Function at 0x180003cb0
Capabilities:
Delete file
Read .ini file

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x208]
sub rsp, 0x2e0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x180044088]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov ecx, 1
call fcn.18000c350
mov r12, rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x20], rax
xor r13d, r13d
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
lea r9, [0x1800e6ae0]
or rdi, 0xffffffffffffffff
mov rdx, rdi
nop word [rax + rax]
inc rdx
cmp word [r9 + rdx*2], r13w
jne 0x180003d30
lea rcx, [rbp - 0x40]
cmp rdx, 7
ja 0x180003d5f
mov qword [rbp - 0x30], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
call fcn.18000d7e0
mov word [rbp + rbx - 0x40], r13w
jmp 0x180003d65
call fcn.180009320
nop
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
lea r9, [0x1800c6ae0]
nop dword [rax]
inc rdi
cmp word [r9 + rdi*2], 0
jne 0x180003d80
lea rcx, [rbp - 0x60]
cmp rdi, 7
ja 0x180003db0
mov qword [rbp - 0x50], rdi
lea rbx, [rdi + rdi]
mov r8, rbx
mov rdx, r9
call fcn.18000d7e0
mov word [rbp + rbx - 0x60], r13w
jmp 0x180003db9
mov rdx, rdi
call fcn.180009320
nop
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
lea rbx, [rcx + rax*2]
lea rdi, [rbp - 0x40]
cmovae rdi, qword [rbp - 0x40]
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
cmp rdx, 0x10
jb 0x180003e04
lea rcx, [rbp - 0x20]
call fcn.18000a410
mov qword [rbp - 0x10], r13
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.18000a200
nop
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
lea rbx, [rcx + rax*2]
lea rdi, [rbp - 0x60]
cmovae rdi, qword [rbp - 0x60]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
cmp rdx, 0x10
jb 0x180003e5f
lea rcx, [rbp]
call fcn.18000a410
mov qword [rbp + 0x10], r13
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp]
call fcn.18000a200
nop
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rax, [0x1800569e0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rbp + 0x30]
lea r8, [0x18003ac4c]
lea rdx, [0x18003b7d8]
lea rcx, [0x18003b7e0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
lea rsi, [rbp - 0x20]
mov r14, qword [rbp - 0x20]
mov r15, qword [rbp - 8]
cmp r15, 0x10
cmovae rsi, r14
mov rdi, qword [rbp - 0x10]
cmp rdi, 0x10
jae 0x180003eed
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x48], 0xf
jmp 0x180003f5d
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x180003f13
mov rcx, r13
jmp 0x180003f47
cmp rcx, 0x1000
jb 0x180003f3f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800043c3
mov rcx, rax
call fcn.18000c350
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x180003f47
call fcn.18000c350
mov rcx, rax
mov qword [rsp + 0x30], rcx
lea r8, [rdi + 1]
mov rdx, rsi
call fcn.18000d7e0
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
call fcn.180001bf0
mov rbx, rax
lea rax, [rbp - 0x80]
cmp rax, rbx
je 0x180003fa4
lea rcx, [rbp - 0x80]
call fcn.180001fc0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180004002
inc rdx
mov rax, qword [rsp + 0x50]
mov rcx, rax
cmp rdx, 0x1000
jb 0x180003ffa
lea r8, [rdx + 0x27]
cmp r8, rdx
jbe 0x1800043c9
mov rdx, r8
test cl, 0x1f
jne 0x1800043c9
mov rax, qword [rax - 8]
cmp rax, rcx
jae 0x1800043c9
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1800043c9
mov rcx, rax
call fcn.18000c38c
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
add r8, rdx
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rsp + 0x50]
call fcn.180009040
mov rcx, rax
cmp qword [rax + 0x18], 8
jb 0x18000403c
mov rcx, qword [rax]
