Function at 0x408fe0
Capabilities:
Create directory
Extract resource via kernel32 functions
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b42bd
mov eax, dword fs:[0]
push eax
mov eax, 0x1464
call fcn.004942f0
mov eax, dword [0x4e5070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x146c], ebx
cmp byte [ebx + 6], 0
je 0x40906d
sub esp, 0x18
lea edx, [ebx + 0x1c]
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40904e
mov eax, dword [ecx]
jmp 0x409050
mov eax, ecx
push 0xffffffffffffffff
push 0
push edx
mov byte [eax], 0
call fcn.00403b90
call fcn.00406f70
add esp, 0x18
test al, al
jne 0x409de8
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00498020
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x110]
add esp, 0xc
push 0x100
push eax
push 0x66
push dword [ebx + 0x14]
call edi
movq xmm0, qword [ebp - 0x110]
lea eax, [ebp - 0x1388]
mov ecx, 0xf
mov byte [ebp - 0x1388], 0
cmp ecx, 0x10
movq qword [ebp - 0x1388], xmm0
mov dword [ebp - 0x1374], ecx
cmovae eax, dword [ebp - 0x1388]
mov dword [ebp - 0x1378], 8
mov byte [eax + 8], 0
push 4
push ecx
push str.http
lea ecx, [ebp - 0x1388]
mov dword [ebp - 4], 0
call fcn.0040a220
cmp eax, 0xffffffff
jne 0x4093b0
push 3
push ecx
push 0x4c97e4
lea ecx, [ebp - 0x1388]
call fcn.0040a220
cmp eax, 0xffffffff
jne 0x4093b0
push str.RES_INSTALL
push 0x65
push dword [ebx + 0x14]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
jne 0x409183
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
sub esp, 0x18
mov ecx, esp
push 0x4c9884
call fcn.00403320
lea eax, [ebp - 0x1330]
push eax
call fcn.00410d40
add esp, 0x20
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 0x10
jb 0x409162
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00403320
push 0
push 1
mov ecx, ebx
call fcn.00409e10
lea ecx, [ebp - 0x1330]
jmp 0x409dc5
push esi
push dword [ebx + 0x14]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x1470], eax
test eax, eax
jne 0x4091c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
sub esp, 0x18
mov ecx, esp
push 0x4c9884
call fcn.00403320
lea eax, [ebp - 0x1330]
push eax
call fcn.00410d40
add esp, 0x20
mov byte [ebp - 4], 0xb
jmp 0x40915a
push esi
push dword [ebx + 0x14]
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
jne 0x4091fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
sub esp, 0x18
mov ecx, esp
push 0x4c9884
call fcn.00403320
lea eax, [ebp - 0x1330]
push eax
call fcn.00410d40
add esp, 0x20
mov byte [ebp - 4], 0xc
jmp 0x40915a
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
mov dword [ebp - 0x146c], esi
test esi, esi
jne 0x40923f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
sub esp, 0x18
mov ecx, esp
push 0x4c9884
call fcn.00403320
lea eax, [ebp - 0x1330]
push eax
call fcn.00410d40
add esp, 0x20
mov byte [ebp - 4], 0xd
jmp 0x40915a
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x110]
push 0x100
push eax
push 0x66
push dword [ebx + 0x14]
call edi
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x1348]
call fcn.00403320
sub esp, 0x18
mov byte [ebp - 4], 0xe
lea eax, [ebx + 0x1c]
mov ecx, esp
push eax
call fcn.0040a030
call fcn.00406e50
mov ecx, esp
push str.STNetSpeederData
call fcn.00403320
call fcn.00406e50
mov ecx, esp
push str.XMNetSpeederData
call fcn.00403320
call fcn.00406e50
add esp, 0x18
cmp byte [ebx + 5], 0
