Function at 0x448180
Capabilities:
Copy file
Get common file path
Get program files directory
Get startup folder
Write file to startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46999a
mov eax, dword fs:[0]
push eax
mov eax, 0x16d8
call fcn.0042a4c0
mov eax, dword [0x481288]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x476630
call fcn.0044d9a0
add esp, 4
push 0xb
call fcn.0044d9f0
add esp, 4
push 1
push 1
push 1
call fcn.0044d8b0
add esp, 0xc
call fcn.004456b0
call fcn.00447cf0
push 1
push 3
push 0xa
call fcn.0044d8b0
add esp, 0xc
push 0x486050
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x486050
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x4880d0
push str._sBin
push 0x208
push 0x104
lea eax, [ebp - 0xa6c]
push eax
call fcn.004157ac
add esp, 0x14
lea ecx, [ebp - 0xa6c]
push ecx
push str.__sTXPlatform.exe____regserver
push 0x208
push 0x104
lea edx, [ebp - 0x654]
push edx
call fcn.004157ac
add esp, 0x14
push 0
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x654]
push ecx
push 0
call fcn.0043a810
add esp, 0x10
push 0
push 4
push 0xa
call fcn.0044d8b0
add esp, 0xc
mov dword [ebp - 0x108c], 0
lea edx, [ebp - 0x108c]
push edx
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov dword [ebp - 0x44c], eax
lea eax, [ebp - 0x444]
push eax
mov ecx, dword [ebp - 0x108c]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [ebp - 0x65c], eax
mov word [ebp - 0x1084], 0
push 0x40e
push 0
lea edx, [ebp - 0x1082]
push edx
call fcn.00415680
add esp, 0xc
push 0x4880d0
call fcn.00414d31
add esp, 4
movzx eax, word [eax*2 + 0x4880ce]
cmp eax, 0x5c
jne 0x44830b
push 0x4880d0
push 0x476698
push 0x410
push 0x208
lea ecx, [ebp - 0x1084]
push ecx
call fcn.004157ac
add esp, 0x14
jmp 0x44832e
push 0x4880d0
push str._sPluginCom.Tencent.HDVideo_bin
push 0x410
push 0x208
lea edx, [ebp - 0x1084]
push edx
call fcn.004157ac
add esp, 0x14
mov dword [ebp - 0x23c], str.SendVideo.dll
mov dword [ebp - 0x238], str.qpcodecsink.ax
mov dword [ebp - 0x234], str.QpCodecSrc.ax
mov dword [ebp - 0x230], str.qicdemux.ax
mov dword [ebp - 0x22c], str.qlcolorcvt.ax
mov dword [ebp - 0x228], str.FVTColorCvt.ax
mov dword [ebp - 0x224], str.PLIDualFmtDemux.ax
mov dword [ebp - 0x220], str.PzVideoCtrlPlugin.ax
mov dword [ebp - 0x14a4], 0
jmp 0x448399
mov eax, dword [ebp - 0x14a4]
add eax, 1
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 8
jae 0x4483f1
mov ecx, dword [ebp - 0x14a4]
mov edx, dword [ebp + ecx*4 - 0x23c]
push edx
lea eax, [ebp - 0x444]
push eax
push str.__s_regsvr32.exe___s__s
push 0x208
push 0x104
lea ecx, [ebp - 0x654]
push ecx
call fcn.004157ac
add esp, 0x18
push 0
lea edx, [ebp - 0x1084]
push edx
lea eax, [ebp - 0x654]
push eax
push 0
call fcn.0043a810
add esp, 0x10
jmp 0x44838a
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x444]
push edx
push str.__s_regsvr32.exe___s___sAppCom.dll_
push 0x208
push 0x104
lea eax, [ebp - 0x654]
push eax
call fcn.004157ac
add esp, 0x18
push 0
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x654]
push edx
push 0
call fcn.0043a810
add esp, 0x10
push 0
push 5
push 0xa
call fcn.0044d8b0
add esp, 0xc
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x444]
push ecx
push str.__s_regsvr32.exe___s___sCommon.dll_
push 0x208
push 0x104
lea edx, [ebp - 0x654]
push edx
call fcn.004157ac
add esp, 0x18
push 0
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x654]
push ecx
push 0
call fcn.0043a810
add esp, 0x10
lea edx, [ebp - 0xa6c]
push edx
lea eax, [ebp - 0x444]
push eax
push str.__s_regsvr32.exe___s___sTestBundle.dll_
push 0x208
push 0x104
lea ecx, [ebp - 0x654]
push ecx
call fcn.004157ac
add esp, 0x18
push 0
lea edx, [ebp - 0xa6c]
push edx
lea eax, [ebp - 0x654]
push eax
push 0
call fcn.0043a810
add esp, 0x10
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x444]
push edx
push str.__s_regsvr32.exe___s___sKernelUtil.dll_
push 0x208
push 0x104
lea eax, [ebp - 0x654]
push eax
call fcn.004157ac
add esp, 0x18
push 0
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x654]
push edx
push 0
call fcn.0043a810
add esp, 0x10
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x444]
push ecx
push str.__s_regsvr32.exe___s___sTXPFProxy.dll_
push 0x208
push 0x104
lea edx, [ebp - 0x654]
push edx
call fcn.004157ac
add esp, 0x18
push 0
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x654]
push ecx
push 0
call fcn.0043a810
add esp, 0x10
push 0
push 6
push 0xa
call fcn.0044d8b0
add esp, 0xc
lea edx, [ebp - 0xa6c]
push edx
lea eax, [ebp - 0x444]
push eax
push str.__s_regsvr32.exe___s___sCPHelper.dll_
push 0x208
push 0x104
lea ecx, [ebp - 0x654]
push ecx
call fcn.004157ac
add esp, 0x18
