Function at 0x40b504
Capabilities:
Create process on windows

Disassembly:
push 0x78
mov eax, 0x4243bf
call fcn.0042318c
push 0x3fc
call fcn.00409b7e
test eax, eax
je 0x40b796
call fcn.0040117a
mov ecx, eax
call fcn.004057ae
test eax, eax
je 0x40b796
xor edi, edi
mov dword [ebp - 4], edi
call fcn.00401b0a
push eax
lea ecx, [ebp - 0x18]
call fcn.00401564
xor eax, eax
inc eax
mov dword [ebp - 4], eax
call fcn.00408845
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.00412d16
mov esi, dword [ebp - 0x18]
test eax, eax
je 0x40b78e
lea ebx, [esi - 0x10]
cmp dword [ebx + 4], edi
je 0x40b78e
mov byte [ebp - 4], 2
call fcn.00401b0a
push eax
lea ecx, [ebp - 0x1c]
call fcn.00401564
lea edx, [ebp - 0x1c]
mov byte [ebp - 4], 3
mov ecx, esi
call fcn.00419a6a
test eax, eax
je 0x40b772
mov byte [ebp - 4], 4
call fcn.00401b0a
push eax
lea ecx, [ebp - 0x14]
call fcn.00401564
mov byte [ebp - 4], 5
call fcn.0040117a
mov eax, dword [eax + 4]
push dword [eax + 0x1c]
lea eax, [ebp - 0x14]
push 0x42b9a0
push eax
call fcn.0040731f
push 0x40
lea eax, [ebp - 0x80]
mov dword [ebp - 0x84], 0x44
push edi
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
inc eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0040117a
mov ecx, dword [eax + 0x18]
sub ecx, 0x10
call fcn.00406d2d
lea edi, [eax + 0x10]
mov dword [ebp - 0x20], edi
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 6
push eax
mov edx, 0x42bbfc
lea ecx, [ebp - 0x30]
call fcn.004060cc
push 0x42bca8
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c]
call fcn.00406141
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.004061a4
push 0x42ab54
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.00406141
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
push ecx
mov edx, eax
lea ecx, [ebp - 0x10]
call fcn.004061a4
add esp, 0x2c
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [edi - 0x10]
mov byte [ebp - 4], 0x10
call fcn.0040188c
mov eax, dword [ebp - 0x10]
cmp dword [eax - 4], 1
jle 0x40b6bd
push dword [eax - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0040161a
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
mov edi, eax
call fcn.00406678
test edi, edi
je 0x40b741
push 0xffffffffffffffff
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x40]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x3c]
call esi
push str.DownloadAssistTools:_launch_qqhelper_successfully.
push 0x426954
call fcn.00419776
pop ecx
pop ecx
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, ebx
call fcn.0040188c
xor eax, eax
inc eax
jmp 0x40b798
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DownloadAssitTools:_launch_qqhelper_failed__lu
push 0x426954
call fcn.00419776
mov ecx, dword [ebp - 0x10]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0040188c
jmp 0x40b783
push str.DownloadAssitTools:_qqhelper_is_not_trusted
push 0x426954
call fcn.00419776
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [esi - 0x10]
call fcn.0040188c
xor eax, eax
call fcn.00423155
ret