Function at 0x496100
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
lea eax, [ebp - 0x18]
push edi
mov edi, ecx
mov ecx, dword [ebp + 8]
push eax
mov ecx, dword [ecx + 4]
call fcn.00429ec0
lea eax, [ebp - 0x18]
push str.btn_ok
push eax
call fcn.00407200
add esp, 8
test al, al
je 0x496cd9
push ebx
push esi
push 0xb
xor eax, eax
mov dword [ebp - 0x20], 0
push str.combo_theme
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.00445e70
mov esi, eax
call fcn.00481830
lea ebx, [eax + 0x8c]
cmp ebx, esi
je 0x4961a7
mov ecx, ebx
call fcn.00403070
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebx], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebx + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x48]
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0xb
xor eax, eax
mov dword [ebp - 0x20], 0
push str.edit_dircmd
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
mov esi, eax
call fcn.00481830
lea ebx, [eax + 0xa4]
cmp ebx, esi
je 0x49622b
mov ecx, ebx
call fcn.00403070
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebx], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebx + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x48]
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
mov eax, dword [edi + 0x258]
mov esi, dword [eax + 0x74c]
shl esi, 8
or esi, dword [eax + 0x748]
call fcn.00481830
mov dword [eax + 0x48], esi
mov eax, dword [edi + 0x25c]
mov esi, dword [eax + 0x74c]
shl esi, 8
or esi, dword [eax + 0x748]
call fcn.00481830
push 0xf
push str.edit_groupwidth
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x20], 0
mov dword [eax + 0xc4], esi
xor eax, eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
cmp dword [eax + 0x14], 8
jb 0x4962b9
mov eax, dword [eax]
push eax
call sub.msvcrt.dll__wtol
add esp, 4
mov esi, eax
call fcn.00481830
lea ecx, [ebp - 0x48]
mov dword [eax + 0x5c], esi
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0xd
xor eax, eax
mov dword [ebp - 0x20], 0
push str.edit_tagwidth
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
cmp dword [eax + 0x14], 8
jb 0x49631d
mov eax, dword [eax]
push eax
call sub.msvcrt.dll__wtol
add esp, 4
mov esi, eax
call fcn.00481830
lea ecx, [ebp - 0x48]
mov dword [eax + 0x64], esi
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0x16
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_autogroupwidth
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x60], bl
call fcn.00403070
push 0x15
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_autotagheight
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x68], bl
call fcn.00403070
push 0x18
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_edit_searchcount
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
cmp dword [eax + 0x14], 8
jb 0x496409
mov eax, dword [eax]
push eax
call sub.msvcrt.dll__wtol
add esp, 4
mov esi, eax
call fcn.00481830
lea ecx, [ebp - 0x48]
mov dword [eax + 0xc8], esi
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0x17
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_open_everything
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0xcc], bl
call fcn.00403070
push 0xf
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_autorun
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x18], bl
call fcn.00403070
push 0xf
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_topmost
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x1e], bl
call fcn.00403070
push 0xc
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_hide
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x1f], bl
call fcn.00403070
mov dword [ebp - 0x20], 0
xor eax, eax
mov dword [ebp - 0x1c], 7
push 0xc
push str.setting_dick
lea ecx, [ebp - 0x30]
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x20], bl
call fcn.00403070
push 0xe
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_corner
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x21], bl
call fcn.00403070
push 0x11
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_dockdelay
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
cmp dword [eax + 0x14], 8
jb 0x49660b
mov eax, dword [eax]
push eax
call sub.msvcrt.dll__wtol
add esp, 4
mov esi, eax
call fcn.00481830
lea ecx, [ebp - 0x48]
mov dword [eax + 0x24], esi
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0x12
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_hide_after
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x28], bl
call fcn.00403070
push 0x12
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_hide_unhot
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x29], bl
call fcn.00403070
push 0x14
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_mbutton_main
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x2a], bl
call fcn.00403070
push 0x17
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_doubledesk_main
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x2b], bl
call fcn.00403070
mov dword [ebp - 0x20], 0
xor eax, eax
mov dword [ebp - 0x1c], 7
push 0x17
push str.setting_doubletask_main
lea ecx, [ebp - 0x30]
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x2c], bl
