Function at 0x18000719c
Capabilities:
Create pipe
Get common file path
Get file size
Read .ini file

Disassembly:
push rbx
sub rsp, 0x50
cmp dword [0x1800c8500], 0xfdb518dc
mov ebx, edx
jne 0x1800073ce
xor r9d, r9d
lea rcx, str.8m1IuA14tcE77YAExk6UWpjf
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileNameW]
xor r9d, r9d
lea rdx, str.rtU5GPStxRk7AAtIHI
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumTimeFormatsEx]
and qword [rsp + 0x28], 0
lea r9, str.w1xNNJsxc6bqYOpOQo34Ojs3
and dword [rsp + 0x20], 0
lea rdx, str.GzqowSoQaDfhCRcvZbp6xEStjPnDE
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoExEx]
call qword [sym.imp.KERNEL32.dll_GetVersion]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FatalAppExitW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetConsoleTitleW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
and dword [rsp + 0x30], 0
lea rax, str.De3auiymI4c2Gl17y6FmBD7WzUKp
and qword [rsp + 0x28], 0
lea rcx, str.KUCH7FHfkmNMR3yIt8Xenp8y
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetDurationFormatEx]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetFileIoOverlappedRange]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitCommEvent]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreatePipe]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WriteProfileSectionW]
and qword [rsp + 0x28], 0
lea r9, str.bHhZpRKvX9HGk98J14ohg4h8
and dword [rsp + 0x20], 0
lea rdx, str.VnO5vME2LgtCWaewz6
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoExEx]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDllDirectoryW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
xor r9d, r9d
lea rdx, str.VRlcYA9j64TCi587U9Xe
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileMUIInfo]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommState]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetUserGeoID]
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
sub ebx, 1
je 0x1800073df
sub ebx, 1
je 0x18000740c
cmp ebx, 1
je 0x18000740c
jmp 0x180007439
mov ecx, 0x153
lea rax, [0x180006c34]
mov dword [rsp + 0x48], ecx
add rax, rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
call fcn.18000a394
mov ecx, 0x21b
lea rax, [0x1800070ec]
mov dword [rsp + 0x48], ecx
add rax, rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
call fcn.18000a394
mov eax, 1
add rsp, 0x50
pop rbx
ret