je 0x4092f6
sub esp, 0x18
lea edi, [ebx + 0xc4]
mov ecx, esp
push edi
call fcn.0040a030
call fcn.00407140
add esp, 0x18
xor esi, esi
mov ecx, edi
call fcn.0040d1d0
test eax, eax
jne 0x4092f0
push 0x64
inc esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 0xa
jl 0x4092d7
mov esi, dword [ebp - 0x146c]
lea edi, [ebx + 0xc4]
mov edx, edi
lea ecx, [ebp - 0x1330]
call fcn.00410ac0
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 8
jb 0x409315
mov eax, dword [eax]
mov edx, dword [ebp - 0x1470]
push ebx
push ecx
push eax
mov ecx, esi
call fcn.00418e00
add esp, 0xc
mov dword [ebp - 0x1470], eax
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0xe
call fcn.00403100
push esi
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp - 0x1470]
test eax, eax
je 0x4093a5
push eax
sub esp, 0x18
mov ecx, esp
push 0x4c9850
call fcn.00403320
lea eax, [ebp - 0x1330]
push eax
call fcn.00410d40
add esp, 0x20
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 0x10
jb 0x409379
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00403320
push 0
push 1
mov ecx, ebx
call fcn.00409e10
lea ecx, [ebp - 0x1330]
call fcn.00403260
lea ecx, [ebp - 0x1348]
jmp 0x409dc5
lea ecx, [ebp - 0x1348]
jmp 0x40971c
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x110]
push 0x100
push eax
push 0x66
push dword [ebx + 0x14]
call edi
cmp byte [ebp - 0x110], 0
mov dword [ebp - 0x134c], 0xf
mov dword [ebp - 0x1350], 0
mov byte [ebp - 0x1360], 0
jne 0x409401
xor ecx, ecx
jmp 0x409419
lea ecx, [ebp - 0x110]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409410
sub ecx, edx
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x1360]
call fcn.00403a90
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
lea edx, [ebx + 0x1c]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40945e
mov eax, dword [ecx]
jmp 0x409460
mov eax, ecx
push 0xffffffffffffffff
push 0
push edx
mov byte [eax], 0
call fcn.00403b90
call fcn.00406e50
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40949a
mov eax, dword [ecx]
jmp 0x40949c
mov eax, ecx
push 0x10
push str.STNetSpeederData
mov byte [eax], 0
call fcn.00403a90
call fcn.00406e50
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x4094d8
mov eax, dword [ecx]
jmp 0x4094da
mov eax, ecx
push 0x10
push str.XMNetSpeederData
mov byte [eax], 0
call fcn.00403a90
call fcn.00406e50
add esp, 0x18
cmp byte [ebx + 5], 0
je 0x40957a
push 0xffffffffffffffff
push 0
lea edi, [ebx + 0xc4]
mov dword [ebp - 0x1334], 0xf
push edi
lea ecx, [ebp - 0x1348]
mov dword [ebp - 0x1338], 0
mov byte [ebp - 0x1348], 0
call fcn.00403b90
xor dl, dl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1348]
call fcn.0040ce80
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1334]
cmp eax, 0x10
jb 0x40955f
inc eax
lea ecx, [ebp - 0x1348]
push eax
push dword [ebp - 0x1348]
call fcn.00403e20
xor esi, esi
mov ecx, edi
call fcn.0040d1d0
test eax, eax
jne 0x40957a
push 0x64
inc esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 0xa
jl 0x409561
call fcn.00405b70
lea edi, [ebx + 0xc4]
mov edx, edi
lea ecx, [ebp - 0x1348]
call fcn.00410ac0
push ecx
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1330]
call fcn.0040ab30
add esp, 4
lea ecx, [ebp - 0x1348]
mov byte [ebp - 4], 6
call fcn.00403100
lea edx, [ebp - 0x1360]
lea ecx, [ebp - 0x13a0]
