Function at 0x401c70
Capabilities:
Create directory
Get installed programs
Persist via default file association registry key
Persist via run registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc74
mov eax, dword [0x416710]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x220], 0
push str._11111_
mov eax, dword [ebp + 0x10]
push eax
call fcn.004065e5
add esp, 8
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 0
je 0x401e19
cmp dword [ebp - 0x220], 0
jne 0x401cc8
mov ecx, dword [ebp - 0x640]
mov dword [ebp - 4], ecx
jmp 0x401df0
cmp dword [ebp - 0x220], 1
jne 0x401ce2
mov edx, dword [ebp - 0x640]
mov dword [ebp - 0xc74], edx
jmp 0x401df0
cmp dword [ebp - 0x220], 2
jne 0x401cfc
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x21c], eax
jmp 0x401df0
cmp dword [ebp - 0x220], 3
jne 0x401d16
mov ecx, dword [ebp - 0x640]
mov dword [ebp - 0x63c], ecx
jmp 0x401df0
cmp dword [ebp - 0x220], 4
jne 0x401d45
push 0x4160a8
mov edx, dword [ebp - 0x640]
push edx
call fcn.004060d0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0xc70], eax
jmp 0x401df0
cmp dword [ebp - 0x220], 5
jne 0x401d71
push 0x4160ac
mov eax, dword [ebp - 0x640]
push eax
call fcn.004060d0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x224], eax
jmp 0x401df0
cmp dword [ebp - 0x220], 6
jne 0x401d9a
push 0x4160b0
mov ecx, dword [ebp - 0x640]
push ecx
call fcn.004060d0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 8], eax
jmp 0x401df0
cmp dword [ebp - 0x220], 7
jne 0x401dc6
push 0x4160b4
mov edx, dword [ebp - 0x640]
push edx
call fcn.004060d0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0xa5c], eax
jmp 0x401df0
cmp dword [ebp - 0x220], 8
jne 0x401df0
push 0x4160b8
mov eax, dword [ebp - 0x640]
push eax
call fcn.004060d0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x64c], eax
mov ecx, dword [ebp - 0x220]
add ecx, 1
mov dword [ebp - 0x220], ecx
push 0x4160bc
push 0
call fcn.004065e5
add esp, 8
mov dword [ebp - 0x640], eax
jmp 0x401ca4
mov dword [ebp - 0x648], 0x104
lea edx, [ebp - 0x644]
push edx
push 1
push 0
push 0x4160c0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x401e75
lea eax, [ebp - 0x648]
push eax
lea ecx, [ebp - 0x638]
push ecx
push 0
push 0
push str.ProgramFilesDir
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x401e89
push 0x4160fc
lea ecx, [ebp - 0x638]
push ecx
call fcn.00406470
add esp, 8
push 0x6b
call fcn.00401680
add esp, 4
push eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x638]
push eax
push str._s_s__s
lea ecx, [ebp - 0x218]
push ecx
call fcn.00406568
add esp, 0x14
push 0
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0x218]
push eax
push 0x41610c
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
lea edx, [ebp - 0x530]
push edx
push str.BMUtil.exe
push 0x4189a0
call fcn.00401260
add esp, 8
push eax
push 0x4189a0
call fcn.004013d0
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x416128
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
lea edx, [ebp - 0x530]
push edx
push str.BMMailClient.dll
push 0x4189a0
call fcn.00401260
add esp, 8
push eax
push 0x4189a0
call fcn.004013d0
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x416150
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
lea edx, [ebp - 0x530]
push edx
push str.Uninstall.exe
push 0x4189a0
call fcn.00401260
add esp, 8
push eax
push 0x4189a0
call fcn.004013d0
add esp, 0xc
push 0
lea eax, [ebp - 0x644]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.Software_b1gMailTools
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x4020af
push 4
lea ecx, [ebp - 0xc70]
push ecx
push 4
push 0
push str.bAutostart
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
lea eax, [ebp - 0xa5c]
push eax
push 4
push 0
push str.bSMSManager
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp + 8]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp + 8]
push eax
push 1
push 0
push str.serviceName
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp + 0xc]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp + 0xc]
push eax
push 1
push 0
push str.serviceURL
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 4]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp - 4]
push eax
push 1
push 0
push str.username
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0xc74]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp - 0xc74]
push eax
push 1
push 0
push str.password
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp + 8]
push eax
push str.SOFTWAREClientsMail_s
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
push 0
lea edx, [ebp - 0x644]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
lea eax, [ebp - 0x530]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40220f
mov ecx, dword [ebp + 8]
push ecx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov edx, dword [ebp + 8]
push edx
push 1
push 0
push 0
