Function at 0x411390
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2fc
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x42bbe8]
push ebx
xor ebx, ebx
push esi
mov ecx, dword [eax + 0x158]
mov dword [ebp - 0x2fc], ebx
mov dword [0x42bc64], ebx
push edi
test ecx, ecx
jne 0x4113dd
push 0xaf724aac
lea edx, [ebx + 6]
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x158], ecx
lea eax, [ebp - 0x2b0]
push eax
push 0x202
call ecx
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x90]
test ecx, ecx
jne 0x411413
push 0x5d48fbaf
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x90], ecx
push 0x42bc30
call ecx
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x134]
test ecx, ecx
jne 0x411443
push 0xc1575b
lea edx, [ecx + 6]
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x134], ecx
push 0
push 1
push 2
call ecx
mov esi, eax
cmp esi, 0xffffffff
jne 0x411459
xor ecx, ecx
jmp 0x411508
mov eax, dword [0x42bbe8]
mov dword [ebp - 0x118], 0x25a207b9
mov dword [ebp - 0x114], 0x4660ddf3
mov dword [ebp - 0x110], 0xe576e98e
mov dword [ebp - 0x10c], 0x3e06748c
mov ecx, dword [eax + 0x138]
test ecx, ecx
jne 0x4114aa
push 0x1ad64c3e
lea edx, [ecx + 6]
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x138], ecx
push 0
push 0
lea eax, [ebp - 0x11c]
push eax
push 4
push 0x42bc48
push 0x10
lea eax, [ebp - 0x118]
push eax
push 0xc8000006
push esi
call ecx
test eax, eax
je 0x4114d5
xor ecx, ecx
jmp 0x411508
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x13c]
test ecx, ecx
jne 0x4114fe
push 0x4118bcd2
lea edx, [ecx + 6]
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x13c], ecx
push esi
call ecx
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
jne 0x411691
mov byte [ebp - 0x2e0], bl
mov byte [ebp - 0x2df], 0x4b
mov byte [ebp - 0x2de], 0x48
mov byte [ebp - 0x2dd], 0xa
mov byte [ebp - 0x2dc], 0x48
mov byte [ebp - 0x2db], 3
mov byte [ebp - 0x2da], 0x48
mov byte [ebp - 0x2d9], 0x33
mov byte [ebp - 0x2d8], 0x48
mov byte [ebp - 0x2d7], 0x75
mov byte [ebp - 0x2d6], 0x48
mov byte [ebp - 0x2d5], 0x2d
mov byte [ebp - 0x2d4], 0x48
mov byte [ebp - 0x2d3], 0x7c
mov byte [ebp - 0x2d2], 0x48
mov byte [ebp - 0x2d1], 0x56
mov byte [ebp - 0x2d0], 0x48
mov byte [ebp - 0x2cf], 0x75
mov byte [ebp - 0x2ce], 0x48
mov byte [ebp - 0x2cd], 0x2d
mov byte [ebp - 0x2cc], 0x48
mov byte [ebp - 0x2cb], 0x4b
mov byte [ebp - 0x2ca], 0x48
mov byte [ebp - 0x2c9], 0x16
mov byte [ebp - 0x2c8], 0x48
mov byte [ebp - 0x2c7], 3
mov byte [ebp - 0x2c6], 0x48
mov byte [ebp - 0x2c5], 3
mov byte [ebp - 0x2c4], 0x48
mov byte [ebp - 0x2c3], 0x56
mov byte [ebp - 0x2c2], 0x48
mov byte [ebp - 0x2c1], 0x30
mov byte [ebp - 0x2c0], 0x48
mov byte [ebp - 0x2bf], 0x75
mov byte [ebp - 0x2be], 0x48
mov byte [ebp - 0x2bd], 0x71
mov byte [ebp - 0x2bc], 0x48
mov byte [ebp - 0x2bb], 0x42
mov byte [ebp - 0x2ba], 0x48
mov byte [ebp - 0x2b9], 0x39
mov byte [ebp - 0x2b8], 0x48
mov byte [ebp - 0x2b7], 0x48
mov byte [ebp - 0x2b6], 0x48
mov al, byte [ebp - 0x2df]
cmp byte [ebp - 0x2e0], bl
jne 0x41167d
xor edi, edi
lea esi, [ecx + 0x7f]
nop
mov al, byte [ebp + edi - 0x2df]
mov ecx, 0x48
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*4]
shl eax, 2
cdq
idiv esi
lea eax, [edx + 0x7f]
cdq
idiv esi
mov byte [ebp + edi - 0x2df], dl
inc edi
cmp edi, 0x2a
jb 0x411650
lea eax, [ebp - 0x2df]
push eax
call fcn.0040de00
add esp, 4
jmp 0x41200e
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x130]
test ecx, ecx
jne 0x4116ba
push 0x1260d6db
lea edx, [ecx + 6]
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x130], ecx
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
call ecx
cmp eax, 0xffffffff
je 0x411704
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x12c]
test ecx, ecx
jne 0x4116f6
push 0xbd6ac662
lea edx, [ecx + 6]
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x12c], ecx
lea eax, [ebp - 0x108]
push eax
call ecx
mov dword [0x42bc60], eax
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0xb0]
test ecx, ecx
jne 0x41172c
push 0x57b499e3
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0xb0], ecx
push 0
push 0
push 0
push 0xffffffffffffffff
call ecx
mov dword [0x42bc4c], eax
test eax, eax
jne 0x411971
mov byte [ebp - 0x2f8], bl
mov byte [ebp - 0x2f7], 0x6f
mov byte [ebp - 0x2f6], 0x43
mov byte [ebp - 0x2f5], 0x59
mov byte [ebp - 0x2f4], 0x43
mov byte [ebp - 0x2f3], 0x47
mov byte [ebp - 0x2f2], 0x43
mov byte [ebp - 0x2f1], 0xd
mov byte [ebp - 0x2f0], 0x43
mov byte [ebp - 0x2ef], 0x5c
mov byte [ebp - 0x2ee], 0x43
mov byte [ebp - 0x2ed], 0x34
mov byte [ebp - 0x2ec], 0x43
mov byte [ebp - 0x2eb], 0x60
mov byte [ebp - 0x2ea], 0x43
mov byte [ebp - 0x2e9], 0x55
mov byte [ebp - 0x2e8], 0x43
mov byte [ebp - 0x2e7], 0x67
mov byte [ebp - 0x2e6], 0x43
mov byte [ebp - 0x2e5], 0x59
mov byte [ebp - 0x2e4], 0x43
mov byte [ebp - 0x2e3], 0x5c
mov byte [ebp - 0x2e2], 0x43
mov byte [ebp - 0x2e1], 0x67
mov byte [ebp - 0x2e0], 0x43
mov byte [ebp - 0x2df], 0x34
mov byte [ebp - 0x2de], 0x43
mov byte [ebp - 0x2dd], 0x75
mov byte [ebp - 0x2dc], 0x43
mov byte [ebp - 0x2db], 0xb
mov byte [ebp - 0x2da], 0x43
mov byte [ebp - 0x2d9], 0x34
mov byte [ebp - 0x2d8], 0x43
mov byte [ebp - 0x2d7], 0x60
mov byte [ebp - 0x2d6], 0x43
mov byte [ebp - 0x2d5], 0xb
mov byte [ebp - 0x2d4], 0x43
mov byte [ebp - 0x2d3], 4
mov byte [ebp - 0x2d2], 0x43
mov byte [ebp - 0x2d1], 0x4e
mov byte [ebp - 0x2d0], 0x43
mov byte [ebp - 0x2cf], 0x40
mov byte [ebp - 0x2ce], 0x43
mov byte [ebp - 0x2cd], 0x67
mov byte [ebp - 0x2cc], 0x43
mov byte [ebp - 0x2cb], 0x5c
mov byte [ebp - 0x2ca], 0x43
mov byte [ebp - 0x2c9], 0x75
mov byte [ebp - 0x2c8], 0x43
mov byte [ebp - 0x2c7], 0xb
mov byte [ebp - 0x2c6], 0x43
mov byte [ebp - 0x2c5], 0x47
mov byte [ebp - 0x2c4], 0x43
mov byte [ebp - 0x2c3], 0x34
mov byte [ebp - 0x2c2], 0x43
mov byte [ebp - 0x2c1], 0x4e
mov byte [ebp - 0x2c0], 0x43
mov byte [ebp - 0x2bf], 0xb
mov byte [ebp - 0x2be], 0x43
mov byte [ebp - 0x2bd], 0x55
mov byte [ebp - 0x2bc], 0x43
mov byte [ebp - 0x2bb], 0x5c
mov byte [ebp - 0x2ba], 0x43
mov byte [ebp - 0x2b9], 0x65
mov byte [ebp - 0x2b8], 0x43
mov byte [ebp - 0x2b7], 0x43
mov byte [ebp - 0x2b6], 0x43
mov al, byte [ebp - 0x2f7]
cmp byte [ebp - 0x2f8], bl
jne 0x41195d
xor edi, edi
lea esi, [edi + 0x7f]
nop word [eax + eax]
mov al, byte [ebp + edi - 0x2f7]
mov ecx, 0x43
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*8]
shl eax, 2
cdq
idiv esi
lea eax, [edx + 0x7f]
cdq
idiv esi
mov byte [ebp + edi - 0x2f7], dl
inc edi
cmp edi, 0x42
jb 0x411930
lea eax, [ebp - 0x2f7]
push eax
call fcn.0040de00
add esp, 4
jmp 0x41200e
mov ecx, 0x42bc50
mov dword [0x42bc50], ebx
mov dword [0x42bc54], 0x42bc50
mov dword [0x42bc58], ebx
mov dword [0x42bc5c], 0x42bc58
mov dword [0x42bc28], ebx
mov dword [0x42bc2c], 0x42bc28
call fcn.0040f930
test eax, eax
jne 0x411b20
mov byte [ebp - 0x2dc], bl
mov byte [ebp - 0x2db], 0x5e
mov byte [ebp - 0x2da], 6
mov byte [ebp - 0x2d9], 0x32
mov byte [ebp - 0x2d8], 6
mov byte [ebp - 0x2d7], 0xe
mov byte [ebp - 0x2d6], 6
mov byte [ebp - 0x2d5], 0x19
mov byte [ebp - 0x2d4], 6
mov byte [ebp - 0x2d3], 0x38
mov byte [ebp - 0x2d2], 6
mov byte [ebp - 0x2d1], 0x67
mov byte [ebp - 0x2d0], 6
mov byte [ebp - 0x2cf], 0x5c
mov byte [ebp - 0x2ce], 6
mov byte [ebp - 0x2cd], 0x4e
mov byte [ebp - 0x2cc], 6
mov byte [ebp - 0x2cb], 0x38
mov byte [ebp - 0x2ca], 6
mov byte [ebp - 0x2c9], 0x67
mov byte [ebp - 0x2c8], 6
mov byte [ebp - 0x2c7], 0x31
mov byte [ebp - 0x2c6], 6
mov byte [ebp - 0x2c5], 0x3f
mov byte [ebp - 0x2c4], 6
mov byte [ebp - 0x2c3], 0x39
mov byte [ebp - 0x2c2], 6
mov byte [ebp - 0x2c1], 0xe
mov byte [ebp - 0x2c0], 6
mov byte [ebp - 0x2bf], 0x4e
mov byte [ebp - 0x2be], 6
mov byte [ebp - 0x2bd], 0x38
mov byte [ebp - 0x2bc], 6
mov byte [ebp - 0x2bb], 0x31
mov byte [ebp - 0x2ba], 6
mov byte [ebp - 0x2b9], 0x4a
mov byte [ebp - 0x2b8], 6
mov byte [ebp - 0x2b7], 6
mov byte [ebp - 0x2b6], 6
mov al, byte [ebp - 0x2db]
cmp byte [ebp - 0x2dc], bl
jne 0x411b0c
xor edi, edi
lea esi, [edi + 0x7f]
nop word [eax + eax]
mov al, byte [ebp + edi - 0x2db]
mov ecx, 6
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*8]
add eax, eax
cdq
idiv esi
lea eax, [edx + 0x7f]
cdq
idiv esi
mov byte [ebp + edi - 0x2db], dl
inc edi
cmp edi, 0x26
jb 0x411ae0
lea eax, [ebp - 0x2db]
push eax
call fcn.0040de00
add esp, 4
jmp 0x41200e
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
jne 0x411b42
push 0x3a4532be
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x6c], ecx
push 0
push 0
push 0
push 0x410530
push 0
push 0
call ecx
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x411d2e
mov byte [ebp - 0x2ec], 0
mov byte [ebp - 0x2eb], 0x20
mov byte [ebp - 0x2ea], 0x39
mov byte [ebp - 0x2e9], 0x6c
mov byte [ebp - 0x2e8], 0x39
mov byte [ebp - 0x2e7], 0x7c
mov byte [ebp - 0x2e6], 0x39
mov byte [ebp - 0x2e5], 0x69
mov byte [ebp - 0x2e4], 0x39
mov byte [ebp - 0x2e3], 0x3f
mov byte [ebp - 0x2e2], 0x39
mov byte [ebp - 0x2e1], 0x1c
mov byte [ebp - 0x2e0], 0x39
mov byte [ebp - 0x2df], 3
mov byte [ebp - 0x2de], 0x39
mov byte [ebp - 0x2dd], 0x29
mov byte [ebp - 0x2dc], 0x39
mov byte [ebp - 0x2db], 0x19
mov byte [ebp - 0x2da], 0x39
mov byte [ebp - 0x2d9], 0x6c
mov byte [ebp - 0x2d8], 0x39
mov byte [ebp - 0x2d7], 0x3f
mov byte [ebp - 0x2d6], 0x39
mov byte [ebp - 0x2d5], 0x19
mov byte [ebp - 0x2d4], 0x39
mov byte [ebp - 0x2d3], 0x1c
mov byte [ebp - 0x2d2], 0x39
mov byte [ebp - 0x2d1], 0x3a
mov byte [ebp - 0x2d0], 0x39
mov byte [ebp - 0x2cf], 8
mov byte [ebp - 0x2ce], 0x39
mov byte [ebp - 0x2cd], 0x34
mov byte [ebp - 0x2cc], 0x39
mov byte [ebp - 0x2cb], 0x3f
mov byte [ebp - 0x2ca], 0x39
mov byte [ebp - 0x2c9], 0x1c
mov byte [ebp - 0x2c8], 0x39
mov byte [ebp - 0x2c7], 0x3f
mov byte [ebp - 0x2c6], 0x39
mov byte [ebp - 0x2c5], 0x3a
mov byte [ebp - 0x2c4], 0x39
mov byte [ebp - 0x2c3], 0x29
mov byte [ebp - 0x2c2], 0x39
mov byte [ebp - 0x2c1], 0x19
mov byte [ebp - 0x2c0], 0x39
mov byte [ebp - 0x2bf], 0x6c
mov byte [ebp - 0x2be], 0x39
mov byte [ebp - 0x2bd], 0xe
mov byte [ebp - 0x2bc], 0x39
mov byte [ebp - 0x2bb], 0x37
mov byte [ebp - 0x2ba], 0x39
mov byte [ebp - 0x2b9], 0x39
mov byte [ebp - 0x2b8], 0x39
mov al, byte [ebp - 0x2eb]
cmp byte [ebp - 0x2ec], 0
jne 0x411d1a
xor edi, edi
lea esi, [edi + 0x7f]
nop word [eax + eax]
mov al, byte [ebp + edi - 0x2eb]
mov ecx, 0x39
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x17
cdq
idiv esi
lea eax, [edx + 0x7f]
cdq
idiv esi
mov byte [ebp + edi - 0x2eb], dl
inc edi
cmp edi, 0x34
jb 0x411cf0
lea eax, [ebp - 0x2eb]
push eax
call fcn.0040de00
add esp, 4
jmp 0x41200e
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x6c]
test eax, eax
jne 0x411d51
push 0x3a4532be
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x6c], eax
push 0
push 0
push 0
push 0x410da0
push 0
push 0
call eax
mov edi, eax
mov dword [ebp - 0x2fc], edi
cmp edi, 0xffffffff
jne 0x411f7e
mov byte [ebp - 0x2f4], 0
mov byte [ebp - 0x2f3], 0x30
mov byte [ebp - 0x2f2], 0xa
mov byte [ebp - 0x2f1], 0x1d
mov byte [ebp - 0x2f0], 0xa
mov byte [ebp - 0x2ef], 0x19
mov byte [ebp - 0x2ee], 0xa
mov byte [ebp - 0x2ed], 0x7d
mov byte [ebp - 0x2ec], 0xa
mov byte [ebp - 0x2eb], 0x48
mov byte [ebp - 0x2ea], 0xa
mov byte [ebp - 0x2e9], 0x31
mov byte [ebp - 0x2e8], 0xa
mov byte [ebp - 0x2e7], 0x57
mov byte [ebp - 0x2e6], 0xa
mov byte [ebp - 0x2e5], 0xe
mov byte [ebp - 0x2e4], 0xa
mov byte [ebp - 0x2e3], 0x12
mov byte [ebp - 0x2e2], 0xa
mov byte [ebp - 0x2e1], 0x1d
mov byte [ebp - 0x2e0], 0xa
mov byte [ebp - 0x2df], 0x48
mov byte [ebp - 0x2de], 0xa
mov byte [ebp - 0x2dd], 0x12
mov byte [ebp - 0x2dc], 0xa
mov byte [ebp - 0x2db], 0x31
mov byte [ebp - 0x2da], 0xa
mov byte [ebp - 0x2d9], 0x53
mov byte [ebp - 0x2d8], 0xa
mov byte [ebp - 0x2d7], 0x36
mov byte [ebp - 0x2d6], 0xa
mov byte [ebp - 0x2d5], 0xe
mov byte [ebp - 0x2d4], 0xa
mov byte [ebp - 0x2d3], 0x48
mov byte [ebp - 0x2d2], 0xa
mov byte [ebp - 0x2d1], 0x31
mov byte [ebp - 0x2d0], 0xa
mov byte [ebp - 0x2cf], 0x2b
mov byte [ebp - 0x2ce], 0xa
mov byte [ebp - 0x2cd], 0x57
mov byte [ebp - 0x2cc], 0xa
mov byte [ebp - 0x2cb], 0x1d
mov byte [ebp - 0x2ca], 0xa
mov byte [ebp - 0x2c9], 0x19
mov byte [ebp - 0x2c8], 0xa
mov byte [ebp - 0x2c7], 0x31
mov byte [ebp - 0x2c6], 0xa
mov byte [ebp - 0x2c5], 0x48
mov byte [ebp - 0x2c4], 0xa
mov byte [ebp - 0x2c3], 0x69
mov byte [ebp - 0x2c2], 0xa
mov byte [ebp - 0x2c1], 0xe
mov byte [ebp - 0x2c0], 0xa
mov byte [ebp - 0x2bf], 0x12
mov byte [ebp - 0x2be], 0xa
mov byte [ebp - 0x2bd], 0x1d
mov byte [ebp - 0x2bc], 0xa
mov byte [ebp - 0x2bb], 0x74
mov byte [ebp - 0x2ba], 0xa
mov byte [ebp - 0x2b9], 0x4a
mov byte [ebp - 0x2b8], 0xa
mov byte [ebp - 0x2b7], 0xa
mov byte [ebp - 0x2b6], 0xa
mov al, byte [ebp - 0x2f3]
cmp byte [ebp - 0x2f4], 0
jne 0x411f6a
xor edi, edi
lea esi, [edi + 0x7f]
mov al, byte [ebp + edi - 0x2f3]
mov ecx, 0xa
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x23
cdq
idiv esi
lea eax, [edx + 0x7f]
cdq
idiv esi
mov byte [ebp + edi - 0x2f3], dl
inc edi
cmp edi, 0x3e
jb 0x411f40
lea eax, [ebp - 0x2f3]
push eax
call fcn.0040de00
add esp, 4
jmp 0x41200e
mov eax, dword [0x42bbe8]
mov esi, dword [0x42bc4c]
mov eax, dword [eax + 0x9c]
test eax, eax
jne 0x411fad
push 0x441bdf1e
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x9c], eax
push 0
push 1
push 0
push esi
call eax
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x2c]
test eax, eax
jne 0x411fd9
push 0x6a095e21
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x2c], eax
push 0xffffffffffffffff
push edi
call eax
or ecx, 0xffffffff
call fcn.00410880
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x2c]
test eax, eax
jne 0x412009
push 0x6a095e21
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x2c], eax
push 0xffffffffffffffff
push ebx
call eax
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0xac]
test eax, eax
jne 0x412037
push 0xf4241d9a
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0xac], eax
push 0x42bc30
call eax
mov esi, dword [0x42bc4c]
test esi, esi
je 0x41206e
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x48]
test eax, eax
jne 0x41206b
push 0xa5eb6e47
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x48], eax
push esi
call eax
test ebx, ebx
je 0x412098
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x48]
test eax, eax
jne 0x412095
push 0xa5eb6e47
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x48], eax
push ebx
call eax
mov esi, dword [ebp - 0x2fc]
test esi, esi
je 0x4120c8
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x48]
test eax, eax
jne 0x4120c5
push 0xa5eb6e47
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x48], eax
push esi
call eax
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x15c]
test eax, eax
jne 0x4120f2
push 0x9812c1b7
lea edx, [eax + 6]
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x15c], eax
call eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00415287
mov esp, ebp
pop ebp
ret