Function at 0x4b3480
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x5b7de4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetParent]
push eax
lea ecx, [ebx + 4]
call fcn.00411cd0
push 0x576b84
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 0
push 0x31
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0
push 0x5600004c
push 0
push 0x5b714c
mov dword [ebx + 0x238], eax
lea ecx, [ebx + 0x190]
push dword [ebx + 4]
call fcn.00493cf0
push 0
push dword [ebx + 0x194]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x44c
push dword [ebx + 4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x14], xmm0
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
mov esi, eax
push 0xb
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [ebp - 0x14]
push eax
push dword [ebx + 4]
call esi
test eax, eax
je 0x4b3543
lea eax, [ebp - 0xc]
push eax
push dword [ebx + 4]
call esi
mov esi, dword [ebx + 4]
lea eax, [ebx + 0x11c]
push eax
push 0x5b7858
push 0x5c8998
push 0x5b7120
call fcn.00420c70
push 0
movzx eax, ax
lea ecx, [ebx + 0xfc]
push eax
push 0x452
push 0
push 0x56000000
push 0
lea eax, [ebp - 0x14]
push eax
push esi
call fcn.00421510
mov dword [ebx + 0x16c], 0
lea esi, [ebx + 0x248]
mov eax, dword [ebx + 0x100]
mov ecx, 0x5b7708
mov dword [ebp - 0x48], eax
lea eax, [esi + 0x20]
push eax
mov byte [ebx + 0x341], 1
mov dword [ebx + 0x344], 0x100
call fcn.0042aa90
movzx edi, ax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x44], edi
test eax, eax
jne 0x4b4175
call fcn.00503a66
mov dword [esi + 0x14], eax
test eax, eax
jne 0x4b4175
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x31
push dword [ebx + 4]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x24c]
call esi
mov eax, dword [0x5b7158]
mov edx, dword [0x5b7150]
sub eax, edx
mov ecx, dword [0x5b714c]
push 0
push dword [0x5c899c]
push 0x44f
push dword [ebx + 0x100]
push eax
mov eax, dword [0x5b7154]
sub eax, ecx
push eax
push edx
push ecx
push 0x5600100d
push 0
push str.SysListView32
push 0x200
call edi
push 0x21
push 0
push 0x1036
push eax
mov dword [ebx + 0x17c], eax
call esi
push 0
push 0
push 0x31
push dword [ebx + 4]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x17c]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 0
push 0x101b
push dword [ebx + 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576b84
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xc8
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 1
push 0x101b
push dword [ebx + 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x575b88
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x50
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movlpd qword [ebp - 0x28], xmm0
lea eax, [ebp - 0x40]
movlpd qword [ebp - 0x20], xmm0
push eax
push 2
push 0x101b
push dword [ebx + 0x17c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x34], 0x577fac
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x50
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 3
push 0x101b
push dword [ebx + 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577fb4
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x64
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 4
push 0x101b
push dword [ebx + 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x5729d4
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
push 0
push dword [0x5c899c]
push 0x450
push dword [ebx + 0x24c]
push eax
mov eax, dword [ebp - 0xc]
sub eax, ecx
push eax
push edx
push ecx
push 0x4600100d
push 0
push str.SysListView32
push 0x200
call edi
push 0x21
push 0
push 0x1036
push eax
mov dword [ebx + 0x180], eax
call esi
push 0
push 0
push 0x31
push dword [ebx + 4]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x180]
call esi
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x18], 0
push eax
push 0
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0x571e78
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x8c
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 1
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x575040
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x28
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 2
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576b84
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x46
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 3
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577fcc
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x50
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 4
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577fd4
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x50
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
lea eax, [ebp - 0x40]
movlpd qword [ebp - 0x28], xmm0
push eax
push 5
push 0x101b
push dword [ebx + 0x180]
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x34], 0x576b6c
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x46
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 6
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577fdc
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x50
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 7
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x57773c
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x64
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 8
push 0x101b
push dword [ebx + 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576bdc
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
push 0
push dword [0x5c899c]
push 0x476
push dword [ebx + 0x24c]
push eax
mov eax, dword [ebp - 0xc]
sub eax, ecx
push eax
push edx
push ecx
push 0x4600100d
push 0
push str.SysListView32
push 0x200
call edi
push 0x21
push 0
push 0x1036
push eax
mov dword [ebx + 0x18c], eax
call esi
