Function at 0x40c2a0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59f7fe
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x60ce80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x60], eax
call fcn.0040dcc0
push str.Value
add esi, 0x1130
push str.Property
push ebx
mov ecx, esi
mov dword [ebp - 0x7c], esi
call fcn.004aad12
push 1
mov ecx, esi
call fcn.004aacd0
push 1
mov ecx, esi
call fcn.004b13a6
push 1
push 1
mov ecx, esi
call fcn.004abc74
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], ebx
test esi, esi
je 0x40c3a8
push 0xe8
push ebx
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40db8f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e9420
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40c37d
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40c389
push 4
push 0x5e9420
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 2
mov ebx, 1
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov edi, eax
jmp 0x40c3aa
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40c3d7
mov edx, dword [ebp - 0x54]
and ebx, 0xfffffffe
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c3d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x40c4b2
push 0xe8
push 0
push esi
call fcn.005785e0
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0x78], ax
xor eax, eax
mov word [ebp - 0x70], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 5
or ebx, 2
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b21d4
mov dword [ebp - 4], 6
or ebx, 4
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40db99
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e945c
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40c478
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40c484
push 8
push 0x5e945c
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e9428
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x58]
or ebx, 8
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
jmp 0x40c4b4
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0xb
call fcn.004aa21b
mov dword [ebp - 4], 0xa
test bl, 8
je 0x40c4f0
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffff7
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c4f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 4
je 0x40c50e
lea ecx, [ebp - 0x90]
and ebx, 0xfffffffb
push ecx
mov dword [ebp - 0x50], ebx
call eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test bl, 2
je 0x40c526
lea ecx, [ebp - 0x78]
and ebx, 0xfffffffd
push ecx
mov dword [ebp - 0x50], ebx
call eax
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0xc
test esi, esi
je 0x40c5e8
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
lea ecx, [ebp - 0x78]
xor eax, eax
mov word [ebp - 0x78], ax
push 0x5e94a4
call fcn.004b2452
mov byte [ebp - 4], 0xd
or ebx, 0x10
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dba3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e94b0
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40c5af
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40c5bb
push 4
push 0x5e94b0
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e9468
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x58]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
mov esi, eax
jmp 0x40c5ea
xor esi, esi
mov dword [ebp - 4], 0x10
test bl, 0x20
je 0x40c617
mov edx, dword [ebp - 0x58]
and ebx, 0xffffffdf
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c617
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test bl, 0x10
je 0x40c634
lea eax, [ebp - 0x78]
and ebx, 0xffffffef
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x50], ebx
call eax
push 1
push 0x5e94b8
mov ecx, esi
call fcn.004aa14e
push 1
push 0x5e94bc
mov ecx, esi
call fcn.004aa14e
push 1
push 0x5e94c0
mov ecx, esi
call fcn.004aa14e
push 1
push 0x5e94a4
mov ecx, esi
call fcn.004aa14e
push esi
mov ecx, edi
mov dword [esi + 0x68], 0
call fcn.004aa21b
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x12
test esi, esi
je 0x40c763
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
mov eax, 8
mov word [ebp - 0x78], ax
push 0x5e94e8
call fcn.005753c0
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x13
or ebx, 0x40
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b21d4
mov dword [ebp - 4], 0x14
or ebx, 0x80
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbad
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e94f0
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40c726
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40c732
push 4
push 0x5e94f0
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e94cc
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x58]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
jmp 0x40c765
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x19
call fcn.004aa21b
mov dword [ebp - 4], 0x18
test ebx, 0x100
je 0x40c7a7
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffeff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c7a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40c7c3
lea eax, [ebp - 0x90]
and ebx, 0xffffff7f
push eax
mov dword [ebp - 0x50], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40c7db
lea eax, [ebp - 0x78]
and ebx, 0xffffffbf
push eax
mov dword [ebp - 0x50], ebx
call esi
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa197
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x1a
test esi, esi
je 0x40c879
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbb7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e94f8
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40c84d
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40c859
push 8
push 0x5e94f8
call fcn.00406430
push 1
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x1c
or ebx, 0x200
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov edi, eax
jmp 0x40c87b
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200
je 0x40c8ae
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffdff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c8ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x1e
test esi, esi
je 0x40c995
push 0xe8
push 0
push esi
call fcn.005785e0
mov eax, 3
mov dword [ebp - 0x70], 0xfa
add esp, 0xc
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1f
or ebx, 0x400
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b21d4
mov dword [ebp - 4], 0x20
or ebx, 0x800
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbc1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e9514
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40c956
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40c962
push 4
push 0x5e9514
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e9504
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x54]
or ebx, 0x1000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
mov esi, eax
jmp 0x40c997
xor esi, esi
mov dword [ebp - 4], 0x24
test ebx, 0x1000
je 0x40c9ca
mov edx, dword [ebp - 0x54]
and ebx, 0xffffefff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c9ca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x800
je 0x40c9e9
lea eax, [ebp - 0x90]
and ebx, 0xfffff7ff
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x50], ebx
call eax
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400
je 0x40ca0b
lea eax, [ebp - 0x78]
and ebx, 0xfffffbff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x12c
push 0x32
push 1
mov ecx, esi
call fcn.004aae44
push esi
mov ecx, edi
call fcn.004aa21b
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x26
test esi, esi
je 0x40cb0a
push 0xe8
push 0
push esi
call fcn.005785e0
mov eax, 3
mov dword [ebp - 0x70], 0x96
add esp, 0xc
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x27
or ebx, 0x2000
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b21d4
mov dword [ebp - 4], 0x28
or ebx, 0x4000
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbcb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e952c
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40cacb
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40cad7
push 4
push 0x5e952c
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e951c
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x54]
or ebx, 0x8000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
mov esi, eax
jmp 0x40cb0c
xor esi, esi
mov dword [ebp - 4], 0x2c
test ebx, 0x8000
je 0x40cb3f
mov edx, dword [ebp - 0x54]
and ebx, 0xffff7fff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cb3f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x4000
je 0x40cb5d
lea eax, [ebp - 0x90]
and ebx, 0xffffbfff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000
je 0x40cb7f
lea eax, [ebp - 0x78]
and ebx, 0xffffdfff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0xc8
push 0x32
push 1
mov ecx, esi
call fcn.004aae44
push esi
mov ecx, edi
call fcn.004aa21b
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa197
push 0xe8
call fcn.004126ad
mov edi, eax
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 4], 0x2e
test edi, edi
je 0x40cc40
push 0xe8
push 0
push edi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbd5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov esi, 0x5e9534
mov byte [ebp - 4], 0x2f
shr esi, 0x10
lea ecx, [ebp - 0x58]
mov eax, 0x5e9534
test esi, esi
jne 0x40cc0e
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40cc1a
push 4
push 0x5e9534
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
or ebx, 0x10000
mov ecx, edi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov dword [ebp - 0x68], eax
mov edi, 0x5e9534
jmp 0x40cc51
mov edi, 0x5e9534
mov dword [ebp - 0x68], 0
mov esi, edi
shr esi, 0x10
mov dword [ebp - 4], 0xffffffff
test ebx, 0x10000
je 0x40cc84
mov edx, dword [ebp - 0x58]
and ebx, 0xfffeffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cc84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call fcn.0041a6e5
lea ecx, [ebp - 0x4c]
push ecx
push 0x3c
push dword [eax + 4]
call dword [sym.imp.GDI32.dll_GetObjectA]
push 0x5e953c
lea eax, [ebp - 0x30]
push 0x20
push eax
call fcn.0057f956
push 0x168
call fcn.004126ad
