Function at 0x411860
Capabilities:
Check if file exists
Create directory
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x674
mov eax, dword [0x42c6a0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x660]
add eax, 0x2c
push eax
push 0x3ed
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.00412d50
mov ecx, dword [ebp - 0x660]
add ecx, 0x2c
call fcn.00409d20
movzx ecx, al
test ecx, ecx
je 0x4118ba
jmp 0x411dcf
mov ecx, dword [ebp - 0x660]
add ecx, 0x2c
call fcn.00409d40
push eax
lea ecx, [ebp - 0x41c]
call fcn.0040a6f0
push 0x3f8
lea edx, [ebp - 0x64c]
push edx
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.00402880
mov ecx, eax
call fcn.00409d40
push eax
lea ecx, [ebp - 0x648]
call fcn.004024f0
mov ecx, eax
call fcn.00412d00
test eax, eax
jne 0x41196e
push str.http:__
push 7
lea eax, [ebp - 0x650]
push eax
lea ecx, [ebp - 0x41c]
call fcn.00412f20
or dword [ebp - 0x65c], 1
mov ecx, eax
call fcn.0040a830
test eax, eax
je 0x411962
push str.ftp:__
push 6
lea ecx, [ebp - 0x654]
push ecx
lea ecx, [ebp - 0x41c]
call fcn.00412f20
or dword [ebp - 0x65c], 2
mov ecx, eax
call fcn.0040a830
test eax, eax
jne 0x41196e
mov dword [ebp - 0x664], 0
jmp 0x411978
mov dword [ebp - 0x664], 1
mov dl, byte [ebp - 0x664]
mov byte [ebp - 0x641], dl
mov eax, dword [ebp - 0x65c]
and eax, 2
je 0x4119a1
and dword [ebp - 0x65c], 0xfffffffd
lea ecx, [ebp - 0x654]
call fcn.00403310
mov ecx, dword [ebp - 0x65c]
and ecx, 1
je 0x4119be
and dword [ebp - 0x65c], 0xfffffffe
lea ecx, [ebp - 0x650]
call fcn.00403310
movzx edx, byte [ebp - 0x641]
test edx, edx
je 0x411ac0
mov ecx, dword [ebp - 0x660]
add ecx, 0x2c
call fcn.00409d40
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x411ac0
lea ecx, [ebp - 0x424]
call fcn.00410cc0
lea ecx, [ebp - 0x428]
call fcn.00410cc0
mov ecx, dword [ebp - 0x660]
add ecx, 0x24
call fcn.00409d40
mov dword [ebp - 0x668], eax
lea ecx, [ebp - 0x424]
call fcn.00409e40
push eax
push 0xba
mov eax, dword [ebp - 0x668]
push eax
mov ecx, dword [ebp - 0x668]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [ebp - 0x660]
add ecx, 0x24
call fcn.00409d40
mov dword [ebp - 0x66c], eax
lea ecx, [ebp - 0x428]
call fcn.00409e40
push eax
push 0xbb
mov ecx, dword [ebp - 0x66c]
push ecx
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [eax + 0x14]
call ecx
push 0
lea ecx, [ebp - 0x424]
call fcn.00409d40
push eax
lea ecx, [ebp - 0x428]
call fcn.00409d40
push eax
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.004028b0
lea ecx, [ebp - 0x428]
call fcn.00401130
lea ecx, [ebp - 0x424]
call fcn.00401130
lea ecx, [ebp - 0x41c]
call fcn.00403310
jmp 0x411dcf
push 0x401
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.00402860
test eax, eax
je 0x411af4
mov edx, dword [ebp - 0x660]
add edx, 0x2c
push edx
mov ecx, dword [ebp - 0x660]
add ecx, 0x30
call fcn.00409640
jmp 0x411cc1
push 0x3f0
lea eax, [ebp - 0x658]
push eax
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.00402880
