Function at 0x406160
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x688]
sub esp, 0x688
push 0xffffffffffffffff
push 0x4f363c
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, dword [0x55b090]
xor eax, ebp
mov dword [ebp + 0x684], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
push 0x208
lea eax, [ebp + 0xf0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, 0x536df0
mov dword [ebp + 0xe8], 0x104
lea ecx, [ebp - 0x10]
mov dword [ebp + 0xec], 1
call fcn.004c6fd0
lea ecx, [ebp]
mov dword [ebp - 4], 0
mov edx, dword [eax]
push ecx
push 1
push 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.0041cd20
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov ebx, 0x6f
test esi, esi
jne 0x406628
mov edx, 0x536e30
lea ecx, [ebp - 0x10]
call fcn.004c6fd0
lea ecx, [ebp + 0xe8]
mov dword [ebp - 4], 1
mov edx, dword [eax]
push ecx
lea ecx, [ebp + 0xf0]
push ecx
lea ecx, [ebp + 0xec]
push ecx
mov ecx, dword [ebp]
push esi
call fcn.0044e460
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov dword [ebp + 0x5a4], 0x30
mov eax, 0x30
mov word [ebp + 0x5a2], ax
mov eax, 0x31
mov word [ebp + 0x59c], ax
mov eax, 0x6e
mov word [ebp + 0x644], ax
lea ecx, [ebx - 0xa]
mov word [ebp + 0x66c], cx
mov eax, 0x67
mov word [ebp + 0x65c], ax
mov edx, 0x73
mov dword [ebp + 0x59e], 0x300030
mov eax, 0x76
mov dword [ebp + 0x640], 0x77006f
mov ecx, 0x64
mov dword [ebp + 0x672], 0x610066
mov dword [ebp + 0x638], 0x750068
mov dword [ebp + 0x650], 0x6f0074
mov word [ebp + 0x636], dx
mov dword [ebp + 0x62e], 0x750020
mov dword [ebp + 0x628], 0x650065
mov dword [ebp + 0x668], 0x630069
mov dword [ebp + 0x646], 0x620020
mov dword [ebp + 0x65e], 0x730020
mov dword [ebp + 0x624], 0x700053
mov dword [ebp + 0x632], 0x200070
mov dword [ebp + 0x66e], 0x200073
mov dword [ebp + 0x662], 0x720065
mov dword [ebp + 0x64a], 0x200079
mov dword [ebp + 0x654], 0x700070
mov dword [ebp + 0x658], 0x6e0069
mov dword [ebp + 0x63c], 0x640074
mov dword [ebp + 0x67c], 0x72
mov dword [ebp + 0x678], 0x650074
mov word [ebp + 0x666], ax
mov word [ebp + 0x676], dx
mov word [ebp + 0x62c], cx
mov word [ebp + 0x64e], dx
test esi, esi
jne 0x4064f0
lea eax, [ebp + 0xf0]
push eax
lea ecx, [ebp + 0x5d4]
call fcn.0045b6f0
lea eax, [ebp + 0x59c]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp + 0x5d4]
call fcn.0045d4b0
test al, al
jne 0x4064d2
lea ecx, [ebp + 4]
call fcn.00466520
lea ecx, [ebp + 0x624]
mov byte [ebp - 4], 3
mov dword [ebp + 0x6c], reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4063f0
sub ecx, esi
lea eax, [ebp + 0x624]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 4]
call fcn.0045b530
mov edx, 0x536df0
lea ecx, [ebp - 0x10]
call fcn.004c6fd0
mov byte [ebp - 4], 4
mov esi, dword [eax]
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406427
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp + 0x1c]
call fcn.0045b530
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov edx, 0x536e30
lea ecx, [ebp - 0x10]
call fcn.004c6fd0
mov byte [ebp - 4], 5
mov edx, dword [eax]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406465
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp + 0x34]
call fcn.0045b530
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x59c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406494
sub ecx, edx
lea eax, [ebp + 0x59c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x4c]
call fcn.0045b530
mov eax, dword [ebp + 0xec]
mov ecx, 0x55b130
mov dword [ebp + 0x70], eax
lea eax, [ebp + 4]
push eax
call fcn.00479ea0
lea ecx, [ebp + 4]
call fcn.00466040
lea ecx, [ebp + 0x5d4]
mov dword [ebp - 4], 6
call fcn.0045b090
mov dword [ebp - 4], 0xffffffff
jmp 0x40661b
cmp esi, 2
je 0x4064fe
cmp esi, 3
