Function at 0x1002682e
Capabilities:
Create process on windows
Create process suspended
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10039111
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x830
mov dword [ebp - 4], 1
call fcn.100134d0
mov eax, dword [eax + 0x90]
push eax
lea ecx, [ebp - 0x138]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x138]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
sub eax, 1
mov dword [ebp - 0x544], eax
jmp 0x10026897
mov eax, dword [ebp - 0x544]
sub eax, 1
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 0
jle 0x100268c5
mov ecx, dword [ebp - 0x544]
movsx edx, byte [ebp + ecx - 0x138]
cmp edx, 0x5c
jne 0x100268c3
mov eax, dword [ebp - 0x544]
mov byte [ebp + eax - 0x137], 0
jmp 0x100268c5
jmp 0x10026888
lea ecx, [ebp - 0x540]
call fcn.10035eca
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x138]
push ecx
push 0x10055ec8
lea edx, [ebp - 0x540]
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
push 0x10055ecc
push 0x400
lea eax, [ebp - 0x538]
push eax
push 0x10056ce8
push 0x10055ed8
push 0x10055ee4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x548]
call fcn.10035eca
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x538]
push ecx
push 0x10055ef4
lea edx, [ebp - 0x548]
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x828], esp
lea eax, [ebp + 0xc]
push eax
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp + 8]
call sym.STools.dll_public:_class_CSheJiDataItem____thiscall_CSheJiData::GetItemByFileName_class_CString_
mov dword [ebp - 0x834], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x53c], ecx
cmp dword [ebp - 0x53c], 0
je 0x10026b28
push ecx
mov ecx, esp
mov dword [ebp - 0x82c], esp
mov edx, dword [ebp - 0x53c]
push edx
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x838], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
call sym.STools.dll_public:_class_CMoBanItem____thiscall_CMoBanData::GetItem_class_CString_
mov dword [ebp - 0x83c], eax
mov ecx, dword [ebp - 0x83c]
mov dword [ebp - 0x7f0], ecx
lea edx, [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x7f0]
add ecx, 8
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x824]
call sym.STools.dll_public:_void___thiscall_CRunCmd::constructor_void_
mov byte [ebp - 4], 4
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x820]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x548]
push ecx
lea ecx, [ebp - 0x81c]
call sub.MFC42.DLL_CString::operator_2
mov edx, dword [ebp - 0x53c]
add edx, 8
push edx
lea ecx, [ebp - 0x810]
call sub.MFC42.DLL_CString::operator_2
mov eax, dword [ebp - 0x7f0]
add eax, 0x10
push eax
lea ecx, [ebp - 0x818]
call sub.MFC42.DLL_CString::operator_2
mov ecx, dword [ebp - 0x53c]
add ecx, 4
push ecx
lea ecx, [ebp - 0x814]
call sub.MFC42.DLL_CString::operator_2
mov dword [ebp - 0x80c], 0
lea ecx, [ebp - 0x824]
call sym.STools.dll_public:_int___thiscall_CRunCmd::SaveData_void_
push 0x44
push 0
lea edx, [ebp - 0x58c]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x58c], 0x44
mov dword [ebp - 0x560], 1
mov word [ebp - 0x55c], 5
mov eax, dword [ebp - 0x7f0]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x540]
push edx
push 0x10055ef8
lea eax, [ebp - 0x6b8]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x6b8]
mov dword [ebp - 0x7f4], ecx
mov edx, dword [ebp - 0x7f0]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x7f0]
mov edx, dword [ecx + 4]
push edx
push str._s__s
lea eax, [ebp - 0x7e4]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x7e4]
mov dword [ebp - 0x7e8], ecx
lea edx, [ebp - 0x804]
push edx
lea eax, [ebp - 0x58c]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x7e8]
push ecx
mov edx, dword [ebp - 0x7f4]
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0x7ec], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x824]
call sym.STools.dll_public:_void___thiscall_CRunCmd::destructor_void_
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x548]
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x540]
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call sub.MFC42.DLL_CString::CString
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x10]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret