Function at 0x408230
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x43184f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x178
push ebx
push ebp
mov ebp, ecx
push esi
xor bl, bl
push edi
lea esi, [ebp + 0x14]
mov dword [esp + 0x3c], ebp
mov ecx, esi
mov byte [esp + 0x12], bl
call fcn.00409b70
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x408602
mov ecx, ebp
call fcn.00407de0
test al, al
jne 0x408602
call fcn.00409420
test al, al
je 0x408411
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00402440
mov edi, 0x43eba0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eba0
lea ecx, [esp + 0x1c]
call fcn.00409d90
mov cl, byte [esp + 0x11]
push 0
mov byte [esp + 0x30], cl
lea ecx, [esp + 0x30]
mov dword [esp + 0x194], 0
call fcn.00402440
mov edi, 0x43eb90
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eb90
lea ecx, [esp + 0x34]
call fcn.00409d90
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x98]
push edx
mov byte [esp + 0x194], 1
call fcn.004096d0
lea eax, [esp + 0x14]
lea ecx, [esp + 0xa8]
push eax
mov byte [esp + 0x194], 2
call fcn.004096d0
lea ecx, [esp + 0x98]
mov bl, 3
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x194], bl
call fcn.004096d0
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x64]
push edx
mov byte [esp + 0x194], 4
call fcn.004096d0
lea eax, [esp + 0x54]
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x198], 5
call fcn.00409a00
mov edx, dword [eax]
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], edx
lea edx, [esp + 0x24]
mov eax, dword [eax + 4]
push ecx
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], eax
call fcn.00409d70
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 6
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x58]
call fcn.00402440
push 1
lea ecx, [esp + 0xac]
mov byte [esp + 0x194], 7
call fcn.00402440
push 1
lea ecx, [esp + 0x9c]
mov byte [esp + 0x194], 1
call fcn.00402440
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x194], 0
call fcn.00402440
mov dword [esp + 0x190], 0xffffffff
push 1
lea ecx, [esp + 0x18]
jmp 0x408591
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.00402440
mov edi, 0x43eb50
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eb50
lea ecx, [esp + 0x34]
call fcn.00409d90
mov cl, byte [esp + 0x11]
push 0
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
mov dword [esp + 0x194], 8
call fcn.00402440
mov edi, 0x43eb90
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eb90
lea ecx, [esp + 0x1c]
call fcn.00409d90
lea edx, [esp + 0x14]
lea ecx, [esp + 0x98]
push edx
mov byte [esp + 0x194], 9
call fcn.004096d0
lea eax, [esp + 0x2c]
lea ecx, [esp + 0xa8]
push eax
mov byte [esp + 0x194], 0xa
call fcn.004096d0
lea ecx, [esp + 0x98]
mov bl, 0xb
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x194], bl
call fcn.004096d0
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x64]
push edx
mov byte [esp + 0x194], 0xc
call fcn.004096d0
lea eax, [esp + 0x54]
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x198], 0xd
call fcn.00409a00
mov edx, dword [eax]
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], edx
lea edx, [esp + 0x24]
mov eax, dword [eax + 4]
push ecx
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], eax
call fcn.00409d70
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0xe
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x58]
call fcn.00402440
push 1
lea ecx, [esp + 0xac]
mov byte [esp + 0x194], 0xf
call fcn.00402440
push 1
lea ecx, [esp + 0x9c]
mov byte [esp + 0x194], 9
call fcn.00402440
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 8
call fcn.00402440
mov dword [esp + 0x190], 0xffffffff
push 1
lea ecx, [esp + 0x30]
call fcn.00402440
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00402440
mov edi, 0x43eb30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eb30
lea ecx, [esp + 0x1c]
call fcn.00409d90
mov eax, dword [ebp + 0x2c]
lea ecx, [ebp + 0x24]
lea edx, [esp + 0x14]
mov dword [esp + 0x190], 0x10
push edx
push eax
call fcn.00409b90
push 1
lea ecx, [esp + 0x18]
mov dword [esp + 0x194], 0xffffffff
call fcn.00402440
mov byte [esp + 0x12], 1
mov bl, byte [esp + 0x12]
mov eax, dword [ebp + 0x10]
cmp eax, 1
jne 0x4089be
mov ecx, ebp
call fcn.00408160
mov edi, eax
test edi, edi
jge 0x40917d
mov eax, dword [0x43f88c]
mov dword [esp + 0x24], eax
mov ebx, 0x11
mov dword [esp + 0x190], ebx
call fcn.00409420
and eax, 0xff
xor ecx, ecx
cmp edi, 0xfffffffe
lea edx, [esp + 0x24]
setne cl
dec ecx
and ecx, 7
mov edi, ecx
push edi
push eax
push 0x43eaec
push edx
call fcn.00424f28
mov ebp, dword [esp + 0x34]
add esp, 0x10
test edi, edi
jne 0x4087da
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.00402440
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebp
lea ecx, [esp + 0x34]
call fcn.00409d90
mov cl, byte [esp + 0x11]
push 0
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x12
call fcn.00402440
mov edi, 0x43eae4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eae4
lea ecx, [esp + 0x1c]
call fcn.00409d90
lea edx, [esp + 0x14]
lea ecx, [esp + 0x78]
push edx
mov byte [esp + 0x194], 0x13
call fcn.004096d0
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x88]
push eax
mov byte [esp + 0x194], 0x14
call fcn.004096d0
lea ecx, [esp + 0x78]
mov byte [esp + 0x190], 0x15
push ecx
lea ecx, [esp + 0x58]
call fcn.004096d0
lea edx, [esp + 0x88]
lea ecx, [esp + 0x64]
push edx
mov byte [esp + 0x194], 0x16
call fcn.004096d0
lea eax, [esp + 0x54]
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x198], 0x17
call fcn.00409a00
mov edx, dword [eax]
lea ecx, [esp + 0x50]
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x4c]
mov eax, dword [eax + 4]
push ecx
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x58], eax
call fcn.00409d70
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x18
call fcn.00402440
mov byte [esp + 0x190], 0x15
push 1
lea ecx, [esp + 0x58]
call fcn.00402440
push 1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x194], 0x19
call fcn.00402440
push 1
lea ecx, [esp + 0x7c]
mov byte [esp + 0x194], 0x13
call fcn.00402440
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x12
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x30]
jmp 0x408943
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.00402440
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebp
lea ecx, [esp + 0x34]
call fcn.00409d90
mov cl, byte [esp + 0x11]
push 0
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x1a
call fcn.00402440
mov edi, 0x43ead0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43ead0
lea ecx, [esp + 0x1c]
call fcn.00409d90
lea edx, [esp + 0x14]
lea ecx, [esp + 0x78]
push edx
mov byte [esp + 0x194], 0x1b
call fcn.004096d0
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x88]
push eax
mov byte [esp + 0x194], 0x1c
call fcn.004096d0
lea ecx, [esp + 0x78]
mov byte [esp + 0x190], 0x1d
push ecx
lea ecx, [esp + 0x58]
call fcn.004096d0
lea edx, [esp + 0x88]
lea ecx, [esp + 0x64]
push edx
mov byte [esp + 0x194], 0x1e
call fcn.004096d0
lea eax, [esp + 0x54]
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x198], 0x1f
call fcn.00409a00
mov edx, dword [eax]
lea ecx, [esp + 0x50]
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x4c]
mov eax, dword [eax + 4]
push ecx
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x58], eax
call fcn.00409d70
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x20
call fcn.00402440
mov byte [esp + 0x190], 0x1d
push 1
lea ecx, [esp + 0x58]
call fcn.00402440
push 1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x194], 0x21
call fcn.00402440
push 1
lea ecx, [esp + 0x7c]
mov byte [esp + 0x194], 0x1b
call fcn.00402440
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x1a
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x30]
call fcn.00402440
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00402440
mov edi, 0x43eab4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eab4
lea ecx, [esp + 0x1c]
call fcn.00409d90
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x14]
add ecx, 0x24
push edx
mov byte [esp + 0x194], 0x22
mov eax, dword [ecx + 8]
push eax
call fcn.00409b90
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], bl
call fcn.00402440
mov bl, 1
mov dword [esp + 0x190], 0xffffffff
lea ecx, [esp + 0x24]
jmp 0x409178
cmp eax, 2
jne 0x40917d
mov eax, dword [0x43f88c]
