Function at 0x1801181e0
Capabilities:
Read .ini file

Disassembly:
push rdi
sub rsp, 0x4f0
mov qword [rsp + 0x4d8], 0xfffffffffffffffe
mov rax, qword [0x180157688]
mov qword [rsp + 0x4e8], rax
cmp dword [0x180157720], 0
jne 0x180118212
jmp 0x1801184d6
lea rdx, [rsp + 0x270]
lea rcx, [0x180158600]
call fcn.180116620
mov dword [rsp + 0x258], eax
cmp dword [rsp + 0x258], 0
jne 0x18011823c
jmp 0x1801184d6
mov eax, dword [rsp + 0x288]
cmp dword [0x1801585f4], eax
ja 0x180118269
mov eax, dword [rsp + 0x288]
cmp dword [0x1801585f4], eax
jne 0x18011826e
mov eax, dword [rsp + 0x284]
cmp dword [0x1801585f0], eax
jb 0x18011826e
jmp 0x1801184d6
mov rax, qword [rsp + 0x284]
mov qword [0x1801585f0], rax
lea r9, [0x180158600]
mov r8d, dword [0x180158d3c]
lea rdx, str.DEVICE
lea rcx, [0x18013d790]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x4c4], eax
lea r9, [0x180158600]
mov r8d, dword [0x180158d40]
lea rdx, str.DEBUG
lea rcx, [0x18013d7b8]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x4c0], eax
lea r9, [0x180158600]
mov r8d, dword [0x180158d44]
lea rdx, str.SHOWTIME
lea rcx, [0x18013d7e8]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x254], eax
lea r9, [0x180158600]
mov r8d, dword [0x180158d48]
lea rdx, str.SHOWPROCESSID
lea rcx, [0x18013d820]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x25c], eax
lea r9, [0x180158600]
mov r8d, dword [0x180158d4c]
lea rdx, str.SHOWTHREADID
lea rcx, [0x18013d858]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x264], eax
lea r9, [0x180158600]
mov r8d, dword [0x180157720]
lea rdx, str.REALTIME
lea rcx, [0x18013d888]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x250], eax
movzx eax, word [0x180158d54]
lea r9, [0x180158600]
mov r8d, eax
lea rdx, str.MAXLOG
lea rcx, [0x18013d8b0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov word [rsp + 0x260], ax
mov word [rsp + 0x40], 0
lea rax, [rsp + 0x42]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rax, [0x180158600]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x104
lea r9, [rsp + 0x40]
lea r8, [0x18013d8c4]
lea rdx, str.FILENAME
lea rcx, str.AHNTRACER
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [rsp + 0x4c4]
mov dword [rsp + 0x4e0], eax
cmp dword [rsp + 0x4e0], 0
jb 0x180118412
cmp dword [rsp + 0x4e0], 1
jbe 0x180118410
jmp 0x180118412
jmp 0x180118417
jmp 0x1801184d6
mov r8d, 1
lea rdx, [0x180158d60]
lea rcx, [rsp + 0x4c8]
call fcn.180119e10
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.msvcrt.dll_wcslen]
test rax, rax
jbe 0x18011846e
lea rcx, [rsp + 0x40]
call fcn.180117160
test rax, rax
jbe 0x18011846e
lea rcx, [rsp + 0x40]
call fcn.180117e30
test eax, eax
jne 0x18011846e
lea rcx, [rsp + 0x4c8]
call fcn.180119ec0
jmp 0x1801184d6
mov ecx, dword [rsp + 0x4c4]
call fcn.180119fc0
mov ecx, dword [rsp + 0x4c0]
call fcn.180119fd0
mov ecx, dword [rsp + 0x254]
call fcn.18011a000
mov ecx, dword [rsp + 0x25c]
call fcn.180119fe0
mov ecx, dword [rsp + 0x264]
call fcn.180119ff0
mov ecx, dword [rsp + 0x250]
call fcn.18011a010
movzx ecx, word [rsp + 0x260]
call fcn.180117de0
call fcn.180117650
nop
lea rcx, [rsp + 0x4c8]
call fcn.180119ec0
mov rcx, qword [rsp + 0x4e8]
call fcn.180124250
add rsp, 0x4f0
pop rdi
ret