Function at 0x644708
Capabilities:
Accept command line arguments
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xf
push 0
push 0
dec ecx
jne 0x644710
push ecx
push ebx
mov dword [ebp - 8], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x64559f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0040b590
movzx eax, bl
cmp eax, 0x54
ja case.0x644740.0
jmp dword [eax*4 + 0x644747]
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x6455b8
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 8]
call fcn.006443a0
jmp case.0x644740.0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x6455ec
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.006443a0
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
call fcn.00645914
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x68a250]
call fcn.0040b980
jmp case.0x644740.0
lea edx, [ebp - 0x28]
mov eax, 0x28
call fcn.00644644
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 8]
call fcn.004294a0
jmp case.0x644740.0
push 0
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x645610
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 8]
call fcn.006443a0
jmp case.0x644740.0
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x645610
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 8]
call fcn.006443a0
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x450]
call fcn.0055180c
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x68a25c]
call fcn.0040b980
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x68a25c]
call fcn.0040b980
jmp case.0x644740.0
cmp byte [0x68a221], 0
jne 0x6449d7
mov edx, dword [ebp - 8]
mov eax, 0x26
call fcn.00644644
jmp case.0x644740.0
mov dl, 1
mov eax, dword [0x515548]
call fcn.00516694
mov ebx, eax
cmp byte [0x68a220], 0
je 0x6449f7
mov dword [ebx + 0x18], 0x20119
jmp 0x6449fe
mov dword [ebx + 0x18], 0x20019
mov edx, 0x80000002
mov eax, ebx
call fcn.0051677c
xor ecx, ecx
mov edx, 0x645630
mov eax, ebx
call fcn.005168d8
test al, al
je 0x644a42
mov edx, 0x645690
mov eax, ebx
call fcn.00517838
test al, al
je 0x644a3b
mov ecx, dword [ebp - 8]
mov edx, 0x645690
mov eax, ebx
call fcn.005172a0
mov eax, ebx
call fcn.0051674c
mov eax, ebx
call fcn.004097a0
jmp case.0x644740.0
mov eax, dword [ebp - 8]
call fcn.00644680
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x68a254]
call fcn.0040b980
jmp case.0x644740.0
lea edx, [ebp - 0x34]
xor eax, eax
call fcn.00407540
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
call fcn.0042937c
jmp case.0x644740.0
mov eax, dword [ebp - 8]
call fcn.004296fc
jmp case.0x644740.0
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.00407540
jmp case.0x644740.0
lea edx, [ebp - 0x38]
xor eax, eax
call fcn.00407540
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 8]
call fcn.004294a0
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x24
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x25
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x14
call fcn.00644644
jmp case.0x644740.0
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x3c]
mov eax, 0x24
call fcn.00644644
mov eax, dword [ebp - 0x3c]
mov ecx, 2
mov edx, 1
call fcn.0040c4fc
jmp case.0x644740.0
push 1
mov ecx, 0x6456bc
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
dec eax
setg al
and al, byte [0x68a226]
je 0x644b5e
mov eax, 0x6456e4
call fcn.00642e58
test al, al
je 0x644b5e
mov edx, dword [ebp - 8]
mov eax, 0x23
call fcn.00644644
jmp case.0x644740.0
cmp dword [0x68a290], 0
je 0x644b75
mov eax, 0x645700
call fcn.00642e58
test al, al
je 0x644b87
mov edx, dword [ebp - 8]
mov eax, 0x1a
call fcn.00644644
jmp case.0x644740.0
movzx eax, byte [0x645710]
push eax
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x40]
mov al, 4
call fcn.00644708
mov eax, dword [ebp - 0x40]
push eax
lea edx, [ebp - 0x44]
mov eax, 0x1a
call fcn.00644644
mov eax, dword [ebp - 0x44]
mov ecx, dword [0x68a290]
pop edx
call fcn.004317f0
jmp case.0x644740.0
push 1
mov ecx, 0x6456bc
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
dec eax
setg al
and al, byte [0x68a226]
je 0x644c04
mov eax, 0x6456e4
call fcn.00642e58
test al, al
je 0x644c04
mov edx, dword [ebp - 8]
mov eax, 0x2e
call fcn.00644644
jmp case.0x644740.0
cmp dword [0x68a290], 0
je 0x644c1b
mov eax, 0x645700
call fcn.00642e58
test al, al
je 0x644c2d
mov edx, dword [ebp - 8]
mov eax, 5
call fcn.00644644
jmp case.0x644740.0
movzx eax, byte [0x645710]
push eax
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x48]
mov al, 4
call fcn.00644708
mov eax, dword [ebp - 0x48]
push eax
lea edx, [ebp - 0x4c]
mov eax, 5
call fcn.00644644
mov eax, dword [ebp - 0x4c]
mov ecx, dword [0x68a290]
pop edx
call fcn.004317f0
jmp case.0x644740.0
push 0
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x645720
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 8]
call fcn.006443a0
jmp case.0x644740.0
push 0
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x64573c
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 8]
call fcn.006443a0
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x68a264]
call fcn.0040b980
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x28
call fcn.00644644
jmp case.0x644740.0
cmp byte [0x68a221], 0
jne 0x644cfc
mov edx, dword [ebp - 8]
mov eax, 0x2b
call fcn.00644644
jmp case.0x644740.0
mov dl, 1
mov eax, dword [0x515548]
call fcn.00516694
mov ebx, eax
cmp byte [0x68a220], 0
je 0x644d1c
mov dword [ebx + 0x18], 0x20119
jmp 0x644d23
mov dword [ebx + 0x18], 0x20019
mov edx, 0x80000002
mov eax, ebx
call fcn.0051677c
xor ecx, ecx
mov edx, 0x645630
mov eax, ebx
call fcn.005168d8
test al, al
je 0x644d67
mov edx, 0x645760
mov eax, ebx
call fcn.00517838
test al, al
je 0x644d60
mov ecx, dword [ebp - 8]
mov edx, 0x645760
mov eax, ebx
call fcn.005172a0
mov eax, ebx
call fcn.0051674c
mov eax, ebx
call fcn.004097a0
jmp case.0x644740.0
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0xb
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 2
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 7
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x19
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x16
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x17
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x18
call fcn.00644644
jmp case.0x644740.0
call fcn.0042b860
fstp qword [ebp - 0x10]
wait
push dword [ebp - 0xc]
push dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov eax, dword [0x68246c]
call fcn.0042c814
jmp case.0x644740.0
cmp byte [0x68a221], 0
jne 0x644e3c
mov edx, dword [ebp - 8]
mov eax, 0x1c
call fcn.00644644
jmp case.0x644740.0
mov dl, 1
mov eax, dword [0x515548]
call fcn.00516694
mov ebx, eax
cmp byte [0x68a220], 0
je 0x644e5c
mov dword [ebx + 0x18], 0x20119
jmp 0x644e63
mov dword [ebx + 0x18], 0x20019
mov edx, 0x80000002
mov eax, ebx
call fcn.0051677c
xor ecx, ecx
mov edx, 0x645630
mov eax, ebx
call fcn.005168d8
test al, al
je 0x644ea7
mov edx, 0x64578c
mov eax, ebx
call fcn.00517838
test al, al
je 0x644ea0
mov ecx, dword [ebp - 8]
mov edx, 0x64578c
mov eax, ebx
call fcn.005172a0
mov eax, ebx
call fcn.0051674c
mov eax, ebx
call fcn.004097a0
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x23
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 9
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x2d
call fcn.00644644
jmp case.0x644740.0
lea edx, [ebp - 0x58]
mov al, 0x20
call fcn.00644708
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 8]
call fcn.0042937c
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x498]
call fcn.0055180c
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4a0]
call fcn.0055180c
