Function at 0x409290
Capabilities:
Get system information on windows
Initialize winhttp library
Print debug messages

Disassembly:
push 0xffffffffffffffff
push 0x465d24
mov eax, dword fs:[0]
push eax
sub esp, 0x408
mov eax, dword [0x47a060]
xor eax, esp
mov dword [esp + 0x404], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47a060]
xor eax, esp
push eax
lea eax, [esp + 0x41c]
mov dword fs:[0], eax
xor edi, edi
mov esi, ecx
mov eax, 7
mov dword [esp + 0x18], esi
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], edi
mov word [esp + 0xa8], di
mov dword [esp + 0x424], edi
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], edi
mov word [esp + 0xc4], di
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], edi
mov word [esp + 0x70], di
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], edi
mov word [esp + 0x8c], di
mov byte [esp + 0x424], 3
call fcn.0040d4d0
push 0x20
call fcn.0044f07d
add esp, 4
cmp eax, edi
je 0x40936e
mov dword [eax], vtable.CHTTPClientWTPCtrl.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax + 0x14], edi
mov dword [eax + 0x18], edi
mov dword [eax + 0x1c], edi
mov dword [eax + 4], edi
mov ebp, eax
jmp 0x409370
xor ebp, ebp
push 0x1000
call fcn.0044f136
add esp, 4
push edi
push edi
push edi
push edi
push 0x46cabc
mov dword [ebp + 0x14], eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
cmp eax, edi
mov dword [ebp + 8], eax
je 0x40939d
mov dword [ebp + 4], 1
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x118
lea ecx, [esp + 0x100]
push edi
push ecx
call fcn.00452a60
add esp, 0xc
lea edx, [esp + 0xf8]
push edx
mov dword [esp + 0xfc], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0xfc]
lea edx, [esp + 0x30]
call fcn.00409110
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x90]
mov byte [esp + 0x42c], 4
call fcn.00401110
mov ebx, 8
mov byte [esp + 0x424], 3
cmp dword [esp + 0x44], ebx
jb 0x40942b
mov ecx, dword [esp + 0x30]
push ecx
call fcn.0044ec2b
add esp, 4
lea ecx, [esp + 0x2c]
call fcn.004152e0
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x74]
mov byte [esp + 0x42c], 5
call fcn.00401110
mov byte [esp + 0x424], 3
cmp dword [esp + 0x44], ebx
jb 0x409463
mov edx, dword [esp + 0x30]
push edx
call fcn.0044ec2b
add esp, 4
push 0x1fe
lea eax, [esp + 0x21c]
push edi
push eax
call fcn.00452a60
add esp, 0xc
cmp dword [esi + 0xe4], ebx
jb 0x409489
mov eax, dword [esi + 0xd0]
jmp 0x40948f
lea eax, [esi + 0xd0]
cmp dword [esp + 0x84], ebx
mov ecx, dword [esp + 0x70]
jae 0x4094a0
lea ecx, [esp + 0x70]
push eax
push ecx
push str._s_s_xyzs_client_channel_
lea edx, [esp + 0x224]
call fcn.0040a870
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
add esp, 0xc
push str.SendInstallNotify__________________________
call esi
mov eax, dword [esp + 0x18]
cmp dword [eax + 0xe4], ebx
jb 0x4094d7
mov eax, dword [eax + 0xd0]
jmp 0x4094dc
add eax, 0xd0
push eax
call esi
sub esp, 0x1c
mov esi, esp
lea eax, [esp + 0x234]
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], edi
mov dword [esp + 0x38], esp
mov word [esi + 4], di
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x409500
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x238]
push ecx
call fcn.00401070
lea ecx, [esp + 0x48]
call fcn.0040b750
add esp, 0x1c
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0xac]
mov byte [esp + 0x42c], 6
call fcn.00401110
mov byte [esp + 0x424], 3
cmp dword [esp + 0x44], ebx
jb 0x40955b
mov edx, dword [esp + 0x30]
push edx
call fcn.0044ec2b
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edi
push edi
lea eax, [esp + 0xc8]
mov word [ecx + 4], di
call fcn.00401110
lea esi, [esp + 0x48]
call fcn.0040bd00
add esp, 0x1c
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0xac]
mov byte [esp + 0x42c], 7
call fcn.00401110
mov byte [esp + 0x424], 3
cmp dword [esp + 0x44], ebx
jb 0x4095bf
mov eax, dword [esp + 0x30]
push eax
call fcn.0044ec2b
add esp, 4
