Function at 0x415ba0
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x884
mov eax, dword [0x44a2b8]
xor eax, esp
mov dword [esp + 0x880], eax
mov eax, dword [0x44ecb8]
test eax, eax
push edi
je 0x415bd7
push str.ck_W
push 0x3f3
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x415bee
push 0x104
push str.ck_W
push 0x44ecc8
call fcn.00424e97
add esp, 0xc
mov eax, dword [0x44ecc4]
test eax, eax
mov dword [0x44ecc0], 0xb
je 0x415c11
push 0
push 0
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 1
push 1
call fcn.00410c60
add esp, 0xc
push str.QQCRM.exe
push 0x44f018
push 0x44cb80
push str.___sSysDir____sBin_s_
push 0x410
lea eax, [esp + 0x484]
push 0x208
push eax
call fcn.00425032
add esp, 0x1c
push 0x44cb80
push str._sSysDirInstAsm.exe
push 0x208
lea ecx, [esp + 0x274]
push 0x104
push ecx
call fcn.00425032
add esp, 0x14
push 0x44
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.00429d70
add esp, 0xc
xor eax, eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 8]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0x44cb80
push 0
push 0
push 0
push 0
push 0
lea edx, [esp + 0x490]
push edx
lea eax, [esp + 0x28c]
push eax
mov dword [esp + 0x40], 0x44
mov dword [esp + 0x6c], 1
mov word [esp + 0x70], 1
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x415cf2
mov ecx, dword [esp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call edi
mov edx, dword [esp + 0xc]
push edx
call edi
push 1
push 1
push 1
call fcn.00410c60
add esp, 0xc
push 1
push 0
push 0xa
call fcn.00410c60
add esp, 0xc
push 0x44f018
push str._sBin
push 0x208
lea eax, [esp + 0x47c]
push 0x104
push eax
call fcn.00425032
add esp, 0x14
lea ecx, [esp + 0x470]
push ecx
push str.__sTXPlatform.exe____regserver
push 0x208
lea edx, [esp + 0x6c]
push 0x104
push edx
call fcn.00425032
add esp, 0x14
push 1
lea eax, [esp + 0x474]
push eax
lea ecx, [esp + 0x68]
push ecx
push 0
call fcn.0041b900
push 0
push 1
push 0xa
call fcn.00410c60
add esp, 0x1c
lea edx, [esp + 4]
push edx
push 0x25
push 0
mov dword [esp + 0x10], 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [esp + 4]
lea eax, [esp + 0x268]
push eax
push ecx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea edx, [esp + 0x268]
push edx
push str.__s_regsvr32.exe___s_AppCom.dll
push 0x208
lea eax, [esp + 0x6c]
push 0x104
push eax
call fcn.00425032
add esp, 0x14
push 1
lea ecx, [esp + 0x474]
push ecx
lea edx, [esp + 0x68]
push edx
push 0
call fcn.0041b900
push 0
push 2
push 0xa
call fcn.00410c60
add esp, 0x1c
lea eax, [esp + 0x268]
push eax
push str.__s_regsvr32.exe___s_KernelUtil.dll
push 0x208
lea ecx, [esp + 0x6c]
push 0x104
push ecx
call fcn.00425032
add esp, 0x14
push 1
lea edx, [esp + 0x474]
push edx
lea eax, [esp + 0x68]
push eax
push 0
call fcn.0041b900
push 0
push 2
push 0xa
call fcn.00410c60
add esp, 0x1c
lea ecx, [esp + 0x268]
push ecx
push str.__s_regsvr32.exe___s_Common.dll
push 0x208
lea edx, [esp + 0x6c]
push 0x104
push edx
call fcn.00425032
add esp, 0x14
push 1
lea eax, [esp + 0x474]
push eax
lea ecx, [esp + 0x68]
push ecx
push 0
call fcn.0041b900
push 0
push 3
push 0xa
call fcn.00410c60
add esp, 0x1c
lea edx, [esp + 0x268]
push edx
push str.__s_regsvr32.exe___s_TXPFProxy.dll
push 0x208
lea eax, [esp + 0x6c]
push 0x104
push eax
call fcn.00425032
add esp, 0x14
push 1
lea ecx, [esp + 0x474]
push ecx
lea edx, [esp + 0x68]
push edx
push 0
call fcn.0041b900
push 0
push 4
push 0xa
call fcn.00410c60
add esp, 0x1c
push 0
push 0xa
push 0xa
call fcn.00410c60
mov ecx, dword [esp + 0x890]
add esp, 0xc
pop edi
xor ecx, esp
call fcn.00424e88
mov esp, ebp
pop ebp
ret