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x488]
call fcn.0055180c
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x478]
call fcn.0055180c
jmp case.0x644740.0
push 0
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x6457b4
mov edx, 0x6457c8
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x644740.0
push 0
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x6457e0
mov edx, 0x6457c8
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x644740.0
push 0
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x6457f4
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 6
call fcn.00644644
jmp case.0x644740.0
mov dl, 1
mov eax, dword [0x515548]
call fcn.00516694
mov ebx, eax
cmp byte [0x68a220], 0
je 0x644ff2
mov dword [ebx + 0x18], 0x20119
jmp 0x644ff9
mov dword [ebx + 0x18], 0x20219
mov edx, 0x80000002
mov eax, ebx
call fcn.0051677c
xor ecx, ecx
mov edx, 0x645630
mov eax, ebx
call fcn.005168d8
test al, al
je 0x64505e
mov edx, 0x64580c
mov eax, ebx
call fcn.00517838
test al, al
je 0x645038
mov ecx, dword [ebp - 8]
mov edx, 0x64580c
mov eax, ebx
call fcn.005172a0
jmp 0x645057
mov edx, 0x645690
mov eax, ebx
call fcn.00517838
test al, al
je 0x645057
mov ecx, dword [ebp - 8]
mov edx, 0x645690
mov eax, ebx
call fcn.005172a0
mov eax, ebx
call fcn.0051674c
mov eax, ebx
call fcn.004097a0
jmp case.0x644740.0
lea edx, [ebp - 0x5c]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x5c]
mov ecx, 1
mov edx, eax
mov eax, 0x645838
call fcn.0040c658
test eax, eax
jle 0x64511b
xor eax, eax
mov dword [ebp - 4], eax
xor edx, edx
push ebp
push 0x645114
push dword fs:[edx]
mov dword fs:[edx], esp
lea edx, [ebp - 4]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x450]
call fcn.0055180c
lea edx, [ebp - 0x60]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x60]
mov ecx, 1
mov edx, eax
mov eax, 0x645838
call fcn.0040c658
mov ebx, eax
mov eax, dword [ebp - 8]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040c4fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x644740.0
lea eax, [ebp - 4]
call fcn.0040b590
pop eax
jmp eax
mov eax, dword [ebp - 8]
mov edx, 0x645848
call fcn.0040b980
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x25
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x2a
call fcn.00644644
jmp case.0x644740.0
push 0
mov ecx, 0x64585c
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
sub eax, 1
jb 0x645179
je 0x64518e
dec eax
je 0x6451a3
dec eax
je 0x6451b8
jmp case.0x644740.0
call sub.kernel32.dll_GetUserDefaultUILanguage
movzx eax, ax
mov edx, dword [ebp - 8]
call fcn.00427eb4
jmp case.0x644740.0
call sub.kernel32.dll_GetSystemDefaultLangID
movzx eax, ax
mov edx, dword [ebp - 8]
call fcn.00427eb4
jmp case.0x644740.0
call sub.kernel32.dll_GetSystemDefaultUILanguage
movzx eax, ax
mov edx, dword [ebp - 8]
call fcn.00427eb4
jmp case.0x644740.0
call sub.kernel32.dll_GetUserDefaultLangID
movzx eax, ax
mov edx, dword [ebp - 8]
call fcn.00427eb4
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x1f
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x27
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0xd
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x36
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x35
call fcn.00644644
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, 0x2e
call fcn.00644644
jmp case.0x644740.0
call fcn.0042b860
fstp qword [ebp - 0x18]
wait
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov ecx, dword [ebp - 8]
mov edx, dword [0x68246c]
mov eax, 0x645884
call fcn.0042c87c
jmp case.0x644740.0
cmp byte [0x68a221], 0
jne 0x64527b
mov edx, dword [ebp - 8]
mov eax, 0x1c
call fcn.00644644
jmp case.0x644740.0
mov dl, 1
mov eax, dword [0x515548]
call fcn.00516694
mov ebx, eax
cmp byte [0x68a220], 0
je 0x64529b
mov dword [ebx + 0x18], 0x20119
