Function at 0x401a94
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe64
push ebx
push esi
push edi
mov dword [ebp - 0x88], eax
lea ebx, [ebp - 0x84]
mov esi, str.regedit__s_c:_sysprep_sys_hide.reg
mov eax, 0x44fab4
call fcn.00444eb0
mov word [ebx + 0x10], 8
xor edx, edx
mov dword [ebp - 4], edx
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0x14
jmp 0x401ccb
mov word [ebx + 0x10], 0x2c
lea edx, [esi + 0x146]
lea eax, [ebp - 0xc]
call fcn.0044dc50
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xc]
lea eax, [ebp - 4]
call fcn.0044ddf0
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0044dd20
pop ecx
test cl, cl
je 0x401b4b
push 0x10
lea eax, [esi + 0x158]
push eax
lea edx, [esi + 0x147]
push edx
mov eax, dword [ebp - 0x88]
call fcn.0042bbe0
push eax
call sub.USER32.DLL_MessageBoxA
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0044dd20
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x4020c2
mov word [ebx + 0x10], 0x38
xor eax, eax
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
push edx
inc dword [ebx + 0x1c]
mov edx, 1
lea eax, [ebp - 4]
mov ecx, 2
call fcn.0044de3c
cmp dword [ebp - 0x10], 0
je 0x401b7a
mov edx, dword [ebp - 0x10]
jmp 0x401b80
lea edx, [esi + 0x16a]
mov eax, 1
call fcn.004039b4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0044dd20
lea ecx, [esi + 0x1ae]
push 0x31
push ecx
lea edx, [esi + 0x16b]
mov word [ebx + 0x10], 0x44
lea eax, [ebp - 0x14]
call fcn.0044dc50
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 4]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0044dd64
lea edx, [ebp - 0x18]
push edx
lea edx, [esi + 0x188]
lea eax, [ebp - 0x1c]
call fcn.0044dc50
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x1c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x20]
pop eax
call fcn.0044dd64
cmp dword [ebp - 0x20], 0
je 0x401c04
mov edx, dword [ebp - 0x20]
jmp 0x401c0a
lea edx, [esi + 0x1b7]
push edx
mov eax, dword [ebp - 0x88]
call fcn.0042bbe0
push eax
call sub.USER32.DLL_MessageBoxA
mov edi, eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0044dd20
dec edi
je 0x401c7f
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0044dd20
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x4020c2
mov word [ebx + 0x10], 0x50
xor eax, eax
lea edx, [ebp - 0x24]
mov dword [ebp - 0x24], eax
push edx
inc dword [ebx + 0x1c]
mov edx, 1
lea eax, [ebp - 4]
mov ecx, 2
call fcn.0044de3c
cmp dword [ebp - 0x24], 0
je 0x401cae
mov edx, dword [ebp - 0x24]
jmp 0x401cb4
lea edx, [esi + 0x1b8]
xor eax, eax
call fcn.004039b4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0044dd20
mov word [ebx + 0x10], 0x20
lea edx, [esi + 0x135]
lea eax, [ebp - 8]
call fcn.0044dc50
inc dword [ebx + 0x1c]
lea edx, [ebp - 4]
mov eax, dword [eax]
call fcn.0040364c
xor ecx, ecx
mov edx, 2
mov cl, al
cmp ecx, 1
sbb eax, eax
neg eax
push eax
lea eax, [ebp - 8]
dec dword [ebx + 0x1c]
call fcn.0044dd20
pop ecx
test ecx, ecx
jne 0x401ad4
mov word [ebx + 0x10], 0x14
mov dl, 1
mov eax, dword [0x430fbc]
call fcn.004020cc
mov ecx, dword [ebp - 0x88]
mov dword [ecx + 0x1ac8], eax
mov dl, 1
mov eax, dword [0x430fbc]
call fcn.004020cc
mov ecx, dword [ebp - 0x88]
lea edx, [esi + 0x1b9]
mov dword [ecx + 0x1acc], eax
lea ecx, [ebp - 0x19c]
mov eax, dword [ebp - 4]
push eax
push edx
push ecx
call sub.USER32.DLL_wsprintfA
add esp, 0xc
lea eax, [ebp - 0x19c]
lea edx, [esi + 0x1d5]
lea ecx, [esi + 0x1cc]
push eax
push 1
push edx
push ecx
call sub.KERNEL32.DLL_GetPrivateProfileIntA
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x28]
mov word [ebx + 0x10], 0x5c
lea edx, [ebp - 0x19c]
call fcn.0044dc50
