Function at 0x140009000
Capabilities:
Read .ini file

Disassembly:
push rbp
push rdi
push r13
lea rbp, [rsp - 0x830]
sub rsp, 0x930
mov rax, qword [0x140067010]
xor rax, rsp
mov qword [rbp + 0x7f0], rax
lea r13, [0x14006aef8]
mov r8d, 0xffffffff
mov r9, r13
lea rdx, str.force
lea rcx, str.Main
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileIntW]
cmp eax, 1
je 0x140009a74
mov r9, r13
lea rdx, str.argument
mov r8d, 0xffffffff
lea rcx, str.Main
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileIntW]
xor edi, edi
test eax, eax
cmovg edi, eax
cmp edi, 0x8000000
je 0x140009a74
mov qword [rsp + 0x958], rsi
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x960], r12
mov qword [rsp + 0x928], r14
mov qword [rsp + 0x920], r15
movaps xmmword [rsp + 0x910], xmm6
movaps xmmword [rsp + 0x900], xmm7
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemTime]
movdqa xmm0, xmmword [0x14005de90]
lea r9, [rsp + 0x70]
mov r14d, 1
lea rdx, [rbp - 0x80]
mov ecx, r14d
mov r8d, 4
movdqu xmmword [rbp - 0x80], xmm0
call fcn.140009aa0
test eax, eax
je 0x1400090f0
or edi, r14d
nop
movdqa xmm0, xmmword [0x14005dea0]
lea r9, [rsp + 0x70]
mov r8d, 4
lea rdx, [rbp - 0x80]
movdqu xmmword [rbp - 0x80], xmm0
lea ecx, [r8 - 2]
call fcn.140009aa0
test eax, eax
je 0x14000911c
or edi, 2
mov r8d, 3
mov dword [rbp - 0x68], 8
mov ecx, r8d
mov dword [rbp - 0x64], 9
lea r9, [rsp + 0x70]
mov dword [rbp - 0x60], 0xa
lea rdx, [rbp - 0x68]
call fcn.140009aa0
test eax, eax
je 0x14000914f
or edi, 4
movdqa xmm0, xmmword [0x14005deb0]
lea r9, [rsp + 0x70]
mov r8d, 5
mov dword [rbp - 0x70], 0xf
lea rdx, [rbp - 0x80]
movdqu xmmword [rbp - 0x80], xmm0
lea ecx, [r8 - 1]
call fcn.140009aa0
test eax, eax
je 0x140009182
or edi, 8
xor edx, edx
mov qword [rsp + 0x950], rbx
mov r8d, 0x208
mov dword [rbp - 0x68], 0x10
lea rcx, [rbp + 0x3d0]
mov dword [rbp - 0x64], 0x11
mov dword [rbp - 0x60], 0x12
call fcn.140034ac0
lea r8, str.connectivity
mov edx, 0x104
lea rcx, [rbp + 0x3d0]
call fcn.140036978
xor edx, edx
lea rcx, [rbp - 0x50]
mov r8d, 0x208
call fcn.140034ac0
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], r13
lea r8, [0x14005693c]
mov dword [rsp + 0x20], 0x104
lea rdx, [rbp + 0x3d0]
lea rcx, str.Main
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileStringW]
movzx eax, word [rbp - 0x50]
movabs r12, 0x8000000000000000
cmp ax, word [0x14005693c]
movsd xmm7, qword [0x14005de48]
movsd xmm6, qword [0x14005de60]
je 0x14000930c
lea rax, [rbp - 0x72]
mov qword [rsp + 0x40], rax
lea r9, [rbp - 0x7e]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x80]
lea rax, [rbp - 0x76]
mov qword [rsp + 0x30], rax
lea rdx, str._hu__hu__hu__hu:_hu:_hu:_hu
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x50]
lea rax, [rbp - 0x7a]
mov qword [rsp + 0x20], rax
call fcn.140009f20
mov ebx, dword [0x14006b100]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x140009304
mov rax, qword [rsp + 0x58]
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
xor edx, edx
divsd xmm0, xmm7
comisd xmm0, xmm6
jb 0x1400092d8
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x1400092d8
mov rdx, r12
cvttsd2si rcx, xmm0
add rcx, rdx
lea rdx, [rsp + 0x58]
add rax, rcx
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x58], eax
shr rax, 0x20
mov dword [rsp + 0x5c], eax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, r14d
jne 0x14000930c
mov eax, r14d
jmp 0x14000947e
xor ebx, ebx
nop
xor edx, edx
lea rcx, [rbp + 0x5e0]
mov r8d, 0x208
call fcn.140034ac0
mov ecx, dword [rbp + rbx*4 - 0x68]
lea rdx, [rbp + 0x5e0]
call fcn.140007660
test eax, eax
je 0x14000946f
xor edx, edx
lea rcx, [rbp + 0x1c0]
mov r8d, 0x208
call fcn.140034ac0
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], r13
