Function at 0x408670
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58750d
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x5f4ff0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x84], eax
call fcn.0040a1d0
push str.Value
add esi, 0x1130
push str.Property
push ebx
mov ecx, esi
mov dword [ebp - 0xa4], esi
call fcn.004ad57d
push 1
mov ecx, esi
call fcn.004ad53b
push 1
mov ecx, esi
call fcn.004b3c62
push 1
push 1
mov ecx, esi
call fcn.004ae514
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], ebx
test esi, esi
je 0x40877e
push 0xe8
push ebx
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a079
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Appearance
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x408753
movzx eax, ax
push eax
call fcn.00403890
jmp 0x40875f
push 0xa
push str.Appearance
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 2
mov ebx, 1
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov edi, eax
jmp 0x408780
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x4087ad
mov edx, dword [ebp - 0x78]
and ebx, 0xfffffffe
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4087ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x408891
push 0xe8
push 0
push esi
call fcn.0056bb70
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0xa0], ax
xor eax, eax
mov word [ebp - 0x98], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 5
or ebx, 2
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004b4a07
mov dword [ebp - 4], 6
or ebx, 4
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a083
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.3D_Look
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x408857
movzx eax, ax
push eax
call fcn.00403890
jmp 0x408863
push 7
push str.3D_Look
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.Specifies_the_windows_font_will_be_non_bold_and_controls_will_have_a_3D_border
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x7c]
or ebx, 8
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
jmp 0x408893
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0xb
call fcn.004aca59
mov dword [ebp - 4], 0xa
test bl, 8
je 0x4088cf
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffff7
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4088cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 4
je 0x4088ed
lea ecx, [ebp - 0xb8]
and ebx, 0xfffffffb
push ecx
mov dword [ebp - 0x74], ebx
call eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test bl, 2
je 0x408908
lea ecx, [ebp - 0xa0]
and ebx, 0xfffffffd
push ecx
mov dword [ebp - 0x74], ebx
call eax
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0xc
test esi, esi
je 0x4089d3
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
lea ecx, [ebp - 0xa0]
xor eax, eax
mov word [ebp - 0xa0], ax
push str.Dialog_Frame
call fcn.004b4b75
mov byte [ebp - 4], 0xd
or ebx, 0x10
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a08d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.Border
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x408997
movzx eax, ax
push eax
call fcn.00403890
jmp 0x4089a3
push 6
push str.Border
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.One_of:_None__Thin__Resizable__or_Dialog_Frame
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
mov esi, eax
jmp 0x4089d5
xor esi, esi
mov dword [ebp - 4], 0x10
test bl, 0x20
je 0x408a02
mov edx, dword [ebp - 0x7c]
and ebx, 0xffffffdf
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408a02
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test bl, 0x10
je 0x408a22
lea eax, [ebp - 0xa0]
and ebx, 0xffffffef
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x74], ebx
call eax
push 1
push 0x5d3f8c
mov ecx, esi
call fcn.004ac98c
push 1
push str.Thin
mov ecx, esi
call fcn.004ac98c
push 1
push str.Resizable
mov ecx, esi
call fcn.004ac98c
push 1
push str.Dialog_Frame
mov ecx, esi
call fcn.004ac98c
push esi
mov ecx, edi
mov dword [esi + 0x68], 0
call fcn.004aca59
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x12
test esi, esi
je 0x408b63
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push str.About
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40a097
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
or ebx, 0x40
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004b4a07
mov dword [ebp - 4], 0x14
or ebx, 0x80
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0a1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.Caption
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x408b26
movzx eax, ax
push eax
call fcn.00403890
jmp 0x408b32
push 7
push str.Caption
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.Specifies_the_text_that_will_be_displayed_in_the_windows_title_bar
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
jmp 0x408b65
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x19
call fcn.004aca59
mov dword [ebp - 4], 0x18
test ebx, 0x100
je 0x408ba7
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffeff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408ba7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x408bc3
