Function at 0x41a200
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4277b8
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x433018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0041b400
xor esi, esi
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x2c]
mov edi, 8
cmp dword [ebp - 0x18], edi
jae 0x41a249
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x41a26d
cmp dword [ebp - 0x18], edi
jb 0x41a266
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
jmp 0x41a77e
push 0xf
mov eax, str.LogSetting.ini
lea ecx, [ebp - 0x2c]
call fcn.00401a10
mov ecx, 7
xor edx, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], esi
mov word [ebp - 0x48], dx
mov byte [ebp - 4], 1
mov eax, dword [0x435e30]
cmp eax, esi
je 0x41a2d9
mov dword [ebp - 0x50], ecx
xor ecx, ecx
mov dword [ebp - 0x54], esi
mov word [ebp - 0x64], cx
lea edx, [ebp - 0x64]
push edx
push eax
mov byte [ebp - 4], 2
call fcn.00418830
push esi
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x48]
call fcn.00418c90
add esp, 0xc
mov byte [ebp - 4], 1
cmp dword [ebp - 0x50], edi
jb 0x41a2d9
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x68], esi
cmp dword [ebp - 0x38], esi
je 0x41a4d7
mov ecx, dword [ebp - 0x2c]
mov esi, 8
cmp dword [ebp - 0x18], esi
jae 0x41a2fb
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a306
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.LogLevel
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [0x435dc0], eax
cmp dword [ebp - 0x18], esi
jae 0x41a321
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a32c
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.ThreadSafeMode
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [0x435ddc], eax
cmp dword [ebp - 0x18], esi
jae 0x41a347
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a352
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.DumpJson
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [0x435de0], eax
cmp dword [ebp - 0x18], esi
jae 0x41a36d
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a378
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.DumpImage
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [0x435de4], eax
cmp dword [ebp - 0x18], esi
jae 0x41a393
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a39e
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.ModuleIsoration
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [0x435de8], eax
cmp dword [ebp - 0x18], esi
jae 0x41a3b9
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a3c4
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.ModuleSubDir
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x18], esi
jae 0x41a3dd
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a3e8
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.DisableTimestampPrefix
push eax
call ebx
mov ecx, dword [ebp - 0x2c]
mov dword [0x435e24], eax
cmp dword [ebp - 0x18], esi
jae 0x41a403
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a40e
lea eax, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
push str.DumpCommand
push eax
call ebx
sub esp, 0x1c
mov esi, esp
mov dword [0x435e28], eax
mov dword [ebp - 0x70], esp
xor edi, edi
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
push 8
mov eax, str.ResetLog
mov word [esi], cx
call fcn.00401b40
sub esp, 0x1c
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x74], esp
push edi
lea eax, [ebp - 0x48]
mov esi, 7
xor edx, edx
push eax
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00401880
sub esp, 0x1c
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x6c], esp
push edi
lea eax, [ebp - 0x2c]
xor edx, edx
push eax
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00401880
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.0041a060
add esp, 0x54
mov edi, eax
mov esi, 0x435e08
mov byte [ebp - 4], 5
call fcn.00401810
mov byte [ebp - 4], 1
cmp dword [ebp - 0x50], 8
jb 0x41a4c6
mov ecx, dword [ebp - 0x64]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x41a4d7
or esi, 0xffffffff
cmp dword [0x435dc0], esi
jne 0x41a500
mov eax, dword [ebp - 0x2c]
mov edi, 8
cmp dword [ebp - 0x18], edi
jae 0x41a4e7
lea eax, [ebp - 0x2c]
push eax
push 6
push str.LogLevel
push str.Setting
call ebx
mov dword [0x435dc0], eax
or esi, 0xffffffff
jmp 0x41a505
mov edi, 8
cmp dword [ebp - 0x38], 0
je 0x41a513
cmp dword [0x435ddc], esi
jne 0x41a532
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a51e
lea eax, [ebp - 0x2c]
push eax
push 0
push str.ThreadSafeMode
push str.Setting
call ebx
mov dword [0x435ddc], eax
cmp dword [ebp - 0x38], 0
je 0x41a540
cmp dword [0x435de0], esi
jne 0x41a55f
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a54b
lea eax, [ebp - 0x2c]
push eax
push 0
push str.DumpJson
push str.Setting
call ebx
mov dword [0x435de0], eax
cmp dword [ebp - 0x38], 0
je 0x41a56d
cmp dword [0x435de4], esi
jne 0x41a58c
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a578
lea eax, [ebp - 0x2c]
push eax
push 0
push str.DumpImage
push str.Setting
call ebx
mov dword [0x435de4], eax
cmp dword [ebp - 0x38], 0
je 0x41a59a
cmp dword [0x435de8], esi
jne 0x41a5b9
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a5a5
lea eax, [ebp - 0x2c]
push eax
push 0
push str.ModuleIsoration
push str.Setting
call ebx
mov dword [0x435de8], eax
cmp dword [ebp - 0x38], 0
je 0x41a5c6
mov eax, dword [ebp - 0x68]
cmp eax, esi
jne 0x41a5e0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a5d1
lea eax, [ebp - 0x2c]
push eax
push 0
push str.ModuleSubDir
push str.Setting
call ebx
cmp eax, 1
jne 0x41a5ff
cmp dword [0x435de8], eax
jne 0x41a5ff
push 0
lea edx, [ebp - 0x48]
push edx
mov eax, esi
mov ecx, 0x435dec
call fcn.00401880
cmp dword [ebp - 0x38], 0
je 0x41a60d
cmp dword [0x435e24], esi
jne 0x41a62c
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a618
lea eax, [ebp - 0x2c]
push eax
push 0
push str.DisableTimestampPrefix
push str.Setting
call ebx
mov dword [0x435e24], eax
cmp dword [ebp - 0x38], 0
je 0x41a63a
cmp dword [0x435e28], esi
jne 0x41a659
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a645
lea eax, [ebp - 0x2c]
push eax
push 0
push str.DumpCommand
push str.Setting
call ebx
mov dword [0x435e28], eax
cmp dword [ebp - 0x38], 0
je 0x41a66c
cmp dword [0x435e18], 0
jne 0x41a717
sub esp, 0x1c
mov esi, esp
xor eax, eax
xor edi, edi
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
mov dword [ebp - 0x6c], esp
mov word [esi], ax
push 8
mov eax, str.ResetLog
call fcn.00401b40
sub esp, 0x1c
mov byte [ebp - 4], 6
mov esi, esp
mov dword [ebp - 0x74], esp
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
push 7
mov eax, str.Setting
mov word [esi], cx
call fcn.00401b40
sub esp, 0x1c
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x70], esp
push edi
lea eax, [ebp - 0x2c]
xor edx, edx
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00401880
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.0041a060
add esp, 0x54
mov edi, eax
mov esi, 0x435e08
mov byte [ebp - 4], 8
call fcn.00401810
cmp dword [ebp - 0x50], 8
jb 0x41a712
mov ecx, dword [ebp - 0x64]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 8
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x41a722
lea eax, [ebp - 0x2c]
push eax
push 0
push str.DumpTwain
push str.Setting
call ebx
xor edx, edx
cmp dword [0x435dc0], 6
mov dword [0x435e2c], eax
setne dl
mov esi, edx
cmp dword [ebp - 0x34], edi
jb 0x41a756
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], cx
cmp dword [ebp - 0x18], edi
jb 0x41a77c
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042543a
mov esp, ebp
pop ebp
ret