Function at 0x14002b5c4
Capabilities:
Read .ini file

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x320
mov rax, qword [0x14011d6b0]
xor rax, rsp
mov qword [rsp + 0x310], rax
mov rsi, r9
mov r15, r8
mov r14, rdx
mov qword [r11 - 0x298], rdx
mov qword [r11 - 0x290], r8
mov qword [r11 - 0x288], r9
mov r12d, dword [rsp + 0x378]
cmp dword [rsp + 0x380], 0
je 0x14002b7d2
mov r8d, r12d
lea rdx, [0x1400ea7b8]
lea rcx, [r11 - 0x238]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [0x1400ea7b4]
mov rdx, r14
lea rcx, [rsp + 0x48]
call fcn.14000dc34
nop
lea r8, str.Smart.ini
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14000dc34
mov rbx, rax
lea r8, str.FIRST
mov rdx, r15
lea rcx, [rsp + 0x38]
call fcn.14000dc34
mov r9, qword [rbx]
lea r8, [rsp + 0x110]
mov rdx, qword [rsi]
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b6b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b6d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b6f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
cmp dword [rax - 0x10], 2
jne 0x14002b7d5
mov r8d, dword [rsp + 0x388]
lea rdx, [0x1400ea7b8]
lea rcx, [rsp + 0x110]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [0x1400ea7b4]
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000dc34
nop
lea r8, str.Smart.ini
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.14000dc34
mov rbx, rax
lea r8, str.THRESHOLD
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.14000dc34
mov r9, qword [rbx]
lea r8, [rsp + 0x110]
mov rdx, qword [rsi]
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b791
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b7b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b7d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002b7d5
or edi, 0xffffffff
lea r8, [0x1400ea7b4]
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.14000dc34
nop
lea r8, str.Smart.ini
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000dc34
mov rcx, qword [rax]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x100
lea r9, [rsp + 0x110]
lea r8, [0x1400eb840]
mov rdx, qword [rsi]
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b849
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b868
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rsp + 0x110]
call fcn.1400b2fb8
cmp eax, r12d
je 0x14002bb95
mov r8d, r12d
lea rdx, [0x1400ea7b8]
lea rcx, [rsp + 0x110]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [0x1400ea7b4]
mov rdx, r14
lea rcx, [rsp + 0x80]
call fcn.14000dc34
nop
lea r8, str.Smart.ini
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14000dc34
mov r9, qword [rax]
lea r8, [rsp + 0x110]
mov rdx, qword [rsi]
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b8f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b91b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.140071a10
mov rcx, rax
test rax, rax
je 0x14002bc18
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x370]
call fcn.14002bc24
nop
mov r9d, r12d
mov r8, qword [rax]
lea rdx, str._s__d_n
lea rcx, [rsp + 0x30]
call fcn.1400042cc
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002b98b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rsp + 0xc8]
call fcn.140086acc
nop
lea r8, [0x1400ea7b4]
mov rdx, r14
lea rcx, [rsp + 0xa0]
call fcn.14000dc34
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.14000dcec
nop
lea r8, str..csv
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.14000dc34
nop
xor r9d, r9d
mov r8d, 0x7002
mov rdx, qword [rax]
lea rcx, [rsp + 0xc8]
call fcn.140086de8
mov ebx, eax
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov ecx, edi
lock xadd dword [rdx + 0x10], ecx
add ecx, edi
test ecx, ecx
jg 0x14002ba1c
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov rdx, qword [rsp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002ba3f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002ba61
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test ebx, ebx
je 0x14002bb67
lea rcx, [rsp + 0xc8]
call fcn.140086cb0
mov rbx, rax
xor edx, edx
lea r8d, [rdx + 2]
lea rcx, [rsp + 0xc8]
mov r9, qword [rsp + 0xc8]
call qword [r9 + 0x58]
cmp rax, rbx
jne 0x14002baab
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0xc8]
call fcn.1400872d4
nop
jmp 0x14002bac8
lea rcx, [rsp + 0xc8]
call fcn.140086c08
nop
lea rcx, [rsp + 0xc8]
call fcn.140086af8
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bb04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bb22
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r15]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bb40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bb5d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 1
jmp 0x14002bbf0
lea rcx, [rsp + 0xc8]
call fcn.140086af8
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bb95
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bbb3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r15]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bbd1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002bbee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.1400a9d90
mov rbx, qword [rsp + 0x350]
add rsp, 0x320
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov ecx, 0x80004005
call fcn.140002f7c
int3