Function at 0x41820c
Capabilities:
Check if file exists
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x453cf6
mov eax, dword fs:[0]
push eax
sub esp, 0x358
mov eax, dword [0x464074]
xor eax, esp
mov dword [esp + 0x350], eax
push ebx
push esi
push edi
mov eax, dword [0x464074]
xor eax, esp
push eax
lea eax, [esp + 0x368]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x10]
push str.Kernel32.dll
lea eax, [esp + 0x20]
push eax
call fcn.0040120d
lea eax, [esp + 0x1c]
xor edi, edi
push eax
mov dword [esp + 0x374], edi
call fcn.0040181f
or dword [esp + 0x374], 0xffffffff
mov ebx, eax
mov eax, dword [esp + 0x20]
pop ecx
add eax, 0xfffffff0
call fcn.00401550
cmp ebx, edi
je 0x4182a9
push str.SetDllDirectoryW
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
je 0x4182a9
push 0x456bbc
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x208
lea eax, [esp + 0x152]
push edi
push eax
mov word [esp + 0x158], di
call fcn.0042b930
add esp, 0xc
push 0x104
lea eax, [esp + 0x150]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x418303
mov ebx, str.Tencent_Download_Components
lea eax, [esp + 0x14c]
push ebx
push eax
call fcn.0041c77b
lea eax, [esp + 0x154]
push ebx
push eax
call fcn.0041c712
add esp, 0x10
lea ecx, [esp + 0x20]
call fcn.00416609
xor ebx, ebx
push 0x456bbc
lea eax, [esp + 0x24]
inc ebx
push eax
mov dword [esp + 0x378], ebx
call fcn.00406eea
test eax, eax
jne 0x41835c
lea ebx, [esp + 0x1c]
call fcn.0040b04b
lea edi, [esp + 0x20]
mov byte [esp + 0x370], 2
call fcn.004019f8
mov byte [esp + 0x370], 1
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
call fcn.00401550
xor ebx, ebx
inc ebx
xor edi, edi
call fcn.00416f1f
call fcn.0041e330
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call fcn.0041e760
call fcn.0041e7e0
call fcn.0041e460
mov eax, dword [ebp + 8]
mov dword [0x467434], eax
mov eax, 0x457cd0
lea ecx, [esp + 0x48]
call fcn.00409d4b
push eax
mov eax, 0x45b1b4
lea ecx, [esp + 0x68]
mov byte [esp + 0x374], 3
call fcn.00409d4b
push eax
mov eax, 0x45b1b8
lea ecx, [esp + 0x88]
mov byte [esp + 0x378], 4
call fcn.00409d4b
push eax
sub esp, 0x1c
mov byte [esp + 0x398], 5
mov eax, esi
mov ecx, esp
mov dword [esp + 0x4c], esp
call fcn.00409d4b
lea ecx, [esp + 0x10c]
call fcn.0040c429
push edi
push ebx
lea esi, [esp + 0x88]
call fcn.0040a106
xor edi, edi
push edi
push ebx
lea esi, [esp + 0x6c]
call fcn.0040a106
push edi
push ebx
lea esi, [esp + 0x50]
mov byte [esp + 0x378], 9
call fcn.0040a106
mov eax, str.operator
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], edi
call fcn.00409d4b
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1c]
lea edx, [esp + 0xec]
mov byte [esp + 0x378], 0xa
call fcn.0041a381
push edi
push ebx
lea esi, [esp + 0x34]
mov byte [esp + 0x378], 9
call fcn.0040a106
mov al, byte [esp + 0x14]
mov byte [0x467478], al
mov eax, str.supplyid
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], edi
call fcn.00409d4b
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x30]
mov byte [esp + 0x374], 0xb
push eax
lea ecx, [esp + 0x24]
lea edx, [esp + 0xec]
call fcn.0041a381
push edi
push ebx
lea esi, [esp + 0x34]
mov byte [esp + 0x378], 9
call fcn.0040a106
mov esi, dword [esp + 0x1c]
mov dword [0x46747c], esi
call fcn.00417213
mov dword [esp + 0x1c], eax
mov dword [eax + 8], esi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp eax, edi
je 0x418574
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, dword [sym.imp.USER32.dll_IsWindow]
jmp 0x418500
push str.QQPCDownloader_PropData
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x418534
