Function at 0x140055fd0
Capabilities:
Access peb ldr_data
Read .ini file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x1400af118]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x50], rcx
xor eax, eax
mov dword [rsp + 0x30], eax
mov ecx, dword [0x1400b31f0]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x1400b0d50], ecx
jg 0x140056545
mov rax, qword [0x1400b0d48]
cmp dword [rax - 0x10], 0
jne 0x1400564e3
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140054880
nop
xor edx, edx
mov r8d, 0xc8
lea rcx, [rsp + 0x70]
call fcn.140067c70
nop
mov rdi, qword [rsp + 0x40]
lea r15, [rdi - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x140056089
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14005609a
call fcn.14004d720
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400565a4
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x30], 2
lea rax, str.Aliim.ini
mov r12, 0xffffffffffffffff
mov rsi, r12
nop dword [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400560d0
movsxd r13, dword [r15 + 8]
lea r14d, [rsi + r13]
test r14d, r14d
js 0x14005653a
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14005610f
mov edx, r14d
lea rcx, [rsp + 0x58]
call fcn.140057fc0
mov rbx, qword [rsp + 0x58]
add r13, r13
je 0x140056145
test rbx, rbx
je 0x140056135
mov r8, r13
mov rcx, rbx
test rdi, rdi
je 0x14005612e
mov rdx, rdi
call fcn.1400675c0
jmp 0x140056145
xor edx, edx
call fcn.140067c70
call fcn.14006f564
mov dword [rax], 0x16
call fcn.14006c04c
lea rcx, [rbx + r13]
movsxd r8, esi
add r8, r8
je 0x140056174
test rcx, rcx
jne 0x140056168
call fcn.14006f564
mov dword [rax], 0x16
call fcn.14006c04c
jmp 0x140056174
lea rdx, str.Aliim.ini
call fcn.1400675c0
cmp r14d, dword [rbx - 0xc]
jg 0x14005653a
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r13d, r13d
mov word [rbx + rax*2], r13w
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x70]
lea r8, [0x14008fa40]
lea rdx, str.Version
lea rcx, str.Common
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [rsp + 0x30], r13d
mov eax, r12d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400561da
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
lea rcx, [rsp + 0x70]
mov rax, r12
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400561e2
test rax, rax
jne 0x140056265
mov rbx, qword [0x1400b0d48]
add rbx, 0xffffffffffffffe8
cmp r15, rbx
je 0x1400564cb
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x14005624b
mov rax, qword [rbx]
cmp qword [r15], rax
jne 0x14005624b
mov rcx, r15
call fcn.140053640
mov rdi, rax
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x14005623b
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 8]
lea rax, [rdi + 0x18]
mov qword [0x1400b0d48], rax
jmp 0x1400564cb
mov r8d, dword [r15 + 8]
mov rdx, qword [rsp + 0x40]
lea rcx, [0x1400b0d48]
call fcn.14005a2d0
jmp 0x1400564cb
mov rcx, qword [r15]
test rcx, rcx
je 0x14005627b
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14005628c
call fcn.14004d720
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400565af
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x30], 4
lea rax, [rsp + 0x70]
mov rdi, r12
inc rdi
cmp word [rax + rdi*2], 0
jne 0x1400562b4
movsxd r14, dword [r15 + 8]
lea esi, [rdi + r14]
test esi, esi
js 0x14005652f
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400562f0
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.140057fc0
mov rbx, qword [rsp + 0x50]
add r14, r14
je 0x140056326
test rbx, rbx
je 0x140056316
mov rdx, qword [rsp + 0x40]
mov r8, r14
mov rcx, rbx
test rdx, rdx
je 0x140056311
call fcn.1400675c0
jmp 0x140056326
call fcn.140067c70
call fcn.14006f564
mov dword [rax], 0x16
call fcn.14006c04c
lea rcx, [r14 + rbx]
movsxd r8, edi
add r8, r8
je 0x140056353
test rcx, rcx
jne 0x140056349
call fcn.14006f564
mov dword [rax], 0x16
call fcn.14006c04c
jmp 0x140056353
lea rdx, [rsp + 0x70]
call fcn.1400675c0
cmp esi, dword [rbx - 0xc]
jg 0x14005652f
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r13w
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14005637e
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14005638f
call fcn.14004d720
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400565ba
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x48], rdi
mov dword [rsp + 0x30], 0xc
lea rax, [0x14008fc24]
mov rsi, r12
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400563c0
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x38], eax
lea r13d, [rsi + rax]
test r13d, r13d
js 0x1400565c5
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r13d
or eax, ecx
jge 0x140056402
mov edx, r13d
lea rcx, [rsp + 0x48]
call fcn.140057fc0
mov rdi, qword [rsp + 0x48]
movsxd rax, dword [rsp + 0x38]
add rax, rax
mov qword [rsp + 0x38], rax
je 0x14005643b
test rdi, rdi
jne 0x140056428
call fcn.14006f564
mov dword [rax], 0x16
call fcn.14006c04c
jmp 0x140056436
mov r8, rax
mov rdx, rbx
mov rcx, rdi
call fcn.1400675c0
mov rax, qword [rsp + 0x38]
lea rcx, [rax + rdi]
movsxd r8, esi
add r8, r8
je 0x14005646a
test rcx, rcx
jne 0x14005645e
call fcn.14006f564
mov dword [rax], 0x16
call fcn.14006c04c
jmp 0x14005646a
lea rdx, [0x14008fc24]
call fcn.1400675c0
cmp r13d, dword [rdi - 0xc]
jg 0x1400565c5
mov dword [rdi - 0x10], r13d
movsxd rax, r13d
xor ecx, ecx
mov word [rdi + rax*2], cx
lea rdx, [rsp + 0x48]
lea rcx, [0x1400b0d48]
call fcn.140051d40
nop
mov eax, r12d
lock xadd dword [rdi - 8], eax
sub eax, 1
jg 0x1400564af
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
lea rdx, [rdi - 0x18]
call qword [rax + 8]
nop
mov eax, r12d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400564cb
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
lock xadd dword [r15 + 0x10], r12d
sub r12d, 1
jg 0x1400564e3
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
mov rcx, qword [0x1400b0d48]
add rcx, 0xffffffffffffffe8
call fcn.140053640
add rax, 0x18
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rax
mov rax, rcx
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.140065b10
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.1400534d0
nop
mov ecx, 0x80070057
call fcn.1400534d0
nop
lea rcx, [0x1400b0d50]
call fcn.140065628
cmp dword [0x1400b0d50], 0xffffffff
jne 0x140056039
call fcn.14004d720
mov rcx, rax
test rax, rax
jne 0x140056576
mov ecx, 0x80004005
call fcn.1400534d0
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x1400b0d48], rax
lea rcx, [0x14008e250]
call fcn.1400659e0
lea rcx, [0x1400b0d50]
call fcn.1400655c8
jmp 0x140056039
mov ecx, 0x80004005
call fcn.1400534d0
nop
mov ecx, 0x80004005
call fcn.1400534d0
nop
mov ecx, 0x80004005
call fcn.1400534d0
nop
mov ecx, 0x80070057
call fcn.1400534d0
int3