Function at 0x41c82f
Capabilities:
Create directory
Delete file

Disassembly:
push 0x24
mov eax, 0x46db70
call fcn.00452180
mov eax, dword [0x4937d8]
mov dword [eax + 4], ecx
mov ecx, dword [0x4937e0]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebp - 0x24]
push 2
push eax
call fcn.0041d6c7
mov eax, dword [0x4938e8]
pop ecx
pop ecx
lea edi, [ebp - 0x30]
lea esi, [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x4938e4
call fcn.00418031
test al, al
jne 0x41ca91
mov eax, dword [0x492934]
mov ecx, 0x492934
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
and dword [ebp - 4], 0
mov esi, dword [ebp - 0x24]
test esi, esi
jne 0x41c8a1
call fcn.0044d6f0
mov edi, dword [ebp - 0x20]
cmp edi, dword [esi + 4]
jne 0x41c8ae
call fcn.0044d6f0
cmp dword [0x490bec], 8
mov ecx, dword [0x490bd8]
jae 0x41c8c2
mov ecx, 0x490bd8
lea eax, [edi + 0x10]
push dword [eax]
mov dword [ebp - 0x1c], eax
push ecx
lea eax, [ebp - 0x28]
push eax
call fcn.00414622
add esp, 0xc
lea ebx, [ebp - 0x18]
call fcn.0040a01d
mov esi, ebx
mov byte [ebp - 4], 1
call fcn.0041b62f
push str.Download_
mov eax, ebx
push eax
call fcn.004019e6
push 0
push dword [ebp - 0x18]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push str.QQPCFix.exe
mov eax, ebx
push eax
call fcn.004019e6
mov eax, dword [ebp - 0x24]
cmp edi, dword [eax + 4]
jne 0x41c91e
call fcn.0044d6f0
add edi, 0x18
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], edi
call fcn.00401391
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
cmp ebx, dword [esi + 4]
jne 0x41c93c
call fcn.0044d6f0
lea edi, [ebx + 0x1c]
lea eax, [ebp - 0x18]
call fcn.00401391
cmp ebx, dword [esi + 4]
jne 0x41c96f
call fcn.0044d6f0
cmp ebx, dword [esi + 4]
jne 0x41c96f
call fcn.0044d6f0
cmp ebx, dword [esi + 4]
jne 0x41c96f
call fcn.0044d6f0
cmp ebx, dword [esi + 4]
jne 0x41c96f
call fcn.0044d6f0
mov esi, dword [ebp - 0x1c]
call fcn.0041b654
call dword [section..data]
mov esi, dword [ebp - 0x24]
cmp ebx, dword [esi + 4]
mov dword [ebp - 0x1c], eax
jne 0x41c98d
call fcn.0044d6f0
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax]
test edi, edi
je 0x41c9a5
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41c9a9
xor edi, edi
jmp 0x41c9c6
lea esi, [eax + eax]
mov eax, esi
call fcn.00457f60
mov eax, esp
push dword [ebp - 0x1c]
push esi
push edi
mov esi, eax
call fcn.0041f65c
mov esi, dword [ebp - 0x24]
mov edi, eax
cmp ebx, dword [esi + 4]
jne 0x41c9d0
call fcn.0044d6f0
mov ecx, dword [ebx + 0x30]
push edi
call fcn.00409b83
cmp ebx, dword [esi + 4]
jne 0x41c9e3
call fcn.0044d6f0
mov edi, dword [ebx + 0x1c]
test edi, edi
je 0x41c9f9
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41c9fd
xor edi, edi
jmp 0x41ca1a
lea esi, [eax + eax]
mov eax, esi
call fcn.00457f60
mov eax, esp
push dword [ebp - 0x1c]
push esi
push edi
mov esi, eax
call fcn.0041f65c
mov esi, dword [ebp - 0x24]
mov edi, eax
cmp ebx, dword [esi + 4]
jne 0x41ca24
call fcn.0044d6f0
mov ecx, dword [ebx + 0x30]
push edi
add ecx, 0x1c
call fcn.00409b83
cmp ebx, dword [esi + 4]
jne 0x41ca3a
call fcn.0044d6f0
push dword [ebx + 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp ebx, dword [esi + 4]
jne 0x41ca4d
call fcn.0044d6f0
mov dword [ebx + 0x3c], 3
cmp ebx, dword [esi + 4]
jne 0x41ca68
call fcn.0044d6f0
cmp ebx, dword [esi + 4]
jne 0x41ca68
call fcn.0044d6f0
mov ecx, dword [0x4937e0]
mov eax, dword [ecx]
push 0
push dword [ebx + 0x30]
call dword [eax + 8]
mov dword [ebx + 0x2c], eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00401976
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
call fcn.00401976
lea esp, [ebp - 0x40]
call fcn.00452203
ret