Function at 0x40cad0
Capabilities:
Delete file
Read .ini file

Disassembly:
mov eax, 0x1c70
call fcn.0051c5a0
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor ebx, ebx
call fcn.00447160
mov ecx, eax
call fcn.00449810
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x125a]
mov word [esp + 0x1258], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1462]
mov word [esp + 0x1460], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x166a]
mov word [esp + 0x1668], bx
rep stosd dword es:[edi], eax
push 0x56c13c
stosw word es:[edi], ax
call dword [sym.imp.MSVCRT.dll_wcslen]
sub eax, 4
push eax
lea eax, [esp + 0x1468]
push 0x56c13c
push eax
call dword [sym.imp.MSVCRT.dll_wcsncpy]
push 5
lea ecx, [esp + 0x1474]
push str..ini
push ecx
call dword [sym.imp.MSVCRT.dll_wcsncat]
add esp, 0x1c
lea edx, [esp + 0x1258]
mov ecx, ebp
push 0x103
push edx
push 1
call fcn.0040c1a0
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x1460]
lea ecx, [esp + 0x1258]
push eax
push ecx
push 0x538c6c
lea edx, [esp + 0x1c]
push 0x103
push edx
call esi
add esp, 0x14
lea eax, [esp + 0x1258]
lea ecx, [esp + 0x218]
push str.360seie6.ini
push eax
push 0x538c6c
push 0x103
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x1258]
push str.ie6_mode
push edx
push 0x538c6c
lea eax, [esp + 0x1674]
push 0x103
push eax
call esi
mov eax, dword [esp + 0x1c98]
add esp, 0x14
cmp eax, ebx
jne 0x40cf9b
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a7a]
mov word [esp + 0x1a78], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1a7c]
push 0x103
push edx
push 0x56bc90
push 0x538e38
push 0x5389a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1872]
mov word [esp + 0x1870], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1870]
push eax
push 0x103
push ecx
push 0x56bc90
push str.ShowFavBar
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x424]
push 0x103
push eax
push 0x56bc90
push 0x538e04
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x56bc90
push 0x538de8
push 0x5389a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc40]
push eax
push 0x103
push ecx
push 0x56bc90
push 0x538dd0
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x1054]
push 0x103
push eax
push 0x56bc90
push 0x538db4
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x56bc90
push 0x538da0
push 0x5389a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x830]
push eax
push 0x103
push ecx
push 0x56bc90
push 0x538d88
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe4a]
mov word [esp + 0xe48], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xe4c]
push 0x103
push eax
push 0x56bc90
push 0x538b8c
push str.Main
call esi
lea ecx, [esp + 0x10]
push 1
lea edx, [esp + 0x21c]
push ecx
push edx
call fcn.0043fea0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
mov edi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1a78]
push eax
push ecx
push 0x538e38
push 0x5389a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x1870]
push edx
push eax
push str.ShowFavBar
push 0x5389a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x538e04
push 0x5389a8
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0x628]
push eax
push ecx
push 0x538de8
push 0x5389a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0xc40]
push edx
push eax
push 0x538dd0
push 0x5389a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x538db4
push 0x5389a8
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0xa38]
push eax
push ecx
push 0x538da0
push 0x5389a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x830]
push edx
push eax
push 0x538d88
push 0x5389a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x538b8c
push str.Main
call esi
lea eax, [esp + 0x1668]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.0040d320
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.0040d6e0
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
cmp eax, 1
jne 0x40d2b4
push eax
push 0x538d78
push 0x5389a8
call fcn.0040e8c0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe56]
mov word [esp + 0xe54], bx
rep stosd dword es:[edi], eax
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0xe48]
push eax
push 0x103
push ecx
push 0x56bc90
push 0x538e38
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x834]
push 0x103
push eax
push 0x56bc90
push str.ShowFavBar
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x56bc90
push 0x538e04
push 0x5389a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x1050]
push eax
push 0x103
push ecx
push 0x56bc90
push 0x538de8
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xc44]
push 0x103
push eax
push 0x56bc90
push 0x538dd0
push 0x5389a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x56bc90
push 0x538db4
push 0x5389a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x420]
push eax
push 0x103
push ecx
push 0x56bc90
push 0x538da0
push 0x5389a8
call esi
lea edx, [esp + 0x218]
push 1
lea eax, [esp + 0x14]
push edx
push eax
call fcn.0043fea0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
lea ecx, [esp + 0x218]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x538e38
push 0x5389a8
mov edi, eax
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0x830]
push eax
push ecx
push str.ShowFavBar
push 0x5389a8
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0xa38]
push edx
push eax
push 0x538e04
push 0x5389a8
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x538de8
push 0x5389a8
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0xc40]
push eax
push ecx
push 0x538dd0
push 0x5389a8
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0x628]
push edx
push eax
push 0x538db4
push 0x5389a8
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x538da0
push 0x5389a8
call esi
push ebx
push 0x20
push 2
push ebx
push 1
lea eax, [esp + 0x167c]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x40d287
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x218]
push ecx
mov ecx, ebp
call fcn.0040d410
lea edx, [esp + 0x218]
mov ecx, ebp
push edx
call fcn.0040d6e0
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x1c70
ret 4