Function at 0x431400
Capabilities:
Delete file
Get memory capacity
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x491c80
mov eax, dword fs:[0]
push eax
sub esp, 0x288
mov eax, dword [0x4aeb00]
xor eax, ebp
mov dword [ebp - 0x70], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x28c], ecx
call fcn.004305e0
mov ecx, eax
call fcn.0040d7c0
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x43144d
xor eax, eax
jmp 0x431759
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x28c]
add ecx, 0x60
call fcn.00457020
mov edx, dword [ebp - 0x28c]
add edx, 0x60
push edx
mov ecx, dword [ebp - 0x28c]
add ecx, 0x28
call fcn.0045b1c0
push 0x104
lea eax, [ebp - 0x27c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x27c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str.ComputerZ_HardwareDll.dll
lea edx, [ebp - 0x27c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x1c]
call fcn.00414990
mov dword [ebp - 4], 0
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x284]
call fcn.0040c690
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x284]
push edx
call fcn.00416880
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x284]
call fcn.0040c710
mov dword [ebp - 0x68], 0
push 0x40
push 0
lea eax, [ebp - 0x5c]
push eax
call fcn.0045fc70
add esp, 0xc
mov dword [ebp - 0x5c], 0x40
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x431544
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov cl, 0x14
call fcn.004622b0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
call fcn.00417080
mov dword [ebp - 0x60], eax
call fcn.0042f110
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x6c]
call fcn.00414990
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
push 0x800
push 0x800
lea ecx, [ebp - 0x6c]
call fcn.004320f0
push eax
push 0x497340
push 0x497344
push 0x49735c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x6c]
call fcn.00435150
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.00432120
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x431602
mov dword [ebp - 0x68], 1
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040c680
push eax
push str.ServiceVer
push str.General
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
push 0x497394
push 0x497398
push 0x4973b0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp dword [ebp - 0x68], 0
jne 0x4316dc
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
push 0
push 0x4973c4
push 0x4973d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor edx, edx
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x294]
jne 0x431652
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x290]
je 0x4316dc
lea ecx, [ebp - 0x280]
call fcn.00414990
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
push eax
push 0x4973e8
lea ecx, [ebp - 0x280]
push ecx
call fcn.004149b0
add esp, 0x10
mov dword [ebp - 0x68], 1
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
lea ecx, [ebp - 0x280]
call fcn.0040c680
push eax
push str.Memory
push 0x497400
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
push 0x497414
push 0x497418
push 0x497430
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x280]
call fcn.0040c710
cmp dword [ebp - 0x68], 0
jne 0x431709
mov ecx, dword [ebp - 0x18]
add ecx, 0x14
call fcn.0040c680
push eax
push 0
push str.NeedReScan
push 0x49745c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x431721
mov ecx, dword [ebp - 0x18]
add ecx, 0x18
call fcn.0040c680
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x18]
call fcn.004151a0
mov edx, dword [ebp - 0x18]
mov dword [edx], eax
mov dword [ebp - 0x288], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.0040c710
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.0040c710
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x70]
xor ecx, ebp
call fcn.0045fcea
mov esp, ebp
pop ebp
ret