x170], xmm0
movups xmm0, xmmword [str.NetworkDrive]
mov word [rbp + 0x180], ax
xor eax, eax
movsd qword [rbp + 0x140], xmm1
movsd xmm1, qword [0x140081ad8]
movaps xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x182], rax
mov qword [rbp + 0x18a], rax
mov qword [rbp + 0x192], rax
mov qword [rbp + 0x19a], rax
mov qword [rbp + 0x1a2], rax
mov dword [rbp + 0x1aa], eax
mov word [rbp + 0x1ae], ax
movsd qword [rbp + 0x1c0], xmm1
movzx eax, word [0x140081ae0]
lea rdx, [rbp - 0x10]
movups xmm0, xmmword [str.Keyboard]
xor ecx, ecx
mov word [rbp + 0x1c8], ax
xor eax, eax
mov qword [rbp + 0x284], rcx
mov qword [rbp + 0x1ca], rax
mov r9, r12
mov qword [rbp + 0x1d2], rax
xor r8d, r8d
mov qword [rbp + 0x1da], rax
mov qword [rbp + 0x1e2], rax
mov dword [rbp + 0x1ea], eax
mov word [rbp + 0x1ee], ax
movzx eax, word [0x140081af8]
mov word [rbp + 0x200], ax
xor eax, eax
mov qword [rbp + 0x202], rax
mov qword [rbp + 0x20a], rax
mov qword [rbp + 0x212], rax
mov qword [rbp + 0x21a], rax
mov qword [rbp + 0x222], rax
mov dword [rbp + 0x22a], eax
mov word [rbp + 0x22e], ax
mov eax, dword [0x140081b08]
mov qword [rbp + 0x28c], rcx
mov qword [rbp + 0x294], rcx
mov qword [rbp + 0x29c], rcx
mov qword [rbp + 0x2a4], rcx
mov dword [rbp + 0x2ac], ecx
mov rcx, rbx
movaps xmmword [rbp + 0x1f0], xmm0
movsd xmm0, qword [str.Mouse]
mov dword [rbp + 0x238], eax
xor eax, eax
shl rcx, 6
movsd qword [rbp + 0x230], xmm0
add rdx, rcx
movups xmm0, xmmword [str.PowerPlan]
mov qword [rbp + 0x23c], rax
lea rcx, str.SystemSetting
mov qword [rbp + 0x244], rax
mov qword [rbp + 0x24c], rax
mov qword [rbp + 0x254], rax
mov qword [rbp + 0x25c], rax
mov qword [rbp + 0x264], rax
mov dword [rbp + 0x26c], eax
mov eax, dword [0x140081b20]
mov dword [rbp + 0x280], eax
movaps xmmword [rbp + 0x270], xmm0
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileIntW]
cmp eax, 1
je 0x140015de6
xor eax, eax
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.14001f4e0
add rsp, 0x3c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test rdi, rdi
je 0x140015d4d
xor edx, edx
lea rcx, [rbp - 0x10]
mov r8d, 0x208
call fcn.140043ce0
lea rcx, [rsp + 0x40]
mov rax, rbx
shl rax, 4
lea r8, str._sSS_s
add rax, rcx
mov r9, rdi
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov edx, 0x104
call fcn.1400032c0
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000080
xor r8d, r8d
mov dword [rsp + 0x20], 3
xor edx, edx
lea rcx, [rbp - 0x10]
call fcn.140006030
cmp rax, 0xffffffffffffffff
je 0x140015d4b
mov rcx, rax
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test r15, r15
je 0x140015e1b
test rdi, rdi
je 0x140015e1b
lea rcx, [rsp + 0x40]
mov rax, rbx
shl rax, 4
lea r8, str._sSS_s
add rax, rcx
mov r9, rdi
mov rcx, r15
mov qword [rsp + 0x20], rax
mov edx, 0x104
call fcn.1400032c0
test r14, r14
je 0x140015e3c
mov rax, rbx
lea r8, [rsp + 0x40]
shl rax, 4
mov edx, 0x104
add r8, rax
mov rcx, r14
call fcn.140049578
test r13, r13
je 0x140016167
movups xmm0, xmmword [str.Wallpaper]
mov eax, dword [0x140081a28]
movsd xmm1, qword [0x140081a40]
mov dword [rbp], eax
xor eax, eax
mov qword [rbp + 4], rax
mov qword [rbp + 0xc], rax
mov qword [rbp + 0x14], rax
mov qword [rbp + 0x1c], rax
mov qword [rbp + 0x24], rax
mov dword [rbp + 0x2c], eax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rax
movzx eax, word [0x140081a60]
movaps xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [str.Screensaver]
mov word [rbp + 0x88], ax
xor eax, eax
mov qword [rbp + 0x8a], rax
movaps xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [str.HighContrast]
mov qword [rbp + 0x92], rax
mov qword [rbp + 0x9a], rax
mov qword [rbp + 0xa2], rax
mov dword [rbp + 0xaa], eax
mov word [rbp + 0xae], ax
mov eax, dword [0x140081a78]
