Function at 0x14004ed20
Capabilities:
Read .ini file

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x4b0], rbx
mov rax, qword [0x140092690]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov r14, r9
mov rdi, r8
mov rbx, rdx
mov qword [rsp + 0x58], r9
mov rsi, qword [rbp + 0x3d0]
lea r15, vtable.CEncrypter.0
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
lea rdx, str.WLAN_PROFILE
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_1507]
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x170]
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rbx, rax
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rcx, rax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rbp + 0x170]
lea r8, [0x14006508d]
lea rdx, str.Dot1xPassword
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov r9d, 2
lea r8, [0x14006508d]
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x60]
call sym.iconvrtr.exe_public:_char_const____ptr64___cdecl_CEncrypter::DecryptValue_char_const____ptr64__char_const____ptr64__int____ptr64
or r9, 0xffffffffffffffff
mov r8, rax
mov edx, 0x200
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
mov edx, reloc.OLEAUT32.dll_SetErrorInfo
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea rdx, [rbp + 0x170]
add rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140011270
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1507]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
lea rcx, [rsi + 0x11c]
or r9, 0xffffffffffffffff
mov r8, rax
lea edx, [r9 + 0x65]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1507]
mov edx, reloc.OLEAUT32.dll_SetErrorInfo
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov r8, rax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_8025]
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1504]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_5656]
inc eax
movsxd rbx, eax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
mov dword [rsp + 0x20], 2
lea r9, [0x14006508d]
mov r8, rbx
lea rcx, [rsp + 0x60]
call sym.iconvrtr.exe_public:_char_const____ptr64___cdecl_CEncrypter::DecryptString_char_const____ptr64__unsigned_long_long_unsigned___int64___char_const____ptr64__int____ptr64
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1507]
mov rdx, r14
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc140.dll_Ordinal_1504]
lea rdx, [rsi + 0xab8]
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc140.dll_Ordinal_1674]
cmp dword [rbp + 0x3d8], 0
je 0x14004efa5
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x14004efa5
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov qword [rsp + 0x60], r15
mov rcx, r14
call qword [sym.imp.mfc140.dll_Ordinal_1032]
mov eax, 0x800432a4
jmp 0x14004efdc
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov qword [rsp + 0x60], r15
mov rcx, r14
call qword [sym.imp.mfc140.dll_Ordinal_1032]
mov eax, 0x43297
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.140059ef0
mov rbx, qword [rsp + 0x4b0]
add rsp, 0x480
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret