Function at 0x4dbb40
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Enumerate gui resources
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x543807
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x260
mov eax, dword [0x58becc]
xor eax, dword [ebp + 4]
push ebx
push esi
mov dword [ebp - 0x10], eax
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [esi + 0x308], eax
mov al, byte [esi + 0x30d]
xor ebx, ebx
cmp al, bl
jne 0x4dc62c
cmp dword [0x5c45b4], ebx
push edi
je 0x4dbb9a
cmp dword [0x5c45b8], ebx
jne 0x4dbbbb
mov edi, 0x10
push edi
push str.You_need_DirectX
push str.This_application_requires_DirectX_to_run.__You_can_get_DirectX_at_http:__www.microsoft.com_directx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push ebx
mov ecx, esi
call fcn.004db690
jmp 0x4dbbc0
mov edi, 0x10
cmp dword [esi + 0x20], edi
jb 0x4dbbca
mov eax, dword [esi + 0xc]
jmp 0x4dbbcd
lea eax, [esi + 0xc]
push eax
lea eax, [ebp - 0x6c]
push str.Product:__s_r_n
push eax
call fcn.00481330
mov ecx, dword [eax + 0x18]
add esp, 0xc
cmp ecx, edi
jb 0x4dbbeb
mov eax, dword [eax + 4]
jmp 0x4dbbee
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [ebp - 0x54], edi
jb 0x4dbc06
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.00527b8e
add esp, 4
mov edx, dword [esi + 0x9c]
push edx
lea eax, [ebp - 0x6c]
push str.BuildNum:__d_r_n
push eax
call fcn.00481330
mov ecx, dword [eax + 0x18]
add esp, 0xc
cmp ecx, edi
jb 0x4dbc2a
mov eax, dword [eax + 4]
jmp 0x4dbc2d
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [ebp - 0x54], edi
jb 0x4dbc45
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.00527b8e
add esp, 4
cmp dword [esi + 0xb8], edi
jb 0x4dbc55
mov eax, dword [esi + 0xa4]
jmp 0x4dbc5b
lea eax, [esi + 0xa4]
push eax
lea edx, [ebp - 0x6c]
push str.BuildDate:__s_r_n
push edx
call fcn.00481330
mov ecx, dword [eax + 0x18]
add esp, 0xc
cmp ecx, edi
jb 0x4dbc79
mov eax, dword [eax + 4]
jmp 0x4dbc7c
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [ebp - 0x54], edi
jb 0x4dbc94
mov eax, dword [ebp - 0x68]
push eax
call fcn.00527b8e
add esp, 4
cmp byte [esi + 0x9a], bl
jne 0x4dbca6
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x98]
mov ecx, esi
call fcn.004caee0
test al, al
je 0x4dbcbe
mov byte [esi + 0x2e9], 1
mov byte [esi + 0xc0], bl
cmp byte [esi + 0xc0], bl
je 0x4dbd83
lea eax, [esi + 8]
push eax
lea eax, [ebp - 0x6c]
push str.Notify
push eax
call fcn.00441360
mov ecx, dword [eax + 0x18]
add esp, 0xc
cmp ecx, edi
jb 0x4dbceb
mov eax, dword [eax + 4]
jmp 0x4dbcee
add eax, 4
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
mov dword [esi + 0xc4], eax
cmp dword [ebp - 0x54], edi
jb 0x4dbd0c
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.00527b8e
add esp, 4
push str.Mutex
lea eax, [esi + 8]
push eax
lea edx, [ebp - 0x6c]
push edx
call fcn.004412b0
mov ecx, dword [eax + 0x18]
add esp, 0xc
cmp ecx, edi
jb 0x4dbd2d
mov eax, dword [eax + 4]
jmp 0x4dbd30
add eax, 4
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, eax
cmp dword [ebp - 0x54], 0x10
jb 0x4dbd4e
mov eax, dword [ebp - 0x68]
push eax
call fcn.00527b8e
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4dbd7d
mov eax, dword [esi + 0xc4]
cmp eax, ebx
je 0x4dbd73
push ebx
push ebx
push eax
push 0xffff
call dword [sym.imp.USER32.dll_PostMessageA]
push ebx
mov ecx, esi
call fcn.004db690
jmp 0x4dbd83
mov dword [esi + 0xbc], edi
cmp dword [0x58dd48], ebx
jne 0x4dbd97
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x58dd48], eax
push pe_nt_image_headers32
lea ecx, [ebp - 0x26c]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x26c]
push 0x5c
push edx
call fcn.0052a1a0
mov edi, eax
lea eax, [ebp - 0x26c]
push 0x2f
push eax
call fcn.0052a1a0
add esp, 0x10
cmp edi, eax
jbe 0x4dbdda
push 0x5c
lea ecx, [ebp - 0x26c]
push ecx
jmp 0x4dbde3
push 0x2f
lea edx, [ebp - 0x26c]
push edx
call fcn.0052a1a0
add esp, 8
cmp eax, ebx
je 0x4dbdf1
mov byte [eax], bl
mov eax, dword [esi]
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, esi
call dword [eax + 0xb0]
test al, al
jne 0x4dbe15
lea edx, [ebp - 0x26c]
push edx
call fcn.0053baa0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov dword [esi + 4], eax
call fcn.00476260
mov al, byte [esi + 0x549]
add esp, 4
cmp al, bl
je 0x4dbe8a
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.004d8360
test al, al
jne 0x4dbe69
mov edx, dword [esi]
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
mov byte [esi + 0x549], bl
call dword [edx + 0x60]
push ebx
mov ecx, esi
call fcn.004db690
mov eax, dword [ebp - 0x18]
mov edi, 0x10
cmp eax, edi
mov dword [ebp - 4], 0xffffffff
jb 0x4dbe8f
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00527b8e
add esp, 4
jmp 0x4dbe8f
mov edi, 0x10
mov ecx, esi
call fcn.004caee0
neg al
sbb al, al
inc al
mov byte [ebp - 0x34], al
mov eax, str.propertiespartner.xml
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dbeb4
sub eax, edx
push eax
push str.propertiespartner.xml
lea ecx, [ebp - 0x30]
call fcn.0041af60
mov edx, dword [ebp - 0x34]
push edx
push ebx
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
mov dword [ebp - 4], 1
call fcn.004d5f10
cmp dword [ebp - 0x18], edi
mov dword [ebp - 4], 0xffffffff
jb 0x4dbefa
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00527b8e
add esp, 4
mov eax, str.NoReg
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dbf10
sub eax, edx
push eax
push str.NoReg
lea ecx, [ebp - 0x30]
call fcn.0041af60
push ebx
lea edx, [ebp - 0x30]
push edx
mov ecx, esi
mov dword [ebp - 4], 2
call fcn.004cfce0
mov byte [ebp - 0x11], al
cmp dword [ebp - 0x18], edi
mov dword [ebp - 4], 0xffffffff
jb 0x4dbf55
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00527b8e
add esp, 4
cmp byte [ebp - 0x11], bl
je 0x4dbf68
mov byte [esi + 0x478], 1
mov byte [esi + 0x479], 1
mov eax, str.ProdName
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dbf80
sub eax, edi
push eax
push str.ProdName
lea ecx, [ebp - 0x30]
call fcn.0041af60
lea edi, [esi + 8]
push edi
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x50]
push edx
mov ecx, esi
mov dword [ebp - 4], 3
call fcn.004cfd60
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0041ad80
cmp dword [ebp - 0x38], 0x10
jb 0x4dbfd2
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00527b8e
add esp, 4
cmp dword [ebp - 0x18], 0x10
mov edi, 0xf
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
mov dword [ebp - 4], 0xffffffff
jb 0x4dbff9
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00527b8e
add esp, 4
mov eax, str.DefaultWindowed
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dc010
sub eax, edx
push eax
push str.DefaultWindowed
lea ecx, [ebp - 0x30]
call fcn.0041af60
xor edx, edx
mov dl, byte [esi + 0x30e]
lea eax, [ebp - 0x30]
mov ecx, esi
mov dword [ebp - 4], 5
push edx
push eax
call fcn.004cfce0
mov byte [esi + 0x30e], al
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 4], 0xffffffff
jb 0x4dc061
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00527b8e
add esp, 4
mov eax, 0x548309
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dc072
sub eax, edx
push eax
push 0x548309
lea ecx, [ebp - 0x30]
call fcn.0041af60
mov eax, str.Title
mov dword [ebp - 4], 6
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dc0b0
sub eax, edx
push eax
push str.Title
lea ecx, [ebp - 0xb0]
call fcn.0041af60
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0xcc]
push ecx
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.004cfd60
cmp dword [ebp - 0x98], 0x10
jb 0x4dc0ff
mov edx, dword [ebp - 0xac]
push edx
call fcn.00527b8e
add esp, 4
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
mov byte [ebp - 4], 9
jb 0x4dc127
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00527b8e
add esp, 4
cmp dword [ebp - 0xb8], ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
jbe 0x4dc1a6
push 0x5582c4
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0x6c]
push edx
call fcn.004412b0
lea ecx, [esi + 0x3c0]
push ecx
push eax
lea edx, [ebp - 0x50]
push edx
mov byte [ebp - 4], 0xb
call fcn.0046f7d0
add esp, 0x18
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x24]
mov byte [ebp - 4], 0xc
call fcn.0041ad80
cmp dword [ebp - 0x38], 0x10
jb 0x4dc187
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00527b8e
add esp, 4
cmp dword [ebp - 0x54], 0x10
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
mov byte [ebp - 4], 9
jb 0x4dc1a6
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.00527b8e
add esp, 4
mov ecx, dword [esi + 0xe0]
call fcn.00493ec0
push 0x18c
call fcn.005183e0
add esp, 4
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0xd
je 0x4dc1d3
push esi
mov ecx, eax
call fcn.00493ed0
jmp 0x4dc1d5
xor eax, eax
mov byte [ebp - 4], 9
mov dword [esi + 0xe4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0052821a
mov edx, dword [esi]
add esp, 4
mov ecx, esi
call dword [edx + 0x50]
inc dword [esi + 0x538]
mov eax, str.RegisterLink
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dc210
sub eax, edi
push eax
push str.RegisterLink
lea ecx, [ebp - 0x50]
call fcn.0041af60
lea edi, [esi + 0x3a4]
push edi
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.004cfd60
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf
call fcn.0041ad80
cmp dword [ebp - 0x54], 0x10
jb 0x4dc262
mov edx, dword [ebp - 0x68]
push edx
call fcn.00527b8e
add esp, 4
cmp dword [ebp - 0x38], 0x10
mov edi, 0xf
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], ebx
mov byte [ebp - 0x68], bl
mov byte [ebp - 4], 9
jb 0x4dc286
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00527b8e
add esp, 4
mov eax, str.DontUpdate
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4dc297
sub eax, edx
push eax
push str.DontUpdate
lea ecx, [ebp - 0x50]
call fcn.0041af60
xor ecx, ecx
mov cl, byte [esi + 0x2ea]
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0x10
push ecx
push edx
mov ecx, esi
call fcn.004cfce0
mov byte [esi + 0x2ea], al
cmp dword [ebp - 0x38], 0x10
mov byte [ebp - 4], 9
jb 0x4dc2e2
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00527b8e
add esp, 4
mov ecx, dword [0x58dd48]
push str.IDI_MAIN_ICON
push ecx
mov dword [ebp - 0x94], 8
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
call dword [sym.imp.USER32.dll_LoadIconA]
mov edx, dword [0x58dd48]
mov edi, dword [sym.imp.USER32.dll_RegisterClassA]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x90], 0x4d7830
mov dword [ebp - 0x70], str.MainWindow
mov dword [ebp - 0x74], ebx
call edi
mov ecx, dword [0x58dd48]
lea edx, [ebp - 0x94]
push edx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x90], 0x4d7830
mov dword [ebp - 0x70], str.InvisWindow
mov dword [ebp - 0x74], ebx
call edi
cmp dword [esi + 0x3c], 0x10
jb 0x4dc391
mov eax, dword [esi + 0x28]
jmp 0x4dc394
lea eax, [esi + 0x28]
