Function at 0x408c60
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x598b6a
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x609004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x84], eax
call fcn.0040a780
push str.Value
add esi, 0x1130
push str.Property
push ebx
mov ecx, esi
mov dword [ebp - 0xa4], esi
call fcn.004afa04
push 1
mov ecx, esi
call fcn.004af9c2
push 1
mov ecx, esi
call fcn.004b60d6
push 1
push 1
mov ecx, esi
call fcn.004b0997
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], ebx
test esi, esi
je 0x408d6c
push 0xe8
push ebx
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a622
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6cb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x408d43
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x408d4d
push 0x5e6cb0
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 2
mov ebx, 1
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov edi, eax
jmp 0x408d6e
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x408d9b
mov edx, dword [ebp - 0x78]
and ebx, 0xfffffffe
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408d9b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x408e7d
push 0xe8
push 0
push esi
call fcn.005779a0
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0xa0], ax
xor eax, eax
mov word [ebp - 0x98], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 5
or ebx, 2
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 6
or ebx, 4
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a62c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6cec
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x408e45
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x408e4f
push 0x5e6cec
call fcn.00404350
push 0
push 0
push 0
push 0
push 0x5e6cb8
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x7c]
or ebx, 8
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
jmp 0x408e7f
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0xb
call fcn.004aeed6
mov dword [ebp - 4], 0xa
test bl, 8
je 0x408ebb
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffff7
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408ebb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 4
je 0x408ed9
lea ecx, [ebp - 0xb8]
and ebx, 0xfffffffb
push ecx
mov dword [ebp - 0x74], ebx
call eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test bl, 2
je 0x408ef4
lea ecx, [ebp - 0xa0]
and ebx, 0xfffffffd
push ecx
mov dword [ebp - 0x74], ebx
call eax
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0xc
test esi, esi
je 0x408fbd
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
lea ecx, [ebp - 0xa0]
xor eax, eax
mov word [ebp - 0xa0], ax
push 0x5e6d34
call fcn.004adb55
mov byte [ebp - 4], 0xd
or ebx, 0x10
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a636
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6d40
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x408f83
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x408f8d
push 0x5e6d40
call fcn.00404350
push 0
push 0
push 0
push 0
push str.vQ_NKN
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
mov esi, eax
jmp 0x408fbf
xor esi, esi
mov dword [ebp - 4], 0x10
test bl, 0x20
je 0x408fec
mov edx, dword [ebp - 0x7c]
and ebx, 0xffffffdf
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408fec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test bl, 0x10
je 0x40900c
lea eax, [ebp - 0xa0]
and ebx, 0xffffffef
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x74], ebx
call eax
push 1
push 0x5e6d48
mov ecx, esi
call fcn.004aee09
push 1
push 0x5e6d4c
mov ecx, esi
call fcn.004aee09
push 1
push 0x5e6d50
mov ecx, esi
call fcn.004aee09
push 1
push 0x5e6d34
mov ecx, esi
call fcn.004aee09
push esi
mov ecx, edi
mov dword [esi + 0x68], 0
call fcn.004aeed6
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x12
test esi, esi
je 0x40914b
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push 0x5e6d78
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40a640
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
or ebx, 0x40
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 0x14
or ebx, 0x80
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a64a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6d80
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x409110
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x40911a
push 0x5e6d80
call fcn.00404350
push 0
push 0
push 0
push 0
push 0x5e6d5c
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
jmp 0x40914d
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x19
call fcn.004aeed6
mov dword [ebp - 4], 0x18
test ebx, 0x100
je 0x40918f
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffeff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40918f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x4091ab
lea eax, [ebp - 0xb8]
and ebx, 0xffffff7f
push eax
mov dword [ebp - 0x74], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x4091c6
lea eax, [ebp - 0xa0]
and ebx, 0xffffffbf
push eax
mov dword [ebp - 0x74], ebx
call esi
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004aee52
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x1a
test esi, esi
je 0x409265
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a654
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6d88
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40923b
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409245
push 0x5e6d88
call fcn.00404350
push 1
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x1c
or ebx, 0x200
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov edi, eax
jmp 0x409267
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200
je 0x40929a
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffdff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40929a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x1e
test esi, esi
je 0x409388
push 0xe8
push 0
push esi
call fcn.005779a0
mov eax, 3
mov dword [ebp - 0x98], 0xfa
add esp, 0xc
mov word [ebp - 0xa0], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1f
or ebx, 0x400
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 0x20
or ebx, 0x800
