Function at 0x431410
Capabilities:
Delete file
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x44e4f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xff8
push ebx
push ebp
push esi
mov esi, dword [esp + 0x1014]
push edi
xor ebp, ebp
mov ecx, 0x1f3
xor eax, eax
lea edi, [esp + 0x83a]
mov word [esp + 0x838], bp
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x83c]
push 0x7d0
push ecx
stosw word es:[edi], ax
mov eax, dword [esp + 0x1028]
push 0x468bac
push str.UpFavCfg
mov dword [0x4dc754], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x42a]
mov word [esp + 0x428], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x222]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov word [esp + 0x220], bp
push esi
rep stosd dword es:[edi], eax
lea edx, [esp + 0x42c]
push 0x104
push edx
push 0x4d6e34
push str.favver
push str.UpFavCfg
stosw word es:[edi], ax
call ebx
push esi
lea eax, [esp + 0x224]
push 0x104
push eax
push 0x4d6e34
push str.favdata
push str.UpFavCfg
call ebx
push esi
push 0x104
push 0x4dc760
push 0x4d6e34
push str.usercfgini
push str.UpFavCfg
call ebx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x632]
mov word [esp + 0x630], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a]
mov word [esp + 0x18], bp
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x634]
push 0x104
push ecx
push 0x4d6e34
push str.cfgver
push str.UpFavCfg
stosw word es:[edi], ax
call ebx
push esi
lea edx, [esp + 0x1c]
push 0x104
push edx
push 0x4d6e34
push str.cfgdata
push str.UpFavCfg
call ebx
lea eax, [esp + 0x220]
lea ecx, [esp + 0x838]
push eax
lea edx, [esp + 0x42c]
push ecx
push edx
call fcn.00431270
mov edi, eax
lea eax, [esp + 0x1c]
push eax
call fcn.00430800
add esp, 0x10
mov eax, dword [eax]
push edi
push eax
push str.seup.exe__S__UpFavFile_d_r_n
mov dword [esp + 0x101c], ebp
call fcn.00430850
mov eax, dword [esp + 0x1c]
mov edx, dword [0x463294]
add esp, 0xc
mov dword [esp + 0x1010], 0xffffffff
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4315f7
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4315f7
mov edx, dword [esp + 0x10]
lea eax, [edx - 0xc]
push eax
call fcn.0044737a
add esp, 4
mov eax, dword [0x4dc754]
mov ebx, dword [sym.imp.USER32.dll_PostMessageW]
push ebp
push edi
push 0x401
push eax
call ebx
lea ecx, [esp + 0x18]
lea edx, [esp + 0x838]
push ecx
lea eax, [esp + 0x634]
push edx
push eax
call fcn.00431130
lea ecx, [esp + 0x20]
mov edi, eax
push ecx
call fcn.00430800
add esp, 0x10
mov edx, dword [eax]
push edi
push edx
push str.seup.exe__S__UpCfgFile_d_r_n
mov dword [esp + 0x101c], 1
call fcn.00430850
mov eax, dword [esp + 0x20]
mov edx, dword [0x463294]
add esp, 0xc
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x431680
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x431680
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.0044737a
add esp, 4
mov eax, dword [0x4dc754]
push ebp
push edi
push 0x402
push eax
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x220]
push ecx
call edi
lea edx, [esp + 0x18]
push edx
call edi
push esi
call edi
mov ecx, dword [esp + 0x1008]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x1004
ret