Function at 0x4068f0
Capabilities:
Copy file
Create directory
Delete file
Get common file path
Print debug messages

Disassembly:
push 0xffffffffffffffff
push 0x466076
mov eax, dword fs:[0]
push eax
sub esp, 0x520
mov eax, dword [0x485618]
xor eax, esp
mov dword [esp + 0x51c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x485618]
xor eax, esp
push eax
lea eax, [esp + 0x534]
mov dword fs:[0], eax
lea ecx, [esp + 0x17]
call fcn.004052f0
push 0x104
lea eax, [esp + 0x430]
push eax
push 0
mov dword [esp + 0x548], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
lea ecx, [esp + 0x17]
jne 0x406976
mov dword [esp + 0x53c], 0xffffffff
call fcn.00405300
mov eax, 1
jmp 0x406d76
push str.http:__.kuaiyouhui.com
call fcn.00405440
push str.https:__.kuaiyouhui.com
lea ecx, [esp + 0x1b]
call fcn.00405440
push 0x104
lea ecx, [esp + 0x20]
push 0
push ecx
call fcn.0043ac90
mov ebp, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
add esp, 0xc
lea edx, [esp + 0x1c]
push edx
push 1
push 0
push 0x23
push 0
call ebp
test eax, eax
je 0x4069d9
lea ecx, [esp + 0x17]
mov dword [esp + 0x53c], 0xffffffff
call fcn.00405300
mov eax, 2
jmp 0x406d76
lea eax, [esp + 0x1c]
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x4069e0
mov ecx, dword [str.yhb]
mov dl, byte [0x46b59c]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [eax], ecx
mov byte [eax + 4], dl
push 0
lea eax, [esp + 0x20]
push eax
call edi
push 0x104
lea ecx, [esp + 0x32c]
push 0
push ecx
call fcn.0043ac90
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push str.yhb.exe
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x33c]
push str._s_s
push eax
call esi
lea ecx, [esp + 0x344]
push ecx
lea edx, [esp + 0x44c]
push edx
call fcn.0043bea1
add esp, 0x24
test eax, eax
je 0x406a71
push 0
lea eax, [esp + 0x32c]
push eax
lea ecx, [esp + 0x434]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push str.ico.ico
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x22c]
push str._s_s
push eax
call esi
add esp, 0x10
lea ecx, [esp + 0x224]
push ecx
push 0xc4
push 0x46af04
lea ecx, [esp + 0x23]
call fcn.004054b0
test al, al
jne 0x406ad7
push str.Unable_extract_ICON_file__abort.
call fcn.0043bf0a
add esp, 4
lea ecx, [esp + 0x17]
mov dword [esp + 0x53c], 0xffffffff
call fcn.00405300
mov eax, 3
jmp 0x406d76
push 0x104
lea edx, [esp + 0x20]
push 0
push edx
call fcn.0043ac90
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 1
push 0
push 0x17
push 0
call ebp
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x124]
push 0x46b5f4
push edx
call esi
add esp, 0xc
push 0
lea eax, [esp + 0x124]
push eax
call edi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jne 0x406b70
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0x18]
mov ebx, eax
call fcn.00403610
push ebx
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x20]
push 0x46b70c
push edx
mov byte [esp + 0x54c], 1
call fcn.00403870
mov eax, dword [esp + 0x28]
add esp, 0x10
push eax
call edi
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 0
call fcn.00402590
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x124]
push 0x46b674
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x224]
push eax
push 0x46b480
lea ecx, [esp + 0x128]
push ecx
push 0x46adb8
push 0x46adb8
push str.http:__my.youhuibao.cc_
lea ecx, [esp + 0x2f]
call fcn.00405570
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x124]
push 0x46b658
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x224]
push ecx
push 0x46b700
lea edx, [esp + 0x128]
push edx
push 0x46adb8
push 0x46adb8
push str.http:__www.youhuibao.cc_faq.html
lea ecx, [esp + 0x2f]
call fcn.00405570
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x124]
push 0x46b63c
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x224]
push edx
push 0x46b700
lea eax, [esp + 0x128]
push eax
push 0x46adb8
push str._uninstall
lea ecx, [esp + 0x33c]
push ecx
lea ecx, [esp + 0x2f]
call fcn.00405570
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x124]
push 0x46b620
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x224]
push ecx
push 0x46b700
lea edx, [esp + 0x128]
push edx
push 0x46adb8
push 0x46adb8
lea eax, [esp + 0x33c]
push eax
lea ecx, [esp + 0x2f]
call fcn.00405570
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x124]
push 0x46b600
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x224]
push eax
push 0x46b6cc
lea ecx, [esp + 0x128]
push ecx
push 0x46adb8
push 0x46adb8
push str.http:__www.youhuibao.cc_
lea ecx, [esp + 0x2f]
call fcn.00405570
push 0x104
lea edx, [esp + 0x20]
push 0
push edx
call fcn.0043ac90
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 1
push 0
push 0x19
push 0
call ebp
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x124]
push 0x46b4b0
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x124]
push 0x46b494
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x120]
push eax
call edi
lea ecx, [esp + 0x224]
push ecx
push 0x46b480
lea edx, [esp + 0x128]
push edx
push 0x46adb8
push 0x46adb8
push str.http:__my.youhuibao.cc_
lea ecx, [esp + 0x2f]
call fcn.00405570
lea ecx, [esp + 0x17]
mov dword [esp + 0x53c], 0xffffffff
call fcn.00405300
xor eax, eax
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x51c]
xor ecx, esp
call fcn.0043a450
add esp, 0x52c
ret