inc dword [ebx + 0x1c]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x40c908]
call fcn.00402120
mov dword [ebp - 0x90], eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0044dd20
mov word [ebx + 0x10], 0x14
xor ecx, ecx
mov dword [ebp - 0x94], ecx
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x8c]
jge 0x401fb6
mov word [ebx + 0x10], 0x68
lea edx, [esi + 0x1ec]
lea eax, [ebp - 0x38]
call fcn.0044dc50
inc dword [ebx + 0x1c]
xor ecx, ecx
mov edx, dword [eax]
lea eax, [ebp - 0x3c]
push edx
mov dword [ebp - 0x3c], ecx
push eax
xor edx, edx
inc dword [ebx + 0x1c]
mov dword [ebp - 0x30], edx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x94]
inc eax
call fcn.0043aa90
lea edx, [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x34]
inc dword [ebx + 0x1c]
lea eax, [esi + 0x1e6]
call fcn.0044df20
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x2c]
mov ecx, dword [edx]
lea edx, [esi + 0x1dd]
push ecx
call fcn.0044dc50
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x90]
pop ecx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x3c]
mov eax, dword [eax + 0x1ac8]
mov edx, dword [edx]
mov ecx, dword [eax]
call dword [ecx + 0x34]
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0044dd20
mov word [ebx + 0x10], 0x74
lea edx, [esi + 0x1fe]
lea eax, [ebp - 0x4c]
call fcn.0044dc50
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x50]
mov ecx, dword [eax]
xor eax, eax
push ecx
mov dword [ebp - 0x50], eax
push edx
xor ecx, ecx
inc dword [ebx + 0x1c]
mov dword [ebp - 0x44], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x94]
inc eax
call fcn.0043aa90
lea edx, [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x48]
inc dword [ebx + 0x1c]
lea eax, [esi + 0x1f6]
call fcn.0044df20
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x40]
mov ecx, dword [edx]
lea edx, [esi + 0x1ed]
push ecx
call fcn.0044dc50
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x90]
pop ecx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x50]
mov eax, dword [eax + 0x1acc]
mov edx, dword [edx]
mov ecx, dword [eax]
call dword [ecx + 0x34]
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0044dd20
inc dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [ebp - 0x8c]
jl 0x401dde
mov edi, dword [ebp - 0x90]
mov dword [ebp - 0x58], edi
test edi, edi
je 0x401fe1
mov eax, dword [edi]
mov dword [ebp - 0x54], eax
mov word [ebx + 0x10], 0x8c
mov edx, 3
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebx + 0x10], 0x80
xor edx, edx
mov dword [ebp - 0x98], edx
mov word [ebx + 0x10], 0x14
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x8c]
jge 0x4020a9
mov word [ebx + 0x10], 0x98
xor edx, edx
mov dword [ebp - 0x5c], edx
lea ecx, [ebp - 0x5c]
inc dword [ebx + 0x1c]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 0x1ac8]
mov edx, dword [ebp - 0x98]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x5c]
push eax
lea edx, [esi + 0x220]
lea eax, [ebp - 0x60]
call fcn.0044dc50
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x60]
pop eax
call fcn.0044ddf0
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0044dd20
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0044dd20
pop ecx
test cl, cl
je 0x402080
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x88]
call fcn.004021ec
jmp 0x402091
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x88]
call fcn.00402670
inc dword [ebp - 0x98]
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [ebp - 0x8c]
jl 0x402001
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0044dd20
mov ecx, dword [ebx]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret