Function at 0x434d50
Capabilities:
Delete file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c2f21
mov eax, dword fs:[0]
push eax
sub esp, 0x880
mov eax, dword [0x4f4214]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 0x884], edi
mov eax, dword [0x4f9f60]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0x888], esi
cmp eax, edi
jne 0x435024
push 0x206
lea edx, [ebp - 0x41e]
xor ecx, ecx
push edi
push edx
mov word [ebp - 0x420], cx
call fcn.0049f910
add esp, 0xc
push 0x104
lea eax, [ebp - 0x420]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x434de3
push esi
mov ecx, 0x4d4e80
call fcn.004152e0
mov dword [ebp - 4], edi
jmp 0x43503d
lea ecx, [ebp - 0x420]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea edx, [ebp - 0x420]
push edx
call ebx
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCanonicalizeW]
push str.DownLoadApp
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x250
lea eax, [ebp - 0x878]
push edi
push eax
call fcn.0049f910
add esp, 0xc
lea ecx, [ebp - 0x878]
push ecx
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x434e6d
lea eax, [ebp - 0x218]
push eax
call fcn.00436b50
add esp, 4
lea ecx, [ebp - 0x218]
push ecx
call ebx
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
test byte [ebp - 0x878], 0x10
jne 0x434e99
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x218]
push eax
call fcn.00436b50
add esp, 4
mov edx, dword [0x4f41d4]
mov eax, dword [edx + 0xc]
mov ecx, 0x4f41d4
call eax
lea edi, [eax + 0x10]
mov dword [ebp - 0x87c], edi
mov dword [ebp - 4], 2
cmp dword [edi - 0xc], 0
jne 0x434f81
lea edi, [ebp - 0x880]
call fcn.00434b30
mov byte [ebp - 4], 3
lea edi, [ebp - 0x87c]
call fcn.00402630
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x880]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x434f03
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x880]
push ecx
lea edx, [ebp - 0x87c]
push edx
mov ecx, 1
call fcn.0042ee90
mov byte [ebp - 4], 5
push eax
mov ecx, 0x4d5cf0
call fcn.0041fbf0
add esp, 4
mov bl, al
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x880]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x434f55
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x434f6a
lea ecx, [ebp - 0x87c]
push ecx
mov edx, 0x4d5cf0
call fcn.0041fc50
lea edx, [ebp - 0x87c]
push edx
mov edx, str.config.ini
call fcn.0041fc50
mov edi, dword [ebp - 0x87c]
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x626]
push ecx
mov word [ebp - 0x628], ax
call fcn.0049f910
add esp, 0xc
push edi
push 0x104
lea edx, [ebp - 0x628]
push edx
lea eax, [ebp - 0x218]
push eax
push str.savepath
push str.DuoDuoMain
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x628]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x434fd0
sub eax, edx
lea ecx, [ebp - 0x628]
sar eax, 1
push ecx
push 0x4f9f60
mov ebx, eax
call fcn.004026a0
mov edx, dword [0x4f9f60]
push edx
call fcn.00436b50
add esp, 4
mov dword [ebp - 4], 0
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x435024
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [0x4f9f60]
add eax, 0xfffffff0
call fcn.004027b0
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x884], 1
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049c72a
mov esp, ebp
pop ebp
ret