Function at 0x14000ab40
Capabilities:
Print debug messages
Read .ini file

Disassembly:
push rbx
push rdi
mov eax, 0x1278
call fcn.140034bb0
sub rsp, rax
mov rax, qword [0x140194020]
xor rax, rsp
mov qword [rsp + 0x1260], rax
mov rdi, r8
lea rcx, [rsp + 0x50]
mov rbx, rdx
mov r8d, 0x208
xor edx, edx
call fcn.140019870
xor edx, edx
lea rcx, [rsp + 0x260]
mov r8d, 0x800
call fcn.140019870
lea r8, [rsp + 0x260]
mov byte [rdi], 0
lea rdx, str.avlogconf.ini
call fcn.14000afe0
test al, al
jne 0x14000abbe
lea rcx, str.ReadLogConfiguration_:_GetGivenFilePath_failed_for_INI_file.
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor al, al
jmp 0x14000afc5
mov qword [rsp + 0x1290], rbp
lea r9, [rsp + 0x260]
mov qword [rsp + 0x12a8], rsi
lea rdx, str.logenable
mov r8d, 0xffffffff
mov qword [rsp + 0x1270], r14
lea rcx, str.AV_LOG_CONFIG_SECTION
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, 1
jne 0x14000abff
mov byte [rdi], al
lea rax, [rsp + 0x260]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x50]
lea r8, [0x14017f7fc]
mov dword [rsp + 0x20], 0x104
lea rdx, str.logfilesize
lea rcx, str.AV_LOG_CONFIG_SECTION
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, 0xa
mov ecx, r14d
mov dword [rsp + 0x40], ecx
test eax, eax
je 0x14000ac6a
lea r8, [rsp + 0x40]
lea rdx, [0x1401800b0]
lea rcx, [rsp + 0x50]
call fcn.14000a220
mov ecx, dword [rsp + 0x40]
cmp eax, 1
cmovne ecx, r14d
mov dword [rsp + 0x40], ecx
lea rax, [rsp + 0x260]
mov dword [rbx + 0x20], ecx
mov qword [rsp + 0x28], rax
lea r9, [0x1401fe2ba]
lea r8, [0x1401800b8]
mov dword [rsp + 0x20], 0x104
lea rdx, str.logdateformat
lea rcx, str.AV_LOG_CONFIG_SECTION
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor esi, esi
lea rbp, [0x1401fd2a8]
mov qword [rsp + 0x38], rsi
lea r8, [0x1401fe2ba]
mov qword [rsp + 0x30], rsi
xor edx, edx
mov dword [rsp + 0x28], esi
mov ecx, 0xfde9
lea r9d, [rsi - 1]
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x14000ace0
xor cl, cl
jmp 0x14000ad1d
cmp eax, 0x104
jle 0x14000aceb
xor cl, cl
jmp 0x14000ad1d
mov qword [rsp + 0x38], rsi
lea r8, [0x1401fe2ba]
mov qword [rsp + 0x30], rsi
mov r9d, 0xffffffff
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
setne cl
test cl, cl
lea rax, str.2006_01_02T15:04:05.999
lea r9, [0x1401fd4b0]
cmovne rax, rbp
lea r8, [0x140180120]
mov qword [rbx + 0x28], rax
lea rdx, str.productname
lea rax, [rsp + 0x260]
mov qword [rsp + 0x28], rax
lea rcx, str.AV_LOG_CONFIG_SECTION
mov dword [rsp + 0x20], 0x104
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov qword [rsp + 0x38], rsi
lea rbp, [0x1401fd3ac]
mov qword [rsp + 0x30], rsi
lea r8, [0x1401fd4b0]
mov dword [rsp + 0x28], esi
mov r9d, 0xffffffff
xor edx, edx
mov qword [rsp + 0x20], rbp
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x14000ada1
xor cl, cl
jmp 0x14000adde
cmp eax, 0x104
jle 0x14000adac
xor cl, cl
jmp 0x14000adde
mov qword [rsp + 0x38], rsi
lea r8, [0x1401fd4b0]
mov qword [rsp + 0x30], rsi
mov r9d, 0xffffffff
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
setne cl
test cl, cl
lea rax, [0x140180140]
lea r9, [rsp + 0x260]
cmovne rax, rbp
lea rdx, str.logtracelevel
xor r8d, r8d
mov qword [rbx], rax
lea rcx, str.AV_LOG_CONFIG_SECTION
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, 0xffffffff
jne 0x14000ae16
xor al, al
jmp 0x14000ae1e
mov dword [rbx + 0x14], eax
mov al, 1
mov dword [rbx + 0x24], esi
mov byte [rbx + 0x10], al
lea r9, [rsp + 0x260]
xor r8d, r8d
mov byte [rbx + 0x18], al
lea rdx, str.maxbackupsize
lea rcx, str.AV_LOG_CONFIG_SECTION
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
lea r9, [0x1401fe4c2]
lea r8, [0x14017f7fc]
cmove eax, r14d
lea rdx, str.modulewiseloglevel
mov dword [rbx + 0x1c], eax
lea rcx, str.AV_LOG_CONFIG_SECTION
lea rax, [rsp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov qword [rsp + 0x38], rsi
lea rbp, [0x1401fdeba]
mov qword [rsp + 0x30], rsi
lea r8, [0x1401fe4c2]
mov dword [rsp + 0x28], esi
mov r9d, 0xffffffff
xor edx, edx
mov qword [rsp + 0x20], rbp
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r14, qword [rsp + 0x1270]
test eax, eax
je 0x14000aeff
cmp eax, 0x400
jg 0x14000aeff
mov qword [rsp + 0x38], rsi
lea r8, [0x1401fe4c2]
mov qword [rsp + 0x30], rsi
mov r9d, 0xffffffff
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x14000aeff
mov qword [rbx + 0x30], rbp
xor edx, edx
lea rcx, [rsp + 0xa60]
mov r8d, 0x800
call fcn.140019870
cmp byte [rdi], 0
lea rax, [rsp + 0x260]
mov rsi, qword [rsp + 0x12a8]
lea r9, [rsp + 0xa60]
mov rbp, qword [rsp + 0x1290]
lea r8, [0x14017f7fc]
mov qword [rsp + 0x28], rax
lea rcx, str.AV_LOG_CONFIG_SECTION
mov dword [rsp + 0x20], 0x400
lea rdx, str.modulewiselogenable
je 0x14000af62
lea rdx, str.modulewiselogdisable
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor r8d, r8d
lea rdx, [0x140180208]
lea rcx, [rsp + 0xa60]
call fcn.140024318
test rax, rax
je 0x14000afc3
nop dword [rax]
nop dword [rax + rax]
lea rdx, [0x1401fd0a0]
mov rcx, rax
call fcn.14001d3f4
test eax, eax
je 0x14000afbb
xor r8d, r8d
lea rdx, [0x140180208]
xor ecx, ecx
call fcn.140024318
test rax, rax
jne 0x14000af90
jmp 0x14000afc3
cmp byte [rdi], 0
sete al
mov byte [rdi], al
mov al, 1
mov rcx, qword [rsp + 0x1260]
xor rcx, rsp
call fcn.140016d70
add rsp, 0x1278
pop rdi
pop rbx
ret