call fcn.00403070
push 0x13
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_followmouse
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x2d], bl
call fcn.00403070
push 0x13
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_doubleclick
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x2e], bl
call fcn.00403070
push 0x12
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_fullscreen
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x2f], bl
call fcn.00403070
push 0x12
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_delconfirm
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x30], bl
call fcn.00403070
push 0x10
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_runcount
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x31], bl
call fcn.00403070
push 0x12
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_hidenotify
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x32], bl
call fcn.00403070
push 0x10
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_showdate
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x33], bl
call fcn.00403070
push 0x16
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_showbtn_search
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x34], bl
call fcn.00403070
push 0x14
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_showbtn_menu
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x35], bl
call fcn.00403070
push 0x1a
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_lnkname_singleline
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x1c], bl
call fcn.00403070
push 0x13
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_showtooltip
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x1d], bl
call fcn.00403070
push 0x19
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_enteractive_group
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x36], bl
call fcn.00403070
push 0x17
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_enteractive_tag
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x37], bl
call fcn.00403070
push 0x11
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_tag_right
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
mov bl, byte [eax + 0x3b4]
call fcn.00481830
lea ecx, [ebp - 0x30]
mov byte [eax + 0x70], bl
call fcn.00403070
push 0x1f
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_enteractive_group_delay
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
cmp dword [eax + 0x14], 8
jb 0x496b7b
mov eax, dword [eax]
push eax
call sub.msvcrt.dll__wtol
add esp, 4
mov esi, eax
call fcn.00481830
lea ecx, [ebp - 0x48]
mov dword [eax + 0x38], esi
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0x1d
xor eax, eax
mov dword [ebp - 0x20], 0
push str.setting_enteractive_tag_delay
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004270b0
mov ecx, eax
call fcn.0044b580
cmp dword [eax + 0x14], 8
jb 0x496bdf
mov eax, dword [eax]
push eax
call sub.msvcrt.dll__wtol
add esp, 4
mov esi, eax
call fcn.00481830
lea ecx, [ebp - 0x48]
mov dword [eax + 0x3c], esi
call fcn.00403070
lea ecx, [ebp - 0x30]
call fcn.00403070
push 0xb
xor eax, eax
mov dword [ebp - 0x20], 0
push str.op_tag_left
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
lea ecx, [ebp - 0x30]
mov bl, byte [eax + 0x3b4]
call fcn.00403070
test bl, bl
je 0x496c56
call fcn.00481830
add eax, 0x74
mov ecx, str.left
mov edx, 4
jmp 0x496cb4
push 0xc
xor eax, eax
mov dword [ebp - 0x20], 0
push str.op_tag_right
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00402e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004270b0
lea ecx, [ebp - 0x30]
mov bl, byte [eax + 0x3b4]
call fcn.00403070
call fcn.00481830
add eax, 0x74
test bl, bl
je 0x496caa
mov ecx, str.right
mov edx, 5
jmp 0x496cb4
mov ecx, str.center
mov edx, 6
push edx
push ecx
mov ecx, eax
call fcn.00402e60
call fcn.00481830
mov ecx, eax
call fcn.004a1fa0
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x10]
pop esi
pop ebx
jmp 0x496d7f
lea eax, [ebp - 0x18]
push str.btn_cancel
push eax
call fcn.00407200
add esp, 8
test al, al
je 0x496cfc
mov eax, dword [edi]
mov ecx, edi
push 2
call dword [eax + 0x10]
jmp 0x496d7f
lea eax, [ebp - 0x18]
push str.setting_update
push eax
call fcn.00407200
add esp, 8
test al, al
je 0x496d24
push 1
push 0x592f34
push 0x592f34
push str.https:__www.yuque.com_lucy_lucy_record
jmp 0x496d72
lea eax, [ebp - 0x18]
push str.setting_help
push eax
call fcn.00407200
add esp, 8
test al, al
je 0x496d4c
push 1
push 0x592f34
push 0x592f34
push str.https:__www.yuque.com_lucy_lucy_faq
jmp 0x496d72
lea eax, [ebp - 0x18]
push str.setting_reward
push eax
call fcn.00407200
add esp, 8
test al, al
je 0x496d7f
push 1
push 0x592f34
push 0x592f34
push str.https:__www.yuque.com_lucy_lucy_reward
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 4]
pop edi
cmp edx, 8
jb 0x496db6
mov ecx, dword [ebp - 0x18]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x496dac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496dbe
push edx
push ecx
call fcn.0053140c
add esp, 8
mov al, 1
mov esp, ebp
pop ebp
ret 4
call fcn.0055d660
int3