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a65e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6da4
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40934b
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409355
push 0x5e6da4
call fcn.00404350
push 0
push 0
push 0
push 0
push 0x5e6d94
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x78]
or ebx, 0x1000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
mov esi, eax
jmp 0x40938a
xor esi, esi
mov dword [ebp - 4], 0x24
test ebx, 0x1000
je 0x4093bd
mov edx, dword [ebp - 0x78]
and ebx, 0xffffefff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4093bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x800
je 0x4093dc
lea eax, [ebp - 0xb8]
and ebx, 0xfffff7ff
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x74], ebx
call eax
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400
je 0x409401
lea eax, [ebp - 0xa0]
and ebx, 0xfffffbff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x12c
push 0x32
push 1
mov ecx, esi
call fcn.004afb36
push esi
mov ecx, edi
call fcn.004aeed6
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x26
test esi, esi
je 0x409507
push 0xe8
push 0
push esi
call fcn.005779a0
mov eax, 3
mov dword [ebp - 0x98], 0x96
add esp, 0xc
mov word [ebp - 0xa0], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x27
or ebx, 0x2000
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 0x28
or ebx, 0x4000
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a668
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6dbc
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x4094ca
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x4094d4
push 0x5e6dbc
call fcn.00404350
push 0
push 0
push 0
push 0
push 0x5e6dac
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x8000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
mov esi, eax
jmp 0x409509
xor esi, esi
mov dword [ebp - 4], 0x2c
test ebx, 0x8000
je 0x40953c
mov edx, dword [ebp - 0x78]
and ebx, 0xffff7fff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40953c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x4000
je 0x40955a
lea eax, [ebp - 0xb8]
and ebx, 0xffffbfff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000
je 0x40957f
lea eax, [ebp - 0xa0]
and ebx, 0xffffdfff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0xc8
push 0x32
push 1
mov ecx, esi
call fcn.004afb36
push esi
mov ecx, edi
call fcn.004aeed6
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004aee52
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x2e
mov edi, 0x5e6dc4
test esi, esi
je 0x409637
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a672
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x7c]
test edi, 0xffff0000
jne 0x40960d
movzx eax, di
push eax
call fcn.00403d30
jmp 0x409617
push 0x5e6dc4
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x30
or ebx, 0x10000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov edi, eax
jmp 0x409639
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x10000
je 0x40966c
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffeffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40966c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call fcn.0043434d
lea ecx, [ebp - 0x70]
push ecx
push 0x5c
push dword [eax + 4]
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0x5e6dcc
lea eax, [ebp - 0x54]
push 0x20
push eax
call fcn.0057f93c
push 0x1a8
call fcn.0040aa1c
mov esi, eax
add esp, 0x10
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x32
test esi, esi
je 0x409734
push 0x1a8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a67c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6dc4
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x4096fe
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409708
push 0x5e6dc4
call fcn.00404350
push 0xffffffffffffffff
push 0
push 0x5e6de0
push 0x101
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x78]
or ebx, 0x20000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae6b9
jmp 0x409736
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x35
call fcn.004aeed6
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000
je 0x409778
mov edx, dword [ebp - 0x78]
and ebx, 0xfffdffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409778
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x36
test esi, esi
je 0x409864
push 0xe8
push 0
push esi
call fcn.005779a0
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0xa0], ax
or eax, 0xffffffff
mov word [ebp - 0x98], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
or ebx, 0x40000
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 0x38
or ebx, 0x80000
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a686
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6e24
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409829
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409833
push 0x5e6e24
call fcn.00404350
push 0
push 0
push 0
push 0
push 0x5e6df4
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x100000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
jmp 0x409866
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x3d
call fcn.004aeed6
mov dword [ebp - 4], 0x3c
test ebx, 0x100000
je 0x4098a8
mov edx, dword [ebp - 0x78]
and ebx, 0xffefffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4098a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, 0x80000
je 0x4098c8
lea eax, [ebp - 0xb8]
and ebx, 0xfff7ffff
push eax
mov dword [ebp - 0x74], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000
je 0x4098e9
lea eax, [ebp - 0xa0]
and ebx, 0xfffbffff
push eax
mov dword [ebp - 0x74], ebx
call esi
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004aee52
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x3e
test esi, esi
je 0x409988
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a690
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6e34
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40995e
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409968
push 0x5e6e34
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x40
or ebx, 0x200000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov edi, eax
jmp 0x40998a
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200000
je 0x4099bd
mov edx, dword [ebp - 0x7c]
and ebx, 0xffdfffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4099bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x42
test esi, esi
je 0x409a89
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
lea ecx, [ebp - 0xa0]
xor eax, eax
mov word [ebp - 0xa0], ax
push 0x5e6c78
call fcn.004adb55
mov byte [ebp - 4], 0x43
or ebx, 0x400000
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a69a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6e3c
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409a4f
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409a59
push 0x5e6e3c
call fcn.00404350
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x78]
or ebx, 0x800000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae74e
mov esi, eax
jmp 0x409a8b
xor esi, esi
mov dword [ebp - 4], 0x46
test ebx, 0x800000
je 0x409abe
mov edx, dword [ebp - 0x78]
and ebx, 0xff7fffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409abe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400000
je 0x409ae3
lea eax, [ebp - 0xa0]
and ebx, 0xffbfffff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
mov ecx, esi
call fcn.004af956
push esi
mov ecx, edi
call fcn.004aeed6
push 0x120
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0x48
test esi, esi
je 0x409b9a
push 0x120
push 0
push esi
call fcn.005779a0
add esp, 0xc
mov dword [ebp - 0x80], 0xfec0d2
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6a4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6e5c
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409b67
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409b71
push 0x5e6e5c
call fcn.00404350
push 0
push 0x5e6e48
push 0
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x1000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae255
mov esi, eax
jmp 0x409b9c
xor esi, esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x1000000
je 0x409bcf
mov edx, dword [ebp - 0x78]
and ebx, 0xfeffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409bcf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 1
push 0x5e6e68
mov ecx, esi
call fcn.004afaf5
push 1
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 0x5e6e74
mov ecx, esi
call fcn.004af986
push esi
mov ecx, edi
call fcn.004aeed6
push 0x100
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x4c
test esi, esi
je 0x409d02
push 0x100
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6ae
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov eax, 0x5e6c74
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x88]
test eax, 0xffff0000
jne 0x409c6d
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409c77
push 0x5e6c74
call fcn.00404350
mov byte [ebp - 4], 0x4e
or ebx, 0x2000000
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6b8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6e94
mov dword [ebp - 4], 0x4f
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409cbf
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409cc9
push 0x5e6e94
call fcn.00404350
push 0
push 0x5e6e7c
push 0x5e6310
push 0
push 0x5e6e8c
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 0x50
push eax
push 1
lea eax, [ebp - 0x78]
or ebx, 0x4000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae5d4
jmp 0x409d04
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x52
call fcn.004aeed6
mov dword [ebp - 4], 0x51
test ebx, 0x4000000
je 0x409d46
mov edx, dword [ebp - 0x78]
and ebx, 0xfbffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409d46
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000000
je 0x409d7c
mov edx, dword [ebp - 0x88]
and ebx, 0xfdffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409d7c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x53
test esi, esi
je 0x409e6f
push 0x100
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6c2
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6e9c
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409de5
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409def
push 0x5e6e9c
call fcn.00404350
mov byte [ebp - 4], 0x55
or ebx, 0x8000000
mov dword [ebp - 0x74], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6cc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov eax, 0x5e6ea4
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x88]
test eax, 0xffff0000
jne 0x409e3d
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409e47
push 0x5e6ea4
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x88]
or ebx, 0x10000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ae553
jmp 0x409e71
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x59
call fcn.004aeed6
mov dword [ebp - 4], 0x58
test ebx, 0x10000000
je 0x409eb6
mov edx, dword [ebp - 0x88]
and ebx, 0xefffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409eb6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x8000000
je 0x409ee6
mov edx, dword [ebp - 0x78]
and ebx, 0xf7ffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409ee6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004aee52
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x5a
test esi, esi
je 0x409f8f
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6d6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov eax, str.B_k
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x88]
test eax, 0xffff0000
jne 0x409f61
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x409f6b
push str.B_k
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x5c
or ebx, 0x20000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov dword [ebp - 0x80], eax
jmp 0x409f96
mov dword [ebp - 0x80], 0
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000000
je 0x409fc9
mov edx, dword [ebp - 0x88]
and ebx, 0xdfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409fc9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0x5e
test esi, esi
je 0x40a05b
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6e0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6eb8
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40a031
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x40a03b
push 0x5e6eb8
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x60