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x218]
push ecx
push str._sBMMailClient.dll
lea edx, [ebp - 0x530]
push edx
call fcn.00406568
add esp, 0xc
lea eax, [ebp - 0x530]
push eax
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea ecx, [ebp - 0x530]
push ecx
push 1
push 0
push str.DLLPath
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp + 8]
push ecx
push str.SOFTWAREClientsMail_s_shellopencommand
lea edx, [ebp - 0x530]
push edx
call fcn.00406568
add esp, 0xc
push 0
lea eax, [ebp - 0x644]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
lea ecx, [ebp - 0x530]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40220f
lea edx, [ebp - 0x218]
push edx
push str.rundll32.exe___sBMMailClient.dll__GotoInbox
lea eax, [ebp - 0x530]
push eax
call fcn.00406568
add esp, 0xc
lea ecx, [ebp - 0x530]
push ecx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea edx, [ebp - 0x530]
push edx
push 1
push 0
push 0
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0xc70], 0
je 0x40228f
lea edx, [ebp - 0x644]
push edx
push 0xf003f
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40228f
lea eax, [ebp - 0x218]
push eax
push str._sBMUtil.exe
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
lea edx, [ebp - 0x530]
push edx
call fcn.004063e0
add esp, 4
push eax
lea eax, [ebp - 0x530]
push eax
push 1
push 0
push str.b1gMail_Utility
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x224], 0
je 0x4024dc
push 0
lea eax, [ebp - 0x644]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push 0x4162b8
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40230a
push 0x14
push str.URL:MailTo_Protocol
push 1
push 0
push 0
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 1
push 0x417f24
push 1
push 0
push str.URL_Protocol
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea ecx, [ebp - 0x644]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push str.mailtoDefaultIcon
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x402389
lea edx, [ebp - 0x218]
push edx
push str._sBMMailClient.dll_1
lea eax, [ebp - 0x530]
push eax
call fcn.00406568
add esp, 0xc
lea ecx, [ebp - 0x530]
push ecx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea edx, [ebp - 0x530]
push edx
push 1
push 0
push 0
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea edx, [ebp - 0x644]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
push str.mailto_shellopencommand
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x402408
lea eax, [ebp - 0x218]
push eax
push str.rundll32.exe___sBMMailClient.dll__MailToProtocolHandler
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
lea edx, [ebp - 0x530]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea eax, [ebp - 0x530]
push eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [ebp - 0x644]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsShellAssociationsUrlAssociationsmailtoUserChoice
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40245c
push 7
push str.mailto
push 1
push 0
push str.Progid
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [ebp - 0x644]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push 0x4163c8
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x4024ba
mov ecx, dword [ebp + 8]
push ecx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov edx, dword [ebp + 8]
push edx
push 1
push 0
push 0
mov eax, dword [ebp - 0x644]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0xc6c]
push edx
push 0xbb8
push 0
push str.SoftwareClientsMail
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov eax, dword [ebp + 8]
push eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall_s
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
push 0
lea edx, [ebp - 0x644]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
lea eax, [ebp - 0x530]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40268b
lea ecx, [ebp - 0x218]
push ecx
push 0x416430
lea edx, [ebp - 0x530]
push edx
call fcn.00406568
add esp, 0xc
lea eax, [ebp - 0x530]
push eax
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea ecx, [ebp - 0x530]
push ecx
push 1
push 0
push str.UninstallString
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x6b
call fcn.00401680
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
push 0x416454
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0x10
lea edx, [ebp - 0x530]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea eax, [ebp - 0x530]
push eax
push 1
push 0
push str.DisplayName
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
push 0x416468
push 1
push 0
push str.DisplayVersion
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea eax, [ebp - 0x218]
push eax
push str._sBMUtil.exe_0
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
lea edx, [ebp - 0x530]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
lea eax, [ebp - 0x530]
push eax