jmp 0x6452a2
mov dword [ebx + 0x18], 0x20019
mov edx, 0x80000002
mov eax, ebx
call fcn.0051677c
xor ecx, ecx
mov edx, 0x645630
mov eax, ebx
call fcn.005168d8
test al, al
je 0x6452e6
mov edx, 0x64578c
mov eax, ebx
call fcn.00517838
test al, al
je 0x6452df
mov ecx, dword [ebp - 8]
mov edx, 0x64578c
mov eax, ebx
call fcn.005172a0
mov eax, ebx
call fcn.0051674c
mov eax, ebx
call fcn.004097a0
jmp case.0x644740.0
call sub.kernel32.dll_GetCommandLineW
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.0040c188
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x6823e0]
mov edx, dword [edx]
call fcn.0040b980
jmp case.0x644740.0
lea edx, [ebp - 0x64]
mov eax, dword [0x681f50]
mov eax, dword [eax]
call fcn.00427eb4
push dword [ebp - 0x64]
push 0x6458a4
lea edx, [ebp - 0x68]
mov eax, dword [0x6822e0]
mov eax, dword [eax]
call fcn.00427eb4
push dword [ebp - 0x68]
mov eax, dword [ebp - 8]
mov edx, 3
call fcn.0040c414
jmp case.0x644740.0
mov eax, dword [ebp - 8]
call fcn.00642cf4
jmp case.0x644740.0
mov eax, dword [ebp - 8]
call fcn.0064fd50
jmp case.0x644740.0
mov eax, dword [ebp - 8]
call fcn.00642c3c
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x68a26c]
call fcn.0040b980
jmp case.0x644740.0
mov edx, dword [ebp - 8]
movzx eax, byte [0x68a230]
call fcn.006445a8
jmp case.0x644740.0
mov edx, dword [ebp - 8]
movzx eax, byte [0x68a22d]
call fcn.006445a8
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4e4]
call fcn.0055180c
jmp case.0x644740.0
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4e4]
mov edx, dword [eax]
call dword [edx + 0x150]
mov edx, dword [ebp - 8]
call fcn.00427eb4
jmp case.0x644740.0
mov edx, dword [ebp - 8]
movzx eax, byte [0x68a224]
call fcn.006445a8
jmp case.0x644740.0
mov edx, dword [ebp - 8]
movzx eax, byte [0x68a226]
call fcn.006445a8
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x681f50]
mov eax, dword [eax]
call fcn.00427eb4
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x6822e0]
mov eax, dword [eax]
call fcn.00427eb4
jmp case.0x644740.0
mov edx, dword [ebp - 8]
mov eax, dword [0x682104]
mov eax, dword [eax]
call fcn.00427eb4
jmp case.0x644740.0
lea eax, [ebp - 0x70]
call fcn.00438d70
mov eax, dword [ebp - 0x70]
lea edx, [ebp - 0x6c]
call fcn.00427194
mov eax, dword [ebp - 0x6c]
mov ecx, 1
mov edx, eax
mov eax, 0x6458b4
call fcn.0040c658
mov ebx, eax
test ebx, ebx
setg al
mov edx, dword [ebp - 8]
call fcn.006445a8
jmp case.0x644740.0
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4b8]
mov edx, dword [eax]
call dword [edx + 0x150]
mov edx, dword [ebp - 8]
call fcn.006445a8
jmp case.0x644740.0
mov edx, dword [ebp - 8]
movzx eax, byte [0x68a230]
call fcn.006445a8
jmp case.0x644740.0
cmp byte [0x68a22d], 0
je 0x6454db
mov eax, dword [ebp - 8]
mov edx, 0x6458d0
call fcn.0040b980
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, 0x6458e4
call fcn.0040b980
jmp case.0x644740.0
mov eax, dword [ebp - 8]
mov edx, dword [0x6823e0]
mov edx, dword [edx]
call fcn.0040b980
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x6458f8
call fcn.0040c658
mov edx, dword [ebp - 8]
mov ecx, eax
mov eax, 1
xchg edx, eax
call fcn.0040c544
jmp case.0x644740.0
push 0
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x645908
mov edx, 0x6455d4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.006443a0
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 8]
call fcn.00645914
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
call fcn.004313ec
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 8]
call fcn.0040b980
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6455a6
lea eax, [ebp - 0x7c]
mov edx, 7
call fcn.0040b5f0
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0040b5f0
lea eax, [ebp - 0x58]
mov edx, 0x10
call fcn.0040b5f0
pop eax
jmp eax