Function at 0x40ad70
Capabilities:
Delete file
Read .ini file

Disassembly:
mov eax, 0x1c70
call fcn.0050c9c0
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor ebx, ebx
call fcn.00443aa0
mov ecx, eax
call fcn.004460d0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x125a]
mov word [esp + 0x1258], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1462]
mov word [esp + 0x1460], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x166a]
mov word [esp + 0x1668], bx
rep stosd dword es:[edi], eax
push 0x559d9c
stosw word es:[edi], ax
call dword [sym.imp.MSVCRT.dll_wcslen]
sub eax, 4
push eax
lea eax, [esp + 0x1468]
push 0x559d9c
push eax
call dword [sym.imp.MSVCRT.dll_wcsncpy]
push 5
lea ecx, [esp + 0x1474]
push str..ini
push ecx
call dword [sym.imp.MSVCRT.dll_wcsncat]
add esp, 0x1c
lea edx, [esp + 0x1258]
mov ecx, ebp
push 0x103
push edx
push 1
call fcn.0040a450
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x1460]
lea ecx, [esp + 0x1258]
push eax
push ecx
push 0x528910
lea edx, [esp + 0x1c]
push 0x103
push edx
call esi
add esp, 0x14
lea eax, [esp + 0x1258]
lea ecx, [esp + 0x218]
push str.360seie6.ini
push eax
push 0x528910
push 0x103
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x1258]
push str.ie6_mode
push edx
push 0x528910
lea eax, [esp + 0x1674]
push 0x103
push eax
call esi
mov eax, dword [esp + 0x1c98]
add esp, 0x14
cmp eax, ebx
jne 0x40b23b
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a7a]
mov word [esp + 0x1a78], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1a7c]
push 0x103
push edx
push 0x559900
push 0x528b28
push 0x52861c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1872]
mov word [esp + 0x1870], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1870]
push eax
push 0x103
push ecx
push 0x559900
push str.ShowFavBar
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x424]
push 0x103
push eax
push 0x559900
push 0x528af4
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x559900
push 0x528ad8
push 0x52861c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc40]
push eax
push 0x103
push ecx
push 0x559900
push 0x528ac0
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x1054]
push 0x103
push eax
push 0x559900
push 0x528aa4
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x559900
push 0x528a90
push 0x52861c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x830]
push eax
push 0x103
push ecx
push 0x559900
push 0x528a78
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe4a]
mov word [esp + 0xe48], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xe4c]
push 0x103
push eax
push 0x559900
push 0x528830
push str.Main
call esi
lea ecx, [esp + 0x10]
push 1
lea edx, [esp + 0x21c]
push ecx
push edx
call fcn.0043c740
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
mov edi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1a78]
push eax
push ecx
push 0x528b28
push 0x52861c
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x1870]
push edx
push eax
push str.ShowFavBar
push 0x52861c
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x528af4
push 0x52861c
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0x628]
push eax
push ecx
push 0x528ad8
push 0x52861c
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0xc40]
push edx
push eax
push 0x528ac0
push 0x52861c
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x528aa4
push 0x52861c
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0xa38]
push eax
push ecx
push 0x528a90
push 0x52861c
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x830]
push edx
push eax
push 0x528a78
push 0x52861c
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x528830
push str.Main
call esi
lea eax, [esp + 0x1668]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.0040b5c0
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.0040b980
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
cmp eax, 1
jne 0x40b554
push eax
push 0x528a68
push 0x52861c
call fcn.0040cae0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe56]
mov word [esp + 0xe54], bx
rep stosd dword es:[edi], eax
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0xe48]
push eax
push 0x103
push ecx
push 0x559900
push 0x528b28
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x834]
push 0x103
push eax
push 0x559900
push str.ShowFavBar
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x559900
push 0x528af4
push 0x52861c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x1050]
push eax
push 0x103
push ecx
push 0x559900
push 0x528ad8
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xc44]
push 0x103
push eax
push 0x559900
push 0x528ac0
push 0x52861c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x559900
push 0x528aa4
push 0x52861c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x420]
push eax
push 0x103
push ecx
push 0x559900
push 0x528a90
push 0x52861c
call esi
lea edx, [esp + 0x218]
push 1
lea eax, [esp + 0x14]
push edx
push eax
call fcn.0043c740
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
lea ecx, [esp + 0x218]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x528b28
push 0x52861c
mov edi, eax
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0x830]
push eax
push ecx
push str.ShowFavBar
push 0x52861c
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0xa38]
push edx
push eax
push 0x528af4
push 0x52861c
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x528ad8
push 0x52861c
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0xc40]
push eax
push ecx
push 0x528ac0
push 0x52861c
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0x628]
push edx
push eax
push 0x528aa4
push 0x52861c
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x528a90
push 0x52861c
call esi
push ebx
push 0x20
push 2
push ebx
push 1
lea eax, [esp + 0x167c]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x40b527
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x218]
push ecx
mov ecx, ebp
call fcn.0040b6b0
lea edx, [esp + 0x218]
mov ecx, ebp
push edx
call fcn.0040b980
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x1c70
ret 4