Function at 0x70267710
Capabilities:
Accept command line arguments
Create thread
Read .ini file

Disassembly:
sub esp, 0x32c
mov eax, dword [0x7034b250]
xor eax, esp
mov dword [esp + 0x328], eax
cmp dword [edi], 0
push esi
jne 0x7026778d
cmp dword [0x703593cc], 0
jne 0x7026773c
call fcn.70215a50
test eax, eax
je 0x70267748
mov eax, dword [0x7035903c]
cmp eax, 0xa
ja 0x70267766
je 0x70267766
mov dword [edi], 0xffffffff
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
cmp dword [esp + 0x334], 0
jne 0x702677a5
cmp dword [0x70359fe0], 0
je 0x70267787
cmp word [0x70359fd2], 0xb
je 0x70267807
mov dword [edi], 0xfffffffe
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
push str.___windows10_f12
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x70267787
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0xc]
push ecx
call fcn.70219260
add esp, 8
test eax, eax
je 0x70267787
mov edx, dword [esp + 8]
shr edx, 0x10
cmp edx, 0xb
jne 0x70267787
cmp dword [0x7035a00c], 0
je 0x702677f7
mov dword [edi + 0x64], 3
jmp 0x70267807
cmp dword [0x7035a010], 0
je 0x70267807
mov dword [edi + 0x64], 4
call fcn.7020e640
call fcn.7021ccd0
test eax, eax
jne 0x70267833
mov dword [edi], 0xfffffffd
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
mov ecx, dword [edi + 0x64]
call fcn.70267310
test eax, eax
jne 0x7026785d
mov dword [edi], 0xfffffffc
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x70267885
mov dword [edi], 0xfffffffb
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
xor eax, eax
push 0xfe
push eax
lea ecx, [esp + 0x1a]
push ecx
mov word [esp + 0x1c], ax
call fcn.702e95e0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.DComCatalogCache_7FD510AF_EE09_47e2_BED1_26AAE27DC4B1__d
lea edx, [esp + 0x18]
call fcn.7021fd60
add esp, 8
lea edx, [esp + 0x10]
push edx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [edi + 0x60], eax
test eax, eax
je 0x702678f9
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x60], 0
mov dword [edi], 0xfffffffa
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
push 0x703274f8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
jne 0x70267926
mov dword [edi], 0xfffffff9
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
xor eax, eax
push 0x216
push eax
lea ecx, [esp + 0x11a]
push ecx
mov word [esp + 0x11c], ax
call fcn.702e95e0
add esp, 0xc
push 0x7032ae18
push 0x70359d48
lea edx, [esp + 0x118]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [esp + 0x110]
push eax
push 0x700000
push str.uimodel_t
push 0x7032ae50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
je 0x70267986
cmp eax, 0x31ff000
jbe 0x7026798b
mov eax, 0x700000
mov dword [edi + 0x20], eax
call fcn.70265880
mov esi, eax
call fcn.70201000
test eax, eax
jne 0x702679bc
mov dword [edi], 0xfffffff8
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
call fcn.70215d00
test eax, eax
je 0x702679f3
call fcn.702658d0
mov esi, eax
call fcn.70201000
test eax, eax
jne 0x702679f3
mov dword [edi], 0xfffffff7
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
call fcn.70265920
mov esi, eax
call fcn.70201000
test eax, eax
jne 0x70267a21
mov dword [edi], 0xfffffff6
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
mov esi, edi
call fcn.70267200
test eax, eax
jne 0x70267a4a
mov dword [edi], 0xfffffff5
pop esi
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x32c
ret 4
push 0
push 0
push 0
push 0x702670b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x70267a6a
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x32c]
pop esi
xor ecx, esp
mov dword [edi], 1
call fcn.702e1c2f
add esp, 0x32c
ret 4