Function at 0x410322c0
Capabilities:
Read .ini file

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
sub rsp, 0x6c0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rax, qword [0x41359af8]
xor rax, rsp
mov qword [rsp + 0x6b0], rax
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ebx, ebx
mov rcx, qword [0x4135c008]
test rcx, rcx
jne 0x41032343
lea ecx, [rbx + 8]
call fcn.41211580
mov qword [rsp + 0x20], rax
test rax, rax
je 0x41032339
mov rcx, rax
call fcn.41097220
mov rcx, rax
jmp 0x4103233c
mov rcx, rbx
mov qword [0x4135c008], rcx
mov rax, qword [rcx]
mov edx, 0x68
call qword [rax]
mov r12d, eax
test eax, eax
je 0x41032912
mov rax, qword [0x4135c018]
test rax, rax
jne 0x4103238c
mov ecx, 0x2d0
call fcn.41211580
mov qword [rsp + 0x20], rax
test rax, rax
je 0x41032382
mov rcx, rax
call fcn.410228e0
jmp 0x41032385
mov rax, rbx
mov qword [0x4135c018], rax
mov rcx, rax
call fcn.4102a770
mov rbp, rax
mov edx, 7
mov qword [rsp + 0x60], rdx
mov r8, rbx
mov qword [rsp + 0x58], rbx
mov word [rsp + 0x48], r8w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbp
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rsi, rcx
movabs rax, 0x7ffffffffffffffe
cmp rcx, rax
jbe 0x410323e3
call fcn.4120fbc0
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
cmp rdx, rsi
jae 0x410323fc
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.41022ab0
mov rdx, qword [rsp + 0x60]
jmp 0x4103241a
test rsi, rsi
jne 0x4103241a
mov qword [rsp + 0x58], rbx
lea rax, [rsp + 0x48]
cmp rdx, 8
cmovae rax, qword [rsp + 0x48]
mov word [rax], si
jmp 0x4103245c
test rsi, rsi
je 0x4103245c
lea rcx, [rsp + 0x48]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x48]
lea rdi, [rsi + rsi]
add rdx, rdx
mov r9, rdi
mov r8, rbp
call fcn.412118b0
mov qword [rsp + 0x58], rsi
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rax, qword [rsp + 0x48]
mov word [rdi + rax], 0
mov r8d, 6
lea rdx, str.Config
lea rcx, [rsp + 0x40]
call fcn.41022fe0
mov r8d, 1
lea rdx, [0x4129a2c0]
lea rcx, [rsp + 0x40]
call fcn.41022fe0
mov r8d, 0xe
lea rdx, str.UseVestige.ini
lea rcx, [rsp + 0x40]
call fcn.41022fe0
lea r13, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r13, qword [rsp + 0x48]
mov r9, r13
or r8d, 0xffffffff
lea rdx, str.LastUpdDay
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ebp, eax
mov r9, r13
or r8d, 0xffffffff
lea rdx, str.SoftUpdHour
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, eax
mov r9, r13
or r8d, 0xffffffff
lea rdx, str.SoftUpdMinute
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov esi, eax
cmp edi, 0xffffffff
je 0x41032517
cmp eax, 0xffffffff
jne 0x410325de
mov edx, 0x11
lea ecx, [rdx - 9]
call fcn.41035af0
mov edi, eax
mov word [rsp + 0x290], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x292]
call fcn.412121c0
mov r8d, edi
lea rdx, [0x412cafe4]
lea rcx, [rsp + 0x290]
call fcn.412122b0
mov r9, r13
lea r8, [rsp + 0x290]
lea rdx, str.SoftUpdHour
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, 0x3c
xor ecx, ecx
call fcn.41035af0
mov esi, eax
mov word [rsp + 0x80], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x82]
call fcn.412121c0
mov r8d, esi
lea rdx, [0x412cafe4]
lea rcx, [rsp + 0x80]
call fcn.412122b0
mov r9, r13
lea r8, [rsp + 0x80]
lea rdx, str.SoftUpdMinute
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
movzx eax, word [rsp + 0x2e]
cmp ebp, eax
jne 0x41032602
cmp qword [rsp + 0x60], 8
