Function at 0x1000e6a0
Capabilities:
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7b4
mov eax, dword [0x10043230]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, edx
mov ebx, ecx
test edi, edi
je 0x1000e998
test ebx, ebx
je 0x1000e998
push 0
push ebx
call fcn.1001cc90
add esp, 8
test eax, eax
je 0x1000e6ea
pop edi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001bb54
mov esp, ebp
pop ebp
ret
push esi
xor eax, eax
push 0x7e
push eax
mov word [ebp - 0x94], ax
lea eax, [ebp - 0x92]
push eax
call fcn.10021c00
add esp, 0xc
lea eax, [ebp - 0x94]
push ebx
push 0x40
push eax
lea esi, [edi + 0x318]
push esi
push str.level
push str.logging
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x94]
push eax
push 0x40
push esi
call fcn.1001c8b8
add esp, 0xc
test eax, eax
jne 0x1000e939
push 0xfe
push eax
mov word [ebp - 0x194], ax
lea eax, [ebp - 0x192]
push eax
call fcn.10021c00
add esp, 0xc
lea eax, [ebp - 0x194]
push ebx
push 0x80
push eax
lea esi, [edi + 0x208]
push esi
push str.AppId
push str.logging
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x194]
push eax
push 0x80
push esi
call fcn.1001c8b8
add esp, 0xc
test eax, eax
jne 0x1000e939
push 0x206
push eax
mov word [ebp - 0x5a4], ax
lea eax, [ebp - 0x5a2]
push eax
call fcn.10021c00
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x7ac], ax
lea eax, [ebp - 0x7aa]
push eax
call fcn.10021c00
add esp, 0x18
lea eax, [ebp - 0x5a4]
push ebx
push 0x104
push eax
push edi
push str.path
push str.logging
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x104
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x5a4]
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x1000e939
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x39c], ax
lea eax, [ebp - 0x39a]
push eax
call fcn.10021c00
add esp, 0xc
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x39c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCanonicalizeW]
test eax, eax
je 0x1000e939
lea eax, [ebp - 0x39c]
push edi
push eax
call fcn.1001d8e6
add esp, 8
test eax, eax
jne 0x1000e875
pop esi
pop edi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001bb54
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x39c]
push eax
push 0x104
push edi
call fcn.1001c8b8
add esp, 0xc
test eax, eax
jne 0x1000e939
mov ecx, dword [edi + 0x39c]
mov eax, dword [edi + 0x398]
test ecx, ecx
ja 0x1000e8b3
jb 0x1000e8ab
cmp eax, 0x7fffffff
jae 0x1000e8b3
mov dword [ebp - 0x7b0], ecx
jmp 0x1000e8c2
mov eax, 0x7fffffff
mov dword [ebp - 0x7b0], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push ebx
push eax
push str.maxsize
push str.logging
call esi
push ebx
push dword [edi + 0x3a0]
mov dword [edi + 0x398], eax
push str.rotation
push str.logging
mov dword [edi + 0x39c], 0
call esi
push ebx
mov dword [edi + 0x3a0], eax
xor eax, eax
push 3
mov word [ebp - 0xc], ax
mov dword [ebp - 0xa], eax
lea eax, [ebp - 0xc]
push eax
lea esi, [edi + 0x308]
push esi
push str.FieldSep
push str.logging
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0xc]
push eax
push 3
push esi
call fcn.1001c8b8
add esp, 0xc
test eax, eax
je 0x1000e94c
pop esi
pop edi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001bb54
mov esp, ebp
pop ebp
ret
push ebx
xor eax, eax
push 3
mov word [ebp - 0x14], ax
mov dword [ebp - 0x12], eax
lea eax, [ebp - 0x14]
push eax
lea esi, [edi + 0x30e]
push esi
push str.RecordSep
push str.logging
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x14]
push eax
push 3
push esi
call fcn.1001c8b8
add esp, 0xc
test eax, eax
pop esi
pop edi
sete al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001bb54
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
xor al, al
pop ebx
call fcn.1001bb54
mov esp, ebp
pop ebp
ret