Function at 0x140006ff0
Capabilities:
Read .ini file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x570]
sub rsp, 0x670
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x6c0], rbx
mov rax, qword [0x140033018]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
mov rax, qword [rdx]
cmp dword [rax - 0x10], 0
jne 0x14000706c
xor al, al
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.14000e3e0
mov rbx, qword [rsp + 0x6c0]
add rsp, 0x670
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x350]
call fcn.14000fcc0
mov r8d, 0x104
lea rdx, [rbp + 0x350]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleFileNameW]
mov edx, 0x5c
lea rcx, [rbp + 0x350]
call fcn.14001012c
xor ecx, ecx
lea rbx, [0x140023678]
test rax, rax
jne 0x140007113
call fcn.140001430
mov rcx, rax
test rax, rax
je 0x14000766c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
mov rdi, 0xffffffffffffffff
cmp rbx, 0x10000
jae 0x1400070f3
movzx edx, bx
lea rcx, [rsp + 0x30]
call fcn.140002f40
jmp 0x140007111
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400070f6
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140005610
nop
jmp 0x14000718f
mov word [rax], cx
call fcn.140001430
mov rcx, rax
test rax, rax
je 0x140007677
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x350]
mov rdi, 0xffffffffffffffff
cmp rax, 0x10000
jae 0x140007162
lea rax, [rbp + 0x350]
movzx edx, ax
lea rcx, [rsp + 0x30]
call fcn.140002f40
jmp 0x14000718f
lea rcx, [rbp + 0x350]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140007170
mov r8d, eax
lea rdx, [rbp + 0x350]
lea rcx, [rsp + 0x30]
call fcn.140005610
nop
lea rsi, str._arphaCrashReport.ini
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rsi + rax*2], 0
jne 0x1400071a0
mov r15, rsi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r12d, dword [rbx - 0x10]
test eax, eax
js 0x140007682
movsxd rdx, eax
mov rcx, rsi
call fcn.140012778
mov r13, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r12d
jl 0x14000768d
lea r14d, [r12 + rax]
test r14d, r14d
js 0x140007656
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x140007213
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140003910
mov rbx, qword [rsp + 0x30]
cmp r15, r12
ja 0x14000721c
lea rsi, [rbx + r15*2]
movsxd rdx, r13d
add rdx, rdx
lea rcx, [rbx + r12*2]
mov r9, rdx
mov r8, rsi
call fcn.1400076a0
cmp r14d, dword [rbx - 0xc]
jg 0x140007661
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0x50]
call fcn.14000fcc0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
lea r15, [0x140023678]
mov r8, r15
lea rdx, str.main_crash_err1
mov r14, qword [rsp + 0x40]
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x1400072c1
lea rcx, [rsp + 0x50]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400072a0
mov r8d, eax
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140005610
jmp 0x1400072c6
mov rsi, qword [rsp + 0x38]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.main_crash_err2
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007317
lea rcx, [rsi + 8]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007300
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.main_crash_solution
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007367
lea rcx, [rsi + 0x18]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007350
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.main_restart
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x1400073b7
lea rcx, [rsi + 0x10]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400073a0
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.main_crash_detail
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007407
lea rcx, [rsi + 0x20]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400073f0
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.main_ok
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007457
lea rcx, [rsi + 0x28]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007440
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.msg_outofmemory
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x1400074a7
lea rcx, [rsi + 0x30]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007490
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.msg_outofhandle
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x1400074f7
lea rcx, [rsi + 0x38]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400074e0
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.detail_caption
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007547
lea rcx, [rsi + 0x40]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007530
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.detail_file_name
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007597
lea rcx, [rsi + 0x48]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007580
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.detail_files_size
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x1400075e7
lea rcx, [rsi + 0x50]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400075d0
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x200
lea r9, [rsp + 0x50]
mov r8, r15
lea rdx, str.process_text
mov rcx, qword [r14]
call qword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x140007638
lea rcx, [rsi + 0x58]
lea rdx, [rsp + 0x50]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140007620
mov r8d, eax
lea rdx, [rsp + 0x50]
call fcn.140005610
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14000764f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov al, 1
jmp 0x140007042
mov ecx, 0x80070057
call fcn.140002750
int3
mov ecx, 0x80070057
call fcn.140002750
nop
mov ecx, 0x80004005
call fcn.140002750
int3
mov ecx, 0x80004005
call fcn.140002750
nop
mov ecx, 0x80070057
call fcn.140002750
int3
mov ecx, 0x80070057
call fcn.140002750
int3