lea eax, [ebp - 0xb8]
and ebx, 0xffffff7f
push eax
mov dword [ebp - 0x74], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x408bde
lea eax, [ebp - 0xa0]
and ebx, 0xffffffbf
push eax
mov dword [ebp - 0x74], ebx
call esi
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004ac9d5
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x1a
test esi, esi
je 0x408c7f
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0ab
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.Window_Size
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x408c53
movzx eax, ax
push eax
call fcn.00403890
jmp 0x408c5f
push 0xb
push str.Window_Size
call fcn.00403b10
push 1
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x1c
or ebx, 0x200
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov edi, eax
jmp 0x408c81
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200
je 0x408cb4
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffdff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408cb4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x1e
test esi, esi
je 0x408da4
push 0xe8
push 0
push esi
call fcn.0056bb70
mov eax, 3
mov dword [ebp - 0x98], 0xfa
add esp, 0xc
mov word [ebp - 0xa0], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1f
or ebx, 0x400
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004b4a07
mov dword [ebp - 4], 0x20
or ebx, 0x800
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0b5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Height
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x408d65
movzx eax, ax
push eax
call fcn.00403890
jmp 0x408d71
push 6
push str.Height
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.Specifies_the_windows_height
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x78]
or ebx, 0x1000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
mov esi, eax
jmp 0x408da6
xor esi, esi
mov dword [ebp - 4], 0x24
test ebx, 0x1000
je 0x408dd9
mov edx, dword [ebp - 0x78]
and ebx, 0xffffefff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408dd9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x800
je 0x408df8
lea eax, [ebp - 0xb8]
and ebx, 0xfffff7ff
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x74], ebx
call eax
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400
je 0x408e1d
lea eax, [ebp - 0xa0]
and ebx, 0xfffffbff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x12c
push 0x32
push 1
mov ecx, esi
call fcn.004ad6af
push esi
mov ecx, edi
call fcn.004aca59
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x26
test esi, esi
je 0x408f25
push 0xe8
push 0
push esi
call fcn.0056bb70
mov eax, 3
mov dword [ebp - 0x98], 0x96
add esp, 0xc
mov word [ebp - 0xa0], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x27
or ebx, 0x2000
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004b4a07
mov dword [ebp - 4], 0x28
or ebx, 0x4000
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0bf
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Width
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x408ee6
movzx eax, ax
push eax
call fcn.00403890
jmp 0x408ef2
push 5
push str.Width
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.Specifies_the_windows_width
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x8000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
mov esi, eax
jmp 0x408f27
xor esi, esi
mov dword [ebp - 4], 0x2c
test ebx, 0x8000
je 0x408f5a
mov edx, dword [ebp - 0x78]
and ebx, 0xffff7fff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408f5a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x4000
je 0x408f78
lea eax, [ebp - 0xb8]
and ebx, 0xffffbfff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000
je 0x408f9d
lea eax, [ebp - 0xa0]
and ebx, 0xffffdfff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0xc8
push 0x32
push 1
mov ecx, esi
call fcn.004ad6af
push esi
mov ecx, edi
call fcn.004aca59
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004ac9d5
push 0xe8
call fcn.0040a540
mov edi, eax
add esp, 4
mov dword [ebp - 0x80], edi
mov dword [ebp - 4], 0x2e
test edi, edi
je 0x409061
push 0xe8
push 0
push edi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0c9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov esi, str.Font
mov byte [ebp - 4], 0x2f
shr esi, 0x10
lea ecx, [ebp - 0x7c]
mov eax, str.Font
test esi, esi
jne 0x40902f
movzx eax, ax
push eax
call fcn.00403890
jmp 0x40903b
push 4
push str.Font
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x30
or ebx, 0x10000
mov ecx, edi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov dword [ebp - 0x80], eax
mov edi, str.Font
jmp 0x409072
mov edi, str.Font
mov dword [ebp - 0x80], 0
mov esi, edi
shr esi, 0x10
mov dword [ebp - 4], 0xffffffff
test ebx, 0x10000
je 0x4090a5
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffeffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4090a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call fcn.00448a3f
lea ecx, [ebp - 0x70]
push ecx
push 0x5c
push dword [eax + 4]
call dword [sym.imp.GDI32.dll_GetObjectW]
push str.Arial
lea eax, [ebp - 0x54]
push 0x20
push eax
call fcn.005709e5
push 0x1a8
