Function at 0x448ac2
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5cd984
mov eax, dword fs:[0]
push eax
sub esp, 0xdc
push esi
push edi
mov eax, dword [0x6c0bc0]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
xor esi, esi
push str._local_appdata_The_Weather_Channel
lea ecx, [esp + 0x24]
mov dword [esp + 0x44], esi
mov dword [esp + 0x28], esi
call fcn.004015a6
mov dword [esp + 0xf0], esi
lea edi, [esp + 0x20]
call fcn.00471607
push ecx
mov eax, edi
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 1
mov byte [esp + 0xf4], 0
call fcn.0040ca22
cmp eax, esi
pop ecx
jne 0x448b69
push ecx
mov eax, edi
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 2
mov byte [esp + 0xf4], 0
call fcn.0040caca
pop ecx
push str.Desktop
lea ecx, [esp + 0x24]
call fcn.00409033
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 3
mov byte [esp + 0xf4], 0
call fcn.0040ca22
cmp eax, esi
pop ecx
jne 0x448bc9
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 4
mov byte [esp + 0xf4], 0
call fcn.0040caca
pop ecx
push str._apps.ini
lea ecx, [esp + 0x24]
call fcn.00409033
push str.SoftwareThe_Weather_ChannelAppsAppData
lea ecx, [esp + 0x60]
call fcn.004015a6
mov byte [esp + 0xf0], 5
push str.SoftwareThe_Weather_ChannelAppsAppDataUserProfile
lea ecx, [esp + 0x64]
call fcn.004015a6
mov byte [esp + 0xf0], 6
push str.SoftwareThe_Weather_ChannelAppsAppDatalocations
lea ecx, [esp + 0x2c]
call fcn.004015a6
mov byte [esp + 0xf0], 7
mov eax, dword [ebx]
xor esi, esi
inc esi
push esi
mov ecx, ebx
call dword [eax + 0x210]
test eax, eax
je 0x448c67
mov eax, dword [ebx]
lea ecx, [esp + 0x34]
push ecx
mov ecx, ebx
call dword [eax + 0x30]
mov byte [esp + 0xf0], 8
mov dword [esp + 0x40], esi
push str._NoReg
xor ecx, ecx
mov esi, eax
call fcn.0040b731
cmp eax, 0xffffffff
je 0x448c67
mov eax, dword [ebx + 0x2d4]
cmp dword [eax - 0xc], 0
mov byte [esp + 0x1f], 0
je 0x448c6c
mov byte [esp + 0x1f], 1
mov dword [esp + 0xf0], 7
test byte [esp + 0x40], 1
je 0x448c8c
and dword [esp + 0x40], 0xfffffffe
lea ecx, [esp + 0x34]
call fcn.00401752
cmp byte [esp + 0x1f], 0
je 0x449a7f
lea ecx, [esp + 0x54]
call fcn.004048be
mov byte [esp + 0xf0], 9
lea ecx, [esp + 0x34]
call fcn.004048be
mov byte [esp + 0xf0], 0xa
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xb4]
lea edi, [eax + 0xf8]
call fcn.0042383b
cmp eax, 1
je 0x448cd9
cmp dword [edi + 0xc], 1
jne 0x448ce0
push 0x61ca7c
jmp 0x448ce5
push 0x620f04
lea ecx, [esp + 0x58]
call fcn.004014d3
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xb4]
lea ecx, [esp + 0xc]
push ecx
lea ecx, [eax + 0xf8]
call fcn.0041aff9
mov byte [esp + 0xf0], 0xb
push 2
lea ecx, [esp + 0x18]
push ecx
mov ecx, eax
call fcn.0041e8e6
mov byte [esp + 0xf0], 0xc
push eax
lea ecx, [esp + 0x38]
call fcn.004048fa
mov byte [esp + 0xf0], 0xb
lea ecx, [esp + 0x14]
call fcn.00401752
mov byte [esp + 0xf0], 0xa
lea ecx, [esp + 0xc]
call fcn.00401752
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xb4]
lea ecx, [esp + 0xc]
push ecx
lea ecx, [eax + 0xf8]
call fcn.0041afb0
mov byte [esp + 0xf0], 0xd
mov eax, dword [eax]
push eax
push str.wc_zip
lea esi, [ebx + 0x2d0]
push esi
call fcn.00413e10
mov byte [esp + 0xf0], 0xa
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [esp + 0x10], esp
push str.wcping_
call fcn.004015a6
mov byte [esp + 0xf4], 0xe
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xac]
push eax
call fcn.00404b87
mov byte [esp + 0xf8], 0xf
mov byte [esp + 0xf8], 0xa
lea edi, [esp + 0x34]
call fcn.0040cc5e
mov byte [esp + 0xf8], 0x10
add esp, 4
mov ecx, esp
mov dword [esp + 0x10], esp
mov edi, 0x61b5f4
push edi
call fcn.004015a6
mov byte [esp + 0xf4], 0x11
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0xf8], 0x10
call fcn.004102f1
mov byte [esp + 0xf0], 0x12
xor eax, eax
push eax
push eax
push eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x88]
push ecx
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004049a2
mov byte [esp + 0x100], 0x13
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004049a2
mov byte [esp + 0x104], 0x14
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc0]
push eax
mov byte [esp + 0x108], 0x12
mov ecx, dword [esp + 0x24]
call fcn.00432197
test eax, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x448eb5
push str.Unable_to_download_preping_xml_file__