or ebx, 0x40000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov edi, eax
jmp 0x40a05d
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000000
je 0x40a08d
mov edx, dword [ebp - 0x7c]
and ebx, 0xbfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a08d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x80]
push edi
call fcn.004aeed6
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0x62
test esi, esi
je 0x40a12e
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6ea
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5e6ec4
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40a0fe
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x40a108
push 0x5e6ec4
call fcn.00404350
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x64
or ebx, 0x80000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ae86b
mov esi, eax
mov dword [ebp - 0x8c], eax
jmp 0x40a136
xor esi, esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
jns 0x40a15c
mov edx, dword [ebp - 0x78]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a15c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
mov ecx, edi
call fcn.004aeed6
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0x74], esi
mov dword [ebp - 4], 0x66
test esi, esi
je 0x40a263
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push 0x5e6edc
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40a6f4
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x84], 1
call fcn.004ad8fe
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x84], 3
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a6fe
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6ee4
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40a226
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x40a230
push 0x5e6ee4
call fcn.00404350
push 0
push 0
push 0
push 0
push str.dk:N
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0x7c]
mov ebx, 7
push eax
mov ecx, esi
mov dword [ebp - 0x84], ebx
call fcn.004ae74e
jmp 0x40a26b
mov ebx, dword [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 4], 0x6d
mov edi, dword [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.004aeed6
mov dword [ebp - 4], 0x6c
test bl, 4
je 0x40a2b0
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffffb
mov dword [ebp - 0x84], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a2b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 2
je 0x40a2cd
lea eax, [ebp - 0xb8]
and ebx, 0xfffffffd
push eax
mov dword [ebp - 0x84], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40a2eb
lea eax, [ebp - 0xa0]
and ebx, 0xfffffffe
push eax
mov dword [ebp - 0x84], ebx
call esi
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0xbc], esi
mov dword [ebp - 4], 0x6e
test esi, esi
je 0x40a3e9
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push 0x5e6eec
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40a708
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x6f
or ebx, 8
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x84], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 0x70
or ebx, 0x10
mov dword [ebp - 0x84], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a712
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5e6ef4
mov dword [ebp - 4], 0x71
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40a3ae
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x40a3b8
push 0x5e6ef4
call fcn.00404350
push 0
push 0
push 0
push 0
push str.dk:N
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x84], ebx
call fcn.004ae74e
jmp 0x40a3eb
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x75
call fcn.004aeed6
mov dword [ebp - 4], 0x74
test bl, 0x20
je 0x40a42a
mov edx, dword [ebp - 0x7c]
and ebx, 0xffffffdf
mov dword [ebp - 0x84], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a42a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 0x10
je 0x40a447
lea eax, [ebp - 0xb8]
and ebx, 0xffffffef
push eax
mov dword [ebp - 0x84], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 8
je 0x40a465
lea eax, [ebp - 0xa0]
and ebx, 0xfffffff7
push eax
mov dword [ebp - 0x84], ebx
call esi
push 0xe8
call fcn.0040aa1c
mov esi, eax
add esp, 4
mov dword [ebp - 0xbc], esi
mov dword [ebp - 4], 0x76
test esi, esi
je 0x40a572
push 0xe8
push 0
push esi
call fcn.005779a0
add esp, 0xc
mov eax, 8
mov word [ebp - 0xd0], ax
push 0x5e6efc
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x40a71c
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x77
or ebx, 0x40
lea ecx, [ebp - 0xe0]
push eax
mov dword [ebp - 0x84], ebx
call fcn.004ad8fe
mov dword [ebp - 4], 0x78
or ebx, 0x80
mov dword [ebp - 0x84], ebx
call fcn.0044211e
mov ecx, eax
test ecx, ecx
je 0x40a726
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x8c], eax
mov eax, 0x5e6f04
mov dword [ebp - 4], 0x79
lea ecx, [ebp - 0x8c]
test eax, 0xffff0000
jne 0x40a531
movzx eax, ax
push eax
call fcn.00403d30
jmp 0x40a53b
push 0x5e6f04
call fcn.00404350
push 0
push 0
push 0
push 0
push str.dk:N
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x8c]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x84], ebx
call fcn.004ae74e
jmp 0x40a574
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x7d
call fcn.004aeed6
mov dword [ebp - 4], 0x7c
test ebx, 0x100
je 0x40a5bc
mov edx, dword [ebp - 0x8c]
and ebx, 0xfffffeff
mov dword [ebp - 0x84], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a5bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40a5d5
lea eax, [ebp - 0xe0]
and ebx, 0xffffff7f
push eax
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40a5ea
lea eax, [ebp - 0xd0]
push eax
call esi
mov ebx, dword [ebp - 0x80]
mov ecx, ebx
push 0
call fcn.004afd62
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push ebx
call fcn.004aee52
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005757bf
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x8007000e
call fcn.00576b00
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x80004005
call fcn.00402040
push 0x8007000e
call fcn.00576b00
push 0x80004005
call fcn.00402040
push 0x8007000e
call fcn.00576b00
push 0x80004005
call fcn.00402040
push 0x8007000e
call fcn.00576b00
push 0x80004005
call fcn.00402040
int3