Research on DESKTOP.INI - PeatSoft

Back to Desktop.ini Documentation

In IEDKCS32.DLL, Microsoft Internet Explorer Customization DLL, it seems a Desktop.ini file is written with
section 'Branding', key 'IeakPolicy' and value '1'
The following code is from Ollydebug:

6935B2B0  |> FFB5 7CFFFFFF  PUSH DWORD PTR SS:[EBP-84]               ; /Path
6935B2B6  |. FF15 30123369  CALL DWORD PTR DS:[<&SHLWAPI.PathRemoveB>; \PathRemoveBackslashW
6935B2BC  |. FFB5 7CFFFFFF  PUSH DWORD PTR SS:[EBP-84]               ; /<%s>
6935B2C2  |. 68 74C43369    PUSH iedkcs32.6933C474                   ; |Format = "%s\desktop.ini"
6935B2C7  |. FF35 98AE3769  PUSH DWORD PTR DS:[6937AE98]             ; |N = 0
6935B2CD  |. FF35 A8B03769  PUSH DWORD PTR DS:[6937B0A8]             ; |S = NULL
6935B2D3  |. FF15 E4123369  CALL DWORD PTR DS:[<&SHLWAPI.wnsprintfW>>; \wnsprintfW
6935B2D9  |. 83C4 10        ADD ESP,10
6935B2DC  |. 56             PUSH ESI                                 ; /FileName
6935B2DD  |. FF15 DC113369  CALL DWORD PTR DS:[<&SHLWAPI.#75>]       ; \GetFileAttributesW
6935B2E3  |. 8B3D BC123369  MOV EDI,DWORD PTR DS:[<&SHLWAPI.#338>]   ;  kernel32.SetFileAttributesW
6935B2E9  |. 68 80000000    PUSH 80                                  ; /FileAttributes = NORMAL
6935B2EE  |. 56             PUSH ESI                                 ; |FileName
6935B2EF  |. 8985 74FFFFFF  MOV DWORD PTR SS:[EBP-8C],EAX            ; |
6935B2F5  |. FFD7           CALL EDI                                 ; \SetFileAttributesW
6935B2F7  |. 56             PUSH ESI                                 ; /FileName
6935B2F8  |. 68 6C2D3369    PUSH iedkcs32.69332D6C                   ; |String = "1"
6935B2FD  |. 68 E0683369    PUSH iedkcs32.693368E0                   ; |Key = "IeakPolicy"
6935B302  |. 68 4C213369    PUSH iedkcs32.6933214C                   ; |Section = "Branding"
6935B307  |. FF15 94123369  CALL DWORD PTR DS:[<&SHLWAPI.#298>]      ; \WritePrivateProfileStringW
6935B30D  |. 56             PUSH ESI                                 ; /FileName
6935B30E  |. 53             PUSH EBX                                 ; |String
6935B30F  |. 53             PUSH EBX                                 ; |Key
6935B310  |. 53             PUSH EBX                                 ; |Section
6935B311  |. FF15 94123369  CALL DWORD PTR DS:[<&SHLWAPI.#298>]      ; \WritePrivateProfileStringW
6935B317  |. FFB5 74FFFFFF  PUSH DWORD PTR SS:[EBP-8C]               ; /FileAttributes
6935B31D  |. 56             PUSH ESI                                 ; |FileName
6935B31E  |. FFD7           CALL EDI                                 ; \SetFileAttributesW

If anyone knows more about this, please email me. Thanks.