Function at 0x40cbf0
Capabilities:
Access peb ldr_data
Get common file path
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x483b79
mov eax, dword fs:[0]
push eax
sub esp, 0xa00
mov eax, dword [0x4ace78]
xor eax, esp
mov dword [esp + 0x9fc], eax
push ebx
push esi
push edi
mov eax, dword [0x4ace78]
xor eax, esp
push eax
lea eax, [esp + 0xa10]
mov dword fs:[0], eax
mov eax, dword [esp + 0xa20]
mov esi, dword [esp + 0xa24]
mov edi, dword [esp + 0xa28]
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], 0
call fcn.00401ba0
push edi
push eax
lea ecx, [esp + 0x38]
push ecx
mov dword [esp + 0xa24], 0
call fcn.00403d00
add esp, 0xc
mov eax, dword [eax]
push eax
mov ecx, 0x4ae260
mov byte [esp + 0xa1c], 1
call fcn.00452139
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00401630
lea ebx, [eax + 0x10]
add esp, 4
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40ccc1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cce9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [ebx - 0xc], 0
je 0x40cd2f
lea esi, [ebx - 0x10]
push esi
call fcn.00401630
mov edi, dword [esp + 0x2c]
add eax, 0x10
add esp, 4
mov dword [edi], eax
mov dword [esp + 0xa18], 0xffffffff
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cd28
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov eax, edi
jmp 0x40d064
lea eax, [esp + 0x14]
push eax
call fcn.0040aca0
push str._qupdater_.ini
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0xa28], 5
call fcn.00403d00
push edi
push esi
mov byte [esp + 0xa30], 6
call fcn.0040c3f0
add esp, 0x18
test eax, eax
je 0x40cec7
push 0x208
lea eax, [esp + 0x38]
push 0
push eax
call fcn.0046be40
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x18]
call fcn.00401b60
push str._qupdater_.ini
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00403d00
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xa1c], 7
call fcn.00401a80
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 6
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40cdf2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.ListURL
lea ecx, [esp + 0x24]
push str.UPDATEINFO
push ecx
call fcn.0040cbf0
push str.9999999999
push eax
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0xa30], 8
call fcn.00403d00
mov eax, dword [eax]
push eax
lea eax, [esp + 0x34]
mov bl, 9
push eax
mov byte [esp + 0xa38], bl
call fcn.0040a810
add esp, 0x20
mov eax, dword [eax]
push eax
push 0x48cbbc
lea ecx, [esp + 0x18]
mov byte [esp + 0xa20], 0xa
call fcn.00403690
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0xa18], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ce77
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ce9f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cec7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x48bf08
push 0x48bf00
lea ecx, [esp + 0x18]
call fcn.00403690
mov ecx, dword [0x4ae27c]
push ecx
push 0x48cbbc
lea ecx, [esp + 0x18]
call fcn.00403690
push 0x7d0
lea edx, [esp + 0x240]
push 0
push edx
call fcn.0046be40
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
push 0x3e8
lea ecx, [esp + 0x244]
push ecx
push 0x48b8c0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push esi
lea ecx, [esp + 0x20]
call fcn.00401ba0
push edi
push eax
lea edx, [esp + 0x28]
mov bl, 0xb
push edx
mov byte [esp + 0xa24], bl
call fcn.00403d00
add esp, 0xc
mov eax, dword [eax]
push eax
mov ecx, 0x4ae260
mov byte [esp + 0xa1c], 0xc
call fcn.00452139
lea edx, [esp + 0x23c]
lea ecx, [edx + 2]
mov si, word [edx]
add edx, 2
test si, si
jne 0x40cf66
sub edx, ecx
sar edx, 1
push edx
lea ecx, [esp + 0x240]
push ecx
mov ecx, eax
call fcn.00401810
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xa18], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40cfac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cfd4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x23c]
push ecx
mov ecx, esi
call fcn.00401ba0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 5
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40d00f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xa18], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40d037
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov dword [esp + 0xa18], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40d062
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [esp + 0xa10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x9fc]
xor ecx, esp
call fcn.0046b9a8
add esp, 0xa0c
ret