call fcn.004015a6
mov byte [esp + 0xf4], 0x15
xor esi, esi
inc esi
push esi
mov byte [esp + 0xf8], 0x12
call fcn.0040b216
mov dword [esp + 0x24], esi
jmp 0x448fdc
lea eax, [esp + 0x30]
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x16
mov byte [esp + 0xf4], 0x12
lea esi, [esp + 0x70]
call fcn.0041042a
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x17
mov byte [esp + 0xf4], 0x12
call fcn.0040cd4f
mov ecx, esp
mov dword [esp + 0x14], esp
push str.blah
call fcn.004015a6
mov byte [esp + 0xf4], 0x18
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.name__error_
call fcn.004015a6
mov byte [esp + 0xf8], 0x19
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x12
mov ecx, esi
call fcn.004104f1
mov byte [esp + 0xf0], 0x1a
lea ecx, [esp + 0x90]
call fcn.0055ab9c
test eax, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x448f76
push str.loading_weather.com_preping_xml_failed
call fcn.004015a6
mov byte [esp + 0xf4], 0x1b
jmp 0x448fb6
push str._search
call fcn.004015a6
mov byte [esp + 0xf4], 0x1c
mov byte [esp + 0xf4], 0x1a
lea ecx, [esp + 0x70]
call fcn.004107cb
test eax, eax
jg 0x448fcb
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.loading_weather.com_preping_xml_failed
call fcn.004015a6
mov byte [esp + 0xf4], 0x1d
xor esi, esi
inc esi
push esi
mov byte [esp + 0xf8], 0x1a
call fcn.0040b216
mov dword [esp + 0x24], esi
mov byte [esp + 0xf0], 0x12
lea ecx, [esp + 0xc]
call fcn.00401752
lea ecx, [esp + 0x30]
call fcn.004048be
mov byte [esp + 0xf0], 0x1e
lea ecx, [esp + 0x68]
call fcn.004048be
mov byte [esp + 0xf0], 0x1f
lea ecx, [esp + 0x64]
call fcn.004048be
mov byte [esp + 0xf0], 0x20
cmp dword [esp + 0x24], 1
je 0x44923b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x61b228
call fcn.004015a6
mov byte [esp + 0xf4], 0x21
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._search_loc_attribute::type
call fcn.004015a6
mov byte [esp + 0xf8], 0x22
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x20
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x23
push eax
lea ecx, [esp + 0x68]
call fcn.004048fa
mov byte [esp + 0xf0], 0x20
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.004015a6
mov byte [esp + 0xf4], 0x24
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._search_loc_attribute::id
call fcn.004015a6
mov byte [esp + 0xf8], 0x25
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x20
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x26
mov eax, dword [eax]
push eax
push str.wc_id
lea edi, [ebx + 0x2d4]
push edi
call fcn.00413e10
mov byte [esp + 0xf0], 0x20
lea ecx, [esp + 0xc]
call fcn.00401752
xor eax, eax
push eax
push eax
push eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x88]
push ecx
mov esi, eax
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0x100], 0x27
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004049a2
mov byte [esp + 0x104], 0x28
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc0]
push eax
mov byte [esp + 0x108], 0x20
mov ecx, esi
call fcn.00432197
test eax, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x449171
push str.Unable_to_download_preping_xml_file__
call fcn.004015a6
mov byte [esp + 0xf4], 0x29
jmp 0x449226
lea eax, [esp + 0x30]
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x2a
mov byte [esp + 0xf4], 0x20
lea esi, [esp + 0x70]
call fcn.0041042a
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x2b
mov byte [esp + 0xf4], 0x20
call fcn.0040cd4f
pop ecx
lea ecx, [esp + 0x90]
call fcn.0055ab9c
test eax, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x4491e6
push str.loading_weather.com_ping_xml_failed
call fcn.004015a6
mov byte [esp + 0xf4], 0x2c
jmp 0x449226
push str._weather
call fcn.004015a6
mov byte [esp + 0xf4], 0x2d
mov byte [esp + 0xf4], 0x20
lea ecx, [esp + 0x70]
call fcn.004107cb
test eax, eax
jg 0x44923b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.xml_request_failed__error_returned_from_weather_ping
call fcn.004015a6
mov byte [esp + 0xf4], 0x2e
xor esi, esi
inc esi
push esi
mov byte [esp + 0xf8], 0x20
call fcn.0040b216
mov dword [esp + 0x24], esi
lea ecx, [esp + 0x44]
call fcn.004048be
mov byte [esp + 0xf0], 0x2f
lea ecx, [esp + 0x38]
call fcn.004048be
mov byte [esp + 0xf0], 0x30
lea ecx, [esp + 0x4c]
call fcn.004048be
mov byte [esp + 0xf0], 0x31
lea ecx, [esp + 0x58]
call fcn.004048be
mov byte [esp + 0xf0], 0x32
lea ecx, [esp + 0x50]
call fcn.004048be
mov byte [esp + 0xf0], 0x33
lea ecx, [esp + 0x48]
call fcn.004048be
mov byte [esp + 0xf0], 0x34
lea ecx, [esp + 0x3c]
call fcn.004048be
mov byte [esp + 0xf0], 0x35
cmp dword [esp + 0x24], 0
je 0x44931d
push str.North_Pole__AK
lea ecx, [esp + 0x48]
call fcn.004014d3
mov esi, str.USAK0173
push esi
lea ecx, [esp + 0x3c]
call fcn.004014d3
push 0x61b228
lea ecx, [esp + 0x50]
call fcn.004014d3
push 0x6293b0
lea ecx, [esp + 0x5c]
call fcn.004014d3
push 0x6290b4
lea ecx, [esp + 0x54]
call fcn.004014d3
push esi
lea ecx, [esp + 0x4c]
call fcn.004014d3
push 0x6293b4
lea ecx, [esp + 0x40]
call fcn.004014d3
jmp 0x4495aa
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.North_Pole__AK
call fcn.004015a6
mov byte [esp + 0xf4], 0x36
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._weather_loc_dnam_text__
call fcn.004015a6
mov byte [esp + 0xf8], 0x37
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x35
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x38
push eax
lea ecx, [esp + 0x48]
call fcn.004048fa
mov byte [esp + 0xf0], 0x35
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.USAK0173
push esi
call fcn.004015a6
mov byte [esp + 0xf4], 0x39
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._weather_loc_attribute::id
call fcn.004015a6
mov byte [esp + 0xf8], 0x3a
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x35
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x3b
push eax
lea ecx, [esp + 0x3c]
call fcn.004048fa
mov byte [esp + 0xf0], 0x35
lea ecx, [esp + 0xc]
call fcn.00401752
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x50]
call fcn.004048fa
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x6293b0
call fcn.004015a6
mov byte [esp + 0xf4], 0x3c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._weather_eloc_st_text__
call fcn.004015a6
mov byte [esp + 0xf8], 0x3d
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x35
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x3e
push eax
lea ecx, [esp + 0x5c]
call fcn.004048fa
mov byte [esp + 0xf0], 0x35
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x6290b4
call fcn.004015a6
mov byte [esp + 0xf4], 0x3f
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._weather_eloc_ctry_text__
call fcn.004015a6
mov byte [esp + 0xf8], 0x40
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x35
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x41
push eax
lea ecx, [esp + 0x54]
call fcn.004048fa
mov byte [esp + 0xf0], 0x35
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004015a6
mov byte [esp + 0xf4], 0x42
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._weather_eloc_zip_text__
call fcn.004015a6
mov byte [esp + 0xf8], 0x43
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x35
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x44
push eax
lea ecx, [esp + 0x4c]
call fcn.004048fa
mov byte [esp + 0xf0], 0x35
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x6293b4
call fcn.004015a6
mov byte [esp + 0xf4], 0x45
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._weather_eloc_dma_text__
call fcn.004015a6
mov byte [esp + 0xf8], 0x46
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0xfc], 0x35
lea ecx, [esp + 0x78]
call fcn.004104f1
mov byte [esp + 0xf0], 0x47
push eax
lea ecx, [esp + 0x40]
call fcn.004048fa
mov byte [esp + 0xf0], 0x35
lea ecx, [esp + 0xc]
call fcn.00401752
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x48
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0xf8], 0x35
call fcn.00475626
mov byte [esp + 0xf0], 0x49
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x4a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x62945c
call fcn.004015a6
mov byte [esp + 0xf8], 0x4b
push ecx
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x4c
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x4d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.gender
call fcn.004015a6
mov byte [esp + 0xf8], 0x4e
push ecx
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x4f
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x50
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.dispname_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x51
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x52
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x53
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.locid_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x54
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x55
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x56
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.loctype_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x57
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x58
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x59
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.st_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x5a
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x5b
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ctry_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x5d
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x5e
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x5f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.zip_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x60
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x61
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004049a2
mov byte [esp + 0xf4], 0x62
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.dma_1
call fcn.004015a6
mov byte [esp + 0xf8], 0x63
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x64
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x61b228
call fcn.004015a6
mov byte [esp + 0xf4], 0x65
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x6294a8
call fcn.004015a6
mov byte [esp + 0xf8], 0x66
push ecx
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004049a2
mov byte [esp + 0xfc], 0x67
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x100], 0x49
call fcn.00475908
mov byte [esp + 0xf0], 0x35
lea eax, [esp + 0x18]
push eax
call fcn.0044fd9b
mov byte [esp + 0xf0], 0x34
lea ecx, [esp + 0x3c]
call fcn.00401752
mov byte [esp + 0xf0], 0x33
lea ecx, [esp + 0x48]
call fcn.00401752
mov byte [esp + 0xf0], 0x32
lea ecx, [esp + 0x50]
call fcn.00401752
mov byte [esp + 0xf0], 0x31
lea ecx, [esp + 0x58]
call fcn.00401752
mov byte [esp + 0xf0], 0x30
lea ecx, [esp + 0x4c]
call fcn.00401752
mov byte [esp + 0xf0], 0x2f
lea ecx, [esp + 0x38]
call fcn.00401752
mov byte [esp + 0xf0], 0x20
lea ecx, [esp + 0x44]
call fcn.00401752
mov byte [esp + 0xf0], 0x1f
lea ecx, [esp + 0x64]
call fcn.00401752
mov byte [esp + 0xf0], 0x1e
lea ecx, [esp + 0x68]
call fcn.00401752
mov byte [esp + 0xf0], 0x12
lea ecx, [esp + 0x30]
call fcn.00401752
mov byte [esp + 0xf0], 0x10
lea ecx, [esp + 0x6c]
call fcn.004103db
mov byte [esp + 0xf0], 0xa
lea ecx, [esp + 0x2c]
call fcn.00401752
mov byte [esp + 0xf0], 9
lea ecx, [esp + 0x34]
call fcn.00401752
mov byte [esp + 0xf0], 7
lea ecx, [esp + 0x54]
call fcn.00401752
push dword [esp + 0x20]
push 0x61b228
push 0x6294ac
push dword [esp + 0x68]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xb4]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
add eax, 0x158
push eax
call fcn.00439526
mov byte [esp + 0xf4], 0x68
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.SessionId
call fcn.004015a6
mov byte [esp + 0xf8], 0x69
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xac]
push ecx
mov eax, esp
mov dword [esp + 0x74], esp
push eax
call fcn.004143ed
mov byte [esp + 0xfc], 0x6a
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xac]
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
mov byte [esp + 0x100], 7
call fcn.00472b41
mov eax, dword [ebx]
add esp, 0xc
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, ebx
call dword [eax + 0x38]
mov byte [esp + 0xf4], 0x6b
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.OfferId
call fcn.004015a6
mov byte [esp + 0xf8], 0x6c
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xac]
push ecx
mov eax, esp
mov dword [esp + 0x74], esp
push eax
call fcn.004143ed
mov byte [esp + 0xfc], 0x6d
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xac]
push esi
mov byte [esp + 0x100], 7
call fcn.00472b41
add esp, 0x10
mov byte [esp + 0xf0], 6
lea ecx, [esp + 0x28]
call fcn.00401752
mov byte [esp + 0xf0], 5
lea ecx, [esp + 0x60]
call fcn.00401752
mov byte [esp + 0xf0], 0
lea ecx, [esp + 0x5c]
call fcn.00401752
or dword [esp + 0xf0], 0xffffffff
lea ecx, [esp + 0x20]
call fcn.00401752
xor eax, eax
inc eax
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret