Function at 0x7ff71cd9908
Capabilities:
Read .ini file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r14
sub rsp, 0x30
mov rbp, rcx
mov esi, 0x64
mov r12, r9
lea ecx, [rsi + 0x64]
mov r13, rdx
call fcn.7ff71cdf53c
xor ebx, ebx
mov rdi, rax
cmp rax, rbx
je 0x7ff71cd99a2
lea r14, str.system.ini
lea r8, [0x7ff71cf0e58]
lea rcx, str.MCI32
mov r9, rdi
xor edx, edx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [rdi], bx
je 0x7ff71cd9b8e
lea ecx, [rsi - 2]
cmp eax, ecx
jne 0x7ff71cd99c6
mov rcx, qword [0x7ff71cee2d8]
mov r8, rdi
xor edx, edx
add esi, esi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [rsi + rsi]
call fcn.7ff71cdf53c
mov rdi, rax
cmp rax, rbx
jne 0x7ff71cd994c
mov eax, 0x108
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r14
pop r13
pop r12
ret
mov r8, rbp
mov ebp, 0x50
mov rcx, r13
mov rdx, rbp
mov rsi, rdi
call fcn.7ff71cc4024
cmp eax, ebx
jge 0x7ff71cd99ea
mov ebx, 0x136
jmp 0x7ff71cd9b75
mov qword [rsp + 0x28], r14
mov r14d, 0xff
lea r8, [0x7ff71cf0e58]
lea rcx, str.MCI32
mov r9, r12
mov rdx, rdi
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
movzx r11d, word [r12]
cmp r11w, bx
je 0x7ff71cd9b3b
mov r9, r13
mov rdx, r12
jmp 0x7ff71cd9a3a
cmp r11w, 0x20
je 0x7ff71cd9a40
add rdx, 2
mov r11w, word [rdx]
cmp r11w, bx
jne 0x7ff71cd9a2b
sub rdx, 2
jmp 0x7ff71cd9a5b
cmp ax, 0x2f
je 0x7ff71cd9a64
cmp ax, 0x3a
je 0x7ff71cd9a64
sub rdx, 2
cmp rdx, r12
jb 0x7ff71cd9a64
movzx eax, word [rdx]
cmp ax, 0x5c
jne 0x7ff71cd9a46
add rdx, 2
cmp word [r13], bx
je 0x7ff71cd9aa4
mov r8, rdx
sub r8, r12
movzx ecx, word [r9]
movzx eax, word [rdx]
add r8, 2
add rdx, 2
add r9, 2
cmp cx, ax
jne 0x7ff71cd9aa0
mov rax, r8
sar rax, 1
cmp eax, r14d
jae 0x7ff71cd9aa0
cmp word [r9], bx
jne 0x7ff71cd9a75
jmp 0x7ff71cd9aa4
sub rdx, 2
cmp word [r9], bx
jne 0x7ff71cd9ab6
cmp word [rdx], 0x20
je 0x7ff71cd9ad8
cmp word [rdx], 0x2e
je 0x7ff71cd9ad8
movzx eax, word [rdi]
add rdi, 2
cmp ax, bx
jne 0x7ff71cd9ab6
cmp word [rdi], bx
je 0x7ff71cd9b34
lea rax, str.system.ini
mov qword [rsp + 0x28], rax
jmp 0x7ff71cd99f5
mov r8, rdi
mov rdx, rbp
mov rcx, r13
call fcn.7ff71cc4024
cmp eax, ebx
jge 0x7ff71cd9b75
mov rcx, qword [0x7ff71cee2c0]
lea rax, [0x7ff71cee2c0]
cmp rcx, rax
je 0x7ff71cd99e0
bt dword [rcx + 0x1c], 0x16
jae 0x7ff71cd99e0
cmp byte [rcx + 0x19], 1
jb 0x7ff71cd99e0
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff71ce9570]
mov edx, 0x15
call fcn.7ff71cc12c0
jmp 0x7ff71cd99e0
mov ebx, 0x107
jmp 0x7ff71cd9b75
mov rcx, qword [0x7ff71cee2c0]
lea rax, [0x7ff71cee2c0]
cmp rcx, rax
je 0x7ff71cd9b70
bt dword [rcx + 0x1c], 0x16
jae 0x7ff71cd9b70
cmp byte [rcx + 0x19], 1
jb 0x7ff71cd9b70
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff71ce9570]
mov edx, 0x14
call fcn.7ff71cc12c0
mov ebx, 0x10a
mov rcx, qword [0x7ff71cee2d8]
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, ebx
jmp 0x7ff71cd99a7
mov rcx, qword [0x7ff71cee2d8]
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, 0x132
jmp 0x7ff71cd99a7