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x40cd45
push 0x168
push 0
push eax
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbdf
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x54]
test esi, esi
jne 0x40cd0c
movzx eax, di
push eax
call fcn.00406280
jmp 0x40cd18
push 4
push 0x5e9534
call fcn.00406430
push 0xffffffffffffffff
push 0
push 0x5e9548
push 0x101
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x5c]
or ebx, 0x20000
push eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x50], ebx
push eax
call fcn.004a99c6
jmp 0x40cd47
xor eax, eax
mov dword [ebp - 4], 0x35
mov edi, dword [ebp - 0x68]
mov ecx, edi
push eax
call fcn.004aa21b
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000
je 0x40cd8c
mov edx, dword [ebp - 0x54]
and ebx, 0xfffdffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cd8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x36
test esi, esi
je 0x40ce71
push 0xe8
push 0
push esi
call fcn.005785e0
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0x78], ax
or eax, 0xffffffff
mov word [ebp - 0x70], ax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x37
or ebx, 0x40000
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x50], ebx
call fcn.004b21d4
mov dword [ebp - 4], 0x38
or ebx, 0x80000
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbe9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e9580
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40ce34
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40ce40
push 0xc
push 0x5e9580
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e955c
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x54]
or ebx, 0x100000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
jmp 0x40ce73
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x3d
call fcn.004aa21b
mov dword [ebp - 4], 0x3c
test ebx, 0x100000
je 0x40ceb5
mov edx, dword [ebp - 0x54]
and ebx, 0xffefffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ceb5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, 0x80000
je 0x40ced5
lea eax, [ebp - 0x90]
and ebx, 0xfff7ffff
push eax
mov dword [ebp - 0x50], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000
je 0x40cef3
lea eax, [ebp - 0x78]
and ebx, 0xfffbffff
push eax
mov dword [ebp - 0x50], ebx
call esi
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa197
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x3e
test esi, esi
je 0x40cf91
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbf3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e9590
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40cf65
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40cf71
push 4
push 0x5e9590
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x40
or ebx, 0x200000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov edi, eax
jmp 0x40cf93
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200000
je 0x40cfc6
mov edx, dword [ebp - 0x58]
and ebx, 0xffdfffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cfc6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x42
test esi, esi
je 0x40d08b
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
lea ecx, [ebp - 0x78]
xor eax, eax
mov word [ebp - 0x78], ax
push 0x5e93f4
call fcn.004b2452
mov byte [ebp - 4], 0x43
or ebx, 0x400000
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dbfd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e9598
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d052
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d05e
push 6
push 0x5e9598
call fcn.00406430
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x54]
or ebx, 0x800000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9a5b
mov esi, eax
jmp 0x40d08d
xor esi, esi
mov dword [ebp - 4], 0x46
test ebx, 0x800000
je 0x40d0c0
mov edx, dword [ebp - 0x54]
and ebx, 0xff7fffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d0c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400000
je 0x40d0e2
lea eax, [ebp - 0x78]
and ebx, 0xffbfffff
push eax
mov dword [ebp - 0x50], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
mov ecx, esi
call fcn.004aac64
push esi
mov ecx, edi
call fcn.004aa21b
push 0x120
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 0x48
test esi, esi
je 0x40d198
push 0x120
push 0
push esi
call fcn.005785e0
add esp, 0xc
mov dword [ebp - 0x5c], 0xfec0d2
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc07
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e95b4
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d163
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d16f
push 8
push 0x5e95b4
call fcn.00406430
push 0
push 0x5e95a0
push 0
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x54]
or ebx, 0x1000000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9577
mov esi, eax
jmp 0x40d19a
xor esi, esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x1000000
je 0x40d1cd
mov edx, dword [ebp - 0x54]
and ebx, 0xfeffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d1cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 1
push 0x5e95c0
mov ecx, esi
call fcn.004aae03
push 1
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 0x5e95c8
mov ecx, esi
call fcn.004aac94
push esi
mov ecx, edi
call fcn.004aa21b
push 0x100
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x4c
test esi, esi
je 0x40d2fb
push 0x100
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc11
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64], eax
mov eax, 0x5e6e08
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x64]
test eax, 0xffff0000
jne 0x40d265
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d271
push 0
push 0x5e6e08
call fcn.00406430
mov byte [ebp - 4], 0x4e
or ebx, 0x2000000
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc1b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e95e4
mov dword [ebp - 4], 0x4f
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d2b9
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d2c5
push 4
push 0x5e95e4
call fcn.00406430
push 0
push 0x5e95d0
push 0x5e9658
push 0
push 0x5e95e0
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 0x50
push eax
push 1
lea eax, [ebp - 0x54]
or ebx, 0x4000000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a98f3
jmp 0x40d2fd
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x52
call fcn.004aa21b
mov dword [ebp - 4], 0x51
test ebx, 0x4000000
je 0x40d33f
mov edx, dword [ebp - 0x54]
and ebx, 0xfbffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d33f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000000
je 0x40d372
mov edx, dword [ebp - 0x64]
and ebx, 0xfdffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d372
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x53
test esi, esi
je 0x40d460
push 0x100
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc25
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e95ec
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d3db
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d3e7
push 3
push 0x5e95ec
call fcn.00406430
mov byte [ebp - 4], 0x55
or ebx, 0x8000000
mov dword [ebp - 0x50], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc2f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64], eax
mov eax, 0x5e95f0
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x64]
test eax, 0xffff0000
jne 0x40d42f
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d43b
push 6
push 0x5e95f0
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x64]
or ebx, 0x10000000
push eax
mov ecx, esi
mov dword [ebp - 0x50], ebx
call fcn.004a9872
jmp 0x40d462
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x59
call fcn.004aa21b
mov dword [ebp - 4], 0x58
test ebx, 0x10000000
je 0x40d4a4
mov edx, dword [ebp - 0x64]
and ebx, 0xefffffff
mov dword [ebp - 0x50], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d4a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x8000000
je 0x40d4d4
mov edx, dword [ebp - 0x54]
and ebx, 0xf7ffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d4d4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push edi
call fcn.004aa197
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 4], 0x5a
test esi, esi
je 0x40d575
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc39
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64], eax
mov eax, 0x5e95f8
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x64]
test eax, 0xffff0000
jne 0x40d546
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d552
push 8
push 0x5e95f8
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
or ebx, 0x20000000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov edi, eax
mov dword [ebp - 0x5c], eax
jmp 0x40d57a
xor edi, edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000000
je 0x40d5aa
mov edx, dword [ebp - 0x64]
and ebx, 0xdfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d5aa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 0x5e
test esi, esi
je 0x40d63e
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc43
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e9604
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40d60f
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d61b
push 0xa
push 0x5e9604
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x60
or ebx, 0x40000000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov esi, eax
mov dword [ebp - 0x68], eax
jmp 0x40d643
xor esi, esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000000
je 0x40d673
mov edx, dword [ebp - 0x58]
and ebx, 0xbfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d673
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
mov ecx, edi
call fcn.004aa21b
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x62
test esi, esi
je 0x40d70f
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc4d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, 0x5e9610
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x40d6e3
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d6ef
push 0xa
push 0x5e9610
call fcn.00406430
push 0
push 0
