Function at 0x414cbf
Capabilities:
Create directory
Create process on windows

Disassembly:
push 0x27c
mov eax, 0x43aecb
call fcn.004370c6
xor esi, esi
push 0x40
lea eax, [ebp - 0x284]
mov ebx, ecx
push esi
push eax
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x288], esi
call fcn.0041c3b0
xor eax, eax
mov dword [ebp - 0x240], esi
lea edi, [ebp - 0x23c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x208
stosd dword es:[edi], eax
lea eax, [ebp - 0x21e]
push esi
push eax
mov word [ebp - 0x220], si
call fcn.0041c3b0
add esp, 0x18
lea esi, [ebx + 0x38]
push 0x43e93c
push esi
mov dword [ebp - 0x230], esi
call fcn.0040afdf
test eax, eax
jne 0x414d89
lea ebx, [ebp - 0x224]
call fcn.0040aec1
and dword [ebp - 4], 0
mov edi, esi
call fcn.0040138c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x224]
add eax, 0xfffffff0
call fcn.00401977
call fcn.00414219
mov eax, str.Download_
mov ecx, esi
call fcn.004019e7
push 0
push dword [esi]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov eax, str.QQPCDownload.exe
mov ecx, esi
call fcn.004019e7
mov ebx, dword [ebp - 0x228]
mov eax, dword [esi]
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x228], eax
je 0x414dfc
push edi
mov dword [ebp - 0x224], edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, 0x80010106
mov dword [ebp - 0x22c], eax
je 0x414db5
cmp eax, edi
jl 0x414ddc
lea edi, [ebp - 0x224]
call fcn.0041b7a3
test eax, eax
jl 0x414ddc
call dword [section..data]
push dword [ebp - 0x228]
mov eax, dword [ebp - 0x224]
call fcn.0041b9a2
pop ecx
mov eax, dword [ebp - 0x224]
xor edi, edi
cmp eax, edi
je 0x414dee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x22c], edi
jl 0x414dfc
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [esi]
cmp esi, edi
mov dword [ebp - 0x228], esi
je 0x414e64
push edi
mov dword [ebp - 0x224], edi
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, eax
cmp esi, 0x80010106
je 0x414e23
cmp esi, edi
jl 0x414e4a
lea edi, [ebp - 0x224]
call fcn.0041b7a3
test eax, eax
jl 0x414e4a
call dword [section..data]
push dword [ebp - 0x228]
mov eax, dword [ebp - 0x224]
call fcn.0041b8ac
pop ecx
mov eax, dword [ebp - 0x224]
test eax, eax
je 0x414e5a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
jl 0x414e64
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x43e93c
lea edi, [ebx + 0x40]
push edi
call fcn.0040afdf
test eax, eax
jne 0x414e8b
push 1
mov esi, edi
call fcn.00414c49
test al, al
pop ecx
jne 0x414e8b
xor eax, eax
jmp 0x414f5a
lea esi, [ebx + 0x44]
push 0x43e93c
push esi
mov dword [ebp - 0x224], esi
call fcn.0040afdf
test eax, eax
jne 0x414eaf
push 2
call fcn.00414c49
test al, al
pop ecx
je 0x414e84
cmp dword [ebx + 8], 0
jne 0x414ed4
and dword [ebp - 0x22c], 0
lea ecx, [ebp - 0x22c]
call fcn.0040a646
test eax, eax
je 0x414e84
mov eax, dword [ebp - 0x22c]
mov dword [ebx + 8], eax
call fcn.0040ad9b
test eax, eax
je 0x414ee2
call fcn.00415811
mov esi, dword [ebp - 0x224]
call fcn.0040fb11
push eax
mov esi, edi
call fcn.0040fb11
mov esi, dword [ebp - 0x230]
push eax
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.0040fb11
push eax
lea eax, [ebp - 0x220]
push str._s_cmd1_supplyid_d_target_d_cgi_s_productname_s_
push eax
call fcn.00417a06
add esp, 0x1c
call fcn.0040afb3
mov esi, edi
call fcn.0040afb3
mov esi, dword [ebp - 0x224]
call fcn.0040afb3
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x288]
push eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x220]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
xor eax, eax
inc eax
call fcn.00437149
ret