call fcn.00410ac0
mov byte [ebp - 4], 7
lea edx, [ebp - 0x1330]
cmp dword [ebp - 0x131c], 8
cmovae edx, dword [ebp - 0x1330]
cmp dword [eax + 0x14], 8
jb 0x4095e7
mov eax, dword [eax]
push ebx
push ecx
mov ecx, eax
call fcn.004062c0
add esp, 8
mov byte [ebp - 4], 6
test al, al
lea ecx, [ebp - 0x13a0]
sete bl
call fcn.00403100
test bl, bl
je 0x409650
cmp dword [ebp - 0x134c], 0x10
lea eax, [ebp - 0x1360]
cmovae eax, dword [ebp - 0x1360]
sub esp, 0x18
mov esi, esp
push eax
sub esp, 0x18
mov ecx, esp
push 0x4c9834
call fcn.00403320
push esi
call fcn.00410d40
mov ebx, dword [ebp - 0x146c]
add esp, 0x20
mov ecx, ebx
push 0
push 1
call fcn.00409e10
jmp 0x409656
mov ebx, dword [ebp - 0x146c]
mov edx, edi
lea ecx, [ebp - 0x13a0]
call fcn.00410ac0
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
jb 0x40966f
mov eax, dword [eax]
cmp dword [ebp - 0x131c], 8
lea ecx, [ebp - 0x1330]
push ebx
cmovae ecx, dword [ebp - 0x1330]
mov edx, eax
push ecx
call fcn.00418b30
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x13a0]
mov esi, eax
call fcn.00403100
test esi, esi
je 0x409706
push esi
sub esp, 0x18
mov ecx, esp
push 0x4c9850
call fcn.00403320
lea eax, [ebp - 0x13a0]
push eax
call fcn.00410d40
add esp, 0x20
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 0x10
jb 0x4096cf
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00403320
push 0
push 1
mov ecx, ebx
call fcn.00409e10
lea ecx, [ebp - 0x13a0]
call fcn.00403260
lea ecx, [ebp - 0x1330]
call fcn.00403100
lea ecx, [ebp - 0x1360]
jmp 0x409dc5
call fcn.00405c30
lea ecx, [ebp - 0x1330]
call fcn.00403100
lea ecx, [ebp - 0x1360]
mov byte [ebp - 4], 0
call fcn.00403260
push 0x4c95c4
mov edx, edi
lea ecx, [ebp - 0x13a0]
call fcn.0040a8a0
add esp, 4
lea ecx, [ebx + 0x94]
mov byte [ebp - 4], 0x11
push ecx
mov edx, eax
lea ecx, [ebp - 0x13b8]
call fcn.0040a9b0
add esp, 4
lea ecx, [ebp - 0x13a0]
mov byte [ebp - 4], 0x13
call fcn.00403260
cmp byte [ebx], 0
jne 0x409b04
cmp byte [ebx + 2], 0
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
je 0x4098b8
push 0x208
lea eax, [ebp - 0x318]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x318]
push 0
push 0
push eax
push 0
call esi
lea edx, [ebx + 0xdc]
lea ecx, [ebp - 0x13e8]
call fcn.00410ac0
mov dword [ebp - 0x146c], eax
mov edx, edi
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x13d0]
call fcn.00410ac0
mov dword [ebp - 0x1470], eax
lea edx, [ebx + 0xdc]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1360]
call fcn.00410ac0
mov esi, eax
lea edx, [ebx + 0xf4]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1330]
call fcn.00410ac0
mov dword [ebp - 0x1464], eax
lea edx, [ebp - 0x13b8]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1348]
call fcn.00410ac0
mov ecx, dword [ebp - 0x146c]
mov byte [ebp - 4], 0x18
cmp dword [ecx + 0x14], 8
jb 0x40982f
mov ecx, dword [ecx]
mov dword [ebp - 0x146c], ecx
mov ecx, dword [ebp - 0x1470]
cmp dword [ecx + 0x14], 8
jb 0x40983d
mov ecx, dword [ecx]
cmp dword [esi + 0x14], 8
jb 0x409845
mov esi, dword [esi]
mov edx, dword [ebp - 0x1464]
cmp dword [edx + 0x14], 8
jb 0x409853
mov edx, dword [edx]
cmp dword [eax + 0x14], 8
jb 0x40985b
mov eax, dword [eax]
push ecx
push dword [ebp - 0x146c]
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x318]
push esi
push ecx
mov ecx, eax