mov ecx, dword [0x58dd48]
push ebx
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push str.InvisWindow
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push 0xffffffffffffffeb
push eax
mov dword [esi + 0x31c], eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0x178
call fcn.005183e0
add esp, 4
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0x4dc3e2
push esi
mov ecx, eax
call fcn.004c9800
jmp 0x4dc3e4
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_CreateCursor]
push 0x5895c0
push 0x589540
push 0x20
push 0x20
push 4
mov dword [esi + 0x2ec], eax
mov edx, dword [0x58dd48]
push 0xb
push edx
mov byte [ebp - 4], 9
call edi
push 0x5896c0
push 0x589640
push 0x20
push 0x20
push 0xa
mov dword [esi + 0x4ec], eax
mov eax, dword [0x58dd48]
push 0xf
push eax
call edi
mov dword [esi + 0x4f0], eax
cmp byte [esi + 0xe8], bl
je 0x4dc477
mov ecx, dword [esi + 0xe4]
call fcn.0048e490
test al, al
jne 0x4dc477
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x94]
push ebx
mov ecx, esi
call fcn.004db690
cmp dword [ebp - 0xb4], 0x10
jb 0x4dc62b
mov eax, dword [ebp - 0xc8]
push eax
jmp 0x4dc623
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xa8]
mov eax, dword [esi + 0x6c]
mov ecx, dword [esi + 0x68]
push eax
push ecx
mov ecx, dword [esi + 0x2ec]
call fcn.004c0a70
cmp byte [esi + 0x30e], bl
je 0x4dc4c2
cmp byte [esi + 0x30f], bl
jne 0x4dc4ce
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x10
call edi
cmp dword [esi + 0x68], eax
jge 0x4dc4bc
push 0x11
call edi
cmp dword [esi + 0x6c], eax
jl 0x4dc4c2
mov byte [esi + 0x30e], bl
cmp byte [esi + 0x30f], bl
je 0x4dc568
push ebx
push 0x4db530
call dword [sym.imp.USER32.dll_EnumWindows]
lea edx, [ebp - 0x168]
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov ecx, dword [ebp - 0xfc]
mov eax, dword [esi + 0x68]
cmp ecx, eax
mov ecx, dword [ebp - 0x100]
jne 0x4dc512
mov edx, dword [ebp - 0xf8]
cmp edx, dword [esi + 0x6c]
jne 0x4dc512
cmp ecx, 0x10
je 0x4dc568
cmp ecx, 0x20
je 0x4dc568
cmp ecx, 0x10
mov dword [ebp - 0xfc], eax
mov eax, dword [esi + 0x6c]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x140], 0x580000
je 0x4dc549
cmp ecx, 0x20
je 0x4dc549
mov dword [ebp - 0x100], 0x10
mov dword [ebp - 0x140], 0x5c0000
push 4
lea ecx, [ebp - 0x168]
push ecx
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsA]
test eax, eax
je 0x4dc568
mov byte [esi + 0x30f], bl
mov byte [esi + 0x30e], bl
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x28]
cmp dword [esi + 0x4e8], ebx
jne 0x4dc5bc
push 0x14a0
call fcn.005183e0
add esp, 4
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x12
je 0x4dc5b0
cmp byte [esi + 0x98], bl
jne 0x4dc59d
mov ebx, dword [esi + 0x318]
xor ecx, ecx
mov cl, byte [esi + 0x99]
push ecx
push ebx
mov ecx, eax
call fcn.004e0a20
jmp 0x4dc5b2
xor eax, eax
mov byte [ebp - 4], 9
mov dword [esi + 0x4e8], eax
mov eax, dword [esi + 0x84]
mov ecx, dword [esi + 0x80]
mov edx, dword [esi]
push eax
push ecx
mov ecx, esi
call dword [edx + 0xd4]
mov eax, dword [esi + 0x31c]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x40]
mov ecx, dword [esi + 0x78]
mov edx, dword [esi]
mov dword [esi + 0x344], eax
mov eax, dword [esi + 0x7c]
push eax
push ecx
mov ecx, esi
call dword [edx + 0xd0]
mov ecx, esi
call fcn.004caee0
test al, al
je 0x4dc60c
push 5
call fcn.004cc090
cmp dword [ebp - 0xb4], 0x10
mov byte [esi + 0x312], 1
jb 0x4dc62b
mov edx, dword [ebp - 0xc8]
push edx
call fcn.00527b8e
add esp, 4
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, dword [ebp + 4]
pop esi
pop ebx
call fcn.00528d83
mov esp, ebp
pop ebp
ret