mov ecx, eax
call fcn.00409d40
push eax
lea ecx, [ebp - 0x634]
call fcn.00412c60
xor ecx, ecx
mov word [ebp - 0x630], cx
push 0x206
push 0
lea edx, [ebp - 0x62e]
push edx
call fcn.00417120
add esp, 0xc
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0x634]
call fcn.00412be0
push eax
lea ecx, [ebp - 0x634]
call fcn.00412c30
lea ecx, [ebp - 0x630]
push ecx
mov ecx, dword [ebp - 0x660]
add ecx, 0x30
call fcn.00409310
mov ecx, dword [ebp - 0x660]
add ecx, 0x30
call fcn.00409370
cmp eax, 3
jbe 0x411cc1
mov ecx, dword [ebp - 0x660]
add ecx, 0x30
call fcn.00409d40
add eax, 6
push eax
lea ecx, [ebp - 0x638]
call fcn.0040a6f0
push str._:____
lea ecx, [ebp - 0x638]
call fcn.00412f90
cmp eax, 0xffffffff
jne 0x411bd5
push 0x4265d0
lea ecx, [ebp - 0x638]
call fcn.00412fe0
cmp eax, 0xffffffff
je 0x411cb6
lea ecx, [ebp - 0x640]
call fcn.00410cc0
lea ecx, [ebp - 0x63c]
call fcn.00410cc0
mov ecx, dword [ebp - 0x660]
add ecx, 0x24
call fcn.00409d40
mov dword [ebp - 0x670], eax
lea ecx, [ebp - 0x640]
call fcn.00409e40
push eax
push 0xb5
mov edx, dword [ebp - 0x670]
push edx
mov eax, dword [ebp - 0x670]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x14]
call edx
mov ecx, dword [ebp - 0x660]
add ecx, 0x24
call fcn.00409d40
mov dword [ebp - 0x674], eax
lea ecx, [ebp - 0x63c]
call fcn.00409e40
push eax
push 0xb6
mov eax, dword [ebp - 0x674]
push eax
mov ecx, dword [ebp - 0x674]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
push 0
lea ecx, [ebp - 0x640]
call fcn.00409d40
push eax
lea ecx, [ebp - 0x63c]
call fcn.00409d40
push eax
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.004028b0
lea ecx, [ebp - 0x63c]
call fcn.00401130
lea ecx, [ebp - 0x640]
call fcn.00401130
lea ecx, [ebp - 0x638]
call fcn.00403310
lea ecx, [ebp - 0x41c]
call fcn.00403310
jmp 0x411dcf
lea ecx, [ebp - 0x638]
call fcn.00403310
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.00417120
add esp, 0xc
push 0x104
lea eax, [ebp - 0x210]
push eax
push 0x4265d8
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push 0
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
mov word [ebp - 0x418], dx
push 0x206
push 0
lea eax, [ebp - 0x416]
push eax
call fcn.00417120
add esp, 0xc
lea ecx, [ebp - 0x210]
push ecx
push 0x104
lea edx, [ebp - 0x418]
push edx
call fcn.004170a0
add esp, 0xc
push 0x426600
lea eax, [ebp - 0x418]
push eax
call fcn.004027a0
add esp, 8
lea ecx, [ebp - 0x420]
call fcn.00402990
push 0x3fb
mov ecx, dword [ebp - 0x660]
add ecx, 4
call fcn.00402860
push eax
push 0x426624
lea ecx, [ebp - 0x420]
push ecx
call fcn.004029b0
add esp, 0xc
lea edx, [ebp - 0x418]
push edx
lea ecx, [ebp - 0x420]
call fcn.00409d40
push eax
push 0x42662c
push 0x426640
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x660]
call fcn.00414e40
lea ecx, [ebp - 0x420]
call fcn.00403310
lea ecx, [ebp - 0x41c]
call fcn.00403310
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041710f
mov esp, ebp
pop ebp
ret 0xc