jne 0x40661b
lea ecx, [ebp + 0x74]
call fcn.00466520
lea ecx, [ebp + 0x624]
mov dword [ebp - 4], 7
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406520
sub ecx, edx
lea eax, [ebp + 0x624]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x74]
call fcn.0045b530
mov edx, 0x536df0
lea ecx, [ebp - 0x10]
call fcn.004c6fd0
mov byte [ebp - 4], 8
mov edx, dword [eax]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406557
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp + 0x8c]
call fcn.0045b530
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov edx, 0x536e30
lea ecx, [ebp - 0x10]
call fcn.004c6fd0
mov byte [ebp - 4], 9
mov edx, dword [eax]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4065a0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp + 0xa4]
call fcn.0045b530
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x59c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4065d2
sub ecx, edx
lea eax, [ebp + 0x59c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0xbc]
call fcn.0045b530
lea eax, [ebp + 0x74]
mov dword [ebp + 0xe0], 1
push eax
mov ecx, 0x55b130
call fcn.00479ea0
lea ecx, [ebp + 0x74]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
mov ebx, 0x6f
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x40663c
mov ecx, edi
call fcn.004bdd40
mov ecx, 0x64
call fcn.00425ba0
push 0x104
lea eax, [ebp + 0xf0]
mov dword [ebp], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, 0x53
mov dword [ebp + 0xec], 1
mov word [ebp + 0x4c4], ax
mov ecx, 0x31
mov eax, 0x72
mov word [ebp + 0x4ce], cx
mov word [ebp + 0x4da], ax
mov ecx, 0x45
mov word [ebp + 0x4be], ax
mov word [ebp + 0x4b0], cx
mov ecx, 0x73
lea edx, [eax + 2]
mov word [ebp + 0x4e6], cx
mov eax, 0x5c
mov word [ebp + 0x50e], dx
mov word [ebp + 0x4e0], ax
lea edx, [ebp + 0x4a8]
mov eax, 0x61
mov dword [ebp + 0xe8], 0x104
mov word [ebp + 0x4f4], ax
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp]
mov dword [ebp + 0x4e2], 0x650053
push eax
push 1
push 0
mov dword [ebp + 0x514], 0x73
mov dword [ebp + 0x4c0], 0x6c006f
mov dword [ebp + 0x502], 0x750053
mov dword [ebp + 0x4b6], 0x6f0043
mov dword [ebp + 0x4ca], 0x300030
mov dword [ebp + 0x4d6], 0x74006e
mov dword [ebp + 0x4d0], 0x43005c
mov dword [ebp + 0x4e8], 0x690073
mov dword [ebp + 0x4ec], 0x6e006f
mov dword [ebp + 0x4a8], 0x590053
mov dword [ebp + 0x4fa], 0x650067
mov dword [ebp + 0x4ac], 0x540053
mov dword [ebp + 0x510], 0x6d0065
mov dword [ebp + 0x50a], 0x730079
mov dword [ebp + 0x4ba], 0x74006e
mov dword [ebp + 0x4dc], 0x6c006f
mov dword [ebp + 0x4fe], 0x5c0072
mov dword [ebp + 0x4f6], 0x61006e
mov dword [ebp + 0x4f0], 0x4d0020
mov word [ebp + 0x4d4], bx
mov dword [ebp + 0x4b2], 0x5c004d
mov dword [ebp + 0x506], 0x530062
mov dword [ebp + 0x4c6], 0x740065
call fcn.0041cd20
add esp, 0x18
mov edx, 0x4f
test eax, eax
jne 0x406c16
mov ecx, dword [ebp]
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp + 0xf0]
mov word [ebp + 0x598], dx
push eax
lea eax, [ebp + 0xec]
mov dword [ebp + 0x5a6], 0x6c
push eax
push 0
lea edx, [ebp + 0x598]
mov dword [ebp + 0x59e], 0x6f0069
mov dword [ebp + 0x5a2], 0x61006e
mov dword [ebp + 0x59a], 0x740070
call fcn.0044e460
mov edx, 0x73
mov dword [ebp + 0x664], 0x740073
mov esi, 0x44
mov word [ebp + 0x61e], dx
mov ecx, 0x63
mov word [ebp + 0x5f0], si
mov word [ebp + 0x624], dx
mov esi, 0x4f
mov word [ebp + 0x67a], cx
mov ebx, 0x20
mov edx, 0x61
mov word [ebp + 0x65e], bx
mov ecx, 0x20
mov word [ebp + 0x600], si
mov word [ebp + 0x60a], dx
add esp, 0x10
mov word [ebp + 0x614], si
mov ebx, 0x6f
mov word [ebp + 0x648], cx
mov esi, 0x65
xor ecx, ecx
mov dword [ebp + 0x620], 0x620075
mov dword [ebp + 0x61a], 0x200058
mov edx, 0x6c
mov dword [ebp + 0x5f6], 0x620061