call fcn.00407350
add esp, 0x1c
lea ecx, [ebp - 0x1348]
call fcn.00403100
lea ecx, [ebp - 0x1330]
call fcn.00403100
lea ecx, [ebp - 0x1360]
call fcn.00403100
lea ecx, [ebp - 0x13d0]
call fcn.00403100
lea ecx, [ebp - 0x13e8]
mov byte [ebp - 4], 0x13
call fcn.00403100
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
cmp byte [ebx + 1], 0
je 0x409abd
push 0x208
lea eax, [ebp - 0x318]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x318]
push 0
push 2
push eax
push 0
call esi
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x1360]
call fcn.004031c0
lea edx, [ebx + 0xdc]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1348]
call fcn.00410ac0
mov esi, eax
push 0x4c9500
lea edx, [ebp - 0x1360]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x13d0]
call fcn.0040ab80
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x13e8]
call fcn.0040ac90
add esp, 4
lea ecx, [ebp - 0x1360]
push eax
call fcn.00403140
lea ecx, [ebp - 0x13e8]
call fcn.00403100
lea ecx, [ebp - 0x13d0]
call fcn.00403100
lea ecx, [ebp - 0x1348]
mov byte [ebp - 4], 0x19
call fcn.00403100
cmp dword [ebp - 0x134c], 8
lea eax, [ebp - 0x1360]
push 0
cmovae eax, dword [ebp - 0x1360]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
lea edx, [ebx + 0xdc]
lea ecx, [ebp - 0x1460]
call fcn.00410ac0
mov dword [ebp - 0x146c], eax
lea edx, [ebx + 0xc4]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1330]
call fcn.00410ac0
mov esi, eax
lea edx, [ebx + 0xdc]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1348]
call fcn.00410ac0
mov edi, eax
lea edx, [ebx + 0xf4]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x13d0]
call fcn.00410ac0
mov dword [ebp - 0x1464], eax
lea edx, [ebp - 0x13b8]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x13e8]
call fcn.00410ac0
mov ecx, dword [ebp - 0x146c]
mov byte [ebp - 4], 0x20
cmp dword [ecx + 0x14], 8
jb 0x409a1f
mov ecx, dword [ecx]
mov dword [ebp - 0x146c], ecx
cmp dword [esi + 0x14], 8
jb 0x409a27
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x409a2f
mov edi, dword [edi]
cmp dword [ebp - 0x134c], 8
lea edx, [ebp - 0x1360]
mov ecx, dword [ebp - 0x1464]
cmovae edx, dword [ebp - 0x1360]
cmp dword [ecx + 0x14], 8
jb 0x409a51
mov ecx, dword [ecx]
cmp dword [eax + 0x14], 8
jb 0x409a59
mov eax, dword [eax]
push ecx
push dword [ebp - 0x146c]
push ecx
push esi
push ecx
push edi
push edx
mov edx, ecx
mov ecx, eax
call fcn.00407350
add esp, 0x1c
lea ecx, [ebp - 0x13e8]
call fcn.00403100
lea ecx, [ebp - 0x13d0]
call fcn.00403100
lea ecx, [ebp - 0x1348]
call fcn.00403100
lea ecx, [ebp - 0x1330]
call fcn.00403100
lea ecx, [ebp - 0x1460]
call fcn.00403100
lea ecx, [ebp - 0x1360]
mov byte [ebp - 4], 0x13
call fcn.00403100
lea edi, [ebx + 0xc4]
mov ecx, ebx
call fcn.00407720
cmp byte [ebx + 3], 0
je 0x409b04
sub esp, 0x18
lea eax, [ebx + 0xdc]
mov ecx, esp
mov dword [ebp - 0x1464], esp
push eax
call fcn.0040a030
sub esp, 0x18
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x13b8]
mov ecx, esp
push eax
call fcn.0040a030
mov cl, 1
mov byte [ebp - 4], 0x13
call fcn.004081d0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
push 0x4c989c
call fcn.00403320
push 1
push 1
mov ecx, ebx
call fcn.00409e10
lea ecx, [ebp - 0x1448]
call fcn.0040eb50
sub esp, 8
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x1468]
