Function at 0x4177b2
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
push ebx
push esi
push edi
mov ebx, ecx
push 0x28
push dword [ebp + 8]
mov ecx, dword [ebx + 4]
call fcn.0041babc
push 0xb
push ecx
mov ecx, esp
push str.adfilter.dll
call fcn.00404729
push ecx
mov esi, 0x441ed4
mov ecx, esp
push esi
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0xe
push ecx
mov ecx, esp
push str.doctor.dll
call fcn.00404729
push ecx
mov ecx, esp
push esi
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0x15
push ecx
mov ecx, esp
push str.suggest.dll
call fcn.00404729
push ecx
mov ecx, esp
push esi
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
mov ecx, dword [ebx + 4]
push 0x2d
push dword [ebp + 8]
call fcn.0041babc
push 0x17
push ecx
mov ecx, esp
push str.urlquery.dll
call fcn.00404729
push ecx
mov ecx, esp
push esi
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0xf
push ecx
mov ecx, esp
push str.download.dll
call fcn.00404729
push ecx
mov ecx, esp
push esi
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0x27
push ecx
mov ecx, esp
push str.360dl.dll
call fcn.00404729
push ecx
mov ecx, esp
push esi
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
lea eax, [ebx + 0x2c]
push str.extensionsExtDownload_
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041b302
lea eax, [ebp - 0x18]
push str.livep.dat
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0041b302
push dword [ebp - 0x18]
mov edi, dword [0x432520]
call edi
test eax, eax
jne 0x4178d5
push dword [ebp - 0x18]
call fcn.0042059f
pop ecx
lea eax, [ebx + 0x38]
push 0x43ea10
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0041b302
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push dword [ebp - 0x3c]
push eax
call esi
lea ecx, [ebp - 0x14]
call fcn.00404c0d
mov ecx, dword [ebx + 4]
push 0x32
push dword [ebp + 8]
call fcn.0041babc
push 0x1c
push ecx
mov ecx, esp
push str.pluginbar.dll
call fcn.00404729
push ecx
mov ecx, esp
push 0x441ed4
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
lea eax, [ebx + 0x34]
push str.Pages
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
push dword [eax]
call fcn.0042059f
pop ecx
lea ecx, [ebp - 4]
call fcn.00404c0d
push 0x11
push ecx
mov ecx, esp
push str.Pages.dll
call fcn.00404729
push ecx
mov ecx, esp
push 0x43e9c4
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0x12
push ecx
mov ecx, esp
push str.ScreenHelper.exe
call fcn.00404729
push ecx
mov ecx, esp
push 0x43e9c4
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0x29
push ecx
mov ecx, esp
push str.newTab.dll
call fcn.00404729
push ecx
mov ecx, esp
push 0x43e9c4
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
push 0x2a
push ecx
mov ecx, esp
push str.newTab2.dll
call fcn.00404729
push ecx
mov ecx, esp
push 0x43e9c4
call fcn.00404729
mov ecx, ebx
call fcn.0041aba4
lea eax, [ebx + 0x2c]
push str.extensionsFavorites_
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041b302
push dword [ebp - 0x20]
call edi
test eax, eax
jne 0x417a04
push dword [ebp - 0x20]
call fcn.0042059f
pop ecx
push 6
push ecx
mov ecx, esp
push str.titleopt.dll
call fcn.00404729
mov ecx, ebx
call fcn.0041a807
mov ecx, dword [ebx + 4]
push 0x37
push dword [ebp + 8]
call fcn.0041babc
lea eax, [ebx + 0x38]
push str.LoginEnrolLoginEnrol.dll
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0041b302
lea eax, [ebx + 0x38]
push str.FavoritesFavorites.dll
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0041b302
push dword [ebp - 0x34]
call edi
test eax, eax
je 0x417a67
push dword [ebp - 0x38]
call edi
test eax, eax
je 0x417a67
push dword [ebp + 8]
mov ecx, ebx
call fcn.004173c6
lea eax, [ebx + 0x2c]
push str._apps_
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0041b302
push dword [ebp - 0x10]
call edi
test eax, eax
jne 0x417a8b
push dword [ebp - 0x10]
call fcn.0042059f
pop ecx
lea eax, [ebx + 0x38]
push str.Apps
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
push dword [ebp - 0x10]
mov eax, dword [eax]
push eax
call fcn.00420842
pop ecx
pop ecx
lea ecx, [ebp - 4]
call fcn.00404c0d
push 0x43e8e8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x14]
push eax
call fcn.0041b302
push dword [ebp - 0x2c]
call edi
test eax, eax
je 0x417b45
push dword [ebp - 0x2c]
call dword [0x432260]
test eax, eax
mov dword [ebp - 4], eax
je 0x417b45
push str.InitPluginbar
push eax
call dword [0x432264]
test eax, eax
mov dword [0x443afc], eax
je 0x417b3c
and word [ebp - 0x24c], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x24a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x14]
push dword [eax]
lea eax, [ebp - 0x24c]
push 0x439dc8
push 0x103
push eax
call dword [0x4323e4]
add esp, 0x10
lea eax, [ebp - 0x24c]
push eax
call dword [0x443afc]
mov edi, dword [0x432520]
push dword [ebp - 4]
call dword [0x4322c4]
lea eax, [ebp - 0x10]
push str.BankMode
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
push dword [eax]