mov dword [ebp + 0x62a], 0x650074
mov dword [ebp + 0x64a], 0x65006d
mov dword [ebp + 0x5fc], 0x200065
mov dword [ebp + 0x65a], 0x64006e
mov dword [ebp + 0x616], 0x490053
mov dword [ebp + 0x676], 0x720075
mov dword [ebp + 0x638], 0x660020
mov dword [ebp + 0x5f2], 0x730069
mov dword [ebp + 0x610], 0x500020
mov dword [ebp + 0x602], 0x2f0053
mov dword [ebp + 0x63c], 0x650072
mov dword [ebp + 0x668], 0x6d0065
mov dword [ebp + 0x60c], 0x64006e
mov dword [ebp + 0x640], 0x200065
mov dword [ebp + 0x606], 0x200032
mov dword [ebp + 0x672], 0x6f0073
mov dword [ebp + 0x632], 0x740020
mov dword [ebp + 0x660], 0x790073
mov dword [ebp + 0x652], 0x790072
mov dword [ebp + 0x67c], 0x730065
mov dword [ebp + 0x626], 0x730079
mov dword [ebp + 0x62e], 0x73006d
mov dword [ebp + 0x644], 0x700075
mov dword [ebp + 0x66c], 0x720020
mov dword [ebp + 0x64e], 0x6f006d
mov word [ebp + 0x636], bx
mov dword [ebp + 0x656], 0x610020
mov word [ebp + 0x670], si
mov word [ebp + 0x5fa], dx
mov word [ebp + 0x680], cx
test eax, eax
jne 0x406b1b
lea eax, [ebp + 0xf0]
push eax
lea ecx, [ebp + 0x5d4]
call fcn.0045b6f0
push 0x51a9b8
lea ecx, [ebp + 0x5d4]
mov dword [ebp - 4], 0xa
call fcn.0045d4b0
test al, al
jne 0x406afd
lea ecx, [ebp + 4]
call fcn.00466520
lea ecx, [ebp + 0x5f0]
mov byte [ebp - 4], 0xb
mov dword [ebp + 0x6c], reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406a55
sub ecx, edx
lea eax, [ebp + 0x5f0]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 4]
call fcn.0045b530
lea ecx, [ebp + 0x4a8]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406a80
sub ecx, edx
lea eax, [ebp + 0x4a8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x1c]
call fcn.0045b530
lea ecx, [ebp + 0x598]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406ab0
sub ecx, edx
lea eax, [ebp + 0x598]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x34]
call fcn.0045b530
push 0
push 0x51a9b8
lea ecx, [ebp + 0x4c]
call fcn.0045b530
mov eax, dword [ebp + 0xec]
mov ecx, 0x55b130
mov dword [ebp + 0x70], eax
lea eax, [ebp + 4]
push eax
call fcn.00479ea0
lea ecx, [ebp + 4]
call fcn.00466040
lea ecx, [ebp + 0x5d4]
mov dword [ebp - 4], 0xc
call fcn.0045b090
mov dword [ebp - 4], 0xffffffff
jmp 0x406c0b
cmp eax, 2
je 0x406b29
cmp eax, 3
jne 0x406c0b
lea ecx, [ebp + 0x74]
call fcn.00466520
lea ecx, [ebp + 0x5f0]
mov dword [ebp - 4], 0xd
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406b50
sub ecx, edx
lea eax, [ebp + 0x5f0]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x74]
call fcn.0045b530
lea ecx, [ebp + 0x4a8]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406b80
sub ecx, edx
lea eax, [ebp + 0x4a8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b530
lea ecx, [ebp + 0x598]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406bb0
sub ecx, edx
lea eax, [ebp + 0x598]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b530
push 0
push 0x51a9b8
lea ecx, [ebp + 0xbc]
call fcn.0045b530
lea eax, [ebp + 0x74]
mov dword [ebp + 0xe0], 7
push eax
mov ecx, 0x55b130
call fcn.00479ea0
lea ecx, [ebp + 0x74]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
mov edi, dword [ebp - 0x14]
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x406c2a
mov ecx, edi
call fcn.004bdd40
mov ecx, 0x64
call fcn.00425ba0
xor eax, eax
mov dword [ebp], 0
mov word [ebp + 0x4a4], ax
mov esi, 0x5c
mov eax, 0x75
mov word [ebp + 0x480], si
mov word [ebp + 0x430], ax
mov edx, 0x61
mov eax, 0x74
mov word [ebp + 0x474], dx
mov word [ebp + 0x44e], ax
lea ebx, [esi + 0x13]
mov eax, 0x53
mov dword [ebp + 0xec], 4
mov word [ebp + 0x462], ax
lea esi, [ebx - 0xa]
lea eax, [ebp]
mov dword [ebp + 0xe8], 0x104
push eax
mov edx, 0x67
mov dword [ebp + 0x492], 0x6e0061
mov ecx, 0x72