push 0
lea edx, [ebp - 0xa6c]
push edx
lea eax, [ebp - 0x654]
push eax
push 0
call fcn.0043a810
add esp, 0x10
push 0
push 7
push 0xa
call fcn.0044d8b0
add esp, 0xc
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x444]
push edx
push str.__s_regsvr32.exe___s___sOPIEModule.dll_
push 0x208
push 0x104
lea eax, [ebp - 0x654]
push eax
call fcn.004157ac
add esp, 0x18
push 0
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x654]
push edx
push 0
call fcn.0043a810
add esp, 0x10
mov word [ebp - 0x16b4], 0
push 0x206
push 0
lea eax, [ebp - 0x16b2]
push eax
call fcn.00415680
add esp, 0xc
mov dword [ebp - 0x14a8], 0x26
push 0
mov ecx, dword [ebp - 0x14a8]
push ecx
lea edx, [ebp - 0x16b4]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x448694
mov word [ebp - 0x14ae], 0
lea eax, [ebp - 0x16b4]
push eax
lea ecx, [ebp - 0x444]
push ecx
push str.__s_regsvr32.exe___s___sCommon_FilesTencentNPQSCALL_npqscall.dll_
push 0x208
push 0x104
lea edx, [ebp - 0x654]
push edx
call fcn.004157ac
add esp, 0x18
push 0
push 0
lea eax, [ebp - 0x654]
push eax
push 0
call fcn.0043a810
add esp, 0x10
mov dword [ebp - 0x14a0], 0
lea ecx, [ebp - 0x14a0]
push ecx
push 0x2b
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea edx, [ebp - 0x864]
push edx
mov eax, dword [ebp - 0x14a0]
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea ecx, [ebp - 0x444]
push ecx
push str.__s_regsvr32.exe___s_Timwp.dll
push 0x208
push 0x104
lea edx, [ebp - 0x654]
push edx
call fcn.004157ac
add esp, 0x14
push 0
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x654]
push ecx
push 0
call fcn.0043a810
add esp, 0x10
push str.vqqsdl.dll
lea ecx, [ebp - 0x1088]
call fcn.00430de0
mov dword [ebp - 4], 0
push 0x4842c0
lea ecx, [ebp - 0x16b8]
call fcn.00431060
mov dword [ebp - 0x16c8], eax
mov edx, dword [ebp - 0x16c8]
mov dword [ebp - 0x16cc], edx
mov byte [ebp - 4], 1
push 0x476b9c
mov eax, dword [ebp - 0x16cc]
push eax
lea ecx, [ebp - 0x16bc]
push ecx
call fcn.004315f0
add esp, 0xc
mov dword [ebp - 0x16d0], eax
mov edx, dword [ebp - 0x16d0]
mov dword [ebp - 0x16d4], edx
mov byte [ebp - 4], 2
push str.QQSetupEx.exe
mov eax, dword [ebp - 0x16d4]
push eax
lea ecx, [ebp - 0x448]
push ecx
call fcn.004315f0
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x16bc]
call fcn.004310c0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x16b8]
call fcn.004310c0
push 0x4842c0
lea ecx, [ebp - 0x16c0]
call fcn.00431060
mov dword [ebp - 0x16d8], eax
mov edx, dword [ebp - 0x16d8]
mov dword [ebp - 0x16dc], edx
mov byte [ebp - 4], 6
push 0x476ba0
mov eax, dword [ebp - 0x16dc]
push eax
lea ecx, [ebp - 0x16c4]
push ecx
call fcn.004315f0
add esp, 0xc
mov dword [ebp - 0x16e0], eax
mov edx, dword [ebp - 0x16e0]
mov dword [ebp - 0x16e4], edx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1088]
push eax
mov ecx, dword [ebp - 0x16e4]
push ecx
lea edx, [ebp - 0x658]
push edx
call fcn.00431540
add esp, 0xc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x16c4]
call fcn.004310c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x16c0]
call fcn.004310c0
mov word [ebp - 0x1294], 0
push 0x206
push 0
lea eax, [ebp - 0x1292]
push eax
call fcn.00415680
add esp, 0xc
push 0x476ba4
push 0x4880d0
push 0x476bc0
push 0x208
push 0x104
lea ecx, [ebp - 0x1294]
push ecx
call fcn.004157ac
add esp, 0x18
mov word [ebp - 0xc74], 0
push 0x206
push 0
lea edx, [ebp - 0xc72]
push edx
call fcn.00415680
add esp, 0xc
lea ecx, [ebp - 0x1088]
call fcn.004312a0
push eax
push 0x4880d0
push str._sBinSetupEx_s
push 0x208
push 0x104
lea eax, [ebp - 0xc74]
push eax
call fcn.004157ac
add esp, 0x18
mov word [ebp - 0x21c], 0
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.00415680
add esp, 0xc
push 0x4880d0
push str._sBinSetupEx_
push 0x208
push 0x104
lea edx, [ebp - 0x21c]
push edx
call fcn.004157ac
add esp, 0x14
lea eax, [ebp - 0x21c]
push eax
call fcn.00437cb0
add esp, 4
push 0
lea ecx, [ebp - 0x1294]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004312a0
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
lea edx, [ebp - 0xc74]
push edx
lea ecx, [ebp - 0x658]
call fcn.004312a0
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push 0xa
push 0xa
call fcn.0044d8b0
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x658]
call fcn.004310c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x448]
call fcn.004310c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1088]
call fcn.004310c0
push 1
push 1
push 4
call fcn.0044d8b0
add esp, 0xc
call fcn.00446e20
call fcn.00446180
push 0
push 4
push 4
call fcn.0044d8b0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004151d0
mov esp, ebp
pop ebp
ret