push 1
push 0
push str.DisplayIcon
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp + 8]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp + 8]
push eax
push 1
push 0
push str.Publisher
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp + 0xc]
push edx
call fcn.004063e0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp + 0xc]
push eax
push 1
push 0
push str.URLInfoAbout
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 2
lea eax, [ebp - 0xc68]
push eax
call fcn.00401c00
add esp, 8
test eax, eax
je 0x4028ec
lea ecx, [ebp - 0xc68]
push ecx
call fcn.004063e0
add esp, 4
movsx edx, byte [ebp + eax - 0xc69]
cmp edx, 0x5c
jne 0x4026d5
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xc68]
push ecx
call fcn.00406480
add esp, 8
jmp 0x402700
push 0x4164b4
lea edx, [ebp - 0xc68]
push edx
call fcn.00406480
add esp, 8
test eax, eax
je 0x402700
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xc68]
push ecx
call fcn.00406480
add esp, 8
push 0x4164b8
lea edx, [ebp - 0xc68]
push edx
call fcn.00406480
add esp, 8
push 0x6b
call fcn.00401680
add esp, 4
push eax
lea eax, [ebp - 0xc68]
push eax
call fcn.00406480
add esp, 8
push 0x4164bc
lea ecx, [ebp - 0xc68]
push ecx
call fcn.00406480
add esp, 8
push 0
lea edx, [ebp - 0xc68]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x4028ec
lea eax, [ebp - 0x218]
push eax
push 0x4164c0
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
push 0x6c
call fcn.00401680
add esp, 4
push eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0xc68]
push eax
push 0x4164d0
lea ecx, [ebp - 0xa58]
push ecx
call fcn.00406568
add esp, 0x14
push 0x6d
call fcn.00401680
add esp, 4
push eax
push 0x4164dc
lea edx, [ebp - 0x750]
push edx
call fcn.00406568
add esp, 0xc
push 0
lea eax, [ebp - 0x218]
push eax
push 0x417f25
lea ecx, [ebp - 0x750]
push ecx
lea edx, [ebp - 0xa58]
push edx
lea eax, [ebp - 0x530]
push eax
call fcn.00401ac0
add esp, 0x18
cmp dword [ebp - 0xa5c], 0
je 0x402861
push 0x70
call fcn.00401680
add esp, 4
push eax
lea ecx, [ebp - 0xc68]
push ecx
push 0x4164e0
lea edx, [ebp - 0xa58]
push edx
call fcn.00406568
add esp, 0x10
push 0x6e
call fcn.00401680
add esp, 4
push eax
push 0x4164ec
lea eax, [ebp - 0x750]
push eax
call fcn.00406568
add esp, 0xc
push 1
lea ecx, [ebp - 0x218]
push ecx
push 0x4164f0
lea edx, [ebp - 0x750]
push edx
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0x530]
push ecx
call fcn.00401ac0
add esp, 0x18
lea edx, [ebp - 0x218]
push edx
push str._sUninstall.exe
lea eax, [ebp - 0x530]
push eax
call fcn.00406568
add esp, 0xc
push 0x6f
call fcn.00401680
add esp, 4
push eax
lea ecx, [ebp - 0xc68]
push ecx
push str._s_s.lnk
lea edx, [ebp - 0xa58]
push edx
call fcn.00406568
add esp, 0x10
push 0x6f
call fcn.00401680
add esp, 4
push eax
push 0x41651c
lea eax, [ebp - 0x750]
push eax
call fcn.00406568
add esp, 0xc
push 0
lea ecx, [ebp - 0x218]
push ecx
push 0x417f26
lea edx, [ebp - 0x750]
push edx
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0x530]
push ecx
call fcn.00401ac0
add esp, 0x18
cmp dword [ebp - 0x64c], 0
je 0x402a4e
push 0
lea edx, [ebp - 0xc68]
push edx
call fcn.00401c00
add esp, 8
test eax, eax
je 0x402a4e
lea eax, [ebp - 0xc68]
push eax
call fcn.004063e0
add esp, 4
movsx ecx, byte [ebp + eax - 0xc69]
cmp ecx, 0x5c
je 0x402942
push 0x416520
lea edx, [ebp - 0xc68]
push edx
call fcn.00406480
add esp, 8
lea eax, [ebp - 0x218]
push eax
push str._sBMutil.exe
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
push 0x6c
call fcn.00401680
add esp, 4
push eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0xc68]
push eax
push 0x416534
lea ecx, [ebp - 0xa58]
push ecx
call fcn.00406568
add esp, 0x14
push 0x6d
call fcn.00401680
add esp, 4
push eax
push 0x416540
lea edx, [ebp - 0x750]
push edx
call fcn.00406568
add esp, 0xc
push 0
lea eax, [ebp - 0x218]
push eax
push 0x417f27
lea ecx, [ebp - 0x750]
push ecx
lea edx, [ebp - 0xa58]
push edx
lea eax, [ebp - 0x530]
push eax
call fcn.00401ac0
add esp, 0x18
cmp dword [ebp - 0xa5c], 0
je 0x402a4e
push 0x70
call fcn.00401680
add esp, 4
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0xc68]
push edx
push str._s_s__s.lnk
lea eax, [ebp - 0xa58]
push eax
call fcn.00406568
add esp, 0x14
push 0x6e
call fcn.00401680
add esp, 4
push eax
push 0x416550
lea ecx, [ebp - 0x750]
push ecx
call fcn.00406568
add esp, 0xc
push 1
lea edx, [ebp - 0x218]
push edx
push str._smsmanager
lea eax, [ebp - 0x750]
push eax
lea ecx, [ebp - 0xa58]
push ecx
lea edx, [ebp - 0x530]
push edx
call fcn.00401ac0
add esp, 0x18
mov eax, dword [ebp + 8]
push eax
push 0x71
call fcn.00401680
add esp, 4
push eax
lea ecx, [ebp - 0x530]
push ecx
call fcn.00406568
add esp, 0xc
push 0x40
push str.Setup
lea edx, [ebp - 0x530]
push edx
push 0
call fcn.00401700
add esp, 0x10
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00405c1a
mov esp, ebp
pop ebp
ret