push 2
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_GetWindow]
push eax
mov dword [esp + 0x1c], eax
call esi
test eax, eax
jne 0x4184e1
mov dword [esp + 0x18], edi
cmp dword [esp + 0x18], edi
je 0x418574
push dword [esp + 0x18]
call esi
test eax, eax
je 0x418574
cmp dword [esp + 0x14], 2
jne 0x41853e
call fcn.00417ffc
push edi
push edi
push 0x80fa
jmp 0x418555
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
jmp 0x41850f
cmp dword [esp + 0x14], 3
jne 0x4187a4
call fcn.00417ffc
push edi
push edi
push 0x80fb
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.004180a6
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4187a4
mov eax, dword [esp + 0x14]
cmp eax, ebx
jne 0x4185c0
call fcn.00417ffc
mov esi, dword [esp + 0x1c]
mov edi, esi
call fcn.004175f5
call fcn.0040aff3
test eax, eax
je 0x41859a
call fcn.00417f50
xor eax, eax
call fcn.00418163
call fcn.0041773c
cmp dword [0x4674a4], ebx
jne 0x418785
mov ecx, dword [esp + 0x1c]
call fcn.004172cd
jmp 0x418785
cmp eax, 2
jne 0x4185ed
call fcn.00417ffc
mov esi, dword [esp + 0x1c]
mov ecx, esi
mov byte [0x46747a], bl
call fcn.004172cd
mov al, byte [esi + 0xc]
mov byte [0x467479], al
call fcn.004180a6
jmp 0x41877a
cmp eax, 3
jne 0x41874b
call fcn.00417ffc
push ebx
lea edx, [esp + 0x1c]
mov ecx, str.ProductID
mov dword [esp + 0x1c], edi
mov byte [0x46747a], 4
call fcn.0040ac68
test eax, eax
pop ecx
je 0x418630
mov eax, dword [esp + 0x18]
cmp eax, edi
jne 0x41862b
mov byte [0x46747b], 0xe
jmp 0x418630
mov byte [0x467479], al
push ebx
lea edx, [esp + 0x2c]
mov ecx, str.NeedRecord
call fcn.0040ac68
test eax, eax
pop ecx
je 0x41868a
cmp dword [esp + 0x28], ebx
jne 0x41868a
cmp dword [esp + 0x18], edi
je 0x41868a
lea eax, [esp + 0x9c]
push eax
call fcn.00414aaf
mov byte [esp + 0x370], 0xc
push dword [esp + 0x18]
lea ecx, [esp + 0xa0]
call fcn.00414d48
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x374], 9
call fcn.00414b95
call fcn.0040aff3
test eax, eax
je 0x418698
call fcn.00417f50
push 0x456bbc
lea eax, [esp + 0x18]
push eax
call fcn.0040120d
lea ebx, [esp + 0x24]
mov byte [esp + 0x370], 0xd
call fcn.0040b04b
lea edi, [esp + 0x14]
mov byte [esp + 0x370], 0xe
call fcn.004019f8
mov byte [esp + 0x370], 0xd
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
call fcn.00401550
mov esi, edi
call fcn.0040167f
mov eax, 0x45abec
mov ecx, edi
call fcn.00401c1e
push 0
push dword [esp + 0x18]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov eax, str.QQPCDownload.exe
mov ecx, edi
call fcn.00401c1e
push dword [esp + 0x14]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x418722
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.004180a6
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x370], 9
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
call fcn.00401550
xor ebx, ebx
inc ebx
jmp 0x418785
cmp eax, 4
jne 0x418785
call fcn.00417ffc
mov esi, dword [esp + 0x1c]
mov edi, esi
call fcn.004175f5
call fcn.0040aff3
test eax, eax
je 0x41876e
call fcn.00417f50
mov eax, ebx
call fcn.00418163
call fcn.0041773c
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00416f1f
call fcn.0041e330
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call fcn.0041e760
call fcn.0041ea00
call fcn.0041e460
lea ecx, [esp + 0xe4]
mov byte [esp + 0x370], bl
call fcn.0040c52f
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
call fcn.00401550
xor eax, eax
mov ecx, dword [esp + 0x368]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x350]
xor ecx, esp
call fcn.0042ba38
mov esp, ebp
pop ebp
ret 0x10