mov byte [ebp - 0x1468], 0x5f
lea ecx, [ebp - 0x1448]
push eax
call fcn.0040a1c0
sub esp, 8
mov byte [ebp - 0x1468], 0x2e
mov esi, eax
lea ecx, [ebp - 0x1448]
lea eax, [ebp - 0x1468]
push eax
call fcn.0040a1c0
cmp esi, 0xffffffff
je 0x409c1a
cmp eax, 0xffffffff
je 0x409c1a
lea ecx, [eax - 1]
cmp ecx, esi
jle 0x409c1a
sub eax, esi
lea ecx, [ebp - 0x1448]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x1330]
push eax
call fcn.00409fb0
push str._seo.dat
mov edx, edi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1348]
call fcn.0040a8a0
sub esp, 0x14
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x1330]
mov dword [ebp - 0x1464], esp
mov ecx, esp
push eax
call fcn.0040a030
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x1348]
cmp dword [ebp - 0x1334], 0x10
cmovae eax, dword [ebp - 0x1348]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00403320
xor cl, cl
mov byte [ebp - 4], 0x24
call fcn.00410b90
add esp, 0x30
lea ecx, [ebp - 0x1348]
call fcn.00403260
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0x22
call fcn.00403260
call fcn.00405b70
lea ecx, [ebp - 0x1430]
call fcn.0040e5d0
lea ecx, [ebp - 0x1418]
mov byte [ebp - 4], 0x26
call fcn.0040e8b0
push str.https:__client_box.fmiao.net_uploadRecord_
lea ecx, [ebp - 0x1400]
mov byte [ebp - 4], 0x27
call fcn.00403320
push 0x1000
lea eax, [ebp - 0x1318]
mov byte [ebp - 4], 0x28
push 0
push eax
call fcn.00498020
xor eax, eax
add esp, 0xc
mov word [ebp - 0x1370], ax
xorps xmm0, xmm0
mov dword [ebp - 0x1366], eax
mov word [ebp - 0x1362], ax
lea eax, [ebp - 0x1370]
push eax
movq qword [ebp - 0x136e], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x1364]
lea edi, [ebp - 0x1418]
cmp dword [ebp - 0x1404], 0x10
lea esi, [ebp - 0x1430]
push eax
movzx eax, word [ebp - 0x1366]
lea ecx, [ebp - 0x1400]
cmovae edi, dword [ebp - 0x1418]
mov edx, 0x4e9120
cmp dword [ebp - 0x141c], 0x10
push eax
movzx eax, word [ebp - 0x1368]
cmovae esi, dword [ebp - 0x1430]
cmp dword [0x4e9134], 0x10
push eax
movzx eax, word [ebp - 0x136a]
cmovae edx, dword [0x4e9120]
cmp dword [ebp - 0x13ec], 0x10
push eax
movzx eax, word [ebp - 0x136e]
cmovae ecx, dword [ebp - 0x1400]
push eax
movzx eax, word [ebp - 0x1370]
push eax
push edi
push esi
push edx
push ecx
push str._schannelId_slocalMac_sver_stypeinstalltimestamp_04u_02u_02u_02u_02u_02u
lea eax, [ebp - 0x1318]
push 0x1000
push eax
call fcn.004064d0
add esp, 0x24
lea edx, [ebp - 0x1318]
lea ecx, [ebp - 0x1460]
call fcn.00405d30
add esp, 0x10
lea ecx, [ebp - 0x1460]
call fcn.00403260
call fcn.00405c30
cmp byte [ebx + 4], 0
je 0x409d93
sub esp, 0x18
lea eax, [ebx + 0xf4]
mov ecx, esp
mov dword [ebp - 0x1464], esp
push eax
call fcn.0040a030
sub esp, 0x18
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x13b8]
mov ecx, esp
push eax
call fcn.0040a030
mov byte [ebp - 4], 0x28
call fcn.004071a0
add esp, 0x30
lea ecx, [ebp - 0x1400]
call fcn.00403260
lea ecx, [ebp - 0x1418]
call fcn.00403260
lea ecx, [ebp - 0x1430]
call fcn.00403260
lea ecx, [ebp - 0x1448]
call fcn.00403260
lea ecx, [ebp - 0x13b8]
call fcn.00403260
mov eax, dword [ebp - 0x1374]
cmp eax, 0x10
jb 0x409de8
inc eax
lea ecx, [ebp - 0x1388]
push eax
push dword [ebp - 0x1388]
call fcn.00403e20
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00493122
mov esp, ebp
pop ebp
ret