Function at 0x40c670
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a1c3e
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x60fe80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x60], eax
call fcn.0040e090
push str.Value
add esi, 0x1130
push str.Property
push ebx
mov ecx, esi
mov dword [ebp - 0x7c], esi
call fcn.004ab0da
push 1
mov ecx, esi
call fcn.004ab098
push 1
mov ecx, esi
call fcn.004b176a
push 1
push 1
mov ecx, esi
call fcn.004ac03c
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], ebx
test esi, esi
je 0x40c778
push 0xe8
push ebx
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df5f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec4f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40c74d
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40c759
push 4
push 0x5ec4f0
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 2
mov ebx, 1
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov edi, eax
jmp 0x40c77a
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40c7a7
mov edx, dword [ebp - 0x54]
and ebx, 0xfffffffe
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c7a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x40c882
push 0xe8
push 0
push esi
call fcn.005789a0
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0x78], ax
xor eax, eax
mov word [ebp - 0x70], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 5
or ebx, 2
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b2598
mov dword [ebp - 4], 6
or ebx, 4
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df69
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec52c
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40c848
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40c854
push 8
push 0x5ec52c
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec4f8
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x58]
or ebx, 8
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
jmp 0x40c884
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0xb
call fcn.004aa5e3
mov dword [ebp - 4], 0xa
test bl, 8
je 0x40c8c0
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffff7
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c8c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 4
je 0x40c8de
lea ecx, [ebp - 0x90]
and ebx, 0xfffffffb
push ecx
mov dword [ebp - 0x50], ebx
call eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test bl, 2
je 0x40c8f6
lea ecx, [ebp - 0x78]
and ebx, 0xfffffffd
push ecx
mov dword [ebp - 0x50], ebx
call eax
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0xc
test esi, esi
je 0x40c9b8
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
lea ecx, [ebp - 0x78]
xor eax, eax
mov word [ebp - 0x78], ax
push 0x5ec574
call fcn.004b2816
mov byte [ebp - 4], 0xd
or ebx, 0x10
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df73
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec580
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40c97f
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40c98b
push 4
push 0x5ec580
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec538
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x58]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
mov esi, eax
jmp 0x40c9ba
xor esi, esi
mov dword [ebp - 4], 0x10
test bl, 0x20
je 0x40c9e7
mov edx, dword [ebp - 0x58]
and ebx, 0xffffffdf
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c9e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test bl, 0x10
je 0x40ca04
lea eax, [ebp - 0x78]
and ebx, 0xffffffef
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x50], ebx
call eax
push 1
push 0x5ec588
mov ecx, esi
call fcn.004aa516
push 1
push 0x5ec58c
mov ecx, esi
call fcn.004aa516
push 1
push 0x5ec590
mov ecx, esi
call fcn.004aa516
push 1
push 0x5ec574
mov ecx, esi
call fcn.004aa516
push esi
mov ecx, edi
mov dword [esi + 0x68], 0
call fcn.004aa5e3
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x12
test esi, esi
je 0x40cb33
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0x78], ax
push 0x5ec5b8
call fcn.00575780
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x13
or ebx, 0x40
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b2598
mov dword [ebp - 4], 0x14
or ebx, 0x80
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df7d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec5c0
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40caf6
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40cb02
push 4
push 0x5ec5c0
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec59c
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x58]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
jmp 0x40cb35
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x19
call fcn.004aa5e3
mov dword [ebp - 4], 0x18
test ebx, 0x100
je 0x40cb77
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffeff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cb77
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40cb93
lea eax, [ebp - 0x90]
and ebx, 0xffffff7f
push eax
mov dword [ebp - 0x50], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40cbab
lea eax, [ebp - 0x78]
and ebx, 0xffffffbf
push eax
mov dword [ebp - 0x50], ebx
call esi
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa55f
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x1a
test esi, esi
je 0x40cc49
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df87
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec5c8
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40cc1d
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40cc29
push 8
push 0x5ec5c8
call fcn.004067b0
push 1
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x1c
or ebx, 0x200
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov edi, eax
jmp 0x40cc4b
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200
je 0x40cc7e
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffdff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cc7e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x1e
test esi, esi
je 0x40cd65
push 0xe8
push 0
push esi
call fcn.005789a0
mov eax, 3
mov dword [ebp - 0x70], 0xfa
add esp, 0xc
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1f
or ebx, 0x400