mov word [ebp + 0x47a], dx
mov word [ebp + 0x444], cx
lea edx, [ebp + 0x420]
push 1
push 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x49a], 0x6d0065
mov dword [ebp + 0x42c], 0x43005c
mov dword [ebp + 0x424], 0x540053
mov dword [ebp + 0x44a], 0x650053
mov dword [ebp + 0x43a], 0x430074
mov dword [ebp + 0x432], 0x720072
mov dword [ebp + 0x47c], 0x720065
mov dword [ebp + 0x428], 0x4d0045
mov dword [ebp + 0x48e], 0x4d0020
mov dword [ebp + 0x4a0], 0x74006e
mov dword [ebp + 0x450], 0x43005c
mov dword [ebp + 0x486], 0x6f006d
mov dword [ebp + 0x446], 0x6c006f
mov dword [ebp + 0x468], 0x690073
mov dword [ebp + 0x476], 0x61006e
mov dword [ebp + 0x46c], 0x6e006f
mov dword [ebp + 0x420], 0x590053
mov dword [ebp + 0x45e], 0x5c006c
mov dword [ebp + 0x440], 0x74006e
mov dword [ebp + 0x456], 0x74006e
mov dword [ebp + 0x48a], 0x790072
mov dword [ebp + 0x436], 0x6e0065
mov dword [ebp + 0x464], 0x730065
mov word [ebp + 0x43e], bx
mov dword [ebp + 0x496], 0x670061
mov dword [ebp + 0x470], 0x4d0020
mov word [ebp + 0x454], bx
mov dword [ebp + 0x45a], 0x6f0072
mov word [ebp + 0x49e], si
mov dword [ebp + 0x482], 0x65004d
call fcn.0041cd20
add esp, 0xc
test eax, eax
jne 0x4070da
mov ecx, dword [ebp]
lea edx, [ebp + 0x654]
mov eax, 0x6e
mov dword [ebp + 0x66c], 0x450067
mov word [ebp + 0x66a], ax
mov eax, 0x76
mov word [ebp + 0x67c], ax
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp + 0xe4]
mov dword [ebp + 0x670], 0x650078
push eax
lea eax, [ebp + 0xec]
mov dword [ebp + 0x65c], 0x6c0062
push eax
push 0
mov dword [ebp + 0x662], 0x610050
mov dword [ebp + 0x654], 0x690044
mov dword [ebp + 0x666], 0x690067
mov dword [ebp + 0x658], 0x610073
mov dword [ebp + 0x67e], esi
mov dword [ebp + 0x678], 0x690074
mov word [ebp + 0x660], si
mov dword [ebp + 0x674], 0x750063
call fcn.0044e460
mov ecx, 0x44
mov dword [ebp + 0x5ca], 0x730069
mov word [ebp + 0x5c8], cx
add esp, 0x10
mov dword [ebp + 0x5d8], 0x65006e
mov ecx, 0x6b
mov word [ebp + 0x5ce], cx
mov dword [ebp + 0x5e8], ecx
mov ecx, 0x74
mov word [ebp + 0x5e0], cx
mov ecx, 0x61
mov dword [ebp + 0x5e2], 0x650077
mov dword [ebp + 0x5d4], 0x720065
mov dword [ebp + 0x5d0], 0x6b0020
mov dword [ebp + 0x5dc], 0x20006c
mov word [ebp + 0x5e6], cx
test eax, eax
jne 0x406fe3
cmp dword [ebp + 0xe4], 1
je 0x4070cd
lea ecx, [ebp + 0x74]
call fcn.00466520
lea ecx, [ebp + 0x5c8]
mov dword [ebp - 4], 0xe
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406f52
sub ecx, edx
lea eax, [ebp + 0x5c8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x74]
call fcn.0045b530
lea ecx, [ebp + 0x420]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406f80
sub ecx, edx
lea eax, [ebp + 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b530
lea ecx, [ebp + 0x654]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406fb0
sub ecx, edx
lea eax, [ebp + 0x654]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b530
mov eax, dword [ebp + 0xec]
mov dword [ebp + 0xe0], eax
jmp 0x40709c
cmp eax, 2
je 0x406ff1
cmp eax, 3
jne 0x4070cd
lea ecx, [ebp + 0x74]
call fcn.00466520
lea ecx, [ebp + 0x5c8]
mov dword [ebp - 4], 0xf
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407013
sub ecx, edx
lea eax, [ebp + 0x5c8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x74]
call fcn.0045b530
lea ecx, [ebp + 0x420]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407040
sub ecx, edx
lea eax, [ebp + 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b530
lea ecx, [ebp + 0x654]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407070
sub ecx, edx
lea eax, [ebp + 0x654]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b530
mov dword [ebp + 0xe0], 4
lea eax, [ebp + 0x74]
mov dword [ebp + 0xd4], 1
push eax
mov ecx, 0x55b130
mov dword [ebp + 0xd8], 0
call fcn.00479ea0
lea ecx, [ebp + 0x74]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
mov ebx, 0x6f
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x4070ee
mov ecx, edi
call fcn.004bdd40
mov ecx, 0x64
call fcn.00425ba0
mov eax, 0x73
mov dword [ebp], 0
mov word [ebp + 0x58c], ax
lea edx, [ebp + 0x56c]
mov eax, 0x61
mov dword [ebp + 0xe4], 0
mov word [ebp + 0x57e], ax
mov ecx, 0x6c
lea eax, [ebp]
mov word [ebp + 0x578], cx
push eax
push 1
push 0
mov ecx, GetEffectiveClientRect
mov dword [ebp + 0xec], 4
mov dword [ebp + 0xe8], 0x104
mov dword [ebp + 0x58e], 0x74006b
mov dword [ebp + 0x594], 0x70
mov dword [ebp + 0x584], 0x5c006c
mov dword [ebp + 0x588], 0x650044
mov dword [ebp + 0x570], 0x74006e
mov dword [ebp + 0x56c], 0x6f0043
mov dword [ebp + 0x574], 0x6f0072
mov word [ebp + 0x592], bx
mov dword [ebp + 0x57a], 0x500020
mov dword [ebp + 0x580], 0x65006e
call fcn.0041cd20
add esp, 0xc
test eax, eax
jne 0x40748c
mov ecx, dword [ebp]
lea edx, [ebp + 0x5d4]
mov eax, 0x53
mov dword [ebp + 0x5e6], 0x6c006f
mov word [ebp + 0x5d4], ax
mov word [ebp + 0x5e0], ax
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp + 0xe4]
mov dword [ebp + 0x5dc], 0x680074
push eax
lea eax, [ebp + 0xec]
mov dword [ebp + 0x5e2], 0x720063
push eax
push 0
mov dword [ebp + 0x5d6], 0x6f006d
mov word [ebp + 0x5da], bx
mov dword [ebp + 0x5ea], 0x6c
call fcn.0044e460
xor ecx, ecx
mov dword [ebp + 0x644], 0x610073
mov word [ebp + 0x680], cx
add esp, 0x10
mov dword [ebp + 0x650], 0x6d0073
mov ecx, 0x6c
mov word [ebp + 0x676], cx
mov ecx, 0x64
mov dword [ebp + 0x654], 0x6f006f
mov dword [ebp + 0x672], 0x6f0072
mov dword [ebp + 0x658], 0x680074
mov dword [ebp + 0x64c], 0x200065
mov dword [ebp + 0x67c], 0x67006e
mov dword [ebp + 0x640], 0x690044
mov dword [ebp + 0x648], 0x6c0062
mov dword [ebp + 0x678], 0x69006c
mov dword [ebp + 0x66a], 0x200073
mov dword [ebp + 0x660], 0x6e0069
mov dword [ebp + 0x66e], 0x630073
mov dword [ebp + 0x65c], 0x770020
mov dword [ebp + 0x666], 0x77006f
mov word [ebp + 0x664], cx
test eax, eax
jne 0x4073b3
cmp dword [ebp + 0xe4], eax
je 0x40747f
lea ecx, [ebp + 0x74]
call fcn.00466520
lea ecx, [ebp + 0x640]
mov dword [ebp - 4], 0x10
mov dword [ebp + 0xdc], GetEffectiveClientRect
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407326
sub ecx, edx
lea eax, [ebp + 0x640]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x74]
call fcn.0045b530
lea ecx, [ebp + 0x56c]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407350
sub ecx, edx
lea eax, [ebp + 0x56c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b530
lea ecx, [ebp + 0x5d4]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407380
sub ecx, edx
lea eax, [ebp + 0x5d4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b530
mov eax, dword [ebp + 0xec]
mov dword [ebp + 0xe0], eax
jmp 0x40744e
cmp eax, 2
je 0x4073c1
cmp eax, 3
jne 0x40747f
lea ecx, [ebp + 0x74]
call fcn.00466520
lea ecx, [ebp + 0x640]
mov dword [ebp - 4], 0x11
mov dword [ebp + 0xdc], GetEffectiveClientRect
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4073e3
sub ecx, edx
lea eax, [ebp + 0x640]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x74]
call fcn.0045b530
lea ecx, [ebp + 0x56c]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407410
sub ecx, edx
lea eax, [ebp + 0x56c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b530
lea eax, [ebp + 0x5d4]
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b6c0
mov dword [ebp + 0xe0], 4
lea eax, [ebp + 0x74]
mov dword [ebp + 0xd4], 0
push eax
mov ecx, 0x55b130
mov dword [ebp + 0xd8], 0
call fcn.00479ea0
lea ecx, [ebp + 0x74]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
mov esi, 0x65