lea r8, [0x14005693c]
mov dword [rsp + 0x20], 0x104
lea rdx, str.time
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileStringW]
movzx eax, word [rbp + 0x1c0]
cmp ax, word [0x14005693c]
je 0x14000946f
lea rax, [rbp - 0x72]
mov qword [rsp + 0x40], rax
lea r9, [rbp - 0x7e]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x80]
lea rax, [rbp - 0x76]
mov qword [rsp + 0x30], rax
lea rdx, str._hu__hu__hu__hu:_hu:_hu:_hu
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x1c0]
lea rax, [rbp - 0x7a]
mov qword [rsp + 0x20], rax
call fcn.140009f20
mov esi, dword [0x14006b100]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x140009304
mov rax, qword [rsp + 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rsi
xor edx, edx
divsd xmm0, xmm7
comisd xmm0, xmm6
jb 0x14000943f
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x14000943f
mov rdx, r12
cvttsd2si rcx, xmm0
add rcx, rdx
lea rdx, [rsp + 0x50]
add rax, rcx
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, r14d
je 0x140009304
inc rbx
cmp rbx, 3
jl 0x140009310
xor eax, eax
movdqa xmm0, xmmword [0x14005dec0]
lea rcx, [rbp + 0x5e0]
mov r15d, edi
mov dword [rbp - 0x58], 0x17
or r15d, 0x10
mov r8d, 0x208
test eax, eax
movdqu xmmword [rbp - 0x68], xmm0
cmove r15d, edi
xor edx, edx
call fcn.140034ac0
lea r8, str.inputdevicesettings
mov edx, 0x104
lea rcx, [rbp + 0x5e0]
call fcn.140036978
xor edx, edx
lea rcx, [rbp + 0x1c0]
mov r8d, 0x208
call fcn.140034ac0
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], r13
lea r8, [0x14005693c]
mov dword [rsp + 0x20], 0x104
lea rdx, [rbp + 0x5e0]
lea rcx, str.Main
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileStringW]
movzx eax, word [rbp + 0x1c0]
cmp ax, word [0x14005693c]
je 0x1400095fe
lea rax, [rbp - 0x72]
mov qword [rsp + 0x40], rax
lea r9, [rbp - 0x7e]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x80]
lea rax, [rbp - 0x76]
mov qword [rsp + 0x30], rax
lea rdx, str._hu__hu__hu__hu:_hu:_hu:_hu
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x1c0]
lea rax, [rbp - 0x7a]
mov qword [rsp + 0x20], rax
call fcn.140009f20
mov ebx, dword [0x14006b100]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x1400095f6
mov rax, qword [rsp + 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
xor edx, edx
divsd xmm0, xmm7
comisd xmm0, xmm6
jb 0x1400095ca
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x1400095ca
mov rdx, r12
cvttsd2si rcx, xmm0
add rcx, rdx
lea rdx, [rsp + 0x50]
add rax, rcx
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, r14d
jne 0x1400095fe
mov eax, r14d
jmp 0x140009762
xor ebx, ebx
xor edx, edx
lea rcx, [rbp + 0x3d0]
mov r8d, 0x208
call fcn.140034ac0
mov ecx, dword [rbp + rbx*4 - 0x68]
lea rdx, [rbp + 0x3d0]
call fcn.140007660
test eax, eax
je 0x140009753
xor edx, edx
lea rcx, [rbp - 0x50]
mov r8d, 0x208
call fcn.140034ac0
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], r13
lea r8, [0x14005693c]
mov dword [rsp + 0x20], 0x104
lea rdx, str.time
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileStringW]
movzx eax, word [rbp - 0x50]
cmp ax, word [0x14005693c]
je 0x140009753
lea rax, [rbp - 0x72]
mov qword [rsp + 0x40], rax
lea r9, [rbp - 0x7e]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x80]
lea rax, [rbp - 0x76]
mov qword [rsp + 0x30], rax
lea rdx, str._hu__hu__hu__hu:_hu:_hu:_hu
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x50]
lea rax, [rbp - 0x7a]
mov qword [rsp + 0x20], rax
call fcn.140009f20
mov edi, dword [0x14006b100]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x1400095f6
mov rax, qword [rsp + 0x58]
xorps xmm0, xmm0
cvtsi2sd xmm0, rdi
xor edx, edx
divsd xmm0, xmm7
comisd xmm0, xmm6
jb 0x140009723
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140009723
mov rdx, r12
cvttsd2si rcx, xmm0
add rcx, rdx
lea rdx, [rsp + 0x58]
add rax, rcx
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x58], eax
shr rax, 0x20
mov dword [rsp + 0x5c], eax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, r14d
je 0x1400095f6
inc rbx
cmp rbx, 5
jl 0x140009600
xor eax, eax
mov esi, r15d
mov dword [rsp + 0x58], 0x18
or esi, 0x20
lea rcx, [rbp + 0x5e0]
test eax, eax
mov r8d, 0x208
cmove esi, r15d
xor edx, edx
call fcn.140034ac0
lea r8, str.privacysecurity
mov edx, 0x104
lea rcx, [rbp + 0x5e0]
call fcn.140036978
xor edx, edx
lea rcx, [rbp + 0x1c0]
mov r8d, 0x208
call fcn.140034ac0
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], r13
lea r8, [0x14005693c]
mov dword [rsp + 0x20], 0x104
lea rdx, [rbp + 0x5e0]
lea rcx, str.Main
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileStringW]
movzx eax, word [rbp + 0x1c0]
cmp ax, word [0x14005693c]
mov r15, qword [rsp + 0x920]
je 0x1400098dd
lea rax, [rbp - 0x72]
mov qword [rsp + 0x40], rax
lea r9, [rbp - 0x7e]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x80]
lea rax, [rbp - 0x76]
mov qword [rsp + 0x30], rax
lea rdx, str._hu__hu__hu__hu:_hu:_hu:_hu
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x1c0]
lea rax, [rbp - 0x7a]
mov qword [rsp + 0x20], rax
call fcn.140009f20
mov ebx, dword [0x14006b100]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x140009a37
mov rax, qword [rsp + 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
xor edx, edx
divsd xmm0, xmm7
comisd xmm0, xmm6
jb 0x1400098ad
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x1400098ad
mov rdx, r12
cvttsd2si rcx, xmm0
add rcx, rdx
lea rdx, [rsp + 0x50]
add rax, rcx
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, r14d
je 0x140009a37
xor ebx, ebx
nop
xor edx, edx
lea rcx, [rbp + 0x3d0]
mov r8d, 0x208
call fcn.140034ac0
mov ecx, dword [rsp + rbx*4 + 0x58]
lea rdx, [rbp + 0x3d0]
call fcn.140007660
test eax, eax
je 0x140009a28
xor edx, edx
lea rcx, [rbp - 0x50]
mov r8d, 0x208
call fcn.140034ac0
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], r13
lea r8, [0x14005693c]
mov dword [rsp + 0x20], 0x104
lea rdx, str.time
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_GetPrivateProfileStringW]
movzx eax, word [rbp - 0x50]
cmp ax, word [0x14005693c]
je 0x140009a28
lea rax, [rbp - 0x72]
mov qword [rsp + 0x40], rax
lea r9, [rbp - 0x7e]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x80]
lea rax, [rbp - 0x76]
mov qword [rsp + 0x30], rax
lea rdx, str._hu__hu__hu__hu:_hu:_hu:_hu
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x50]
lea rax, [rbp - 0x7a]
mov qword [rsp + 0x20], rax
call fcn.140009f20
mov edi, dword [0x14006b100]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x140009a37
mov rax, qword [rsp + 0x60]
xorps xmm0, xmm0
cvtsi2sd xmm0, rdi
xor edx, edx
divsd xmm0, xmm7
comisd xmm0, xmm6
jb 0x1400099fd
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x1400099fd
mov rdx, r12
cvttsd2si rcx, xmm0
add rcx, rdx
lea rdx, [rsp + 0x60]
add rax, rcx
lea rcx, [rbp - 0x68]
mov dword [rsp + 0x60], eax
shr rax, 0x20
mov dword [rsp + 0x64], eax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CompareFileTime]
cmp eax, r14d
je 0x140009a37
inc rbx
cmp rbx, r14
jl 0x1400098e0
xor r14d, r14d
movaps xmm7, xmmword [rsp + 0x900]
mov eax, esi
movaps xmm6, xmmword [rsp + 0x910]
or eax, 0x40
mov r12, qword [rsp + 0x960]
test r14d, r14d
mov r14, qword [rsp + 0x928]
mov rbx, qword [rsp + 0x950]
cmove eax, esi
mov rsi, qword [rsp + 0x958]
jmp 0x140009a79
mov eax, 0x8000000
mov rcx, qword [rbp + 0x7f0]
xor rcx, rsp
call fcn.140032e60
add rsp, 0x930
pop r13
pop rdi
pop rbp
ret