Function at 0x1001f787
Capabilities:
Create directory
Delete file

Disassembly:
push 0x188
mov eax, 0x100bf460
call fcn.1008c851
mov esi, ecx
xor ebx, ebx
lea ecx, [ebp - 0xc0]
mov edi, ebx
call fcn.1001c89a
lea ecx, [ebp - 0x188]
mov dword [ebp - 4], ebx
call fcn.1001c359
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0xbc], 0x10
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x14], ebx
call fcn.1001b109
push str.Download_
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.10001474
pop ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x18c]
lea ecx, [ecx - 0x10]
call fcn.100018f3
push ebx
push dword [ebp - 0x14]
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [ebp + 8], 7
jne 0x1001f96f
cmp dword [ebp - 0x18], ebx
je 0x1001f86f
mov ebx, str.http:__dlied6.qq.com_download.windowsupdate.com_msdownload_update_software_secu_2023_12_windows6.1_kb4474419_x64.msu
push ebx
call fcn.10001a48
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x188]
call fcn.10001ddf
mov ebx, str.de218f5a7004694d2824d5505e7d2c06
push ebx
call fcn.10001a48
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x78]
call fcn.10001ddf
push 0x1c
push str.windows6.1_kb4474419_x64.msu
jmp 0x1001f8a5
mov ebx, str.http:__dlied6.qq.com_download.windowsupdate.com_msdownload_update_software_secu_2023_12_windows6.1_kb4474419_x86.msu
push ebx
call fcn.10001a48
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x188]
call fcn.10001ddf
mov ebx, str.b00c7d68e01927433b3a322c796e88af
push ebx
call fcn.10001a48
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x78]
call fcn.10001ddf
push 0x1c
push str.windows6.1_kb4474419_x86.msu
lea ecx, [ebp - 0x14]
call fcn.10003991
push dword [ebp - 0x14]
call fcn.10001a48
pop ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.10001ddf
push dword [ebp - 0x14]
call fcn.10001a48
pop ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x170]
call fcn.10001ddf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x18]
lea edx, [ebp - 0xc0]
mov dword [esi + 0x120], eax
push edx
lea edx, [ebp - 0x188]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
test eax, eax
je 0x1001f929
mov eax, dword [ebp - 0xc0]
xor edi, edi
and dword [esi + 0x78], 0
inc edi
and dword [ebp - 0xb4], 0
mov dword [esi + 0xb0], eax
mov dword [ebp - 0xb8], 5
jmp 0x1001f93f
push 0x12
pop eax
mov dword [esi + 0x78], eax
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [esi + 0x10]
call fcn.100246db
mov ecx, dword [ebp - 0x194]
lea eax, [ebp - 0x188]
push eax
lea ecx, [ecx + 0xb8]
call fcn.1001c3e6
jmp 0x1001f988
push str.CTxdlController::StartDownloadPatch:error_version
push 0xd2
push str.D:qci_workspace_root_workspaces__qci_pipeline_10566830_1QQPCDownloadTxdlTxdlController.cpp
call fcn.1006b794
add esp, 0xc
mov edi, ebx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.100018f3
lea ecx, [ebp - 0x188]
call fcn.1001dd6c
lea ecx, [ebp - 0xc0]
call fcn.1001c972
mov eax, edi
call fcn.1008c7fb
ret 4