call fcn.0040a540
add esp, 0x10
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x40916c
push 0x1a8
push 0
push eax
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x78]
test esi, esi
jne 0x409130
movzx eax, di
push eax
call fcn.00403890
jmp 0x40913c
push 4
push str.Font
call fcn.00403b10
push 0xffffffffffffffff
push 0
push str.Specifies_the_default_font_for_the_window
push 0x101
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x8c]
or ebx, 0x20000
push eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x74], ebx
push eax
call fcn.004ac21d
jmp 0x40916e
xor eax, eax
mov dword [ebp - 4], 0x35
mov edi, dword [ebp - 0x80]
mov ecx, edi
push eax
call fcn.004aca59
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000
je 0x4091b3
mov edx, dword [ebp - 0x78]
and ebx, 0xfffdffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4091b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x36
test esi, esi
je 0x4092a1
push 0xe8
push 0
push esi
call fcn.0056bb70
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0xa0], ax
or eax, 0xffffffff
mov word [ebp - 0x98], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
or ebx, 0x40000
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
call fcn.004b4a07
mov dword [ebp - 4], 0x38
or ebx, 0x80000
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0dd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Use_System_Font
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409264
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409270
push 0xf
push str.Use_System_Font
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.Specifies_that_the_window_uses_MS_Shell_Dlg_font
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x100000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
jmp 0x4092a3
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x3d
call fcn.004aca59
mov dword [ebp - 4], 0x3c
test ebx, 0x100000
je 0x4092e5
mov edx, dword [ebp - 0x78]
and ebx, 0xffefffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4092e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, 0x80000
je 0x409305
lea eax, [ebp - 0xb8]
and ebx, 0xfff7ffff
push eax
mov dword [ebp - 0x74], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000
je 0x409326
lea eax, [ebp - 0xa0]
and ebx, 0xfffbffff
push eax
mov dword [ebp - 0x74], ebx
call esi
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004ac9d5
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x3e
test esi, esi
je 0x4093c7
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0e7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.Misc
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40939b
movzx eax, ax
push eax
call fcn.00403890
jmp 0x4093a7
push 4
push str.Misc
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x40
or ebx, 0x200000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov edi, eax
jmp 0x4093c9
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200000
je 0x4093fc
mov edx, dword [ebp - 0x7c]
and ebx, 0xffdfffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4093fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x42
test esi, esi
je 0x4094ca
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
lea ecx, [ebp - 0xa0]
xor eax, eax
mov word [ebp - 0xa0], ax
push 0x5d3ddc
call fcn.004b4b75
mov byte [ebp - 4], 0x43
or ebx, 0x400000
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0f1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str._Name_
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40948e
movzx eax, ax
push eax
call fcn.00403890
jmp 0x40949a
push 6
push str._Name_
call fcn.00403b10
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x78]
or ebx, 0x800000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac2b2
mov esi, eax
jmp 0x4094cc
xor esi, esi
mov dword [ebp - 4], 0x46
test ebx, 0x800000
je 0x4094ff
mov edx, dword [ebp - 0x78]
and ebx, 0xff7fffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4094ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400000
je 0x409524
lea eax, [ebp - 0xa0]
and ebx, 0xffbfffff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
mov ecx, esi
call fcn.004ad4cf
push esi
mov ecx, edi
call fcn.004aca59
push 0x120
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0x48
test esi, esi
je 0x4095dd
push 0x120
push 0
push esi
call fcn.0056bb70
add esp, 0xc
mov dword [ebp - 0x80], 0xfec0d2
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a0fb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Window_Color
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x4095a8
movzx eax, ax
push eax
call fcn.00403890
jmp 0x4095b4
push 0xc
push str.Window_Color
call fcn.00403b10
push 0
push str.Specifies_the_default_window_color
push 0
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x1000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004abdcb
mov esi, eax
jmp 0x4095df
xor esi, esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x1000000
je 0x409612
mov edx, dword [ebp - 0x78]
and ebx, 0xfeffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409612
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 1
push str.Other...
