Function at 0x18009c9c9
Capabilities:
Read .ini file

Disassembly:
test rcx, rcx
je 0x18009cd50
mov r11, rsp
push rdi
sub rsp, 0x2a0
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov rax, qword [0x1801dc960]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov rbx, rdx
mov rdi, rcx
test rdx, rdx
je 0x18009cd28
mov byte [rsp + 0x180], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [r11 - 0x127]
call fcn.1800f4fb0
lea rcx, [rsp + 0x180]
sub rcx, rdi
movzx eax, byte [rdi]
mov byte [rcx + rdi], al
inc rdi
test al, al
jne 0x18009ca31
mov byte [rsp + 0x70], al
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x71]
call fcn.1800f4fb0
lea rcx, [rsp + 0x70]
sub rcx, rbx
nop dword [rax]
movzx eax, byte [rbx]
mov byte [rcx + rbx], al
inc rbx
test al, al
jne 0x18009ca60
cmp dword [0x1802210f4], 0
je 0x18009cd28
mov ebp, 1
mov r8d, ebp
lea rdx, str.TipConfig.ini
lea rcx, [rsp + 0x40]
call fcn.18001f690
nop
cmp qword [rax + 0x20], 0x10
jb 0x18009caa1
mov r9, qword [rax + 8]
jmp 0x18009caa5
lea r9, [rax + 8]
xor r8d, r8d
lea rdx, str.MOVE_TIP
lea rcx, [0x180162144]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ebx, eax
cmp qword [rsp + 0x60], 0x10
jb 0x18009cad0
mov rcx, qword [rsp + 0x48]
call fcn.1800f4b9c
mov qword [rsp + 0x60], 0xf
xor esi, esi
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x48], sil
cmp ebx, 1
jne 0x18009cd28
cmp dword [0x1801b12a0], esi
je 0x18009cd28
mov dword [0x1801b12a0], esi
mov edi, esi
mov ebx, esi
cmp dword [0x1802211f8], ebx
je 0x18009cb44
lea rcx, [rsp + 0x70]
call fcn.1800658c0
test eax, eax
jne 0x18009cb28
movzx ecx, byte [rsp + 0x70]
call fcn.180065cb0
test eax, eax
je 0x18009cb44
mov r8d, ebp
lea rdx, [rsp + 0x180]
lea rcx, [0x1802211fc]
call fcn.18008f400
test eax, eax
cmovne edi, ebp
cmp dword [0x1802216ac], ebx
je 0x18009cb8a
lea rcx, [rsp + 0x180]
call fcn.1800658c0
test eax, eax
jne 0x18009cb6e
movzx ecx, byte [rsp + 0x180]
call fcn.180065cb0
test eax, eax
je 0x18009cb8a
xor r8d, r8d
lea rdx, [rsp + 0x180]
lea rcx, [0x18022138c]
call fcn.18008f400
test eax, eax
cmovne ebx, ebp
test edi, edi
je 0x18009cb98
test ebx, ebx
jne 0x18009cd28
jmp 0x18009cba0
test ebx, ebx
je 0x18009cd28
mov byte [rsp + 0x70], sil
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x71]
call fcn.1800f4fb0
test edi, edi
je 0x18009cc72
mov r8d, ebp
lea rdx, str.TipConfig.ini
lea rcx, [rsp + 0x40]
call fcn.18001f690
nop
cmp qword [rax + 0x20], 0x10
jb 0x18009cbe1
mov rax, qword [rax + 8]
jmp 0x18009cbe5
add rax, 8
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x104
lea r9, [rsp + 0x70]
lea rbx, [0x180152644]
mov r8, rbx
lea rdx, str.MOVE_IN
lea rcx, [0x180162144]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
nop
cmp qword [rsp + 0x60], 0x10
jb 0x18009cc28
mov rcx, qword [rsp + 0x48]
call fcn.1800f4b9c
mov qword [rsp + 0x60], 0xf
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x38], esi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x10
mov r9d, 3
xor r8d, r8d
xor edx, edx
lea rcx, [0x1801554c0]
call fcn.18008e860
jmp 0x18009cd28
test ebx, ebx
je 0x18009cd28
mov r8d, ebp
lea rdx, str.TipConfig.ini
lea rcx, [rsp + 0x40]
call fcn.18001f690
nop
cmp qword [rax + 0x20], 0x10
jb 0x18009cc9c
mov rax, qword [rax + 8]
jmp 0x18009cca0
add rax, 8
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x104
lea r9, [rsp + 0x70]
lea rbx, [0x180152644]
mov r8, rbx
lea rdx, str.MOVE_OUT
lea rcx, [0x180162144]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
nop
cmp qword [rsp + 0x60], 0x10
jb 0x18009cce3
mov rcx, qword [rsp + 0x48]
call fcn.1800f4b9c
mov qword [rsp + 0x60], 0xf
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x38], esi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x10
mov r9d, 3
xor r8d, r8d
xor edx, edx
lea rcx, [0x1801554c0]
call fcn.18008e860
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.1800f4f80
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
repz ret