jb 0x41032912
mov rcx, qword [rsp + 0x48]
call fcn.41210d60
jmp 0x41032912
add eax, 0xffffffff
cmp eax, ebp
jne 0x41032629
movzx eax, word [rsp + 0x30]
cmp eax, edi
jne 0x41032621
movzx eax, word [rsp + 0x32]
cmp eax, esi
jl 0x41032900
jmp 0x41032629
cmp eax, edi
jle 0x41032900
mov word [rsp + 0x4a0], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x4a2]
call fcn.412121c0
mov word [rsp + 0x80], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x82]
call fcn.412121c0
mov word [rsp + 0x290], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x292]
call fcn.412121c0
mov rax, qword [0x4135c018]
test rax, rax
jne 0x410326ba
mov ecx, 0x2d0
call fcn.41211580
mov qword [rsp + 0x20], rax
test rax, rax
je 0x410326b0
mov rcx, rax
call fcn.410228e0
jmp 0x410326b3
mov rax, rbx
mov qword [0x4135c018], rax
mov rcx, rax
call fcn.4102a750
lea rdx, [rsp + 0x290]
nop
nop
movzx ecx, word [rax]
mov word [rdx], cx
add rax, 2
add rdx, 2
test cx, cx
jne 0x410326d0
lea rdi, [rsp + 0x290]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov rax, qword [str.SCUpd.exe]
mov qword [rdi - 2], rax
mov rax, qword [0x4129a868]
mov qword [rdi + 6], rax
mov eax, dword [0x4129a870]
mov dword [rdi + 0xe], eax
lea rdi, [rsp + 0x4a0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov eax, dword [0x4129a714]
mov dword [rdi - 2], eax
lea rdi, [rsp + 0x4a0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
lea rdx, [rsp + 0x290]
xor ecx, ecx
nop
nop
movzx eax, word [rdx + rcx]
mov word [rdi + rcx - 2], ax
add rcx, 2
test ax, ax
jne 0x41032750
lea rdi, [rsp + 0x4a0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov eax, dword [0x4129a854]
mov dword [rdi - 2], eax
movzx eax, word [0x4129a858]
mov word [rdi + 2], ax
cmp r12d, 1
jne 0x410327bb
lea rcx, [0x41000000]
nop
nop
nop
movzx eax, word [rbx + rcx + 0x29a840]
mov word [rsp + rbx + 0x80], ax
add rbx, 2
test ax, ax
jne 0x410327a0
jmp 0x41032819
cmp r12d, 2
jne 0x410327eb
lea rcx, [0x41000000]
nop
nop
movzx eax, word [rbx + rcx + 0x29a830]
mov word [rsp + rbx + 0x80], ax
add rbx, 2
test ax, ax
jne 0x410327d0
jmp 0x41032819
lea rcx, [0x41000000]
nop
nop
nop
nop
movzx eax, word [rbx + rcx + 0x29a830]
mov word [rsp + rbx + 0x80], ax
add rbx, 2
test ax, ax
jne 0x41032800
lea rdi, [rsp + 0x4a0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
lea rdx, [rsp + 0x80]
xor ecx, ecx
nop
nop
nop
movzx eax, word [rdx + rcx]
mov word [rdi + rcx - 2], ax
add rcx, 2
test ax, ax
jne 0x41032840
lea rcx, [rsp + 0x290]
call fcn.41036010
test eax, eax
je 0x41032878
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x4a0]
call fcn.4103a4d0
mov word [rsp + 0x68], 0
xor eax, eax
mov qword [rsp + 0x6a], rax
mov qword [rsp + 0x72], rax
mov word [rsp + 0x7a], ax
movzx r8d, word [rsp + 0x2e]
lea rdx, [0x412cafe4]
lea rcx, [rsp + 0x68]
call fcn.412122b0
mov r9, r13
lea r8, [0x4129a828]
lea rdx, str.SoftUpdHour
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov r9, r13
lea r8, [0x4129a828]
lea rdx, str.SoftUpdMinute
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov r9, r13
lea r8, [rsp + 0x68]
lea rdx, str.LastUpdDay
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
nop
cmp qword [rsp + 0x60], 8
jb 0x41032912
mov rcx, qword [rsp + 0x48]
call fcn.41210d60
mov rcx, qword [rsp + 0x6b0]
xor rcx, rsp
call fcn.41211b80
lea r11, [rsp + 0x6c0]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret