Function at 0x1800cabb0
Capabilities:
Read .ini file

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
mov eax, 0x81c0
call fcn.180124410
sub rsp, rax
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x81f8], rbx
mov qword [rsp + 0x8200], rbp
mov rax, qword [0x1801dc960]
xor rax, rsp
mov qword [rsp + 0x81b0], rax
mov rdi, rcx
mov rdx, qword [0x18028e720]
mov rdx, qword [rdx + 8]
lea rcx, [0x18028e6f0]
call fcn.18008bb70
mov rdx, qword [0x18028e720]
mov qword [rdx + 8], rdx
xor r14d, r14d
mov qword [0x18028e728], r14
mov rax, qword [0x18028e720]
mov qword [rax], rax
mov rax, qword [0x18028e720]
mov qword [rax + 0x10], rax
mov byte [rsp + 0xa0], r14b
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0xa1]
call fcn.1800f4fb0
lea r8d, [r14 + 1]
lea rdx, str.prtdiag.ini
lea rcx, [rsp + 0x50]
call fcn.18001f690
nop
cmp qword [rax + 0x20], 0x10
jb 0x1800cac75
mov rcx, qword [rax + 8]
jmp 0x1800cac79
lea rcx, [rax + 8]
lea rdx, [rsp + 0xa0]
movzx eax, byte [rcx]
mov byte [rdx], al
inc rcx
inc rdx
test al, al
jne 0x1800cac81
cmp qword [rsp + 0x70], 0x10
jb 0x1800caca2
mov rcx, qword [rsp + 0x58]
call fcn.1800f4b9c
mov qword [rsp + 0x70], 0xf
mov qword [rsp + 0x68], r14
mov byte [rsp + 0x58], 0
lea r9, [rsp + 0xa0]
xor r8d, r8d
mov rdx, rdi
lea rcx, str.processlist
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov r13d, eax
cmp eax, 1
jne 0x1800caf11
mov byte [rsp + 0x1b0], 0
xor edx, edx
mov r8d, 0x7ffe
lea rcx, [rsp + 0x1b1]
call fcn.1800f4fb0
lea r9, [rsp + 0xa0]
mov r8d, 0x7fff
lea rdx, [rsp + 0x1b0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
lea rbp, [rsp + 0x1b0]
cmp byte [rsp + 0x1b0], 0
je 0x1800caf0e
nop
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
lea r12, [rcx - 1]
mov rcx, rbp
call fcn.1800fbe7c
mov qword [rsp + 0x48], 0xf
mov qword [rsp + 0x40], r14
mov byte [rsp + 0x30], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbp
lea rcx, [rsp + 0x28]
call fcn.180003700
nop
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x1800caecf
cmp rsi, 1
jb 0x1800caecf
lea rbx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rbx, qword [rsp + 0x30]
mov r8, rsi
mov edx, 0x3d
mov rcx, rbx
call fcn.1800f9d84
mov rdi, rax
test rax, rax
je 0x1800caecf
mov cl, byte [rdi]
cmp cl, byte [0x180156e54]
je 0x1800cadf5
sub rbx, rdi
lea rsi, [rsi + rbx - 1]
lea rbx, [rdi + 1]
mov r8, rsi
mov edx, 0x3d
mov rcx, rbx
call fcn.1800f9d84
mov rdi, rax
test rax, rax
jne 0x1800cadc2
jmp 0x1800caecf
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rax, qword [rsp + 0x30]
sub rdi, rax
cmp edi, 0xffffffff
je 0x1800caecf
movsxd r9, edi
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x28]
call fcn.180004410
nop
lea eax, [rdi + 1]
movsxd r8, eax
or r9, 0xffffffffffffffff
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x28]
call fcn.180004410
nop
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 0x10
cmovae rcx, qword [rsp + 0x80]
call fcn.1800f6d1c
mov edi, eax
lea rdx, [rsp + 0x50]
lea rcx, [0x18028e6f0]
call fcn.1800ca0b0
mov dword [rax], edi
cmp qword [rsp + 0x98], 0x10
jb 0x1800cae8e
mov rcx, qword [rsp + 0x80]
call fcn.1800f4b9c
mov qword [rsp + 0x98], 0xf
mov qword [rsp + 0x90], r14
mov byte [rsp + 0x80], 0
cmp qword [rsp + 0x70], 0x10
jb 0x1800caebc
mov rcx, qword [rsp + 0x58]
call fcn.1800f4b9c
mov qword [rsp + 0x70], 0xf
mov qword [rsp + 0x68], r14
mov byte [rsp + 0x58], 0
lea eax, [r12 + 1]
movsxd rcx, eax
add rbp, rcx
cmp qword [rsp + 0x48], 0x10
jb 0x1800caeec
mov rcx, qword [rsp + 0x30]
call fcn.1800f4b9c
mov qword [rsp + 0x48], 0xf
mov qword [rsp + 0x40], r14
mov byte [rsp + 0x30], 0
cmp byte [rbp], 0
jne 0x1800cad30
mov eax, r13d
jmp 0x1800caf11
mov eax, r13d
mov rcx, qword [rsp + 0x81b0]
xor rcx, rsp
call fcn.1800f4f80
lea r11, [rsp + 0x81c0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret