Function at 0x40503d
Capabilities:
Contain obfuscated stackstrings
Create thread
Hide graphical window

Disassembly:
push ebp
sub esp, 0x8f8
lea ebp, [esp - 4]
mov eax, dword [0x4221e4]
xor eax, ebp
mov dword [ebp + 0x8f8], eax
push 0x80
mov eax, 0x41afb5
call fcn.0040ab6f
mov eax, dword [ebp + 0x904]
mov ecx, dword [ebp + 0x90c]
push str.xbefrodedlitwjam
mov ebx, 0x423b68
push ebx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
mov dword [0x423af4], eax
mov byte [ebp - 0x19], 0
call fcn.00403fe4
pop ecx
pop ecx
push 0xb
pop ecx
push 9
mov esi, str.qkivbpsdncwrjotmhezflyuxgaxhojkqytdgbicupza
lea edi, [ebp + 0x884]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 0xb
mov esi, str.lqhpiwsgkdmbaurvzjcotyexfnvzeuadbyk
lea edi, [ebp + 0x8b0]
rep movsd dword es:[edi], dword [esi]
pop ecx
mov eax, dword [0x423b68]
mov esi, str.pigkqrejuawsvhtxzyolmdfbncdtjskwpharuzyoximc
lea edi, [ebp + 0x854]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 8
pop ecx
mov esi, 0x41cf48
lea edi, [ebp + 0x8d4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [eax - 0xc]
lea eax, [ebp + 0x884]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4050e5
sub eax, edi
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 0x8b0]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4050fa
sub eax, edi
mov dword [ebp - 0x24], eax
lea eax, [ebp + 0x854]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40510f
sub eax, edi
mov dword [ebp - 0x20], eax
lea eax, [ebp + 0x8d4]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405124
fld qword [0x41cf40]
sub eax, edi
fstp qword [ebp - 0x34]
mov dword [ebp - 0x40], eax
fld1
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
call fcn.0040b270
mov edi, eax
push 6
pop eax
add eax, edi
cdq
idiv dword [ebp - 0x2c]
mov ecx, ebx
movzx eax, byte [ebp + edx + 0x884]
push eax
lea eax, [esi - 1]
push eax
call fcn.00403cee
push 0x20
pop eax
add eax, edi
cdq
idiv dword [ebp - 0x24]
mov ecx, ebx
movzx eax, byte [ebp + edx + 0x8b0]
push eax
lea eax, [esi - 2]
push eax
call fcn.00403cee
push 0x3b
pop eax
add eax, edi
cdq
idiv dword [ebp - 0x20]
mov ecx, ebx
movzx eax, byte [ebp + edx + 0x854]
push eax
lea eax, [esi - 3]
push eax
call fcn.00403cee
push 0x17
pop eax
add eax, edi
cdq
idiv dword [ebp - 0x40]
mov ecx, ebx
movzx eax, byte [ebp + edx + 0x8d4]
push eax
lea eax, [esi - 4]
push eax
call fcn.00403cee
fld qword [ebp - 0x34]
call fcn.0040b570
fmul qword [0x41cf38]
fld st(0)
call fcn.0040b270
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fsubp st(1)
call fcn.0040b270
inc eax
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x3c]
fadd qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
fld qword [0x41cf30]
fcomp qword [ebp - 0x3c]
fnstsw ax
test ah, 5
jp 0x40513e
lea eax, [ebp - 0x28]
push 0x41cf1c
push eax
call fcn.00409d13
xor ebx, ebx
push 0x44
mov dword [ebp - 4], ebx
call fcn.0040a575
add esp, 0xc
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x405236
mov ecx, eax
call fcn.00408242
jmp 0x405238
xor eax, eax
push ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
mov dword [0x423adc], eax
call fcn.004038f9
mov esi, 0x41cf18
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 2
call fcn.00403412
test al, al
je 0x405284
push esi
lea ecx, [ebp - 0x70]
call fcn.0040344d
mov esi, 0x41cf14
push esi
push eax
call fcn.0040b0c5
pop ecx
pop ecx
test eax, eax
jne 0x405289
mov byte [ebp - 0x19], 1
jmp 0x405289
mov esi, 0x41cf14
sub esp, 0x1c
cmp byte [ebp - 0x19], 0
mov ecx, esp
jne 0x4052fe
mov dword [ebp - 0x14], esp
push str.2250
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 0x10
push 0x41c7b0
push str.This_file_is_part_of_an_installer_and_not_meant_to_be_launched_separately.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.004038b5
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004022b2
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8f8]
xor ecx, ebp
call fcn.0040ab2d
add ebp, 0x8fc
leave
ret 0x10
mov dword [ebp - 0x18], esp
push str.2242
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
call fcn.00403969
test al, al
je 0x40533e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2251
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
jmp 0x4052bf
call fcn.00403b32
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.2252
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push ebx
lea ecx, [ebp + 0x38]
mov dword [ebp + 0x50], 0xf
call fcn.004017ce
mov ecx, dword [0x423adc]
lea eax, [ebp + 0x38]
push eax
mov byte [ebp - 4], 3
call fcn.004093ee
push esi
lea ecx, [ebp + 0x38]
call fcn.00401c33
push ebx
push esi
lea ecx, [ebp + 0x38]
call fcn.00403c87
test eax, eax
je 0x4053da
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2253
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 0x10
push 0x41c7b0
push str.This_file_is_part_of_an_installer_and_not_meant_to_be_launched_separately.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push ebx
push 1
lea ecx, [ebp + 0x38]
call fcn.004018a2
jmp 0x4052bf
mov esi, 0x423b54
mov ecx, esi
call fcn.00409808
call fcn.00403a1f
push 0x3c
mov ecx, esi
call fcn.004099cc
mov ecx, esi
call fcn.00409845
push 0x424670
lea ecx, [ebp - 0x20]
call fcn.00402536
sub esp, 0x1c
cmp byte [0x423b58], 0
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x18], esp
jne 0x40546a
push str.2043
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
lea eax, [ebp - 0x18]
push 2
push eax
call fcn.00404c41
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.00402b06
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.004022b2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.1838
jmp 0x4054b5
push str.2044
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
lea eax, [ebp - 0x18]
push 3
push eax
call fcn.00404c41
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.00402b06
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.004022b2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.1837
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.004025f7
call fcn.00404a5f
pop ecx
sub esp, 0x1c
mov edi, eax
mov ecx, esp
mov dword [ebp - 0x18], esp
cmp dword [0x423ae8], ebx
je 0x405540
push str.1804
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
cmp edi, ebx
jne 0x405531
call dword [0x423ad0]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
cmp eax, ebx
jne 0x40551e
push str.1806
jmp 0x405545
cmp eax, 1
jne 0x40552a
push str.1807
jmp 0x405545
push str.1808
jmp 0x405545
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.1914
jmp 0x405545
push str.1805
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.1763
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 3
mov ecx, esi
call fcn.004099f4
push ebx
push 0x404193
push ebx
push 0x82
push dword [ebp - 0x14]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov edi, eax
mov dword [0x423b08], edi
cmp edi, ebx
jne 0x4055ce
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x41ce40
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
call fcn.00404b2d
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004022b2
jmp 0x4053ca
mov byte [ebp - 4], 7
cmp dword [0x423b10], ebx
jne 0x405623
fld qword [0x423af8]
fld qword [0x41ce38]
fmul st(1)
call fcn.0040b270
fld qword [0x423b00]
fld qword [0x41ce30]
push eax
fmul st(1)
call fcn.0040b270
fxch st(1)
fmul qword [0x41ce28]
push eax
call fcn.0040b270
fmul qword [0x41ce20]
push eax
call fcn.0040b270
push eax
push edi
call dword [0x423acc]
mov dword [ebp - 4], 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1860
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1773
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 0x258
push 4
mov ecx, esi
call fcn.00409673
call dword [0x423ad0]
mov edi, eax
cmp edi, 9
mov ebx, 0x789
jge 0x40568a
lea ebx, [edi + 0x780]
push 0x424670
lea ecx, [ebp - 0x24]
call fcn.00402536
push ebx
lea eax, [ebp - 0x24]
push 0x41ce0c
push eax
mov byte [ebp - 4], 9
call fcn.00403fe4
mov ebx, dword [ebp - 0x24]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
cmp edi, 3
mov ecx, esp
mov dword [ebp - 0x14], esp
jle 0x40573b
push str.2255
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
call fcn.00404b2d
lea ecx, [ebx - 0x10]
call fcn.004022b2
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004022b2
push 0
jmp 0x4053cb
push str.1764
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1861
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
and dword [ebp - 0x2c], 0
cmp dword [0x423b10], 0
mov byte [0x423b0c], 1
mov byte [ebp - 4], 0xa
jne 0x405793
push 0x32c8
call dword [0x423ad4]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2256
xor ebx, ebx
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
cmp dword [ebp - 0x2c], ebx
jne 0x4058eb
push str.1870
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 5
mov ecx, esi
call fcn.004099f4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1862
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1834
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1841
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 0xb4
push 8
mov ecx, esi
call fcn.00409673
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1913
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
mov byte [0x423b0c], bl
call fcn.00404b2d
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004022b2
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004022b2
xor esi, esi
inc esi
push ebx
push 1
lea ecx, [ebp + 0x38]
call fcn.004018a2
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.004038b5
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004022b2
mov eax, esi
jmp 0x4052d9
xor edi, edi
inc edi
push str.2257
mov dword [0x423b18], edi
mov byte [0x423b0c], 0
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push dword [0x423b08]
call fcn.00403a70
pop ecx
push dword [ebp + 0x910]
push dword [0x423b08]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x423b08]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0xfa0
push edi
push dword [0x423b08]
call dword [sym.imp.USER32.dll_SetTimer]
lea eax, [ebp - 0x44]
push eax
push ebx
push ebx
push 0x404cd6
push ebx
push ebx
mov byte [0x423b0f], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2258
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x8c]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x4059b3
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x8c]
push eax
call edi
test eax, eax
jne 0x405999
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x422104
push str.v99_fsn_normal_
push eax
call fcn.00404bf6
lea eax, [ebp + 0x1c]
add esp, 0xc
push eax
call fcn.00403ff7
add esp, 0x20
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x18], 0xf
call fcn.004017ce
push 0x3ff
lea eax, [ebp + 0x455]
push ebx
push eax
mov byte [ebp - 4], 0xd
call fcn.0040a4e0
mov eax, dword [ebp + 0x20]
add esp, 0xc
cmp dword [ebp + 0x34], 0x10
mov byte [ebp + 0x46f], 0x70
mov byte [ebp + 0x469], 0x73
mov byte [ebp + 0x456], 0x74
mov byte [ebp + 0x465], 0x67
mov byte [ebp + 0x45c], 0x65
mov byte [ebp + 0x471], 0x73
mov byte [ebp + 0x45f], 0x69
mov byte [ebp + 0x466], 0x72
mov byte [ebp + 0x45d], 0x6e
mov byte [ebp + 0x46c], 0x6f
mov byte [ebp + 0x46a], 0x2e
mov byte [ebp + 0x470], 0x6f
mov byte [ebp + 0x459], 0x3a
mov byte [ebp + 0x468], 0x6d
mov byte [ebp + 0x47b], 0x70
mov byte [ebp + 0x473], 0x64
mov byte [ebp + 0x479], 0x70
mov byte [ebp + 0x45a], 0x2f
mov byte [ebp + 0x461], 0x65
mov byte [ebp + 0x458], 0x73
mov byte [ebp + 0x47a], 0x68
mov byte [ebp + 0x464], 0x6f
mov byte [ebp + 0x478], 0x2e
mov byte [ebp + 0x455], 0x74
mov byte [ebp + 0x46e], 0x2f
mov byte [ebp + 0x457], 0x70
mov byte [ebp + 0x467], 0x61
mov byte [ebp + 0x477], 0x33
mov byte [ebp + 0x454], 0x68
mov byte [ebp + 0x475], 0x74
mov byte [ebp + 0x460], 0x6e
mov byte [ebp + 0x462], 0x70
mov byte [ebp + 0x474], 0x61
mov byte [ebp + 0x463], 0x72
mov byte [ebp + 0x45e], 0x67
mov byte [ebp + 0x472], 0x74
mov byte [ebp + 0x46d], 0x6d
mov byte [ebp + 0x46b], 0x63
mov byte [ebp + 0x45b], 0x2f
mov byte [ebp + 0x476], 0x61
mov byte [ebp + 0x47d], 0
jae 0x405b3e
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0x454]
push eax
push str._s_data_s
lea eax, [ebp + 0x54]
push 0x400
push eax
call fcn.0040b550
add esp, 0x14
lea eax, [ebp + 0x54]
push eax
lea ecx, [ebp + 0x8d8]
call fcn.00401dab
mov ecx, dword [0x423adc]
lea eax, [ebp]
push eax
lea eax, [ebp + 0x8d8]
push eax
mov byte [ebp - 4], 0xe
call fcn.004092a0
push ebx
push 1
lea ecx, [ebp + 0x8d8]
mov byte [ebp - 4], 0xd
call fcn.004018a2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2259
mov byte [0x423b0f], 1
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 5
mov ecx, esi
call fcn.004099f4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1862
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1834
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
mov eax, dword [0x423b18]
cmp eax, 1
jne 0x405c17
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1841
jmp 0x405c79
cmp eax, 2
jne 0x405c2b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1842
jmp 0x405c79
cmp eax, 3
jne 0x405c3f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1843
jmp 0x405c79
cmp eax, 4
jne 0x405c53
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1844
jmp 0x405c79
cmp eax, 5
jne 0x405c67
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1845
jmp 0x405c79
cmp eax, 6
jne 0x405c89
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1846
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
mov eax, dword [0x423b14]
cmp eax, 1
jne 0x405ca2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1901
jmp 0x405cdc
cmp eax, 2
jne 0x405cb6
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1902
jmp 0x405cdc
cmp eax, 3
jne 0x405cca
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1903
jmp 0x405cdc
cmp eax, 4
jne 0x405cec
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1904
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
cmp byte [0x423b0e], 0
je 0x405d2f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1849
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1864
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2260
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
push 0xb4
push 8
mov ecx, esi
call fcn.00409673
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1766
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2261
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
mov byte [ebp - 4], 0xf
cmp dword [0x423b10], ebx
jne 0x405da6
call dword [0x423ab0]
mov dword [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2262
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2244
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
call fcn.00404b2d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.2246
call fcn.00401dab
mov ecx, dword [0x423adc]
call fcn.0040936f
call fcn.00403d29
xor esi, esi
push esi
push 1
lea ecx, [ebp]
call fcn.004018a2
push esi
push 1
lea ecx, [ebp + 0x1c]
call fcn.004018a2
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004022b2
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004022b2
xor ebx, ebx
jmp 0x40588e