Function at 0x140006400
Capabilities:
Read .ini file

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x38]
sub rsp, 0x130
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x140042020]
xor rax, rsp
mov qword [rbp + 0x28], rax
lea rcx, [rbp - 0x78]
call fcn.140007c40
nop
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x14000646b
cmp qword [rbp - 0x60], 8
jb 0x140006464
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
xor eax, eax
jmp 0x140006acd
mov r8d, 0xf
lea rdx, str.LogSetting.ini
lea rcx, [rbp - 0x78]
call fcn.140001cd0
mov qword [rbp - 0x38], 7
xor esi, esi
mov qword [rbp - 0x40], rsi
mov word [rbp - 0x50], si
mov rcx, qword [0x1400458a0]
test rcx, rcx
je 0x1400064da
mov qword [rbp - 0x10], 7
mov qword [rbp - 0x18], rsi
mov word [rbp - 0x28], si
lea rdx, [rbp - 0x28]
call fcn.140027bc0
xor r8d, r8d
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x50]
call fcn.140028000
nop
cmp qword [rbp - 0x10], 8
jb 0x1400064da
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
mov edi, esi
mov ebx, 6
cmp qword [rbp - 0x40], rdi
je 0x140006752
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.LogLevel
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045800], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.ThreadSafeMode
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045830], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.DumpJson
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045834], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.DumpImage
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045838], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.ModuleIsoration
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x14004583c], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.ModuleSubDir
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.DisableTimestampPrefix
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045890], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
or r8d, 0xffffffff
lea rdx, str.DumpCommand
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045894], eax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x20]
mov qword [rsp + 0x48], rax
mov qword [rbp - 0x10], 7
mov qword [rbp - 0x18], rsi
mov word [rbp - 0x28], si
lea r8d, [rbx + 2]
lea rdx, str.ResetLog
lea rcx, [rbp - 0x28]
call fcn.140001e30
nop
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rsi
mov word [rsp + 0x20], si
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x20]
call fcn.140001ad0
nop
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], si
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x50]
call fcn.140001ad0
nop
lea r9, [rbp - 0x28]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
call fcn.140006200
nop
mov rdx, rax
lea rcx, [0x140045868]
call fcn.140001a30
nop
cmp qword [rbp + 0x18], 8
jb 0x140006742
mov rcx, qword [rbp]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
cmp qword [rbp - 0x40], 0
je 0x140006752
cmp dword [0x140045800], 0xffffffff
jne 0x14000677d
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
mov r8d, ebx
lea rdx, str.LogLevel
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045800], eax
cmp qword [rbp - 0x40], 0
je 0x14000678d
cmp dword [0x140045830], 0xffffffff
jne 0x1400067b8
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.ThreadSafeMode
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045830], eax
cmp qword [rbp - 0x40], 0
je 0x1400067c8
cmp dword [0x140045834], 0xffffffff
jne 0x1400067f3
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.DumpJson
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045834], eax
cmp qword [rbp - 0x40], 0
je 0x140006803
cmp dword [0x140045838], 0xffffffff
jne 0x14000682e
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.DumpImage
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045838], eax
cmp qword [rbp - 0x40], 0
je 0x140006840
mov eax, dword [0x14004583c]
cmp eax, 0xffffffff
jne 0x14000686b
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.ModuleIsoration
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x14004583c], eax
cmp qword [rbp - 0x40], 0
je 0x140006877
cmp edi, 0xffffffff
jne 0x1400068a4
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.ModuleSubDir
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, eax
mov eax, dword [0x14004583c]
cmp edi, 1
jne 0x1400068c4
cmp eax, edi
jne 0x1400068c4
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [0x140045840]
call fcn.140001ad0
cmp qword [rbp - 0x40], 0
je 0x1400068d4
cmp dword [0x140045890], 0xffffffff
jne 0x1400068ff
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.DisableTimestampPrefix
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045890], eax
cmp qword [rbp - 0x40], 0
je 0x14000690f
cmp dword [0x140045894], 0xffffffff
jne 0x14000693a
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.DumpCommand
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045894], eax
cmp qword [rbp - 0x40], 0
je 0x14000694f
cmp qword [0x140045878], 0
jne 0x140006a16
lea rax, [rsp + 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rsi
mov word [rsp + 0x20], si
mov r8d, 8
lea rdx, str.ResetLog
lea rcx, [rsp + 0x20]
call fcn.140001e30
nop
mov qword [rbp - 0x10], 7
mov qword [rbp - 0x18], rsi
mov word [rbp - 0x28], si
mov r8d, 7
lea rdx, str.Setting
lea rcx, [rbp - 0x28]
call fcn.140001e30
nop
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], si
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x50]
call fcn.140001ad0
nop
lea r9, [rsp + 0x20]
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
call fcn.140006200
nop
mov rdx, rax
lea rcx, [0x140045868]
call fcn.140001a30
nop
cmp qword [rbp + 0x18], 8
jb 0x140006a16
mov rcx, qword [rbp]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.DumpTwain
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x140045898], eax
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
xor r8d, r8d
lea rdx, str.PerformanceCheck
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [0x14004589c], eax
test eax, eax
je 0x140006a78
mov dword [0x140045800], ebx
jmp 0x140006a83
mov ebx, dword [0x140045800]
cmp ebx, 6
jne 0x140006a90
mov qword [0x140045834], rsi
mov dword [0x140045898], esi
mov edi, esi
cmp ebx, 6
setne dil
cmp qword [rbp - 0x38], 8
jb 0x140006aaa
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
mov qword [rbp - 0x38], 7
mov qword [rbp - 0x40], rsi
mov word [rbp - 0x50], si
cmp qword [rbp - 0x60], 8
jb 0x140006acb
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
mov eax, edi
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.140029670
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret