Function at 0x401810
Capabilities:
Encode data using xor
Read .ini file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x22eac
call fcn.0040d2a0
mov eax, dword [0x414054]
xor eax, esp
mov dword [esp + 0x22ea8], eax
push ebx
push esi
push edi
call fcn.00401740
push 0x22aa0
xor ebx, ebx
lea eax, [esp + 0x414]
push ebx
push eax
call fcn.00404b00
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0xc
push str..PluginInfo.ini
push 0x20
lea ecx, [esp + 0x439]
push ecx
push 0x412229
push str.IpAddress
push str.PluginInfo
call edi
push str..PluginInfo.ini
push 0x20
lea edx, [esp + 0x475]
push edx
push 0x412229
push str.WindowName
push str.PluginInfo
call edi
push str..PluginInfo.ini
push 0x20
lea eax, [esp + 0x4c7]
push eax
push 0x412229
push str.ClientName
push str.PluginInfo
call edi
push str..PluginInfo.ini
push 0x20
lea ecx, [esp + 0x4e7]
push ecx
push 0x412229
push str.PluginName
push str.PluginInfo
call edi
push str..PluginInfo.ini
push 0x20
lea edx, [esp + 0x507]
push edx
push 0x412229
push str.CameraName
push str.PluginInfo
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str..PluginInfo.ini
push ebx
push str.SaveLoginSystem
push str.Custom
call esi
push str..PluginInfo.ini
push ebx
push str.MuHelperType
push str.Custom
mov dword [esp + 0x564], eax
call esi
push str..PluginInfo.ini
push ebx
push str.CustomLoading
push str.Custom
mov dword [esp + 0x568], eax
call esi
push str..PluginInfo.ini
push ebx
push str.NewCreateCharEx
push str.Custom
mov dword [esp + 0x56c], eax
call esi
push str..PluginInfo.ini
push ebx
push str.EmojiSystem
mov dword [esp + 0x56c], eax
push str.Custom
call esi
push str..PluginInfo.ini
push ebx
push str.CustomMainTheme
push str.Custom
mov dword [esp + 0x574], eax
call esi
push str..PluginInfo.ini
push ebx
push str.ClearInventory
push str.Custom
mov dword [esp + 0x578], eax
call esi
push str..PluginInfo.ini
push ebx
push str.CharacterStatusType
push str.Custom
mov dword [esp + 0x57c], eax
call esi
push str..PluginInfo.ini
push ebx
push str.PartyBarType
push str.Custom
mov dword [esp + 0x580], eax
call esi
push str..PluginInfo.ini
push ebx
push str.PetLifeBarType
push str.Custom
mov dword [esp + 0x584], eax
call esi
push str..PluginInfo.ini
push ebx
push str.OldLoginBox
push str.Custom
mov dword [esp + 0x588], eax
call esi
push str..PluginInfo.ini
push ebx
push str.FullViewMode
push str.Custom
mov dword [esp + 0x58c], eax
call esi
push str..PluginInfo.ini
push ebx
push str.FVMisBlackScreen
push str.Custom
mov dword [esp + 0x590], eax
call esi
push str..PluginInfo.ini
push ebx
push str.NewAntiLag
push str.Custom
mov dword [esp + 0x594], eax
call esi
push str..PluginInfo.ini
push ebx
push str.CustomMainWindow
push str.Custom
mov dword [esp + 0x598], eax
call esi
push str..PluginInfo.ini
push ebx
push str.MaxClass
push str.Custom
mov dword [esp + 0x59c], eax
call esi
push str..PluginInfo.ini
push 0x20
mov dword [esp + 0x598], eax
lea eax, [esp + 0x59c]
push eax
push 0x412229
push str.DllName
push str.PluginInfo
call edi
push str..PluginInfo.ini
push 0x40
lea ecx, [esp + 0x5bc]
push ecx
push 0x412229
push str.PluginReadPath
push str.PluginInfo
call edi
push 0x433b68
call fcn.00401340
push 0x19c8
lea edx, [esp + 0x5f8]
push 0x433bec
push edx
call fcn.0040a1a0
push 0x19c8
lea eax, [esp + 0x1fcc]
push 0x4355b4
push eax
call fcn.0040a1a0
push 0x19c8
lea ecx, [esp + 0x39a0]
push 0x436f7c
push ecx
call fcn.0040a1a0
add esp, 0x24
lea esi, [esp + 0x10]
call section..text
mov edx, esi
push edx
lea esi, [esp + 0x524]
lea eax, [esp + 0x4c3]
call fcn.00401140
test al, al
jne 0x401b46
mov dword [esp + 0x520], ebx
lea eax, [esp + 0x10]
push eax
lea esi, [esp + 0x528]
lea eax, [esp + 0x4e3]
call fcn.00401140
test al, al
jne 0x401b69
mov dword [esp + 0x524], ebx
lea ecx, [esp + 0x10]
push ecx
lea esi, [esp + 0x52c]
lea eax, [esp + 0x503]
call fcn.00401140
test al, al
jne 0x401b8c
mov dword [esp + 0x528], ebx
xor eax, eax
mov edi, edi
mov cl, byte [esp + eax + 0x410]
mov edx, eax
xor cl, al
shr edx, 8
xor dl, 0x95
xor cl, 0xca
sub cl, dl
mov byte [esp + eax + 0x410], cl
inc eax
cmp eax, 0x22aa0
jb 0x401b90
push ebx
push 0x20
push 2
push ebx
push 1
push 0x40000000
push str.plugin.premium
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x401bf9
push ebx
lea edx, [esp + 0x10]
push edx
push 0x22aa0
lea eax, [esp + 0x41c]
push eax
push esi
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x22eb4]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00402096
mov esp, ebp
pop ebp
ret