Function at 0x1401b5a00
Capabilities:
Read .ini file

Disassembly:
push rbx
sub rsp, 0xc30
mov rax, qword [0x1402a76c0]
xor rax, rsp
mov qword [rsp + 0xc20], rax
xor edx, edx
mov r8d, 0x29c
lea rcx, [rsp + 0x4d0]
call fcn.1401e7e40
xor eax, eax
mov qword [rsp + 0x2a0], rax
mov word [rsp + 0x2a8], ax
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0xa10]
call fcn.1401e7e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x450], xmm0
movups xmmword [rsp + 0x460], xmm0
movups xmmword [rsp + 0x470], xmm0
movups xmmword [rsp + 0x480], xmm0
movups xmmword [rsp + 0x490], xmm0
movups xmmword [rsp + 0x4a0], xmm0
movups xmmword [rsp + 0x4b0], xmm0
movups xmmword [rsp + 0x4c0], xmm0
xor eax, eax
mov qword [rsp + 0x2b0], rax
mov word [rsp + 0x2b8], ax
xor edx, edx
mov r8d, 0x29c
lea rcx, [rsp + 0x770]
call fcn.1401e7e40
mov r8d, 0x14e
lea rdx, [rsp + 0x770]
mov rcx, qword [0x1402bc1a0]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1401b5fcf
mov qword [rsp + 0x40], 5
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0x40
lea rax, [rsp + 0x450]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x104
lea r9, [rsp + 0xa10]
mov r8d, 5
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x770]
call fcn.1401fded0
lea rax, str.UtilDbg.ini
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa10]
lea r8, [rsp + 0x2a0]
lea rdx, [0x14025b2e0]
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x1401b5fb6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
movups xmmword [rsp + 0x360], xmm0
movups xmmword [rsp + 0x370], xmm0
movups xmmword [rsp + 0x380], xmm0
movups xmmword [rsp + 0x390], xmm0
movups xmmword [rsp + 0x3a0], xmm0
movups xmmword [rsp + 0x3b0], xmm0
movups xmmword [rsp + 0x3c0], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x2c0], xmm1
movups xmmword [rsp + 0x2d0], xmm1
movups xmmword [rsp + 0x2e0], xmm1
movups xmmword [rsp + 0x2f0], xmm1
movups xmmword [rsp + 0x300], xmm1
movups xmmword [rsp + 0x310], xmm1
movups xmmword [rsp + 0x320], xmm1
movups xmmword [rsp + 0x330], xmm1
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x450]
lea rdx, [0x1402528f8]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x350]
lea r8, [0x140251dfc]
lea rdx, [rsp + 0x2c0]
lea rcx, str.DEBUG
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x350]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1401b5c90
test rax, rax
jne 0x1401b5cf5
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x350]
lea r8, [0x140251dfc]
lea rdx, str.DEFAULT
lea rcx, str.DEBUG
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x350]
mov rax, rbx
inc rax
cmp word [rcx + rax*2], 0
jne 0x1401b5ce2
test rax, rax
je 0x1401b5fb6
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
movups xmmword [rsp + 0x3e0], xmm0
movups xmmword [rsp + 0x3f0], xmm0
movups xmmword [rsp + 0x400], xmm0
movups xmmword [rsp + 0x410], xmm0
movups xmmword [rsp + 0x420], xmm0
movups xmmword [rsp + 0x430], xmm0
movups xmmword [rsp + 0x440], xmm0
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x3d0]
lea r8, [0x140251dfc]
lea rdx, str.DEBUG
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rdx, [0x140255230]
lea rcx, [rsp + 0x3d0]
call fcn.1401ecc18
test eax, eax
jne 0x1401b5fb6
mov byte [0x1402bc1a8], 1
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x3d0]
lea r8, [0x140251dfc]
lea rdx, [0x14025ae68]
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rdx, [0x140255230]
lea rcx, [rsp + 0x3d0]
call fcn.1401ecc18
test eax, eax
jne 0x1401b5f21
mov byte [0x1402bc1a9], 1
xor edx, edx
mov r8d, 0x29c
lea rcx, [rsp + 0x770]
call fcn.1401e7e40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2c0], xmm0
movups xmmword [rsp + 0x2d0], xmm0
movups xmmword [rsp + 0x2e0], xmm0
movups xmmword [rsp + 0x2f0], xmm0
movups xmmword [rsp + 0x300], xmm0
movups xmmword [rsp + 0x310], xmm0
movups xmmword [rsp + 0x320], xmm0
movups xmmword [rsp + 0x330], xmm0
mov qword [rsp + 0x340], rax
mov word [rsp + 0x348], ax
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x45
lea r9, [rsp + 0x2c0]
lea r8, [0x140251dfc]
lea rdx, str.LOGFILE
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x2c0]
mov rax, rbx
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1401b5ea0
lea rcx, [rsp + 0x770]
test rax, rax
je 0x1401b5ecb
lea r8, [rsp + 0x2c0]
mov edx, 0x14e
call fcn.1401ebfa8
jmp 0x1401b5ef4
lea rax, str.UtilDbg.txt
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa10]
lea r8, [rsp + 0x2a0]
lea rdx, [0x14025b2e0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rax, [rsp + 0x770]
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1401b5f00
mov r8, rbx
lea rdx, [rsp + 0x770]
lea rcx, [0x1402b0de0]
call fcn.140004b70
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x3d0]
lea r8, [0x140251dfc]
lea rdx, str.OUTPUTDBGSTR
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rdx, [0x140255230]
lea rcx, [rsp + 0x3d0]
call fcn.1401ecc18
movzx ecx, byte [0x1402bc1aa]
mov r8d, 1
test eax, eax
cmove ecx, r8d
mov byte [0x1402bc1aa], cl
lea r9, [rsp + 0x4d0]
lea rdx, str.LEVEL
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [0x1402b0ddc]
cmp eax, 1
cmovg ecx, eax
mov dword [0x1402b0ddc], ecx
mov rcx, qword [rsp + 0xc20]
xor rcx, rsp
call fcn.1401e2900
add rsp, 0xc30
pop rbx
ret
jmp 0x1401b5fb6