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b2598
mov dword [ebp - 4], 0x20
or ebx, 0x800
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df91
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec5e4
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40cd26
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40cd32
push 4
push 0x5ec5e4
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec5d4
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x54]
or ebx, 0x1000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
mov esi, eax
jmp 0x40cd67
xor esi, esi
mov dword [ebp - 4], 0x24
test ebx, 0x1000
je 0x40cd9a
mov edx, dword [ebp - 0x54]
and ebx, 0xffffefff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cd9a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x800
je 0x40cdb9
lea eax, [ebp - 0x90]
and ebx, 0xfffff7ff
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x50], ebx
call eax
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400
je 0x40cddb
lea eax, [ebp - 0x78]
and ebx, 0xfffffbff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x12c
push 0x32
push 1
mov ecx, esi
call fcn.004ab20c
push esi
mov ecx, edi
call fcn.004aa5e3
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x26
test esi, esi
je 0x40ceda
push 0xe8
push 0
push esi
call fcn.005789a0
mov eax, 3
mov dword [ebp - 0x70], 0x96
add esp, 0xc
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x27
or ebx, 0x2000
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b2598
mov dword [ebp - 4], 0x28
or ebx, 0x4000
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40df9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec5fc
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40ce9b
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40cea7
push 4
push 0x5ec5fc
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec5ec
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x54]
or ebx, 0x8000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
mov esi, eax
jmp 0x40cedc
xor esi, esi
mov dword [ebp - 4], 0x2c
test ebx, 0x8000
je 0x40cf0f
mov edx, dword [ebp - 0x54]
and ebx, 0xffff7fff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cf0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x4000
je 0x40cf2d
lea eax, [ebp - 0x90]
and ebx, 0xffffbfff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000
je 0x40cf4f
lea eax, [ebp - 0x78]
and ebx, 0xffffdfff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0xc8
push 0x32
push 1
mov ecx, esi
call fcn.004ab20c
push esi
mov ecx, edi
call fcn.004aa5e3
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa55f
push 0xe8
call fcn.00412a7d
mov edi, eax
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 4], 0x2e
test edi, edi
je 0x40d010
push 0xe8
push 0
push edi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfa5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov esi, 0x5ec604
mov byte [ebp - 4], 0x2f
shr esi, 0x10
lea ecx, [ebp - 0x58]
mov eax, 0x5ec604
test esi, esi
jne 0x40cfde
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40cfea
push 4
push 0x5ec604
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
or ebx, 0x10000
mov ecx, edi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov dword [ebp - 0x68], eax
mov edi, 0x5ec604
jmp 0x40d021
mov edi, 0x5ec604
mov dword [ebp - 0x68], 0
mov esi, edi
shr esi, 0x10
mov dword [ebp - 4], 0xffffffff
test ebx, 0x10000
je 0x40d054
mov edx, dword [ebp - 0x58]
and ebx, 0xfffeffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d054
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call fcn.0041aab6
lea ecx, [ebp - 0x4c]
push ecx
push 0x3c
push dword [eax + 4]
call dword [sym.imp.GDI32.dll_GetObjectA]
push 0x5ec60c
lea eax, [ebp - 0x30]
push 0x20
push eax
call fcn.00581936
push 0x168
call fcn.00412a7d
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x40d115
push 0x168
push 0
push eax
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfaf
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x54]
test esi, esi
jne 0x40d0dc
movzx eax, di
push eax
call fcn.00406600
jmp 0x40d0e8
push 4
push 0x5ec604
call fcn.004067b0
push 0xffffffffffffffff
push 0
push 0x5ec618
push 0x101
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x5c]
or ebx, 0x20000
push eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x50], ebx
push eax
call fcn.004a9d8e
jmp 0x40d117
xor eax, eax
mov dword [ebp - 4], 0x35
mov edi, dword [ebp - 0x68]
mov ecx, edi
push eax
call fcn.004aa5e3
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000
je 0x40d15c
mov edx, dword [ebp - 0x54]
and ebx, 0xfffdffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d15c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x36
test esi, esi
je 0x40d241
push 0xe8
push 0
push esi
call fcn.005789a0
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0x78], ax
or eax, 0xffffffff
mov word [ebp - 0x70], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x37
or ebx, 0x40000
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b2598
mov dword [ebp - 4], 0x38
or ebx, 0x80000
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfb9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec650
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d204
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d210
push 0xc
push 0x5ec650
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec62c
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x54]
or ebx, 0x100000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
jmp 0x40d243
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x3d
call fcn.004aa5e3
mov dword [ebp - 4], 0x3c
test ebx, 0x100000
je 0x40d285
mov edx, dword [ebp - 0x54]
and ebx, 0xffefffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d285
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, 0x80000
je 0x40d2a5
lea eax, [ebp - 0x90]
and ebx, 0xfff7ffff
push eax
mov dword [ebp - 0x50], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000
je 0x40d2c3
lea eax, [ebp - 0x78]
and ebx, 0xfffbffff
push eax
mov dword [ebp - 0x50], ebx
call esi
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa55f
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x3e
test esi, esi
je 0x40d361