lea ecx, [esp + 0xdc]
call fcn.00415540
push 0x1fe
lea ecx, [esp + 0x21c]
push edi
push ecx
mov byte [esp + 0x430], bl
call fcn.00452a60
add esp, 0xc
cmp dword [esp + 0xf4], ebx
jb 0x4095fe
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
jmp 0x409609
lea eax, [esp + 0xe0]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x8c], ebx
jb 0x40961a
mov esi, dword [eax + 0x78]
jmp 0x40961d
lea esi, [eax + 0x78]
cmp dword [esp + 0xa0], ebx
jb 0x409633
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x18], ecx
jmp 0x40963e
lea edx, [esp + 0x8c]
mov dword [esp + 0x18], edx
cmp dword [esp + 0xbc], ebx
mov edx, dword [esp + 0xa8]
jae 0x409655
lea edx, [esp + 0xa8]
cmp dword [esp + 0x84], ebx
mov ecx, dword [esp + 0x70]
jae 0x409666
lea ecx, [esp + 0x70]
cmp dword [eax + 0xe4], ebx
jb 0x409676
mov eax, dword [eax + 0xd0]
jmp 0x40967b
add eax, 0xd0
mov ebx, dword [esp + 0x42c]
push ebx
mov ebx, dword [esp + 0x20]
push ebx
push esi
mov esi, dword [esp + 0x24]
push esi
push edx
push ecx
push eax
push str.client_install.php_type_smac_sf1sign_sclient_system_sversion_smac_addr_sstart_suc_d
lea edx, [esp + 0x238]
call fcn.0040a870
mov eax, dword [ebp + 8]
add esp, 0x20
cmp eax, edi
je 0x4096c3
push 0x7d0
push 0x7d0
push 0x7d0
push edi
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
mov ebx, 7
jmp 0x4096d0
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x38], esp
push edi
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
push 0x469acc
mov word [esi + 4], di
call fcn.00401070
sub esp, 0x1c
mov byte [esp + 0x45c], 9
mov esi, esp
mov dword [esp + 0x50], esp
push edi
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
push 0x469acc
mov word [esi + 4], di
call fcn.00401070
push 0x50
sub esp, 0x1c
mov byte [esp + 0x47c], 0xa
mov esi, esp
mov dword [esp + 0x80], esp
push 0x16
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
push str.interface.taladapp.com
mov word [esi + 4], di
call fcn.00401070
mov ecx, ebp
mov byte [esp + 0x47c], 8
call fcn.0040ea80
cmp eax, 1
jne 0x4097bd
push edi
sub esp, 0x1c
mov edx, 0x469acc
mov eax, esp
mov dword [esp + 0x48], esp
call fcn.00401da0
sub esp, 0x1c
mov byte [esp + 0x460], 0xb
lea edx, [esp + 0x254]
mov eax, esp
mov dword [esp + 0x58], esp
call fcn.00401da0
mov esi, ebp
mov byte [esp + 0x460], 8
call fcn.0040eb80
cmp eax, 1
jne 0x4097b0
mov ecx, ebp
call fcn.0040ec40
cmp eax, 1
jne 0x4097a9
mov dword [esp + 0x24], eax
mov esi, ebp
call fcn.0040ec80
mov esi, ebp
call fcn.0040eca0
cmp dword [esp + 0x24], edi
jne 0x4097ce
cmp dword [esp + 0x20], 3
jg 0x4097ce
add dword [esp + 0x20], 1
jmp 0x4096d0
lea esi, [esp + 0xdc]
mov byte [esp + 0x424], 3
call fcn.00401010
mov eax, dword [ebp + 8]
cmp eax, edi
mov dword [ebp + 4], edi
je 0x4097f6
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp + 8], edi
mov eax, dword [ebp + 0x14]
cmp eax, edi
je 0x409809
push eax
call fcn.0044f1f9
add esp, 4
mov dword [ebp + 0x14], edi
mov eax, dword [ebp]
mov edx, dword [eax]
push 1
mov ecx, ebp
call edx
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov esi, 8
cmp dword [esp + 0xa0], esi
jb 0x409838
mov eax, dword [esp + 0x8c]
push eax
call fcn.0044ec2b
add esp, 4
cmp dword [esp + 0x84], esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], edi
mov word [esp + 0x8c], di
jb 0x409864
mov ecx, dword [esp + 0x70]
push ecx
call fcn.0044ec2b
add esp, 4
cmp dword [esp + 0xd8], esi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], edi
mov word [esp + 0x70], di
jb 0x409890
mov edx, dword [esp + 0xc4]
push edx
call fcn.0044ec2b
add esp, 4
cmp dword [esp + 0xbc], esi
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], edi
mov word [esp + 0xc4], di
jb 0x4098bf
mov eax, dword [esp + 0xa8]
push eax
call fcn.0044ec2b
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x41c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x404]
xor ecx, esp
call fcn.0044eeec
add esp, 0x414
ret 4