Function at 0x40cd30
Capabilities:
Delete file
Read .ini file

Disassembly:
mov eax, 0x1c70
call fcn.0051d7f0
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor ebx, ebx
call fcn.00447590
mov ecx, eax
call fcn.00449cb0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x125a]
mov word [esp + 0x1258], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1462]
mov word [esp + 0x1460], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x166a]
mov word [esp + 0x1668], bx
rep stosd dword es:[edi], eax
push 0x56e684
stosw word es:[edi], ax
call dword [sym.imp.MSVCRT.dll_wcslen]
sub eax, 4
push eax
lea eax, [esp + 0x1468]
push 0x56e684
push eax
call dword [sym.imp.MSVCRT.dll_wcsncpy]
push 5
lea ecx, [esp + 0x1474]
push str..ini
push ecx
call dword [sym.imp.MSVCRT.dll_wcsncat]
add esp, 0x1c
lea edx, [esp + 0x1258]
mov ecx, ebp
push 0x103
push edx
push 1
call fcn.0040c400
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x1460]
lea ecx, [esp + 0x1258]
push eax
push ecx
push 0x53ac6c
lea edx, [esp + 0x1c]
push 0x103
push edx
call esi
add esp, 0x14
lea eax, [esp + 0x1258]
lea ecx, [esp + 0x218]
push str.360seie6.ini
push eax
push 0x53ac6c
push 0x103
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x1258]
push str.ie6_mode
push edx
push 0x53ac6c
lea eax, [esp + 0x1674]
push 0x103
push eax
call esi
mov eax, dword [esp + 0x1c98]
add esp, 0x14
cmp eax, ebx
jne 0x40d1fb
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a7a]
mov word [esp + 0x1a78], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1a7c]
push 0x103
push edx
push 0x56e1d0
push 0x53ae38
push 0x53a9a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1872]
mov word [esp + 0x1870], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1870]
push eax
push 0x103
push ecx
push 0x56e1d0
push str.ShowFavBar
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x424]
push 0x103
push eax
push 0x56e1d0
push 0x53ae04
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x56e1d0
push 0x53ade8
push 0x53a9a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc40]
push eax
push 0x103
push ecx
push 0x56e1d0
push 0x53add0
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x1054]
push 0x103
push eax
push 0x56e1d0
push 0x53adb4
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x56e1d0
push 0x53ada0
push 0x53a9a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x830]
push eax
push 0x103
push ecx
push 0x56e1d0
push 0x53ad88
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe4a]
mov word [esp + 0xe48], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x10]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xe4c]
push 0x103
push eax
push 0x56e1d0
push 0x53ab8c
push str.Main
call esi
lea ecx, [esp + 0x10]
push 1
lea edx, [esp + 0x21c]
push ecx
push edx
call fcn.004402c0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
mov edi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1a78]
push eax
push ecx
push 0x53ae38
push 0x53a9a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x1870]
push edx
push eax
push str.ShowFavBar
push 0x53a9a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x53ae04
push 0x53a9a8
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0x628]
push eax
push ecx
push 0x53ade8
push 0x53a9a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0xc40]
push edx
push eax
push 0x53add0
push 0x53a9a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x53adb4
push 0x53a9a8
call esi
lea eax, [esp + 0x10]
lea ecx, [esp + 0xa38]
push eax
push ecx
push 0x53ada0
push 0x53a9a8
call esi
lea edx, [esp + 0x10]
lea eax, [esp + 0x830]
push edx
push eax
push 0x53ad88
push 0x53a9a8
call esi
lea ecx, [esp + 0x10]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x53ab8c
push str.Main
call esi
lea eax, [esp + 0x1668]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.0040d580
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.0040d940
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
cmp eax, 1
jne 0x40d514
push eax
push 0x53ad78
push 0x53a9a8
call fcn.0040ec00
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe56]
mov word [esp + 0xe54], bx
rep stosd dword es:[edi], eax
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0xe48]
push eax
push 0x103
push ecx
push 0x56e1d0
push 0x53ae38
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x832]
mov word [esp + 0x830], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x834]
push 0x103
push eax
push 0x56e1d0
push str.ShowFavBar
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa3a]
mov word [esp + 0xa38], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0xa38]
push ecx
push 0x103
push edx
push 0x56e1d0
push 0x53ae04
push 0x53a9a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1052]
mov word [esp + 0x1050], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x1050]
push eax
push 0x103
push ecx
push 0x56e1d0
push 0x53ade8
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc42]
mov word [esp + 0xc40], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x218]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0xc44]
push 0x103
push eax
push 0x56e1d0
push 0x53add0
push 0x53a9a8
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x62a]
mov word [esp + 0x628], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x218]
lea edx, [esp + 0x628]
push ecx
push 0x103
push edx
push 0x56e1d0
push 0x53adb4
push 0x53a9a8
stosw word es:[edi], ax
call esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x422]
mov word [esp + 0x420], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x218]
lea ecx, [esp + 0x420]
push eax
push 0x103
push ecx
push 0x56e1d0
push 0x53ada0
push 0x53a9a8
call esi
lea edx, [esp + 0x218]
push 1
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004402c0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
lea ecx, [esp + 0x218]
lea edx, [esp + 0xe48]
push ecx
push edx
push 0x53ae38
push 0x53a9a8
mov edi, eax
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0x830]
push eax
push ecx
push str.ShowFavBar
push 0x53a9a8
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0xa38]
push edx
push eax
push 0x53ae04
push 0x53a9a8
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1050]
push ecx
push edx
push 0x53ade8
push 0x53a9a8
call esi
lea eax, [esp + 0x218]
lea ecx, [esp + 0xc40]
push eax
push ecx
push 0x53add0
push 0x53a9a8
call esi
lea edx, [esp + 0x218]
lea eax, [esp + 0x628]
push edx
push eax
push 0x53adb4
push 0x53a9a8
call esi
lea ecx, [esp + 0x218]
lea edx, [esp + 0x420]
push ecx
push edx
push 0x53ada0
push 0x53a9a8
call esi
push ebx
push 0x20
push 2
push ebx
push 1
lea eax, [esp + 0x167c]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x40d4e7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x218]
push ecx
mov ecx, ebp
call fcn.0040d670
lea edx, [esp + 0x218]
mov ecx, ebp
push edx
call fcn.0040d940
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c70
ret 4
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x1c70
ret 4