Function at 0x1001f2da
Capabilities:
Create directory
Delete file

Disassembly:
push 0x188
mov eax, 0x100be7d4
call fcn.1008bbf4
mov esi, ecx
xor ebx, ebx
lea ecx, [ebp - 0xc0]
mov edi, ebx
call fcn.1001c3eb
lea ecx, [ebp - 0x188]
mov dword [ebp - 4], ebx
call fcn.1001beaa
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0xbc], 0x10
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x14], ebx
call fcn.1001ac5b
push str.Download_
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.10001464
pop ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x18c]
lea ecx, [ecx - 0x10]
call fcn.100018e3
push ebx
push dword [ebp - 0x14]
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [ebp + 8], 7
jne 0x1001f4c2
cmp dword [ebp - 0x18], ebx
je 0x1001f3c2
mov ebx, str.http:__dlied6.qq.com_download.windowsupdate.com_msdownload_update_software_secu_2023_12_windows6.1_kb4474419_x64.msu
push ebx
call fcn.10001a38
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x188]
call fcn.10001dcf
mov ebx, str.de218f5a7004694d2824d5505e7d2c06
push ebx
call fcn.10001a38
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x78]
call fcn.10001dcf
push 0x1c
push str.windows6.1_kb4474419_x64.msu
jmp 0x1001f3f8
mov ebx, str.http:__dlied6.qq.com_download.windowsupdate.com_msdownload_update_software_secu_2023_12_windows6.1_kb4474419_x86.msu
push ebx
call fcn.10001a38
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x188]
call fcn.10001dcf
mov ebx, str.b00c7d68e01927433b3a322c796e88af
push ebx
call fcn.10001a38
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x78]
call fcn.10001dcf
push 0x1c
push str.windows6.1_kb4474419_x86.msu
lea ecx, [ebp - 0x14]
call fcn.10003981
push dword [ebp - 0x14]
call fcn.10001a38
pop ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.10001dcf
push dword [ebp - 0x14]
call fcn.10001a38
pop ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x170]
call fcn.10001dcf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x18]
lea edx, [ebp - 0xc0]
mov dword [esi + 0x120], eax
push edx
lea edx, [ebp - 0x188]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
test eax, eax
je 0x1001f47c
mov eax, dword [ebp - 0xc0]
xor edi, edi
and dword [esi + 0x78], 0
inc edi
and dword [ebp - 0xb4], 0
mov dword [esi + 0xb0], eax
mov dword [ebp - 0xb8], 5
jmp 0x1001f492
push 0x12
pop eax
mov dword [esi + 0x78], eax
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [esi + 0x10]
call fcn.1002422e
mov ecx, dword [ebp - 0x194]
lea eax, [ebp - 0x188]
push eax
lea ecx, [ecx + 0xb8]
call fcn.1001bf37
jmp 0x1001f4db
push str.CTxdlController::StartDownloadPatch:error_version
push 0xd2
push str.D:qci_workspace_root_workspaces__qci_pipeline_10566830_1QQPCDownloadTxdlTxdlController.cpp
call fcn.1006ab44
add esp, 0xc
mov edi, ebx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.100018e3
lea ecx, [ebp - 0x188]
call fcn.1001d8bd
lea ecx, [ebp - 0xc0]
call fcn.1001c4c3
mov eax, edi
call fcn.1008bb9e
ret 4