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfc3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec660
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40d335
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d341
push 4
push 0x5ec660
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x40
or ebx, 0x200000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov edi, eax
jmp 0x40d363
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200000
je 0x40d396
mov edx, dword [ebp - 0x58]
and ebx, 0xffdfffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d396
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x42
test esi, esi
je 0x40d45b
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
lea ecx, [ebp - 0x78]
xor eax, eax
mov word [ebp - 0x78], ax
push 0x5ec4c4
call fcn.004b2816
mov byte [ebp - 4], 0x43
or ebx, 0x400000
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfcd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec668
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d422
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d42e
push 6
push 0x5ec668
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x54]
or ebx, 0x800000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9e23
mov esi, eax
jmp 0x40d45d
xor esi, esi
mov dword [ebp - 4], 0x46
test ebx, 0x800000
je 0x40d490
mov edx, dword [ebp - 0x54]
and ebx, 0xff7fffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d490
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400000
je 0x40d4b2
lea eax, [ebp - 0x78]
and ebx, 0xffbfffff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
mov ecx, esi
call fcn.004ab02c
push esi
mov ecx, edi
call fcn.004aa5e3
push 0x120
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 0x48
test esi, esi
je 0x40d568
push 0x120
push 0
push esi
call fcn.005789a0
add esp, 0xc
mov dword [ebp - 0x5c], 0xfec0d2
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfd7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec684
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d533
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d53f
push 8
push 0x5ec684
call fcn.004067b0
push 0
push 0x5ec670
push 0
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x54]
or ebx, 0x1000000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a993f
mov esi, eax
jmp 0x40d56a
xor esi, esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x1000000
je 0x40d59d
mov edx, dword [ebp - 0x54]
and ebx, 0xfeffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d59d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 1
push 0x5ec690
mov ecx, esi
call fcn.004ab1cb
push 1
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 0x5ec698
mov ecx, esi
call fcn.004ab05c
push esi
mov ecx, edi
call fcn.004aa5e3
push 0x100
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x4c
test esi, esi
je 0x40d6cb
push 0x100
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfe1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64], eax
mov eax, 0x5e9ed8
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x64]
test eax, 0xffff0000
jne 0x40d635
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d641
push 0
push 0x5e9ed8
call fcn.004067b0
mov byte [ebp - 4], 0x4e
or ebx, 0x2000000
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfeb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec6b4
mov dword [ebp - 4], 0x4f
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d689
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d695
push 4
push 0x5ec6b4
call fcn.004067b0
push 0
push 0x5ec6a0
push 0x5ec728
push 0
push 0x5ec6b0
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 0x50
push eax
push 1
lea eax, [ebp - 0x54]
or ebx, 0x4000000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9cbb
jmp 0x40d6cd
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x52
call fcn.004aa5e3
mov dword [ebp - 4], 0x51
test ebx, 0x4000000
je 0x40d70f
mov edx, dword [ebp - 0x54]
and ebx, 0xfbffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d70f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000000
je 0x40d742
mov edx, dword [ebp - 0x64]
and ebx, 0xfdffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d742
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x53
test esi, esi
je 0x40d830
push 0x100
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dff5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec6bc
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d7ab
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d7b7
push 3
push 0x5ec6bc
call fcn.004067b0
mov byte [ebp - 4], 0x55
or ebx, 0x8000000
mov dword [ebp - 0x50], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40dfff
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64], eax
mov eax, 0x5ec6c0
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x64]
test eax, 0xffff0000
jne 0x40d7ff
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d80b
push 6
push 0x5ec6c0
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x64]
or ebx, 0x10000000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9c3a
jmp 0x40d832
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x59
call fcn.004aa5e3
mov dword [ebp - 4], 0x58
test ebx, 0x10000000
je 0x40d874
mov edx, dword [ebp - 0x64]
and ebx, 0xefffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d874
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x8000000
je 0x40d8a4
mov edx, dword [ebp - 0x54]
and ebx, 0xf7ffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d8a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa55f
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x5a
test esi, esi
je 0x40d945
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40e009
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64], eax
mov eax, 0x5ec6c8
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x64]
test eax, 0xffff0000
jne 0x40d916
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d922
push 8
push 0x5ec6c8
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
or ebx, 0x20000000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov edi, eax
mov dword [ebp - 0x5c], eax
jmp 0x40d94a
xor edi, edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000000
je 0x40d97a
mov edx, dword [ebp - 0x64]