lea rdx, [rbp + 0x100]
sub rdx, rcx
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x180004050
lea rcx, [rsp + 0x50]
call fcn.180007aa0
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x100]
sub r8, rax
nop dword [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x180004094
add rax, 2
test ecx, ecx
jne 0x180004080
lea rdi, [0x1800569e0]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x64
test edx, edx
je 0x1800040e1
lea r9, [0x1800869f0]
lea r8, [0x18003ac64]
lea rdx, str.Message
lea rcx, [0x18003b800]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 0xa
jmp 0x18000423e
lea r9, [rbp + 0x30]
lea r8, [0x18003ac74]
lea rdx, [0x18003b810]
lea rcx, str.Info
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rdx, [rbp]
lea rcx, [rsp + 0x30]
call fcn.1800020c0
mov r8, rax
lea rdx, [rsp + 0x50]
call fcn.180001bf0
mov rbx, rax
lea rax, [rbp - 0x80]
cmp rax, rbx
je 0x18000414e
lea rcx, [rbp - 0x80]
call fcn.180001fc0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1800041ac
inc rdx
mov rax, qword [rsp + 0x50]
mov rcx, rax
cmp rdx, 0x1000
jb 0x1800041a4
lea r8, [rdx + 0x27]
cmp r8, rdx
jbe 0x1800043cf
mov rdx, r8
test cl, 0x1f
jne 0x1800043cf
mov rax, qword [rax - 8]
cmp rax, rcx
jae 0x1800043cf
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1800043cf
mov rcx, rax
call fcn.18000c38c
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
add r8, qword [rbp - 0x70]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rsp + 0x50]
call fcn.180009040
mov rcx, rax
cmp qword [rax + 0x18], 8
jb 0x1800041e3
mov rcx, qword [rax]
lea rdx, [rbp + 0x100]
sub rdx, rcx
nop dword [rax]
movzx eax, word [rcx]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1800041f0
lea rcx, [rsp + 0x50]
call fcn.180007aa0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x100]
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x180004235
add rax, 2
test ecx, ecx
jne 0x180004221
test edx, edx
je 0x180004252
mov eax, 0xb
mov dword [0x1800c6ad0], 1
mov dword [0x1800769e4], eax
xor bl, bl
jmp 0x180004254
mov bl, 1
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800042b0
inc rdx
mov rax, qword [rbp - 0x80]
mov rcx, rax
cmp rdx, 0x1000
jb 0x1800042a8
lea r8, [rdx + 0x27]
cmp r8, rdx
jbe 0x1800043d5
mov rdx, r8
test cl, 0x1f
jne 0x1800043d5
mov rax, qword [rax - 8]
cmp rax, rcx
jae 0x1800043d5
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1800043d5
mov rcx, rax
call fcn.18000c38c
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x18000431d
inc rdx
mov rax, qword [rbp]
mov rcx, rax
cmp rdx, 0x1000
jb 0x180004314
lea r8, [rdx + 0x27]
cmp r8, rdx
jbe 0x1800043db
mov rdx, r8
test cl, 0x1f
jne 0x1800043db
mov rax, qword [rax - 8]
cmp rax, rcx
jae 0x1800043db
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1800043db
mov rcx, rax
call fcn.18000c38c
nop
cmp r15, 0x10
jb 0x18000436f
lea rdx, [r15 + 1]
mov rcx, r14
cmp rdx, 0x1000
jb 0x180004366
lea rax, [rdx + 0x27]
cmp rax, rdx
jbe 0x1800043e1
mov rdx, rax
test cl, 0x1f
jne 0x1800043e1
mov r14, qword [r14 - 8]
cmp r14, rcx
jae 0x1800043e1
sub rcx, r14
sub rcx, 8
cmp rcx, 0x1f
ja 0x1800043e1
mov rcx, r14
call fcn.18000c38c
nop
lea rcx, [rbp - 0x60]
call fcn.180007aa0
nop
lea rcx, [rbp - 0x40]
call fcn.180007aa0
nop
mov edx, 1
mov rcx, r12
call fcn.18000c38c
movzx eax, bl
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.18000c090
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800022c0
nop
call fcn.18001222c
int3
call fcn.18001222c
nop
call fcn.18001222c
nop
call fcn.18001222c
nop
call fcn.18001222c
int3