Function at 0x41bffe
Capabilities:
Create directory
Delete file

Disassembly:
push 0x24
mov eax, 0x46caa0
call fcn.0045199e
mov eax, dword [0x492738]
mov dword [eax + 4], ecx
mov ecx, dword [0x492740]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebp - 0x24]
push 2
push eax
call fcn.0041ce90
mov eax, dword [0x4927f8]
pop ecx
pop ecx
lea edi, [ebp - 0x30]
lea esi, [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x4927f4
call fcn.0041e099
test al, al
jne 0x41c260
mov eax, dword [0x491894]
mov ecx, 0x491894
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
and dword [ebp - 4], 0
mov esi, dword [ebp - 0x24]
test esi, esi
jne 0x41c070
call fcn.0044a196
mov edi, dword [ebp - 0x20]
cmp edi, dword [esi + 4]
jne 0x41c07d
call fcn.0044a196
cmp dword [0x48fb98], 8
mov ecx, dword [0x48fb84]
jae 0x41c091
mov ecx, 0x48fb84
lea eax, [edi + 0x10]
push dword [eax]
mov dword [ebp - 0x1c], eax
push ecx
lea eax, [ebp - 0x28]
push eax
call fcn.004141d8
add esp, 0xc
lea ebx, [ebp - 0x18]
call fcn.00409ff4
mov esi, ebx
mov byte [ebp - 4], 1
call fcn.00401000
push str.Download_
mov eax, ebx
push eax
call fcn.00401a16
push 0
push dword [ebp - 0x18]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push str.QQPCFix.exe
mov eax, ebx
push eax
call fcn.00401a16
mov eax, dword [ebp - 0x24]
cmp edi, dword [eax + 4]
jne 0x41c0ed
call fcn.0044a196
add edi, 0x18
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], edi
call fcn.004013b6
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
cmp ebx, dword [esi + 4]
jne 0x41c10b
call fcn.0044a196
lea edi, [ebx + 0x1c]
lea eax, [ebp - 0x18]
call fcn.004013b6
cmp ebx, dword [esi + 4]
jne 0x41c13e
call fcn.0044a196
cmp ebx, dword [esi + 4]
jne 0x41c13e
call fcn.0044a196
cmp ebx, dword [esi + 4]
jne 0x41c13e
call fcn.0044a196
cmp ebx, dword [esi + 4]
jne 0x41c13e
call fcn.0044a196
mov esi, dword [ebp - 0x1c]
call fcn.0041ae08
call dword [section..data]
mov esi, dword [ebp - 0x24]
cmp ebx, dword [esi + 4]
mov dword [ebp - 0x1c], eax
jne 0x41c15c
call fcn.0044a196
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax]
test edi, edi
je 0x41c174
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41c178
xor edi, edi
jmp 0x41c195
lea esi, [eax + eax]
mov eax, esi
call fcn.00457b10
mov eax, esp
push dword [ebp - 0x1c]
push esi
push edi
mov esi, eax
call fcn.0041ed1c
mov esi, dword [ebp - 0x24]
mov edi, eax
cmp ebx, dword [esi + 4]
jne 0x41c19f
call fcn.0044a196
mov ecx, dword [ebx + 0x30]
push edi
call fcn.00409b5a
cmp ebx, dword [esi + 4]
jne 0x41c1b2
call fcn.0044a196
mov edi, dword [ebx + 0x1c]
test edi, edi
je 0x41c1c8
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41c1cc
xor edi, edi
jmp 0x41c1e9
lea esi, [eax + eax]
mov eax, esi
call fcn.00457b10
mov eax, esp
push dword [ebp - 0x1c]
push esi
push edi
mov esi, eax
call fcn.0041ed1c
mov esi, dword [ebp - 0x24]
mov edi, eax
cmp ebx, dword [esi + 4]
jne 0x41c1f3
call fcn.0044a196
mov ecx, dword [ebx + 0x30]
push edi
add ecx, 0x1c
call fcn.00409b5a
cmp ebx, dword [esi + 4]
jne 0x41c209
call fcn.0044a196
push dword [ebx + 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp ebx, dword [esi + 4]
jne 0x41c21c
call fcn.0044a196
mov dword [ebx + 0x3c], 3
cmp ebx, dword [esi + 4]
jne 0x41c237
call fcn.0044a196
cmp ebx, dword [esi + 4]
jne 0x41c237
call fcn.0044a196
mov ecx, dword [0x492740]
mov eax, dword [ecx]
push 0
push dword [ebx + 0x30]
call dword [eax + 8]
mov dword [ebx + 0x2c], eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.004019a6
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
call fcn.004019a6
lea esp, [ebp - 0x40]
call fcn.00451a21
ret