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x4074a0
mov ecx, edi
call fcn.004bdd40
mov ecx, 0x64
call fcn.00425ba0
mov eax, 0x63
mov dword [ebp], 0
mov word [ebp + 0x30e], ax
lea edx, [ebp + 0x2f8]
mov eax, 0x20
mov dword [ebp + 0xe4], 0
mov word [ebp + 0x32c], ax
mov ecx, 0x5c
lea eax, [ebp]
mov word [ebp + 0x308], cx
push eax
push 1
push 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0xec], 4
mov dword [ebp + 0xe8], 0x104
mov dword [ebp + 0x34e], 0x5c006e
mov dword [ebp + 0x35a], 0x69006c
mov dword [ebp + 0x310], 0x6f0072
mov dword [ebp + 0x356], 0x660072
mov dword [ebp + 0x2fc], 0x540046
mov dword [ebp + 0x318], 0x740066
mov dword [ebp + 0x342], 0x650056
mov dword [ebp + 0x304], 0x450052
mov dword [ebp + 0x33a], 0x650072
mov dword [ebp + 0x314], 0x6f0073
mov dword [ebp + 0x320], 0x6e0069
mov dword [ebp + 0x352], 0x650050
mov dword [ebp + 0x332], 0x43005c
mov dword [ebp + 0x346], 0x730072
mov dword [ebp + 0x35e], 0x62
mov dword [ebp + 0x328], 0x730077
mov dword [ebp + 0x300], 0x410057
mov dword [ebp + 0x2f8], 0x4f0053
mov dword [ebp + 0x30a], 0x69004d
mov dword [ebp + 0x324], 0x6f0064
mov dword [ebp + 0x34a], 0x6f0069
mov dword [ebp + 0x336], 0x720075
mov dword [ebp + 0x31c], 0x57005c
mov dword [ebp + 0x32e], 0x54004e
mov dword [ebp + 0x33e], 0x74006e
call fcn.0041cd20
add esp, 0xc
test eax, eax
jne 0x407870
mov ecx, dword [ebp]
lea edx, [ebp + 0x64c]
mov eax, 0x72
mov dword [ebp + 0x650], 0x610073
mov word [ebp + 0x67c], ax
mov word [ebp + 0x664], ax
mov word [ebp + 0x65e], ax
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp + 0xe4]
mov dword [ebp + 0x67e], 0x73
push eax
lea eax, [ebp + 0xec]
mov dword [ebp + 0x678], 0x650074
push eax
push 0
mov dword [ebp + 0x65a], 0x650050
mov dword [ebp + 0x666], 0x61006d
mov dword [ebp + 0x66e], 0x430065
mov dword [ebp + 0x64c], 0x690044
mov dword [ebp + 0x66a], 0x63006e
mov dword [ebp + 0x654], 0x6c0062
mov dword [ebp + 0x674], 0x6e0075
mov dword [ebp + 0x660], 0x6f0066
mov word [ebp + 0x672], bx
mov word [ebp + 0x658], si
call fcn.0044e460
add esp, 0x10
mov dword [ebp + 0x5c6], 0x720065
mov dword [ebp + 0x5ce], 0x6d0072
mov edx, 0x20
mov dword [ebp + 0x5e0], 0x6e0075
mov ecx, 0x73
mov dword [ebp + 0x5ba], 0x620061
mov dword [ebp + 0x5e8], 0x72
mov dword [ebp + 0x5d2], 0x6e0061
mov dword [ebp + 0x5c2], 0x700020
mov dword [ebp + 0x5b4], 0x690044
mov dword [ebp + 0x5ca], 0x6f0066
mov dword [ebp + 0x5be], 0x65006c
mov dword [ebp + 0x5e4], 0x650074
mov word [ebp + 0x5b8], cx
mov dword [ebp + 0x5d6], 0x650063
mov dword [ebp + 0x5dc], 0x6f0063
mov word [ebp + 0x5da], dx
test eax, eax
jne 0x4077d3
cmp dword [ebp + 0xe4], 1
je 0x407868
lea ecx, [ebp + 0x74]
call fcn.00466520
lea eax, [ebp + 0x5b4]
mov dword [ebp - 4], 0x12
push eax
lea ecx, [ebp + 0x74]
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
call fcn.0045b6c0
lea eax, [ebp + 0x2f8]
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b6c0
lea eax, [ebp + 0x64c]
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b6c0
mov eax, dword [ebp + 0xec]
mov dword [ebp + 0xe0], eax
jmp 0x407837
cmp eax, 2
je 0x4077e1
cmp eax, 3
jne 0x407868
lea ecx, [ebp + 0x74]
call fcn.00466520
lea eax, [ebp + 0x5b4]
mov dword [ebp - 4], 0x13
push eax
lea ecx, [ebp + 0x74]
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
call fcn.0045b6c0
lea eax, [ebp + 0x2f8]
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b6c0
lea eax, [ebp + 0x64c]
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b6c0
mov dword [ebp + 0xe0], 4
lea eax, [ebp + 0x74]
mov dword [ebp + 0xd4], 1
push eax
mov ecx, 0x55b130
mov dword [ebp + 0xd8], 0
call fcn.00479ea0
lea ecx, [ebp + 0x74]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x407884
