Function at 0x100003ce4
Capabilities:
Get common file path
Read .ini file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x260
mov rax, qword [0x100007110]
xor rax, rsp
mov qword [rsp + 0x250], rax
mov rbp, rcx
lea rbx, [0x100001c04]
lea rsi, [0x100001c08]
lea r9, [rsp + 0x150]
lea rdx, [0x100001c18]
lea rcx, [0x100001c24]
mov r8, rbx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0xfe
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea rcx, [rsp + 0x150]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x100003d86
lea r9, [rsp + 0x150]
lea rdx, [0x100001c28]
lea rcx, [0x100001c24]
mov r8, rbx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0xfe
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea rcx, [rsp + 0x150]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x100003f33
lea r8, [0x100001c30]
lea rcx, [rsp + 0x150]
mov edx, 0xff
call fcn.100003c34
mov rcx, qword [rbp + 0x18]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
lea rcx, [rsp + 0x150]
call fcn.1000031dc
mov esi, 0x105
lea rcx, [rsp + 0x40]
mov edx, esi
mov byte [rbp], 1
mov byte [rsp + 0x40], 0
mov qword [rbp + 0x18], rax
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rcx, [0x100001718]
mov byte [rsp + 0x144], 0
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, [rsp + 0x40]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, [rsp + 0x150]
add ebx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [rax + rbx + 1]
cmp ecx, esi
jb 0x100003e31
mov eax, 0x8000ffff
jmp 0x100003f38
lea r8, [0x100001718]
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.100003054
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rdx, rsi
lea r8, [rsp + 0x150]
movsxd rcx, eax
sub rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.100003054
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call sub.VERSION.dll_GetFileVersionInfoSizeA
test eax, eax
jne 0x100003e86
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x100003ea3
lea r9, [rsp + 0x30]
lea rcx, [rsp + 0x40]
mov r8d, eax
mov rdx, rbp
call fcn.10000323c
test eax, eax
je 0x100003f76
lea rcx, [rsp + 0x40]
mov edx, esi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x100003f33
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rdx, rsi
lea r8, [0x100001718]
movsxd rcx, eax
sub rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.100003054
test eax, eax
js 0x100003f33
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea r8, [rsp + 0x150]
movsxd rcx, eax
sub rsi, rcx
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.100003054
test eax, eax
js 0x100003f33
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1000034e0
test al, al
je 0x100003f33
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call sub.VERSION.dll_GetFileVersionInfoSizeA
test eax, eax
jne 0x100003f5d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 1
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.100004df0
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsp, r11
pop rsi
ret
lea r9, [rsp + 0x30]
lea rcx, [rsp + 0x40]
mov r8d, eax
mov rdx, rbp
call fcn.10000323c
test eax, eax
jne 0x100003f33
lea rcx, [rsp + 0x40]
call fcn.10000356c
mov dword [rbp + 4], eax
xor eax, eax
jmp 0x100003f38