Function at 0x40cac0
Capabilities:
Delete file
Read .ini file

Disassembly:
mov eax, 0x1c70
call fcn.0051d1f0
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor ebx, ebx
call fcn.00447080
mov ecx, eax
call fcn.00449740
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x125a]
mov word [esp + 0x1258], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1462]
mov word [esp + 0x1460], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x166a]
mov word [esp + 0x1668], bx
rep stosd dword es:[edi], eax
push 0x56d5fc
stosw word es:[edi], ax
call dword [sym.imp.MSVCRT.dll_wcslen]
sub eax, 4
push eax
lea eax, [esp + 0x1468]
push 0x56d5fc
push eax
call dword [sym.imp.MSVCRT.dll_wcsncpy]
push 5
lea ecx, [esp + 0x1474]
push str..ini
push ecx
call dword [sym.imp.MSVCRT.dll_wcsncat]
add esp, 0x1c
lea edx, [esp + 0x1258]
mov ecx, ebp
push 0x103
push edx
push 1
call fcn.0040c190
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x1460]
lea ecx, [esp + 0x1258]
push eax
push ecx
push 0x539c6c
lea edx, [esp + 0x1c]
push 0x103
push edx
call esi
add esp, 0x14
lea eax, [esp + 0x1258]
lea ecx, [esp + 0x218]
push str.360seie6.ini
push eax
push 0x539c6c
push 0x103
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x1258]
push str.ie6_mode
push edx
push 0x539c6c
lea eax, [esp + 0x1674]
push 0x103
push eax
call esi
mov eax, dword [esp + 0x1c98]
add esp, 0x14
cmp eax, ebx
jne 0x40cf8b
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a7a]
mov word [esp + 0x1a78], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1a7c]
push 0x103
push edx
push 0x56d150
push 0x539e38
push 0x5399a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1872]
mov word [esp + 0x1870], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1870]
push eax
push 0x103
push ecx
push 0x56d150
push str.ShowFavBar
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x424]
push 0x103
push eax
push 0x56d150
push 0x539e04
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x56d150
push 0x539de8
push 0x5399a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc40]
push eax
push 0x103
push ecx
push 0x56d150
push 0x539dd0
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x1054]
push 0x103
push eax
push 0x56d150
push 0x539db4
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x56d150
push 0x539da0
push 0x5399a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x830]
push eax
push 0x103
push ecx
push 0x56d150
push 0x539d88
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe4a]
mov word [esp + 0xe48], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xe4c]
push 0x103
push eax
push 0x56d150
push 0x539b8c
push str.Main
call esi
lea ecx, [esp + 0x10]
push 1
lea edx, [esp + 0x21c]
push ecx
push edx
call fcn.0043fdb0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
mov edi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1a78]
push eax
push ecx
push 0x539e38
push 0x5399a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x1870]
push edx
push eax
push str.ShowFavBar
push 0x5399a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x539e04
push 0x5399a8
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0x628]
push eax
push ecx
push 0x539de8
push 0x5399a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0xc40]
push edx
push eax
push 0x539dd0
push 0x5399a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x539db4
push 0x5399a8
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0xa38]
push eax
push ecx
push 0x539da0
push 0x5399a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x830]
push edx
push eax
push 0x539d88
push 0x5399a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x539b8c
push str.Main
call esi
lea eax, [esp + 0x1668]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.0040d310
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.0040d6d0
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
cmp eax, 1
jne 0x40d2a4
push eax
push 0x539d78
push 0x5399a8
call fcn.0040e8b0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe56]
mov word [esp + 0xe54], bx
rep stosd dword es:[edi], eax
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0xe48]
push eax
push 0x103
push ecx
push 0x56d150
push 0x539e38
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x834]
push 0x103
push eax
push 0x56d150
push str.ShowFavBar
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x56d150
push 0x539e04
push 0x5399a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x1050]
push eax
push 0x103
push ecx
push 0x56d150
push 0x539de8
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xc44]
push 0x103
push eax
push 0x56d150
push 0x539dd0
push 0x5399a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x56d150
push 0x539db4
push 0x5399a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x420]
push eax
push 0x103
push ecx
push 0x56d150
push 0x539da0
push 0x5399a8
call esi
lea edx, [esp + 0x218]
push 1
lea eax, [esp + 0x14]
push edx
push eax
call fcn.0043fdb0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
lea ecx, [esp + 0x218]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x539e38
push 0x5399a8
mov edi, eax
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0x830]
push eax
push ecx
push str.ShowFavBar
push 0x5399a8
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0xa38]
push edx
push eax
push 0x539e04
push 0x5399a8
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x539de8
push 0x5399a8
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0xc40]
push eax
push ecx
push 0x539dd0
push 0x5399a8
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0x628]
push edx
push eax
push 0x539db4
push 0x5399a8
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x539da0
push 0x5399a8
call esi
push ebx
push 0x20
push 2
push ebx
push 1
lea eax, [esp + 0x167c]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x40d277
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x218]
push ecx
mov ecx, ebp
call fcn.0040d400
lea edx, [esp + 0x218]
mov ecx, ebp
push edx
call fcn.0040d6d0
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x1c70
ret 4