and ebx, 0xdfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d97a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 0x5e
test esi, esi
je 0x40da0e
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40e013
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec6d4
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40d9df
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40d9eb
push 0xa
push 0x5ec6d4
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x60
or ebx, 0x40000000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov esi, eax
mov dword [ebp - 0x68], eax
jmp 0x40da13
xor esi, esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000000
je 0x40da43
mov edx, dword [ebp - 0x58]
and ebx, 0xbfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40da43
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
mov ecx, edi
call fcn.004aa5e3
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x62
test esi, esi
je 0x40dadf
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40e01d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5ec6e0
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40dab3
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40dabf
push 0xa
push 0x5ec6e0
call fcn.004067b0
push 0
push 0
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x64
or ebx, 0x80000000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9f40
mov edi, eax
jmp 0x40dae1
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
jns 0x40db07
mov edx, dword [ebp - 0x54]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40db07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x68]
push edi
call fcn.004aa5e3
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x66
test esi, esi
je 0x40dbf9
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0x78], ax
push 0x5ec6f8
call fcn.00575780
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x60], 1
call fcn.004b2598
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x60], 3
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40e027
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec700
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40dbbd
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40dbc9
push 4
push 0x5ec700
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec6ec
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0x58]
mov ebx, 7
push eax
mov ecx, esi
mov dword [ebp - 0x60], ebx
call fcn.004a9e23
jmp 0x40dc01
mov ebx, dword [ebp - 0x98]
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x6d
call fcn.004aa5e3
mov dword [ebp - 4], 0x6c
test bl, 4
je 0x40dc3d
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffffb
mov dword [ebp - 0x60], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40dc3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 2
je 0x40dc57
lea eax, [ebp - 0x90]
and ebx, 0xfffffffd
push eax
mov dword [ebp - 0x60], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40dc6f
lea eax, [ebp - 0x78]
and ebx, 0xfffffffe
push eax
mov dword [ebp - 0x60], ebx
call esi
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x6e
test esi, esi
je 0x40dd54
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0x78], ax
push 0x5ec708
call fcn.00575780
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x6f
or ebx, 8
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x60], ebx
call fcn.004b2598
mov dword [ebp - 4], 0x70
or ebx, 0x10
mov dword [ebp - 0x60], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40e031
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5ec710
mov dword [ebp - 4], 0x71
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40dd1a
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40dd26
push 4
push 0x5ec710
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec6ec
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x58]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x60], ebx
call fcn.004a9e23
jmp 0x40dd56
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x75
call fcn.004aa5e3
mov dword [ebp - 4], 0x74
test bl, 0x20
je 0x40dd92
mov edx, dword [ebp - 0x58]
and ebx, 0xffffffdf
mov dword [ebp - 0x60], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40dd92
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 0x10
je 0x40ddac
lea eax, [ebp - 0x90]
and ebx, 0xffffffef
push eax
mov dword [ebp - 0x60], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 8
je 0x40ddc4
lea eax, [ebp - 0x78]
and ebx, 0xfffffff7
push eax
mov dword [ebp - 0x60], ebx
call esi
push 0xe8
call fcn.00412a7d
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x76
test esi, esi
je 0x40deb8
push 0xe8
push 0
push esi
call fcn.005789a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa8], ax
push 0x5ec718
call fcn.00575780
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x77
or ebx, 0x40
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x60], ebx
call fcn.004b2598
mov dword [ebp - 4], 0x78
or ebx, 0x80
mov dword [ebp - 0x60], ebx
call fcn.00419a01
mov ecx, eax
test ecx, ecx
je 0x40e03b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x68], eax
mov eax, 0x5ec720
mov dword [ebp - 4], 0x79
lea ecx, [ebp - 0x68]
test eax, 0xffff0000
jne 0x40de7b
movzx eax, ax
push eax
call fcn.00406600
jmp 0x40de87
push 4
push 0x5ec720
call fcn.004067b0
push 0
push 0
push 0
push 0
push 0x5ec6ec
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x68]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x60], ebx
call fcn.004a9e23
jmp 0x40deba
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x7d
call fcn.004aa5e3
mov dword [ebp - 4], 0x7c
test ebx, 0x100
je 0x40defc
mov edx, dword [ebp - 0x68]
and ebx, 0xfffffeff
mov dword [ebp - 0x60], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40defc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40df15
lea eax, [ebp - 0xb8]
and ebx, 0xffffff7f
push eax
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40df2a
lea eax, [ebp - 0xa8]
push eax
call esi
mov esi, dword [ebp - 0x5c]
mov ecx, esi
push 0
call fcn.004ab448
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push esi
call fcn.004aa55f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005742be
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
push 0x80004005
call fcn.00406c20
int3