mov ecx, edi
call fcn.004bdd40
mov ecx, 0x64
call fcn.00425ba0
mov ecx, 0x6e
mov dword [ebp], 0
lea eax, [ebp]
mov word [ebp + 0x3d6], cx
push eax
mov ecx, 0x69
mov dword [ebp + 0xe4], 0
mov word [ebp + 0x408], cx
lea edx, [ebp + 0x3c4]
push 1
mov esi, 0x53
mov dword [ebp + 0xec], 4
push 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0xe8], 0x104
mov dword [ebp + 0x3ca], 0x450054
mov dword [ebp + 0x3dc], 0x6c006f
mov dword [ebp + 0x3f0], 0x6e006f
mov dword [ebp + 0x3ec], 0x43005c
mov dword [ebp + 0x41a], 0x6c
mov dword [ebp + 0x404], 0x72006f
mov dword [ebp + 0x3e4], 0x300074
mov dword [ebp + 0x3e0], 0x650053
mov dword [ebp + 0x416], 0x6f0072
mov dword [ebp + 0x3e8], 0x310030
mov dword [ebp + 0x3c6], 0x530059
mov dword [ebp + 0x40a], 0x790074
mov dword [ebp + 0x40e], 0x6f0043
mov dword [ebp + 0x3f4], 0x720074
mov dword [ebp + 0x400], 0x690072
mov dword [ebp + 0x412], 0x74006e
mov dword [ebp + 0x3ce], 0x5c004d
mov word [ebp + 0x3c4], si
mov dword [ebp + 0x3f8], 0x6c006f
mov dword [ebp + 0x3fc], 0x50005c
mov dword [ebp + 0x3d2], 0x6f0043
mov dword [ebp + 0x3d8], 0x720074
call fcn.0041cd20
add esp, 0xc
test eax, eax
jne 0x407c4a
lea eax, [esi + 0x1f]
mov dword [ebp + 0x652], 0x6e0069
mov word [ebp + 0x662], ax
lea edx, [ebp + 0x650]
mov word [ebp + 0x672], ax
mov ecx, 0x79
mov eax, 0x57
mov word [ebp + 0x668], cx
mov ecx, dword [ebp]
mov word [ebp + 0x650], ax
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp + 0xe4]
mov dword [ebp + 0x674], 0x740061
push eax
lea eax, [ebp + 0xec]
mov dword [ebp + 0x65e], 0x6f0069
push eax
push 0
mov dword [ebp + 0x66a], 0x650053
mov dword [ebp + 0x656], 0x320033
mov dword [ebp + 0x67c], 0x6e
mov dword [ebp + 0x664], 0x740069
mov dword [ebp + 0x65a], 0x720050
mov dword [ebp + 0x66e], 0x610070
mov dword [ebp + 0x678], 0x6f0069
call fcn.0044e460
lea ecx, [esi + 0x1f]
mov dword [ebp + 0x5ae], 0x61006e
mov edx, 0x45
mov word [ebp + 0x5d4], cx
mov word [ebp + 0x5ac], dx
add esp, 0x10
mov dword [ebp + 0x5c0], 0x4e0020
mov edx, 0x73
mov dword [ebp + 0x5ea], 0x72
mov ecx, 0x74
mov dword [ebp + 0x5b6], 0x200065
mov dword [ebp + 0x5e0], 0x650063
mov dword [ebp + 0x5cc], 0x62006e
mov dword [ebp + 0x5d6], 0x200064
mov dword [ebp + 0x5e6], 0x6f0073
mov dword [ebp + 0x5da], 0x720070
mov dword [ebp + 0x5c8], 0x6f0020
mov dword [ebp + 0x5b2], 0x6c0062
mov dword [ebp + 0x5c4], 0x430049
mov word [ebp + 0x5de], bx
mov dword [ebp + 0x5d0], 0x61006f
mov word [ebp + 0x5e4], dx
mov dword [ebp + 0x5bc], 0x650068
mov word [ebp + 0x5ba], cx
test eax, eax
jne 0x407bad
cmp dword [ebp + 0xe4], 0x26
je 0x407c42
lea ecx, [ebp + 0x74]
call fcn.00466520
lea eax, [ebp + 0x5ac]
mov dword [ebp - 4], 0x14
push eax
lea ecx, [ebp + 0x74]
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
call fcn.0045b6c0
lea eax, [ebp + 0x3c4]
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b6c0
lea eax, [ebp + 0x650]
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b6c0
mov eax, dword [ebp + 0xec]
mov dword [ebp + 0xe0], eax
jmp 0x407c11
cmp eax, 2
je 0x407bbb
cmp eax, 3
jne 0x407c42
lea ecx, [ebp + 0x74]
call fcn.00466520
lea eax, [ebp + 0x5ac]
mov dword [ebp - 4], 0x15
push eax
lea ecx, [ebp + 0x74]
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
call fcn.0045b6c0
lea eax, [ebp + 0x3c4]
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b6c0
lea eax, [ebp + 0x650]
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b6c0
mov dword [ebp + 0xe0], 4
lea eax, [ebp + 0x74]
mov dword [ebp + 0xd4], 0x26
push eax
mov ecx, 0x55b130
mov dword [ebp + 0xd8], 0
call fcn.00479ea0
lea ecx, [ebp + 0x74]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x407c5e
mov ecx, edi
call fcn.004bdd40
mov ecx, 0x64
call fcn.00425ba0