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x64
or ebx, 0x80000000
mov ecx, esi
push eax
mov dword [ebp - 0x50], ebx
call fcn.004a9b78
mov edi, eax
jmp 0x40d711
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
jns 0x40d737
mov edx, dword [ebp - 0x54]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d737
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x68]
push edi
call fcn.004aa21b
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x66
test esi, esi
je 0x40d829
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
mov eax, 8
mov word [ebp - 0x78], ax
push 0x5e9628
call fcn.005753c0
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x60], 1
call fcn.004b21d4
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x60], 3
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc57
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e9630
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40d7ed
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d7f9
push 4
push 0x5e9630
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e961c
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0x58]
mov ebx, 7
push eax
mov ecx, esi
mov dword [ebp - 0x60], ebx
call fcn.004a9a5b
jmp 0x40d831
mov ebx, dword [ebp - 0x98]
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x6d
call fcn.004aa21b
mov dword [ebp - 4], 0x6c
test bl, 4
je 0x40d86d
mov edx, dword [ebp - 0x58]
and ebx, 0xfffffffb
mov dword [ebp - 0x60], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d86d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 2
je 0x40d887
lea eax, [ebp - 0x90]
and ebx, 0xfffffffd
push eax
mov dword [ebp - 0x60], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40d89f
lea eax, [ebp - 0x78]
and ebx, 0xfffffffe
push eax
mov dword [ebp - 0x60], ebx
call esi
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x6e
test esi, esi
je 0x40d984
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
mov eax, 8
mov word [ebp - 0x78], ax
push 0x5e9638
call fcn.005753c0
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x6f
or ebx, 8
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x60], ebx
call fcn.004b21d4
mov dword [ebp - 4], 0x70
or ebx, 0x10
mov dword [ebp - 0x60], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc61
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, 0x5e9640
mov dword [ebp - 4], 0x71
lea ecx, [ebp - 0x58]
test eax, 0xffff0000
jne 0x40d94a
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40d956
push 4
push 0x5e9640
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e961c
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x58]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x60], ebx
call fcn.004a9a5b
jmp 0x40d986
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x75
call fcn.004aa21b
mov dword [ebp - 4], 0x74
test bl, 0x20
je 0x40d9c2
mov edx, dword [ebp - 0x58]
and ebx, 0xffffffdf
mov dword [ebp - 0x60], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d9c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 0x10
je 0x40d9dc
lea eax, [ebp - 0x90]
and ebx, 0xffffffef
push eax
mov dword [ebp - 0x60], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 8
je 0x40d9f4
lea eax, [ebp - 0x78]
and ebx, 0xfffffff7
push eax
mov dword [ebp - 0x60], ebx
call esi
push 0xe8
call fcn.004126ad
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov dword [ebp - 4], 0x76
test esi, esi
je 0x40dae8
push 0xe8
push 0
push esi
call fcn.005785e0
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa8], ax
push 0x5e9648
call fcn.005753c0
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x77
or ebx, 0x40
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x60], ebx
call fcn.004b21d4
mov dword [ebp - 4], 0x78
or ebx, 0x80
mov dword [ebp - 0x60], ebx
call fcn.00419630
mov ecx, eax
test ecx, ecx
je 0x40dc6b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x68], eax
mov eax, 0x5e9650
mov dword [ebp - 4], 0x79
lea ecx, [ebp - 0x68]
test eax, 0xffff0000
jne 0x40daab
movzx eax, ax
push eax
call fcn.00406280
jmp 0x40dab7
push 4
push 0x5e9650
call fcn.00406430
push 0
push 0
push 0
push 0
push 0x5e961c
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x68]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x60], ebx
call fcn.004a9a5b
jmp 0x40daea
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x7d
call fcn.004aa21b
mov dword [ebp - 4], 0x7c
test ebx, 0x100
je 0x40db2c
mov edx, dword [ebp - 0x68]
and ebx, 0xfffffeff
mov dword [ebp - 0x60], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40db2c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40db45
lea eax, [ebp - 0xb8]
and ebx, 0xffffff7f
push eax
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40db5a
lea eax, [ebp - 0xa8]
push eax
call esi
mov esi, dword [ebp - 0x5c]
mov ecx, esi
push 0
call fcn.004ab080
mov ecx, dword [ebp - 0x7c]
push 1
push 1
push esi
call fcn.004aa197
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00573f01
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
push 0x80004005
call fcn.004068b0
int3