Function at 0x41488c
Capabilities:
Create directory
Create process on windows

Disassembly:
push 0x27c
mov eax, 0x43a90b
call fcn.00436b26
xor esi, esi
push 0x40
lea eax, [ebp - 0x284]
mov ebx, ecx
push esi
push eax
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x288], esi
call fcn.0041be10
xor eax, eax
mov dword [ebp - 0x240], esi
lea edi, [ebp - 0x23c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x208
stosd dword es:[edi], eax
lea eax, [ebp - 0x21e]
push esi
push eax
mov word [ebp - 0x220], si
call fcn.0041be10
add esp, 0x18
lea esi, [ebx + 0x38]
push 0x43d93c
push esi
mov dword [ebp - 0x230], esi
call fcn.0040acfc
test eax, eax
jne 0x414956
lea ebx, [ebp - 0x224]
call fcn.0040abde
and dword [ebp - 4], 0
mov edi, esi
call fcn.0040138c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x224]
add eax, 0xfffffff0
call fcn.00401977
call fcn.00413ef4
mov eax, str.Download_
mov ecx, esi
call fcn.004019e7
push 0
push dword [esi]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov eax, str.QQPCDownload.exe
mov ecx, esi
call fcn.004019e7
mov ebx, dword [ebp - 0x228]
mov eax, dword [esi]
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x228], eax
je 0x4149c9
push edi
mov dword [ebp - 0x224], edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, 0x80010106
mov dword [ebp - 0x22c], eax
je 0x414982
cmp eax, edi
jl 0x4149a9
lea edi, [ebp - 0x224]
call fcn.0041b1fe
test eax, eax
jl 0x4149a9
call dword [section..data]
push dword [ebp - 0x228]
mov eax, dword [ebp - 0x224]
call fcn.0041b3fd
pop ecx
mov eax, dword [ebp - 0x224]
xor edi, edi
cmp eax, edi
je 0x4149bb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x22c], edi
jl 0x4149c9
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [esi]
cmp esi, edi
mov dword [ebp - 0x228], esi
je 0x414a31
push edi
mov dword [ebp - 0x224], edi
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, eax
cmp esi, 0x80010106
je 0x4149f0
cmp esi, edi
jl 0x414a17
lea edi, [ebp - 0x224]
call fcn.0041b1fe
test eax, eax
jl 0x414a17
call dword [section..data]
push dword [ebp - 0x228]
mov eax, dword [ebp - 0x224]
call fcn.0041b307
pop ecx
mov eax, dword [ebp - 0x224]
test eax, eax
je 0x414a27
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
jl 0x414a31
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x43d93c
lea edi, [ebx + 0x40]
push edi
call fcn.0040acfc
test eax, eax
jne 0x414a58
push 1
mov esi, edi
call fcn.00414816
test al, al
pop ecx
jne 0x414a58
xor eax, eax
jmp 0x414b27
lea esi, [ebx + 0x44]
push 0x43d93c
push esi
mov dword [ebp - 0x224], esi
call fcn.0040acfc
test eax, eax
jne 0x414a7c
push 2
call fcn.00414816
test al, al
pop ecx
je 0x414a51
cmp dword [ebx + 8], 0
jne 0x414aa1
and dword [ebp - 0x22c], 0
lea ecx, [ebp - 0x22c]
call fcn.0040a363
test eax, eax
je 0x414a51
mov eax, dword [ebp - 0x22c]
mov dword [ebx + 8], eax
call fcn.0040aab8
test eax, eax
je 0x414aaf
call fcn.00415322
mov esi, dword [ebp - 0x224]
call fcn.0040f860
push eax
mov esi, edi
call fcn.0040f860
mov esi, dword [ebp - 0x230]
push eax
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.0040f860
push eax
lea eax, [ebp - 0x220]
push str._s_cmd1_supplyid_d_target_d_cgi_s_productname_s_
push eax
call fcn.00417476
add esp, 0x1c
call fcn.0040acd0
mov esi, edi
call fcn.0040acd0
mov esi, dword [ebp - 0x224]
call fcn.0040acd0
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x288]
push eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x220]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
xor eax, eax
inc eax
call fcn.00436ba9
ret