mov eax, 0x53
mov dword [ebp], 0
mov word [ebp + 0x368], ax
lea edx, [ebp + 0x364]
mov ebx, 0x30
mov dword [ebp + 0xe4], 0
mov word [ebp + 0x386], bx
mov ebx, 0x61
lea ecx, [eax + 0x1f]
mov dword [ebp + 0xec], 4
mov eax, 0x54
mov word [ebp + 0x3bc], cx
mov word [ebp + 0x3a0], ax
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp]
mov dword [ebp + 0xe8], 0x104
push eax
push 1
push 0
mov dword [ebp + 0x382], 0x740065
mov dword [ebp + 0x364], 0x590053
mov dword [ebp + 0x388], 0x310030
mov dword [ebp + 0x390], 0x720065
mov dword [ebp + 0x398], 0x650063
mov dword [ebp + 0x36a], 0x450054
mov dword [ebp + 0x37e], 0x53006c
mov dword [ebp + 0x3a6], 0x700069
mov dword [ebp + 0x376], 0x74006e
mov dword [ebp + 0x372], 0x6f0043
mov dword [ebp + 0x3ae], 0x720061
mov dword [ebp + 0x3be], 0x73
mov dword [ebp + 0x3a2], 0x700063
mov dword [ebp + 0x36e], 0x5c004d
mov dword [ebp + 0x37a], 0x6f0072
mov dword [ebp + 0x38c], 0x53005c
mov dword [ebp + 0x3b4], 0x65006d
mov dword [ebp + 0x3aa], 0x50005c
mov dword [ebp + 0x39c], 0x5c0073
mov dword [ebp + 0x3b8], 0x650074
mov dword [ebp + 0x394], 0x690076
mov word [ebp + 0x3b2], bx
call fcn.0041cd20
add esp, 0xc
test eax, eax
jne 0x407fee
mov ecx, dword [ebp]
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp + 0xe4]
mov dword [ebp + 0x556], 0x6b0073
push eax
lea eax, [ebp + 0xec]
mov dword [ebp + 0x54e], 0x65006c
push eax
mov esi, 0x62
mov dword [ebp + 0x552], 0x610054
push 0
lea edx, [ebp + 0x544]
mov dword [ebp + 0x55e], 0x6c0066
mov dword [ebp + 0x566], 0x64
mov dword [ebp + 0x55a], 0x66004f
mov dword [ebp + 0x548], 0x610073
mov dword [ebp + 0x544], 0x690044
mov dword [ebp + 0x562], 0x61006f
mov word [ebp + 0x54c], si
call fcn.0044e460
mov ecx, 0x44
mov dword [ebp + 0x51e], 0x620061
mov word [ebp + 0x518], cx
lea esi, [ebx + 3]
mov ecx, 0x6c
mov dword [ebp + 0x524], 0x200065
mov word [ebp + 0x522], cx
add esp, 0x10
mov dword [ebp + 0x536], 0x6c0066
mov ecx, 0x74
mov dword [ebp + 0x52a], 0x730061
mov dword [ebp + 0x532], 0x66006f
mov dword [ebp + 0x52e], 0x20006b
mov dword [ebp + 0x53e], 0x64
mov dword [ebp + 0x51a], 0x730069
mov dword [ebp + 0x53a], 0x61006f
mov word [ebp + 0x528], cx
test eax, eax
jne 0x407f61
cmp dword [ebp + 0xe4], eax
je 0x407fe4
lea ecx, [ebp + 0x74]
call fcn.00466520
lea eax, [ebp + 0x518]
mov dword [ebp - 4], 0x16
push eax
lea ecx, [ebp + 0x74]
mov dword [ebp + 0xdc], reloc.OLEAUT32.dll_SysReAllocString
call fcn.0045b6c0
lea eax, [ebp + 0x364]
push eax
lea ecx, [ebp + 0x8c]
call fcn.0045b6c0
lea eax, [ebp + 0x544]
push eax
lea ecx, [ebp + 0xa4]
call fcn.0045b6c0
mov eax, dword [ebp + 0xec]
mov ecx, 0x55b130
mov dword [ebp + 0xe0], eax
lea eax, [ebp + 0x74]
push eax
mov dword [ebp + 0xd4], 0
mov dword [ebp + 0xd8], 0
call fcn.00479ea0
lea ecx, [ebp + 0x74]
jmp 0x407fd8
cmp eax, 2
je 0x407f6f
cmp eax, 3
jne 0x407fe4
lea ecx, [ebp + 4]
call fcn.00466520
lea eax, [ebp + 0x518]
mov dword [ebp - 4], 0x17
push eax
lea ecx, [ebp + 4]
mov dword [ebp + 0x6c], reloc.OLEAUT32.dll_SysReAllocString
call fcn.0045b6c0
lea eax, [ebp + 0x364]
push eax
lea ecx, [ebp + 0x1c]
call fcn.0045b6c0
lea eax, [ebp + 0x544]
push eax
lea ecx, [ebp + 0x34]
call fcn.0045b6c0
lea eax, [ebp + 4]
mov dword [ebp + 0x64], 0
push eax
mov ecx, 0x55b130
mov dword [ebp + 0x68], 0
mov dword [ebp + 0x70], 4
call fcn.00479ea0
lea ecx, [ebp + 4]
mov dword [ebp - 4], 0xffffffff
call fcn.00466040
mov ecx, dword [ebp]
call fcn.00426b30
jmp 0x407ff3
mov esi, 0x64
push 0
mov ecx, edi
call fcn.004466f0
test eax, eax
je 0x408007
mov ecx, edi
call fcn.004bdd40
mov ecx, esi
call fcn.00425ba0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x684]
xor ecx, ebp
call fcn.00482396
lea esp, [ebp + 0x688]
pop ebp
ret