Function at 0x10001a52
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1018
call fcn.10041750
mov eax, dword [0x1013a420]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1008], esi
mov dword [ebp - 0x1014], edi
cmp edi, 9
ja 0x10001e62
push 0x1000
call fcn.1003865f
imul edi, edi, 0x48
mov dword [esp], 0x1000
push 0
push eax
mov dword [ebp - 0x100c], edi
mov dword [edi + ebx + 0x60], eax
call fcn.1003e9c0
xor eax, eax
push 0xffe
push eax
mov word [ebp - 0x1004], ax
lea eax, [ebp - 0x1002]
push eax
call fcn.1003e9c0
add esp, 0x18
lea eax, [ebp - 0x1004]
push dword [ebx + 0x14]
push 0x1000
push eax
push 0
push 0x1012b220
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [ebp - 0x1004], 0
je 0x10001b81
lea eax, [ebp - 0x1004]
push 0x1012b228
push eax
call fcn.10038cb5
mov dword [ebp - 0x1010], eax
pop ecx
pop ecx
test eax, eax
je 0x10001b81
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x1012b228
call esi
mov edx, dword [ebp - 0x1010]
lea ecx, [edx + eax*2]
push ecx
mov dword [ebp - 0x1018], ecx
call esi
cmp eax, 2
jle 0x10001b7b
mov esi, dword [ebp - 0x1018]
cmp word [esi + eax*2 - 2], 0x5c
jne 0x10001b7b
cmp word [esi + eax*2 - 4], 0x7c
jne 0x10001b7b
mov ecx, dword [ebp - 0x1010]
xor edx, edx
mov dword [ecx], edx
xor ecx, ecx
mov dword [esi + eax*2 - 4], ecx
lea eax, [ebp - 0x1004]
push eax
push dword [edi + ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push esi
call dword [sym.imp.SHLWAPI.dll_StrToIntW]
mov byte [edi + ebx + 0x64], al
mov esi, dword [ebp - 0x1008]
push 0x28
call fcn.1003865f
mov edi, eax
mov eax, dword [ebp - 0x100c]
pop ecx
push 0xa
pop ecx
mov dword [eax + ebx + 0x88], edi
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, esi
call fcn.1000bbb1
mov edi, dword [ebp - 0x100c]
mov dword [edi + ebx + 0x94], eax
test eax, eax
je 0x10001bbd
lea eax, [esi + 0xa]
push eax
jmp 0x10001bbe
push esi
push dword [edi + ebx + 0x88]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x100
call fcn.1003865f
mov dword [esp], 0x100
push 0
push eax
mov dword [edi + ebx + 0x54], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x100
push dword [edi + ebx + 0x54]
push 0
push str.FileName
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x80
call fcn.1003865f
push 0x80
push 0
push eax
mov dword [edi + ebx + 0x58], eax
call fcn.1003e9c0
add esp, 0x10
push dword [ebx + 0x14]
push 0x80
push dword [edi + ebx + 0x58]
push 0
push 0x1012b250
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x400
call fcn.1003865f
mov dword [esp], 0x400
push 0
push eax
mov dword [edi + ebx + 0x5c], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x400
push dword [edi + ebx + 0x5c]
push 0
push str.FileDescription
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x400
call fcn.1003865f
mov dword [esp], 0x400
push 0
push eax
mov dword [edi + ebx + 0x84], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x400
push dword [edi + ebx + 0x84]
push 0
push str.RunParameters
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push dword [ebx + 0x14]
push 0
push str.Hidden
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
call esi
push 0x1000
mov dword [edi + ebx + 0x68], eax
call fcn.1003865f
mov dword [esp], 0x1000
push 0
push eax
mov dword [edi + ebx + 0x6c], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x1000
push dword [edi + ebx + 0x6c]
push 0
push str.RegKey
push dword [ebp - 0x1008]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x1000
call fcn.1003865f
mov dword [esp], 0x1000
push 0
push eax
mov dword [edi + ebx + 0x70], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x1000
push dword [edi + ebx + 0x70]
push 0
push str.RegKey1
push dword [ebp - 0x1008]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x1000
call fcn.1003865f
mov dword [esp], 0x1000
push 0
push eax
mov dword [edi + ebx + 0x74], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x1000
push dword [edi + ebx + 0x74]
push 0
push str.RegKey2
push dword [ebp - 0x1008]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x1000
call fcn.1003865f
mov dword [esp], 0x1000
push 0
push eax
mov dword [edi + ebx + 0x78], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x1000
push dword [edi + ebx + 0x78]
push 0
push str.RegKey3
push dword [ebp - 0x1008]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x1000
call fcn.1003865f
mov dword [esp], 0x1000
push 0
push eax
mov dword [edi + ebx + 0x98], eax
call fcn.1003e9c0
add esp, 0xc
push dword [ebx + 0x14]
push 0x1000
push dword [edi + ebx + 0x98]
push 0
push str.ExcludeSoftware
push dword [ebp - 0x1008]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push dword [ebx + 0x14]
push 0
push str.IsBarShow
push dword [ebp - 0x1008]
call esi
mov dword [edi + ebx + 0x7c], eax
push dword [ebx + 0x14]
push 0
push str.ForceHidden
push dword [ebp - 0x1008]
call esi
mov esi, dword [ebp - 0x1014]
mov ecx, ebx
push esi
mov dword [edi + ebx + 0x80], eax
call fcn.1000222e
mov dword [edi + ebx + 0x8c], eax
lea eax, [esi + 2]
imul eax, eax, 0x48
and dword [eax + ebx], 0
xor eax, eax
inc eax
jmp 0x10001e64
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1003890f
mov esp, ebp
pop ebp
ret 8