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0x4c]
mov ebx, 0x23
push ecx
mov ecx, ebp
mov dword [esp + 0x194], ebx
call fcn.00409480
push 0x43eaa8
lea ecx, [esp + 0x28]
call fcn.00429a6a
lea edx, [esp + 0x24]
push 0
push edx
mov byte [esp + 0x198], 0x24
call fcn.0040c0e0
add esp, 8
lea ecx, [esp + 0x24]
test al, al
sete byte [esp + 0x11]
mov byte [esp + 0x190], bl
call fcn.004299fc
mov al, byte [esp + 0x11]
test al, al
je 0x409165
mov eax, dword [esp + 0x4c]
push 0x43ea98
push eax
call fcn.00414fa3
add esp, 8
test eax, eax
jne 0x408da8
mov byte [ebp + 4], 1
call fcn.00409420
test al, al
je 0x408bd0
mov cl, byte [esp + 0x11]
push 0
mov byte [esp + 0x30], cl
lea ecx, [esp + 0x30]
call fcn.00402440
mov edi, 0x43ea58
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43ea58
lea ecx, [esp + 0x34]
call fcn.00409d90
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x25
mov byte [esp + 0x18], dl
call fcn.00402440
mov edi, 0x43eaa8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eaa8
lea ecx, [esp + 0x1c]
call fcn.00409d90
lea eax, [esp + 0x14]
lea ecx, [esp + 0x78]
push eax
mov byte [esp + 0x194], 0x26
call fcn.004096d0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x190], 0x27
push ecx
lea ecx, [esp + 0x8c]
call fcn.004096d0
lea edx, [esp + 0x78]
lea ecx, [esp + 0x54]
push edx
mov byte [esp + 0x194], 0x28
call fcn.004096d0
lea eax, [esp + 0x88]
lea ecx, [esp + 0x64]
push eax
mov byte [esp + 0x194], 0x29
call fcn.004096d0
lea ecx, [esp + 0x54]
lea edx, [esp + 0x44]
push ecx
push edx
mov ecx, esi
mov byte [esp + 0x198], 0x2a
call fcn.00409a00
mov ecx, dword [eax]
mov dword [esp + 0x3c], ecx
lea ecx, [esp + 0x3c]
mov edx, dword [eax + 4]
lea eax, [esp + 0x40]
push eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], edx
call fcn.00409d70
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x2b
call fcn.00402440
mov byte [esp + 0x190], 0x28
push 1
lea ecx, [esp + 0x58]
call fcn.00402440
push 1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x194], 0x2c
call fcn.00402440
push 1
lea ecx, [esp + 0x7c]
mov byte [esp + 0x194], 0x26
call fcn.00402440
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x25
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x30]
jmp 0x408d40
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], dl
call fcn.00402440
mov edi, 0x43ea18
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43ea18
lea ecx, [esp + 0x34]
call fcn.00409d90
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x2d
mov byte [esp + 0x18], al
call fcn.00402440
mov edi, 0x43eaa8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eaa8
lea ecx, [esp + 0x1c]
call fcn.00409d90
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x2e
push ecx
lea ecx, [esp + 0x7c]
call fcn.004096d0
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x88]
push edx
mov byte [esp + 0x194], 0x2f
call fcn.004096d0
lea eax, [esp + 0x78]
lea ecx, [esp + 0x54]
push eax
mov byte [esp + 0x194], 0x30
call fcn.004096d0
lea ecx, [esp + 0x88]
mov byte [esp + 0x190], 0x31
push ecx
lea ecx, [esp + 0x68]
call fcn.004096d0
lea edx, [esp + 0x54]
lea eax, [esp + 0x44]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x198], 0x32
call fcn.00409a00
mov ecx, dword [eax]
mov dword [esp + 0x3c], ecx
lea ecx, [esp + 0x3c]
mov edx, dword [eax + 4]
lea eax, [esp + 0x40]
push eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], edx
call fcn.00409d70
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x33
call fcn.00402440
mov byte [esp + 0x190], 0x30
push 1
lea ecx, [esp + 0x58]
call fcn.00402440
push 1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x194], 0x34
call fcn.00402440
push 1
lea ecx, [esp + 0x7c]
mov byte [esp + 0x194], 0x2e
call fcn.00402440
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x2d
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x30]
call fcn.00402440
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], dl
call fcn.00402440
mov edi, 0x43e9e8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43e9e8
lea ecx, [esp + 0x1c]
call fcn.00409d90
mov eax, dword [ebp + 0x2c]
lea ecx, [ebp + 0x24]
lea edx, [esp + 0x14]
mov byte [esp + 0x190], 0x35
push edx
push eax
call fcn.00409b90
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], bl
call fcn.00402440
mov bl, 1
jmp 0x409169
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
and eax, 0xffff
sub eax, 0x409
je 0x408f99
sub eax, 0x3fb
je 0x408eae
sub eax, 5
je 0x408f99
lea eax, [esp + 0x11]
lea ecx, [esp + 0xd8]
push eax
push 0x43e9a8
call fcn.004097f0
lea ecx, [esp + 0x12]
mov byte [esp + 0x190], 0x43
push ecx
push 0x43eaa8
lea ecx, [esp + 0xd0]
call fcn.004097f0
lea edx, [esp + 0xd8]
lea eax, [esp + 0xc8]
push edx
push eax
lea ecx, [esp + 0x150]
mov byte [esp + 0x198], 0x44
call fcn.004098e0
push eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x194], 0x45
call fcn.0040a250
lea ecx, [esp + 0x128]
lea edx, [esp + 0x44]
push ecx
push edx
mov ecx, esi
mov byte [esp + 0x198], 0x46
call fcn.004098b0
lea ecx, [esp + 0x128]
mov byte [esp + 0x190], 0x45
call fcn.00402d30
lea ecx, [esp + 0x148]
mov byte [esp + 0x190], 0x44
call fcn.00402d30
push 1
lea ecx, [esp + 0xcc]
mov byte [esp + 0x194], 0x43
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0xdc]
jmp 0x40911e
lea eax, [esp + 0x77]
lea ecx, [esp + 0x78]
push eax
push 0x43e968
call fcn.004097f0
lea ecx, [esp + 0x13]
mov byte [esp + 0x190], 0x3e
push ecx
push 0x43eaa8
lea ecx, [esp + 0xa0]
call fcn.004097f0
lea edx, [esp + 0x78]
lea eax, [esp + 0x98]
push edx
push eax
lea ecx, [esp + 0x170]
mov byte [esp + 0x198], 0x3f
call fcn.004098e0
push eax
lea ecx, [esp + 0x10c]
mov byte [esp + 0x194], 0x40
call fcn.0040a250
lea ecx, [esp + 0x108]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, esi
mov byte [esp + 0x198], 0x41
call fcn.004098b0
push 1
lea ecx, [esp + 0x11c]
mov byte [esp + 0x194], 0x42
call fcn.00402440
push 1
lea ecx, [esp + 0x10c]
mov byte [esp + 0x194], 0x40
call fcn.00402440
lea ecx, [esp + 0x168]
mov byte [esp + 0x190], 0x3f
call fcn.00402d30
push 1
lea ecx, [esp + 0x9c]
mov byte [esp + 0x194], 0x3e
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0x7c]
jmp 0x40911e
mov al, byte [esp + 0x13]
push 0
lea ecx, [esp + 0xbc]
mov byte [esp + 0xbc], al
call fcn.00402440
mov edi, 0x43e9a8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43e9a8
lea ecx, [esp + 0xc0]
call fcn.00409d90
mov cl, byte [esp + 0x13]
push 0
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x36
call fcn.00402440
mov edi, 0x43eaa8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43eaa8
lea ecx, [esp + 0x1c]
call fcn.00409d90
lea edx, [esp + 0x14]
lea ecx, [esp + 0x54]
push edx
mov byte [esp + 0x194], 0x37
call fcn.004096d0
lea eax, [esp + 0xb8]
lea ecx, [esp + 0x64]
push eax
mov byte [esp + 0x194], 0x38
call fcn.004096d0
lea ecx, [esp + 0x54]
mov byte [esp + 0x190], 0x39
push ecx
lea ecx, [esp + 0xec]
call fcn.004096d0
lea edx, [esp + 0x64]
lea ecx, [esp + 0xf8]
push edx
mov byte [esp + 0x194], 0x3a
call fcn.004096d0
lea eax, [esp + 0xe8]
lea ecx, [esp + 0x2c]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x198], 0x3b
call fcn.00409a00
mov edx, dword [eax]
lea ecx, [esp + 0x40]
mov dword [esp + 0x3c], edx
lea edx, [esp + 0x3c]
mov eax, dword [eax + 4]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], eax
call fcn.00409d70
push 1
lea ecx, [esp + 0xfc]
mov byte [esp + 0x194], 0x3c
call fcn.00402440
mov byte [esp + 0x190], 0x39
push 1
lea ecx, [esp + 0xec]
call fcn.00402440
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x3d
call fcn.00402440
push 1
lea ecx, [esp + 0x58]
mov byte [esp + 0x194], 0x37
call fcn.00402440
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x36
call fcn.00402440
mov byte [esp + 0x190], bl
push 1
lea ecx, [esp + 0xbc]
call fcn.00402440
lea eax, [esp + 0x13]
lea ecx, [esp + 0x78]
push eax
push 0x43e950
call fcn.004097f0
mov eax, dword [ebp + 0x2c]
lea ecx, [ebp + 0x24]
lea edx, [esp + 0x78]
mov byte [esp + 0x190], 0x47
push edx
push eax
call fcn.00409b90
push 1
lea ecx, [esp + 0x7c]
mov byte [esp + 0x194], bl
call fcn.00402440
mov bl, 1
jmp 0x409169
mov bl, byte [esp + 0x12]
mov dword [esp + 0x190], 0xffffffff
lea ecx, [esp + 0x4c]
call fcn.004299fc
mov ecx, dword [esp + 0x188]
pop edi
pop esi
mov al, bl
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x184
ret