movaps xmmword [rbp + 0x70], xmm0
movups xmm0, xmmword [str.Bookmarks]
mov dword [rbp + 0xc0], eax
xor eax, eax
mov qword [rbp + 0xc4], rax
movaps xmmword [rbp + 0xb0], xmm0
movups xmm0, xmmword [str.Timezone]
mov qword [rbp + 0xcc], rax
mov qword [rbp + 0xd4], rax
mov qword [rbp + 0xdc], rax
mov qword [rbp + 0xe4], rax
mov dword [rbp + 0xec], eax
movzx eax, word [0x140081a90]
movaps xmmword [rbp + 0xf0], xmm0
movups xmm0, xmmword [str.WiFiProfile]
mov word [rbp + 0x100], ax
xor eax, eax
movsd qword [rbp + 0x40], xmm1
movsd xmm1, qword [0x140081a58]
movaps xmmword [rbp + 0x130], xmm0
movups xmm0, xmmword [str.LANProxy]
mov qword [rbp + 0x102], rax
movsd qword [rbp + 0x80], xmm1
movsd xmm1, qword [0x140081aa8]
mov qword [rbp + 0x10a], rax
mov qword [rbp + 0x112], rax
mov qword [rbp + 0x11a], rax
mov qword [rbp + reloc.api_ms_win_shell_shdirectory_l1_1_0.dll_Ordinal_290], rax
mov dword [rbp + 0x12a], eax
mov word [rbp + 0x12e], ax
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
movzx eax, word [0x140081ac0]
movaps xmmword [rbp + 0x170], xmm0
movups xmm0, xmmword [str.NetworkDrive]
mov word [rbp + 0x180], ax
xor eax, eax
movsd qword [rbp + 0x140], xmm1
movsd xmm1, qword [0x140081ad8]
movaps xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x182], rax
mov qword [rbp + 0x18a], rax
mov qword [rbp + 0x192], rax
mov qword [rbp + 0x19a], rax
mov qword [rbp + 0x1a2], rax
mov dword [rbp + 0x1aa], eax
mov word [rbp + 0x1ae], ax
movsd qword [rbp + 0x1c0], xmm1
movzx eax, word [0x140081ae0]
lea r8, [rbp - 0x10]
movups xmm0, xmmword [str.Keyboard]
mov word [rbp + 0x1c8], ax
mov edx, 0x104
xor eax, eax
mov rcx, r13
mov qword [rbp + 0x1ca], rax
mov qword [rbp + 0x1d2], rax
mov qword [rbp + 0x1da], rax
mov qword [rbp + 0x1e2], rax
mov dword [rbp + 0x1ea], eax
mov word [rbp + 0x1ee], ax
movzx eax, word [0x140081af8]
mov word [rbp + 0x200], ax
xor eax, eax
mov qword [rbp + 0x202], rax
mov qword [rbp + 0x20a], rax
mov qword [rbp + 0x212], rax
mov qword [rbp + 0x21a], rax
mov qword [rbp + 0x222], rax
mov dword [rbp + 0x22a], eax
mov word [rbp + 0x22e], ax
mov eax, dword [0x140081b08]
mov dword [rbp + 0x238], eax
xor eax, eax
mov qword [rbp + 0x23c], rax
mov qword [rbp + 0x244], rax
mov qword [rbp + 0x24c], rax
mov qword [rbp + 0x254], rax
mov qword [rbp + 0x25c], rax
mov qword [rbp + 0x264], rax
mov dword [rbp + 0x26c], eax
mov eax, dword [0x140081b20]
mov dword [rbp + 0x280], eax
xor eax, eax
movaps xmmword [rbp + 0x1f0], xmm0
movsd xmm0, qword [str.Mouse]
mov qword [rbp + 0x284], rax
mov qword [rbp + 0x28c], rax
mov qword [rbp + 0x294], rax
mov qword [rbp + 0x29c], rax
mov qword [rbp + 0x2a4], rax
mov dword [rbp + 0x2ac], eax
mov rax, rbx
movsd qword [rbp + 0x230], xmm0
movups xmm0, xmmword [str.PowerPlan]
shl rax, 6
add r8, rax
movaps xmmword [rbp + 0x270], xmm0
call fcn.140049578
test rsi, rsi
je 0x1400161ca
test r12, r12
je 0x1400161d4
movdqa xmm0, xmmword [0x140083fe0]
movdqa xmm1, xmmword [0x140084010]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm0, xmmword [0x140083ff0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm0, xmmword [0x140084000]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm1, xmmword [0x140083fd0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmmword [rsp + 0x70], xmm1
mov qword [rbp - 0x70], 0x40
mov rax, qword [rsp + rbx*8 + 0x40]
shl rax, 0xa
mov qword [rsi], rax
mov eax, 1
jmp 0x140015d4d
test rdi, rdi
je 0x1400161ca
xor edx, edx
lea rcx, [rbp - 0x10]
mov r8d, 0x208
call fcn.140043ce0
lea rcx, [rsp + 0x40]
shl rbx, 4
add rcx, rbx
lea r8, str._sSS_s
mov qword [rsp + 0x20], rcx
mov r9, rdi
lea rcx, [rbp - 0x10]
mov edx, 0x104
call fcn.1400032c0
lea rcx, [rbp - 0x10]
call fcn.140005a90
mov qword [rsi], rax
mov eax, 1
jmp 0x140015d4d