Function at 0x14007cd00
Capabilities:
Move file
Read .ini file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd68]
sub rsp, 0xe68
mov rax, qword [0x1401f7280]
xor rax, rsp
mov qword [rbp + 0xd50], rax
mov eax, dword [rbp + 0xdd8]
mov rbx, qword [rbp + 0xe00]
mov rsi, qword [rbp + 0xde8]
mov dword [rbp - 0x70], eax
mov rax, qword [rbp + 0xe10]
mov r14, rdx
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rax
xor eax, eax
mov r15d, r9d
mov r12, r8
mov edi, 1
lea rdx, [0x140189e48]
lea rcx, [0x140183078]
mov r9, rbx
mov r8d, edi
mov r13d, eax
mov dword [rbp - 0x78], eax
mov qword [rbp - 0x48], rbx
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov rax, qword [rbp - 0x60]
xor ecx, ecx
mov word [rax], cx
mov byte [rbp + 0xc40], cl
cmp qword [rbp - 0x68], rcx
jne 0x14007cdb7
cmp qword [rbp + 0xde0], rcx
jne 0x14007cdb7
test rsi, rsi
je 0x14007cdb0
mov dword [rsi], edi
xor eax, eax
jmp 0x14007cece
lea rdx, [0x140189500]
nop
movzx eax, word [rcx + rdx]
lea rcx, [rcx + 2]
mov word [rbp + rcx + 0xa2e], ax
test ax, ax
jne 0x14007cdc0
lea rdx, [rbp + 0xa30]
lea rcx, [rbp + 0x820]
call fcn.1400748e0
lea rcx, [rbp + 0x820]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbp - 0x38], rax
test rax, rax
jne 0x14007ce2b
test rsi, rsi
je 0x14007ce05
mov dword [rsi], edi
cmp dword [rbp + 0xdf8], r13d
je 0x14007cdb0
lea rdx, [rbp + 0x820]
lea rcx, [rbp + 0xa30]
xor r8d, r8d
call fcn.140077e40
xor eax, eax
jmp 0x14007cece
lea rdx, [0x140189e68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14007ce57
test rsi, rsi
je 0x14007ce4b
mov dword [rsi], edi
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x14007ce05
cmp dword [rbp + 0xdf0], r13d
je 0x14007cef1
mov rsi, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x68]
lea rdx, [rbp + 0x200]
mov r9, rsi
mov r8, rbx
call fcn.14007d430
mov edi, eax
cmp eax, 1
jne 0x14007ceb6
lea rax, [0x140181e34]
mov r9d, edi
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov rdx, qword [rbp - 0x68]
lea r8, [rbp + 0x200]
mov rcx, r14
call qword [rbp - 0x58]
mov edi, eax
lea rcx, [rbp + 0x200]
call fcn.1400fa630
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, edi
mov rcx, qword [rbp + 0xd50]
xor rcx, rsp
call fcn.1400f9a80
add rsp, 0xe68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp r15d, edi
jg 0x14007cf3f
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14007cf3f
mov rsi, qword [rbp - 0x60]
lea rdx, [rbp + 0x200]
mov r8, rbx
mov r9, rsi
call fcn.14007d430
mov edi, eax
cmp eax, 1
jne 0x14007ceb6
lea rax, [0x140181e34]
xor r9d, r9d
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
jmp 0x14007cea3
xor eax, eax
lea rdx, [rbp + 0x610]
mov rcx, r14
sub rdx, r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x18], rax
nop word [rax + rax]
movzx eax, word [rcx]
lea rcx, [rcx + 2]
mov word [rdx + rcx - 2], ax
test ax, ax
jne 0x14007cf60
test r12, r12
je 0x14007cfca
mov rdx, r12
mov rcx, r14
call fcn.1400f92fc
test eax, eax
jne 0x14007cfca
mov rbx, qword [rbp + 0xde0]
test rbx, rbx
jne 0x14007d15a
lea rcx, [rbp + 0x610]
sub rcx, 2
cmp word [rcx + 2], r13w
lea rcx, [rcx + 2]
jne 0x14007cfa0
movsd xmm0, qword [0x140189e78]
movzx eax, word [0x140189e80]
mov r13d, edi
movsd qword [rcx], xmm0
mov word [rcx + 8], ax
mov dword [rbp - 0x78], edi
jmp 0x14007cfda
mov rbx, qword [rbp + 0xde0]
test rbx, rbx
jne 0x14007d15a
xor eax, eax
mov ebx, eax
test r15d, r15d
jle 0x14007d135
mov esi, dword [rbp + 0xdd0]
mov r14, qword [rbp - 0x48]
mov r13, qword [rbp - 0x60]
cmp edi, 1
jne 0x14007d12d
cmp ebx, esi
jne 0x14007d06c
mov rcx, qword [rbp - 0x68]
lea rdx, [rbp + 0x200]
mov r9, r13
mov r8, r14
call fcn.14007d430
mov edi, eax
cmp eax, 1
jne 0x14007d05b
mov rdx, qword [rbp - 0x68]
xor ecx, ecx
lea rax, [0x140181e34]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], ecx
mov r9d, ecx
test ebx, ebx
lea rcx, [rbp + 0x610]
lea r8, [rbp + 0x200]
setne r9b
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r14
call qword [rbp - 0x58]
mov edi, eax
lea rcx, [rbp + 0x200]
call fcn.1400fa630
jmp 0x14007d119
mov edx, dword [rbp - 0x70]
mov dword [rsp + 0x28], eax
lea r9, [rbp - 0x24]
mov r8d, ebx
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.1400a4220
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14007d11d
lea rdx, [rbp + 0x200]
