Function at 0x415a6d
Capabilities:
Check if file exists
Create directory
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x43b290
mov eax, dword fs:[0]
push eax
sub esp, 0xf0
mov eax, dword [0x447074]
xor eax, esp
mov dword [esp + 0xe8], eax
push ebx
push esi
push edi
mov eax, dword [0x447074]
xor eax, esp
push eax
lea eax, [esp + 0x100]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x10]
push str.Kernel32.dll
lea eax, [esp + 0x18]
push eax
call fcn.00401345
lea eax, [esp + 0x14]
xor ebx, ebx
push eax
mov dword [esp + 0x10c], ebx
call fcn.0040116c
or dword [esp + 0x10c], 0xffffffff
mov edi, eax
mov eax, dword [esp + 0x18]
pop ecx
add eax, 0xfffffff0
call fcn.00401977
cmp edi, ebx
je 0x415b0a
push str.SetDllDirectoryW
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x415b0a
push 0x43e93c
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [ebp + 8]
mov dword [0x44a1c0], eax
mov eax, 0x43fa54
lea ecx, [esp + 0x54]
call fcn.004093b5
xor edi, edi
push eax
inc edi
mov eax, 0x440a90
lea ecx, [esp + 0x3c]
mov dword [esp + 0x10c], edi
call fcn.004093b5
push eax
mov eax, 0x440a94
lea ecx, [esp + 0x78]
mov byte [esp + 0x110], 2
call fcn.004093b5
push eax
sub esp, 0x1c
mov byte [esp + 0x130], 3
mov eax, esi
mov ecx, esp
mov dword [esp + 0x3c], esp
call fcn.004093b5
lea ecx, [esp + 0xb4]
call fcn.0040b269
push ebx
push edi
lea esi, [esp + 0x78]
call fcn.00409746
push ebx
push edi
lea esi, [esp + 0x40]
call fcn.00409746
push ebx
push edi
lea esi, [esp + 0x5c]
mov byte [esp + 0x110], 7
call fcn.00409746
mov eax, str.operator
lea ecx, [esp + 0x1c]
mov dword [esp + 0x10], ebx
call fcn.004093b5
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x114], 8
call fcn.00417ada
push ebx
push edi
lea esi, [esp + 0x24]
mov byte [esp + 0x110], 7
call fcn.00409746
mov al, byte [esp + 0x10]
mov byte [0x44a1e4], al
mov eax, str.supplyid
lea ecx, [esp + 0x1c]
mov dword [esp + 0x14], ebx
call fcn.004093b5
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x114], 9
call fcn.00417ada
push ebx
push edi
lea esi, [esp + 0x24]
mov byte [esp + 0x110], 7
call fcn.00409746
mov esi, dword [esp + 0x14]
mov dword [0x44a1e8], esi
call fcn.00414c0d
mov dword [esp + 0x14], eax
mov dword [eax + 4], esi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp eax, ebx
je 0x415ced
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, dword [sym.imp.USER32.dll_IsWindow]
jmp 0x415c8b
push str.QQPCDownloader_PropData
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x415cc9
push 2
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_GetWindow]
push eax
mov dword [esp + 0x1c], eax
call esi
test eax, eax
jne 0x415c6c
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
je 0x415ced
push dword [esp + 0x18]
call esi
test eax, eax
je 0x415ced
cmp dword [esp + 0x10], 2
jne 0x415cd3
call fcn.004158b3
push ebx
push ebx
push 0x80fa
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x415ce3
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
jmp 0x415c9a
cmp dword [esp + 0x10], 3
jne 0x415e5f
call fcn.004158b3
call fcn.00415958
jmp 0x415e54
mov eax, dword [esp + 0x10]
cmp eax, edi
jne 0x415d44
call fcn.004158b3
mov esi, dword [esp + 0x14]
mov edi, esi
call fcn.00414f60
call fcn.0040ad9b
test eax, eax
je 0x415d13
call fcn.00415811
xor eax, eax
call fcn.004159c6
call fcn.00414fe7
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x44a20c], ebx
je 0x415e5f
mov ecx, dword [esp + 0x14]
call fcn.00414cbf
jmp 0x415e5f
cmp eax, 2
jne 0x415d60
call fcn.004158b3
mov ecx, dword [esp + 0x14]
mov byte [0x44a1e6], 1
call fcn.00414cbf
jmp 0x415ce3
cmp eax, 3
jne 0x415e24
call fcn.004158b3
call fcn.0040ad9b
test eax, eax
je 0x415d7c
call fcn.00415811
push 0x43e93c
lea eax, [esp + 0x14]
push eax
call fcn.00401345
lea ebx, [esp + 0x18]
mov byte [esp + 0x108], 0xa
call fcn.0040aec1
lea edi, [esp + 0x10]
mov byte [esp + 0x108], 0xb
call fcn.0040138c
mov byte [esp + 0x108], 0xa
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
call fcn.00401977
mov esi, edi
call fcn.00414219
mov eax, str.Download_
mov ecx, edi
call fcn.004019e7
push 0
push dword [esp + 0x14]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov eax, str.QQPCDownload.exe
mov ecx, edi
call fcn.004019e7
push dword [esp + 0x10]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x415e06
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00415958
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
call fcn.00401977
jmp 0x415e5f
cmp eax, 4
jne 0x415e5f
call fcn.004158b3
mov esi, dword [esp + 0x14]
mov edi, esi
call fcn.00414f60
call fcn.0040ad9b
test eax, eax
je 0x415e47
call fcn.00415811
xor eax, eax
inc eax
call fcn.004159c6
call fcn.00414fe7
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
or dword [esp + 0x108], 0xffffffff
lea ecx, [esp + 0x8c]
call fcn.0040b36f
xor eax, eax
mov ecx, dword [esp + 0x100]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe8]
xor ecx, esp
call fcn.0041c4b8
mov esp, ebp
pop ebp
ret 0x10