Function at 0x40c410
Capabilities:
Create thread
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x43eabd
mov eax, dword fs:[0]
push eax
sub esp, 0xf50
mov eax, dword [0x44a2b8]
xor eax, esp
mov dword [esp + 0xf48], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44a2b8]
xor eax, esp
push eax
lea eax, [esp + 0xf64]
mov dword fs:[0], eax
mov eax, dword [esp + 0xf74]
push 0x104
lea ecx, [esp + 0x330]
push ecx
push 0x410
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
xor ebp, ebp
push 0x206
lea edx, [esp + 0x742]
push ebp
push edx
mov word [esp + 0x748], bp
call fcn.00429d70
lea eax, [esp + 0x338]
add esp, 0xc
mov dword [0x4514d8], ebp
lea edx, [eax + 2]
jmp 0x40c4a0
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x40c4a0
sub eax, edx
sar eax, 1
je 0x40c4cf
movzx ecx, word [esp + eax*2 + 0x32a]
cmp cx, 0x2f
lea eax, [esp + eax*2 + 0x32a]
je 0x40c4cc
cmp cx, 0x5c
jne 0x40c4cf
mov word [eax], bp
push 0x442408
lea eax, [esp + 0x330]
push eax
push 0x441ab4
push 0x208
lea ecx, [esp + 0x74c]
push 0x104
push ecx
call fcn.00425032
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
add esp, 0x18
lea edx, [esp + 0xdc]
push edx
lea eax, [esp + 0x740]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x40c5c2
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x40c530
mov ecx, 0x442410
lea eax, [esp + 0x108]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40c566
cmp dx, bp
je 0x40c562
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40c566
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x40c540
xor eax, eax
jmp 0x40c56b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
je 0x40c5af
mov ecx, 0x442414
lea eax, [esp + 0x108]
jmp 0x40c580
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40c5a6
cmp dx, bp
je 0x40c5a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40c5a6
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x40c580
xor eax, eax
jmp 0x40c5ab
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x40c5cc
lea ecx, [esp + 0xdc]
push ecx
push esi
call ebx
test eax, eax
jne 0x40c530
mov eax, 1
jmp 0x40c879
push str.QQCRM.exe
lea edx, [esp + 0x330]
push edx
push 0x441ab4
push 0x208
lea eax, [esp + 0x544]
push 0x104
push eax
call fcn.00425032
push str.uninst.exe
lea ecx, [esp + 0x348]
push ecx
push 0x441ab4
push 0x208
lea edx, [esp + 0xb74]
push 0x104
push edx
call fcn.00425032
add esp, 0x30
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x538]
push ecx
call edi
xor edx, edx
cmp eax, 0xffffffff
setne dl
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0xb50]
push ecx
mov esi, edx
call edi
xor edx, edx
cmp eax, 0xffffffff
setne dl
cmp esi, ebp
mov ebx, 1
mov eax, edx
je 0x40c877
cmp eax, ebp
je 0x40c877
push 0x206
lea eax, [esp + 0x94a]
push ebp
push eax
mov word [esp + 0x950], bp
call fcn.00429d70
mov dword [esp + 0xe4], 7
mov dword [esp + 0xe0], ebp
mov word [esp + 0xd0], bp
lea ecx, [esp + 0x540]
push ecx
lea edx, [esp + 0x954]
push edx
mov dword [esp + 0xf80], ebp
call fcn.0040c150
add esp, 0x14
test eax, eax
je 0x40c75d
lea edx, [esp + 0x944]
lea eax, [esp + 0xa4]
call fcn.00401c90
mov edx, 0x442448
lea eax, [esp + 0x50]
mov byte [esp + 0xf6c], bl
call fcn.00401c90
mov edx, 0x442468
lea eax, [esp + 0x6c]
mov byte [esp + 0xf6c], 2
call fcn.00401c90
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x74]
lea ecx, [esp + 0xc8]
mov byte [esp + 0xf74], 3
call fcn.00401da0
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x54]
push ecx
lea edi, [esp + 0xc8]
call fcn.00417380
add esp, 8
lea esi, [esp + 0x6c]
call fcn.00401cd0
lea esi, [esp + 0x50]
call fcn.00401cd0
lea esi, [esp + 0xa4]
jmp 0x40c7ea
mov edx, 0x442524
lea eax, [esp + 0x18]
call fcn.00401c90
mov edx, 0x442448
lea eax, [esp + 0x88]
mov byte [esp + 0xf6c], 4
call fcn.00401c90
mov edx, 0x442468
lea eax, [esp + 0x34]
mov byte [esp + 0xf6c], 5
call fcn.00401c90
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc8]
mov byte [esp + 0xf74], 6
call fcn.00401da0
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x8c]
push eax
lea edi, [esp + 0xc8]
call fcn.00417380
add esp, 8
lea esi, [esp + 0x34]
call fcn.00401cd0
lea esi, [esp + 0x88]
call fcn.00401cd0
lea esi, [esp + 0x18]
call fcn.00401cd0
push str.uninst.exe
lea ecx, [esp + 0x330]
push ecx
push 0x441ab4
push 0x208
lea edx, [esp + 0xd64]
push 0x104
push edx
call fcn.00425032
mov eax, dword [0x44e590]
add esp, 0x18
push ebp
push ebp
push eax
push 0x40c330
push ebp
push ebp
mov dword [0x44ec78], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [0x44ec7c], eax
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x538]
push ecx
mov dword [0x4514d8], ebx
call esi
lea edx, [esp + 0xdc]
push edx
lea eax, [esp + 0xb50]
push eax
call esi
lea esi, [esp + 0xc0]
call fcn.00401cd0
mov eax, ebx
mov ecx, dword [esp + 0xf64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xf48]
xor ecx, esp
call fcn.00424e88
add esp, 0xf5c
ret