Function at 0x401750
Capabilities:
Create directory
Get common file path

Disassembly:
mov eax, 0x1218
call fcn.00407ff0
mov eax, dword [0x40d020]
xor eax, esp
mov dword [esp + 0x1214], eax
mov eax, dword [esp + 0x121c]
push ebx
push ebp
push esi
push edi
xor ebx, ebx
push 0x3ff
lea ecx, [esp + 0xa25]
push ebx
push ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ebx
mov byte [esp + 0xa2c], bl
call fcn.00407fea
add esp, 0xc
push 0x3ff
lea edx, [esp + 0x625]
push ebx
push edx
mov byte [esp + 0x62c], bl
call fcn.00407fea
add esp, 0xc
push 0x3ff
lea eax, [esp + 0x225]
push ebx
push eax
mov byte [esp + 0x22c], bl
call fcn.00407fea
add esp, 0xc
push 0x3ff
lea ecx, [esp + 0xe25]
push ebx
push ecx
mov byte [esp + 0xe2c], bl
call fcn.00407fea
mov ebp, dword [0x409140]
mov edx, dword [ebp]
sub edx, 1
add esp, 0xc
xor edi, edi
test edx, edx
jle 0x4018d2
mov eax, dword [0x4090fc]
mov eax, dword [eax]
mov edi, edi
mov ecx, dword [eax]
cmp byte [ecx], 0x2f
jne case.0x401832.101
movsx ecx, byte [ecx + 1]
add ecx, 0xffffff9d
cmp ecx, 0xb
ja case.0x401832.101
movzx ecx, byte [ecx + 0x401bbc]
jmp dword [ecx*4 + 0x401ba8]
mov edx, dword [eax + 4]
add edi, 1
add eax, 4
lea esi, [esp + 0x220]
lea esp, [esp]
mov cl, byte [edx]
mov byte [esi], cl
add edx, 1
add esi, 1
cmp cl, bl
jne 0x401850
jmp case.0x401832.101
mov edx, dword [eax + 4]
add edi, 1
add eax, 4
lea esi, [esp + 0xa20]
mov cl, byte [edx]
mov byte [esi], cl
add edx, 1
add esi, 1
cmp cl, bl
jne 0x401870
jmp case.0x401832.101
mov edx, dword [eax + 4]
add edi, 1
add eax, 4
lea esi, [esp + 0x620]
mov cl, byte [edx]
mov byte [esi], cl
add edx, 1
add esi, 1
cmp cl, bl
jne 0x401890
jmp case.0x401832.101
mov edx, dword [eax + 4]
add edi, 1
add eax, 4
lea esi, [esp + 0xe20]
mov cl, byte [edx]
mov byte [esi], cl
add edx, 1
add esi, 1
cmp cl, bl
jne 0x4018b0
mov edx, dword [ebp]
add edi, 1
sub edx, 1
add eax, 4
cmp edi, edx
jl 0x401810
lea eax, [esp + 0xe20]
push eax
call dword [0x409104]
add esp, 4
cmp byte [esp + 0x220], bl
mov ebp, eax
jne 0x401958
push 0x103
lea ecx, [esp + 0x1d]
push ebx
push ecx
mov byte [esp + 0x24], bl
call fcn.00407fea
add esp, 0xc
push 1
push 0x23
lea edx, [esp + 0x20]
push edx
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [esp + 0x620]
push eax
lea ecx, [esp + 0x1c]
push ecx
push str._sQQPet_s
mov eax, 0x400
lea edi, [esp + 0x22c]
call fcn.00401050
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov edx, edi
push edx
push str._Run_
call fcn.00402500
add esp, 8
cmp byte [esp + 0x220], bl
je 0x401971
cmp byte [esp + 0xa20], bl
je 0x401971
cmp byte [esp + 0x620], bl
je 0x401971
mov esi, 1
jmp 0x40197b
xor esi, esi
mov dword [esp + 0x10], 1
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push ebx
lea eax, [esp + 0x224]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExA]
cmp esi, ebx
je 0x4019a8
cmp eax, ebx
je 0x4019a1
cmp eax, 0xb7
jne 0x4019a8
mov eax, 1
jmp 0x4019aa
xor eax, eax
cmp dword [esp + 0x10], ebx
jne 0x401a39
cmp eax, ebx
jne 0x401a3d
mov dword [esp + 0x10], 5
xor eax, eax
cmp dword [esp + 0x10], ebx
jne 0x401a62
cmp eax, ebx
jne 0x401a6a
mov dword [esp + 0x10], 2
xor eax, eax
cmp dword [esp + 0x10], ebx
jne 0x401a88
cmp eax, ebx
jne 0x401a90
mov dword [esp + 0x10], 3
xor eax, eax
cmp dword [esp + 0x10], ebx
jne 0x401ab7
cmp eax, ebx
jne 0x401abf
mov dword [esp + 0x10], 4
xor esi, esi
cmp dword [esp + 0x10], ebx
jne 0x401aec
cmp esi, ebx
jne 0x401af0
mov dword [esp + 0x10], 5
jmp 0x401b3c
cmp eax, ebx
je 0x4019c4
lea edx, [esp + 0x620]
lea ecx, [esp + 0x220]
call fcn.00401e90
test eax, eax
je 0x4019c4
mov eax, 1
jmp 0x4019c6
cmp eax, ebx
je 0x4019e0
lea edi, [esp + 0x220]
call fcn.00401d40
test eax, eax
je 0x4019e0
mov eax, 1
jmp 0x4019e2
cmp eax, ebx
je 0x4019fc
lea ecx, [esp + 0x620]
push ecx
lea edx, [esp + 0x224]
push edx
call fcn.00401f60
test eax, eax
je 0x4019fc
mov eax, 1
jmp 0x4019fe
cmp eax, ebx
je 0x401a18
lea eax, [esp + 0x620]
push eax
lea edx, [esp + 0xa24]
lea ecx, [esp + 0x224]
call fcn.00401bd0
test eax, eax
je 0x401a18
mov esi, 1
jmp 0x401a1a
cmp esi, ebx
je 0x401b3c
push 0x207
lea ecx, [esp + 0x1d]
push ebx
push ecx
mov byte [esp + 0x24], bl
call fcn.00407fea
add esp, 0xc
lea edx, [esp + 0x620]
push edx
lea eax, [esp + 0x224]
push eax
push str._s_s.exe
mov eax, 0x208
lea edi, [esp + 0x24]
call fcn.00401050
add esp, 0xc
lea ecx, [esp + 0xa20]
push ecx
mov eax, edi
call fcn.004022d0
mov edi, dword [esp + 0x10]
push edi
lea edx, [esp + 0x624]
push edx
lea eax, [esp + 0xa28]
push eax
lea ecx, [esp + 0x22c]
push ecx
mov ecx, dword [esp + 0x24]
push esi
push str._Run__nResult:_d_path:_s_cnName:_s_name:_s_nErrcode:_d
call fcn.00402500
add esp, 0x18
cmp ebp, ebx
je 0x401b88
push ebp
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x401b88
push edi
push esi
push 0x7e9
push ebp
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [esp + 0x1224]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00407648
add esp, 0x1218
ret 4