mov r9, r13
mov r8, r14
mov rcx, rax
call fcn.14007d430
mov edi, eax
cmp eax, 1
jne 0x14007d0ec
mov rdx, qword [rbp - 0x80]
xor ecx, ecx
lea rax, [0x140181e34]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], ecx
mov r9d, ecx
test ebx, ebx
lea rcx, [rbp + 0x610]
lea r8, [rbp + 0x200]
setne r9b
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r14
call qword [rbp - 0x58]
mov edi, eax
lea rcx, [rbp + 0x200]
call fcn.1400fa630
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14007d119
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov qword [rbp - 0x80], 0
test edi, edi
je 0x14007d12d
inc ebx
mov eax, 0
cmp ebx, r15d
jl 0x14007cff5
mov r14, qword [rbp - 0x50]
mov r13d, dword [rbp - 0x78]
test r13d, r13d
je 0x14007cec2
mov rcx, r14
call fcn.1400fa630
lea rcx, [rbp + 0x610]
mov rdx, r14
call fcn.1400fa7c0
jmp 0x14007cec2
mov r13, qword [rbp - 0x48]
lea rdx, str.SaveAllPages
lea rcx, [0x140183078]
mov r9, r13
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor r9d, r9d
mov r12d, r9d
test rsi, rsi
je 0x14007d186
mov dword [rsi], r9d
mov r8d, r9d
mov dword [rbp - 0x78], r9d
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rbx + rcx*2], r8w
jne 0x14007d191
test ecx, ecx
jle 0x14007cec2
movsxd r14, eax
mov rcx, r9
mov rdx, rbx
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x50], rbx
movzx eax, word [rdx]
cmp ax, 0x7c
je 0x14007d1ca
mov word [rbp + rcx*2 - 0x10], ax
inc rcx
jmp 0x14007d3b5
lea rax, [rcx + rcx]
cmp rax, 0x208
jae 0x14007d426
lea rcx, [rbp - 0x10]
mov edx, 1
mov word [rbp + rax - 0x10], r9w
mov qword [rbp - 0x20], r9
call fcn.14001d910
mov r15d, 1
test r14, r14
je 0x14007d219
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x10]
call fcn.1400e5350
mov edx, dword [rbp - 0x70]
lea rcx, [rbp - 0x10]
call fcn.1400a4710
mov r15d, eax
xor r9d, r9d
mov r14d, r9d
mov ebx, r9d
test r15d, r15d
jle 0x14007d396
nop dword [rax + rax]
lea rcx, [rbp - 0x10]
test ebx, ebx
jne 0x14007d28f
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x68], r9d
mov dword [rsp + 0x60], r9d
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], r9d
mov qword [rsp + 0x48], r9
mov dword [rsp + 0x40], r9d
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r9
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x28]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.1400a17b0
jmp 0x14007d2a8
mov edx, dword [rbp - 0x70]
mov dword [rsp + 0x28], r9d
mov qword [rsp + 0x20], r9
lea r9, [rbp - 0x40]
mov r8d, ebx
call fcn.1400a4220
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x14007d2f1
cmp dword [rbp + 0xdf8], eax
je 0x14007d2df
test r14d, r14d
jne 0x14007d2df
mov rcx, qword [0x1401fbba0]
mov dword [rsp + 0x28], eax
lea r9, [rbp - 0x10]
xor r8d, r8d
mov edx, 0x4e3
mov qword [rsp + 0x20], rax
call fcn.1400f11b0
test rsi, rsi
je 0x14007d2e6
inc dword [rsi]
mov r14d, 1
jmp 0x14007d385
mov r9, qword [rbp - 0x60]
lea rdx, [rbp + 0x200]
mov r8, r13
mov rcx, rax
call fcn.14007d430
mov edi, eax
cmp eax, 1
jne 0x14007d34f
mov rdx, qword [rbp - 0x80]
xor ecx, ecx
lea rax, [0x140181e34]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp - 0x60]
mov dword [rsp + 0x30], ecx
mov r9d, ecx
test r12d, r12d
mov qword [rsp + 0x28], rax
lea r8, [rbp + 0x200]
lea rcx, [rbp + 0x610]
setne r9b
mov qword [rsp + 0x20], r13
call qword [rbp - 0x58]
mov edi, eax
lea rcx, [rbp + 0x200]
call fcn.1400fa630
mov rcx, qword [rbp - 0x80]
inc r12d
test rcx, rcx
je 0x14007d37f
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
mov qword [rbp - 0x80], rax
jmp 0x14007d381
xor eax, eax
test edi, edi
je 0x14007d3e8
inc ebx
mov r9d, 0
cmp ebx, r15d
jl 0x14007d230
test edi, edi
je 0x14007cec2
mov rbx, qword [rbp + 0xde0]
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x50]
mov r8d, dword [rbp - 0x78]
mov r14, qword [rbp - 0x30]
inc r8d
add rdx, 2
or rax, 0xffffffffffffffff
mov dword [rbp - 0x78], r8d
mov qword [rbp - 0x50], rdx
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x14007d3d0
cmp r8d, eax
jl 0x14007d1b4
jmp 0x14007cec2
cmp dword [rbp + 0xdf8], 0
je 0x14007d416
mov rcx, qword [0x1401fbba0]
lea r9, [rbp - 0x10]
xor r8d, r8d
mov edx, 0x520
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rax
call fcn.1400f11b0
test rsi, rsi
je 0x14007cec2
inc dword [rsi]
jmp 0x14007cec2
call fcn.1400f8f44
int3