call fcn.004206b8
pop ecx
lea ecx, [ebp - 4]
call fcn.00404c0d
lea eax, [ebp - 0x10]
push str.appsi.dll
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 4]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.data_
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0041b302
push dword [ebp - 0x30]
call edi
test eax, eax
jne 0x417bad
push dword [ebp - 0x30]
call fcn.0042059f
pop ecx
lea eax, [ebx + 0x2c]
push str.data_switch.ini
push eax
lea eax, [ebp - 8]
push eax
call fcn.0041b302
mov eax, dword [eax]
push str.data_switch.ini
mov dword [ebp - 4], eax
lea eax, [ebx + 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041b302
mov eax, dword [eax]
push 0
push dword [ebp - 4]
push eax
call esi
lea ecx, [ebp - 0xc]
call fcn.00404c0d
lea ecx, [ebp - 8]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.data_newskin.dat
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
mov eax, dword [eax]
push str.data_newskin.dat
mov dword [ebp - 8], eax
lea eax, [ebx + 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041b302
mov eax, dword [eax]
push 0
push dword [ebp - 8]
push eax
call esi
lea ecx, [ebp - 0xc]
call fcn.00404c0d
lea ecx, [ebp - 4]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.datagameurls.dat
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
mov eax, dword [eax]
push str.datagameurls.dat
mov dword [ebp - 8], eax
lea eax, [ebx + 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041b302
mov eax, dword [eax]
push 0
push dword [ebp - 8]
push eax
call esi
lea ecx, [ebp - 0xc]
call fcn.00404c0d
lea ecx, [ebp - 4]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.dataguardconfig.ini
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
mov eax, dword [eax]
push str.dataguardconfig.ini
mov dword [ebp - 8], eax
lea eax, [ebx + 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041b302
mov eax, dword [eax]
push 0
push dword [ebp - 8]
push eax
call esi
lea ecx, [ebp - 0xc]
call fcn.00404c0d
lea ecx, [ebp - 4]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.datapreset.dat
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041b302
mov eax, dword [eax]
push str.datapreset.dat
mov dword [ebp - 8], eax
lea eax, [ebx + 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041b302
mov eax, dword [eax]
push 0
push dword [ebp - 8]
push eax
call esi
lea ecx, [ebp - 0xc]
call fcn.00404c0d
lea ecx, [ebp - 4]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.dataurls.dat
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0041b302
push dword [ebp - 0x28]
call edi
test eax, eax
jne 0x417d3b
lea eax, [ebx + 0x38]
push str.dataurls.dat
push eax
lea eax, [ebp - 8]
push eax
call fcn.0041b302
mov eax, dword [eax]
push 0
push dword [ebp - 0x28]
push eax
call esi
lea ecx, [ebp - 8]
call fcn.00404c0d
lea eax, [ebx + 0x2c]
push str.extensionsExtDoctor_
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0041b302
lea eax, [ebp - 0x1c]
push str.ExtDoctor.ini
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0041b302
push dword [ebp - 0x24]
call edi
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
test eax, eax
jne 0x417d94
push dword [ebp - 0x1c]
call edi
test eax, eax
jne 0x417d80
push dword [ebp - 0x1c]
call fcn.0042059f
pop ecx
push dword [ebp - 0x24]
push 0x439628
push str.TXUserActionState
push str.QQZoneSpeed
call esi
mov eax, dword [ebx + 4]
cmp dword [eax + 8], 0
je 0x417df6
and word [ebp - 0x24c], 0
push dword [ebx + 0x74]
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x24a]
push 0x43e730
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x24c]
push 0x103
push eax
call dword [0x4323e4]
add esp, 0x10
lea eax, [ebp - 0x24c]
push dword [ebx + 0x28]
push eax
push str.State
push str.InstallState
call esi
mov ecx, ebx
call fcn.004154c1
mov edi, dword [0x432520]
mov ecx, dword [ebx + 4]
push 0x3c
push dword [ebp + 8]
call fcn.0041babc
push str.LoginEnrolLoginEnrol.dll
lea eax, [ebp - 0x44]
push dword [ebp - 0x14]
push eax
call fcn.0041b302
push str.FavoritesFavorites.dll
lea eax, [ebp - 0x40]
push dword [ebp - 0x14]
push eax
call fcn.0041b302
push dword [ebp - 0x44]
call edi
test eax, eax
je 0x417e37
push dword [ebp - 0x40]
call edi
test eax, eax
jne 0x417e5c
push 0x10
push dword [0x4433ac]
push str.6e9Y
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
push 0
push 0x10
push dword [ebp + 8]
call dword [0x4325c4]
lea ecx, [ebp - 0x40]
call fcn.00404c0d
lea ecx, [ebp - 0x44]
call fcn.00404c0d
lea ecx, [ebp - 0x24]
call fcn.00404c0d
lea ecx, [ebp - 0x1c]
call fcn.00404c0d
lea ecx, [ebp - 0x28]
call fcn.00404c0d
lea ecx, [ebp - 0x30]
call fcn.00404c0d
lea ecx, [ebp - 0x2c]
call fcn.00404c0d
lea ecx, [ebp - 0x10]
call fcn.00404c0d
lea ecx, [ebp - 0x38]
call fcn.00404c0d
lea ecx, [ebp - 0x34]
call fcn.00404c0d
lea ecx, [ebp - 0x20]
call fcn.00404c0d
lea ecx, [ebp - 0x3c]
call fcn.00404c0d
lea ecx, [ebp - 0x18]
call fcn.00404c0d
pop edi
pop esi
pop ebx
leave
ret 4