Function at 0x40ae40
Capabilities:
Delete file
Read .ini file

Disassembly:
mov eax, 0x1c70
call fcn.00512b50
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor ebx, ebx
call fcn.00445af0
mov ecx, eax
call fcn.00448120
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x125a]
mov word [esp + 0x1258], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1462]
mov word [esp + 0x1460], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x166a]
mov word [esp + 0x1668], bx
rep stosd dword es:[edi], eax
push 0x56135c
stosw word es:[edi], ax
call dword [sym.imp.MSVCRT.dll_wcslen]
sub eax, 4
push eax
lea eax, [esp + 0x1468]
push 0x56135c
push eax
call dword [sym.imp.MSVCRT.dll_wcsncpy]
push 5
lea ecx, [esp + 0x1474]
push str..ini
push ecx
call dword [sym.imp.MSVCRT.dll_wcsncat]
add esp, 0x1c
lea edx, [esp + 0x1258]
mov ecx, ebp
push 0x103
push edx
push 1
call fcn.0040a520
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x1460]
lea ecx, [esp + 0x1258]
push eax
push ecx
push 0x52e930
lea edx, [esp + 0x1c]
push 0x103
push edx
call esi
add esp, 0x14
lea eax, [esp + 0x1258]
lea ecx, [esp + 0x218]
push str.360seie6.ini
push eax
push 0x52e930
push 0x103
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x1258]
push str.ie6_mode
push edx
push 0x52e930
lea eax, [esp + 0x1674]
push 0x103
push eax
call esi
mov eax, dword [esp + 0x1c98]
add esp, 0x14
cmp eax, ebx
jne 0x40b30b
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a7a]
mov word [esp + 0x1a78], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1a7c]
push 0x103
push edx
push 0x560ec0
push 0x52eb48
push 0x52e63c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1872]
mov word [esp + 0x1870], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1870]
push eax
push 0x103
push ecx
push 0x560ec0
push str.ShowFavBar
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x424]
push 0x103
push eax
push 0x560ec0
push 0x52eb14
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x560ec0
push 0x52eaf8
push 0x52e63c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc40]
push eax
push 0x103
push ecx
push 0x560ec0
push 0x52eae0
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x1054]
push 0x103
push eax
push 0x560ec0
push 0x52eac4
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x560ec0
push 0x52eab0
push 0x52e63c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x830]
push eax
push 0x103
push ecx
push 0x560ec0
push 0x52ea98
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe4a]
mov word [esp + 0xe48], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xe4c]
push 0x103
push eax
push 0x560ec0
push 0x52e850
push str.Main
call esi
lea ecx, [esp + 0x10]
push 1
lea edx, [esp + 0x21c]
push ecx
push edx
call fcn.0043e7d0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
mov edi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1a78]
push eax
push ecx
push 0x52eb48
push 0x52e63c
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x1870]
push edx
push eax
push str.ShowFavBar
push 0x52e63c
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x52eb14
push 0x52e63c
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0x628]
push eax
push ecx
push 0x52eaf8
push 0x52e63c
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0xc40]
push edx
push eax
push 0x52eae0
push 0x52e63c
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x52eac4
push 0x52e63c
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0xa38]
push eax
push ecx
push 0x52eab0
push 0x52e63c
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x830]
push edx
push eax
push 0x52ea98
push 0x52e63c
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x52e850
push str.Main
call esi
lea eax, [esp + 0x1668]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.0040b690
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.0040ba50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
cmp eax, 1
jne 0x40b624
push eax
push 0x52ea88
push 0x52e63c
call fcn.0040cc10
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe56]
mov word [esp + 0xe54], bx
rep stosd dword es:[edi], eax
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0xe48]
push eax
push 0x103
push ecx
push 0x560ec0
push 0x52eb48
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x834]
push 0x103
push eax
push 0x560ec0
push str.ShowFavBar
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x560ec0
push 0x52eb14
push 0x52e63c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x1050]
push eax
push 0x103
push ecx
push 0x560ec0
push 0x52eaf8
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xc44]
push 0x103
push eax
push 0x560ec0
push 0x52eae0
push 0x52e63c
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x560ec0
push 0x52eac4
push 0x52e63c
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x420]
push eax
push 0x103
push ecx
push 0x560ec0
push 0x52eab0
push 0x52e63c
call esi
lea edx, [esp + 0x218]
push 1
lea eax, [esp + 0x14]
push edx
push eax
call fcn.0043e7d0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
lea ecx, [esp + 0x218]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x52eb48
push 0x52e63c
mov edi, eax
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0x830]
push eax
push ecx
push str.ShowFavBar
push 0x52e63c
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0xa38]
push edx
push eax
push 0x52eb14
push 0x52e63c
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x52eaf8
push 0x52e63c
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0xc40]
push eax
push ecx
push 0x52eae0
push 0x52e63c
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0x628]
push edx
push eax
push 0x52eac4
push 0x52e63c
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x52eab0
push 0x52e63c
call esi
push ebx
push 0x20
push 2
push ebx
push 1
lea eax, [esp + 0x167c]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x40b5f7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x218]
push ecx
mov ecx, ebp
call fcn.0040b780
lea edx, [esp + 0x218]
mov ecx, ebp
push edx
call fcn.0040ba50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x1c70
ret 4