push 0
push 0
push 0x31
push dword [ebx + 4]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x18c]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 0
push 0x101b
push dword [ebx + 0x18c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x571e78
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x8c
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 1
push 0x101b
push dword [ebx + 0x18c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x575040
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x28
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 2
push 0x101b
push dword [ebx + 0x18c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576b84
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x46
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
push 0
push dword [0x5c899c]
push 0x46e
push dword [ebx + 0x24c]
push eax
mov eax, dword [ebp - 0xc]
sub eax, ecx
push eax
push edx
push ecx
push 0x4600100d
push 0
push str.SysListView32
push 0x200
call edi
push 0x21
push 0
push 0x1036
push eax
mov dword [ebx + 0x188], eax
call esi
push 0
push 0
push 0x31
push dword [ebx + 4]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x188]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 0
push 0x101b
push dword [ebx + 0x188]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x571e78
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x96
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 1
push 0x101b
push dword [ebx + 0x188]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x575040
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x64
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
push 0
push dword [0x5c899c]
push 0x451
push dword [ebx + 0x24c]
push eax
mov eax, dword [ebp - 0xc]
sub eax, ecx
push eax
push edx
push ecx
push 0x4600100d
push 0
push str.SysListView32
push 0x200
call edi
push 0x21
push 0
push 0x1036
push eax
mov dword [ebx + 0x184], eax
call esi
push 0
push 0
push 0x31
push dword [ebx + 4]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x184]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 0
push 0x101b
push dword [ebx + 0x184]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x571e78
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 1
push 0x101b
push dword [ebx + 0x184]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577fec
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x38], 0x46
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 2
push 0x101b
push dword [ebx + 0x184]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577ff4
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x38], 0x46
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 3
push 0x101b
push dword [ebx + 0x184]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576b84
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x64
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push eax
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x577090
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x96
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
push 4
push 0x101b
push dword [ebx + 0x184]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 5
push 0x101b
push dword [ebx + 0x184]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x57773c
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x64
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 6
push 0x101b
push dword [ebx + 0x184]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576bdc
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov ecx, dword [ebx + 0x24c]
mov eax, dword [ebx + 0x17c]
mov dword [ebx + 0x128], ecx
lea ecx, [ebx + 0x120]
mov dword [ebx + 0x124], eax
call fcn.004535e0
mov eax, dword [ebx + 0x180]
lea esi, [ebx + 0x26c]
mov edi, dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x4b409a
push 0
push 0xffffffffffffffff
push dword [esi + 0xbc]
call edi
push eax
push 0x577ffc
push dword [ebp - 0x44]
mov ecx, esi
call fcn.004208b0
mov eax, dword [ebx + 0x184]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x4b40c3
push 0
push 0xffffffffffffffff
push dword [esi + 0xbc]
call edi
push eax
push 0x578008
push dword [ebp - 0x44]
mov ecx, esi
call fcn.004208b0
mov eax, dword [ebx + 0x188]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x4b40ec
push 0
push 0xffffffffffffffff
push dword [esi + 0xbc]
call edi
push eax
push 0x57800c
push dword [ebp - 0x44]
mov ecx, esi
call fcn.004208b0
mov eax, dword [ebx + 0x18c]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x4b4115
push 0
push 0xffffffffffffffff
push dword [esi + 0xbc]
call edi
push eax
push 0x576b8c
push dword [ebp - 0x44]
mov ecx, esi
call fcn.004208b0
push 1
push 0xb4
lea ecx, [ebx + 0x120]
call fcn.004525e0
push 0x2000000
push 1
push 1
lea ecx, [ebx + 0xdc]
call fcn.004950b0
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0x24c]
call esi
push 1
push 0
push dword [ebx + 4]
call esi
mov eax, dword [ebx + 0x48]
lea ecx, [ebx + 0x48]
push 0
call dword [eax]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005189ad
mov esp, ebp
pop ebp
ret 0x10
push 0
push 0
push eax
call fcn.00503b65
test di, di
je 0x4b35e6
lea edi, [esi + 8]
test edi, edi
je 0x4b4202
test esi, esi
je 0x4b4202
mov dword [edi], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5b7124
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5b713c]
mov dword [edi + 8], eax
push 0x5b7124
mov dword [0x5b713c], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
push 0
push dword [0x5c899c]
mov edi, dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0xc]
sub eax, ecx
push eax
mov eax, dword [ebp - 0x44]
push edx
push ecx
push 0x56000000
push 0
movzx eax, ax
push eax
push 0x200
call edi
jmp 0x4b35ec
push 1
push 0xc0000005
call fcn.0041a790
int3