Function at 0x1401222b0
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x3f0]
sub rsp, 0x4f0
mov rax, qword [0x1402a76c0]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov r12d, r8d
mov r14d, edx
mov rsi, rcx
movups xmm0, xmmword [str.FOLDER_A1]
movaps xmmword [rbp - 0x30], xmm0
mov eax, dword [0x1402610d0]
mov dword [rbp - 0x20], eax
xor edx, edx
mov r8d, 0x1f4
lea rcx, [rbp - 0x1c]
call fcn.1401e7e40
movups xmm0, xmmword [str.FOLDER_A2]
movups xmmword [rbp + 0x1d8], xmm0
mov eax, dword [0x1402610e8]
mov dword [rbp + 0x1e8], eax
xor edx, edx
mov r8d, 0x1f4
lea rcx, [rbp + 0x1ec]
call fcn.1401e7e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
xor r8d, r8d
lea rdx, [0x140251dfc]
lea rcx, [rsp + 0x30]
call fcn.140005520
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
xor r8d, r8d
lea rdx, [0x140251dfc]
lea rcx, [rbp - 0x50]
call fcn.140005520
nop
imul r15, r14, 0x208
lea rdx, [rbp - 0x30]
add rdx, r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1401223b1
lea rcx, [rbp - 0x70]
call fcn.140005520
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, str.DriverFolderName
lea rcx, [rsp + 0x70]
call fcn.140005520
nop
lea rdx, [rsi + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
inc rdi
cmp word [rdx + rdi*2], 0
jne 0x140122403
mov r8, rdi
lea rcx, [rsp + 0x50]
call fcn.140005520
nop
mov r8, qword [rsp + 0x40]
cmp r8, 0x400
jb 0x14012244c
mov qword [rsp + 0x40], 0x400
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
mov word [rax + 0x800], bx
jmp 0x1401224b8
mov edx, 0x400
sub rdx, r8
mov rcx, qword [rsp + 0x48]
mov rax, rcx
sub rax, r8
cmp rdx, rax
ja 0x14012249e
mov qword [rsp + 0x40], 0x400
lea r9, [rsp + 0x30]
cmp rcx, 8
cmovae r9, qword [rsp + 0x30]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x140122493
mov eax, 0x30
movzx eax, ax
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], bx
jmp 0x1401224b8
lfence
mov eax, 0x30
mov word [rsp + 0x20], ax
mov r9, rdx
lea rcx, [rsp + 0x30]
call fcn.1400117c0
lea rax, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rax, qword [rsp + 0x50]
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae r9, qword [rsp + 0x30]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, eax
mov r9, qword [rsp + 0x40]
cmp rcx, r9
ja 0x140122541
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
mov word [rax + rcx*2], bx
jmp 0x14012259e
mov rdx, rcx
sub rdx, r9
mov rdi, qword [rsp + 0x48]
mov rax, rdi
sub rax, r9
cmp rdx, rax
ja 0x140122588
mov qword [rsp + 0x40], rcx
lea r8, [rsp + 0x30]
cmp rdi, 8
cmovae r8, qword [rsp + 0x30]
lea rdi, [r8 + r9*2]
test rdx, rdx
je 0x14012257d
movzx eax, bx
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r9 + rdx]
mov word [r8 + rax*2], bx
jmp 0x14012259e
lfence
mov word [rsp + 0x20], bx
mov r9, rdx
lea rcx, [rsp + 0x30]
call fcn.1400117c0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1401225e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401225db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401227f1
call fcn.1400079c0
movdqa xmm0, xmmword [0x14026f3f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], bx
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140122634
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012262f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401227f7
call fcn.1400079c0
movdqa xmm0, xmmword [0x14026f3f0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], bx
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140122686
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122681
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401227fd
call fcn.1400079c0
movdqa xmm0, xmmword [0x14026f3f0]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], bx
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1401226d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401226d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140122803
call fcn.1400079c0
lea r8, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae r8, qword [rsp + 0x30]
lea rdi, [rsi + 0x640]
add rdi, r15
mov edx, 0x104
mov rcx, rdi
call fcn.1401ebfa8
lea rdx, [0x140251dfc]
mov rcx, rdi
call fcn.1401ecc18
test eax, eax
je 0x140122782
mov edx, 0x5c
mov rcx, rdi
call fcn.1401e71f4
test rax, rax
jne 0x140122734
lea edx, [rax + 0x2f]
mov rcx, rdi
call fcn.1401e71f4
test rax, rax
je 0x140122748
lea r8, [0x140260f4c]
mov edx, 0x104
mov rcx, rdi
call fcn.1401ec614
test r14d, r14d
je 0x140122776
lfence
mov eax, ebx
imul rcx, rax, 0x208
add rcx, 0x640
add rcx, rsi
mov rdx, rdi
call fcn.1401ecc18
test eax, eax
je 0x140122776
inc ebx
cmp ebx, r14d
jb 0x140122750
cmp ebx, r14d
jne 0x140122782
or dword [rsi + 0x63c], r12d
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1401227c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401227bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401227eb
call fcn.1400079c0
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.1401e2900
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1401ec41c
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
int3