mov ecx, esi
call fcn.004ad66e
push 1
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.Default
mov ecx, esi
call fcn.004ad4ff
push esi
mov ecx, edi
call fcn.004aca59
push 0x100
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x4c
test esi, esi
je 0x409749
push 0x100
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a105
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov eax, 0x5d43e4
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x88]
test eax, 0xffff0000
jne 0x4096b0
movzx eax, ax
push eax
call fcn.00403890
jmp 0x4096bc
push 0
push 0x5d43e4
call fcn.00403b10
mov byte [ebp - 4], 0x4e
or ebx, 0x2000000
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a10f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Icon
mov dword [ebp - 4], 0x4f
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409704
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409710
push 4
push str.Icon
call fcn.00403b10
push 0
push str.Specifies_the_window_icon
push str.Icon_Files_.ico_.icoAll_Files_._.
push 0
push 0x5d42d4
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 0x50
push eax
push 1
lea eax, [ebp - 0x78]
or ebx, 0x4000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac14a
jmp 0x40974b
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x52
call fcn.004aca59
mov dword [ebp - 4], 0x51
test ebx, 0x4000000
je 0x40978d
mov edx, dword [ebp - 0x78]
and ebx, 0xfbffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40978d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000000
je 0x4097c3
mov edx, dword [ebp - 0x88]
and ebx, 0xfdffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4097c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x53
test esi, esi
je 0x4098ba
push 0x100
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a119
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5d42e8
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40982c
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409838
push 3
push 0x5d42e8
call fcn.00403b10
mov byte [ebp - 4], 0x55
or ebx, 0x8000000
mov dword [ebp - 0x74], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a123
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov eax, 0x5d42f0
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x88]
test eax, 0xffff0000
jne 0x409886
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409892
push 6
push 0x5d42f0
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x88]
or ebx, 0x10000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004ac0c9
jmp 0x4098bc
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x59
call fcn.004aca59
mov dword [ebp - 4], 0x58
test ebx, 0x10000000
je 0x409901
mov edx, dword [ebp - 0x88]
and ebx, 0xefffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409901
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x8000000
je 0x409931
mov edx, dword [ebp - 0x78]
and ebx, 0xf7ffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409931
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004ac9d5
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x5a
test esi, esi
je 0x4099dc
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a12d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov eax, str.Hierarchy
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x88]
test eax, 0xffff0000
jne 0x4099ac
movzx eax, ax
push eax
call fcn.00403890
jmp 0x4099b8
push 9
push str.Hierarchy
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x5c
or ebx, 0x20000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov dword [ebp - 0x80], eax
jmp 0x4099e3
mov dword [ebp - 0x80], 0
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000000
je 0x409a16
mov edx, dword [ebp - 0x88]
and ebx, 0xdfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409a16
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0x5e
test esi, esi
je 0x409aaa
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a137
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.First_sub_level
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x409a7e
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409a8a
push 0xf
push str.First_sub_level
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x60
or ebx, 0x40000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov edi, eax
jmp 0x409aac
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000000
je 0x409adc
mov edx, dword [ebp - 0x7c]
and ebx, 0xbfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409adc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x80]
push edi
call fcn.004aca59
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0x62
test esi, esi
je 0x409b7f
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a141
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, str.Second_sub_level
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x409b4d
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409b59
push 0x10
push str.Second_sub_level
call fcn.00403b10
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x64
or ebx, 0x80000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004ac3cf
mov esi, eax
mov dword [ebp - 0x8c], eax
jmp 0x409b87
xor esi, esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
jns 0x409bad
mov edx, dword [ebp - 0x78]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409bad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
mov ecx, edi
call fcn.004aca59
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0x74], esi
mov dword [ebp - 4], 0x66
test esi, esi
je 0x409cb6
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push str.Value_1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40a14b
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x84], 1
call fcn.004b4a07
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x84], 3
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a155
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.Item_1
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x409c77
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409c83
push 6
push str.Item_1
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.This_is_a_description
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0x7c]
mov ebx, 7
push eax
mov ecx, esi
mov dword [ebp - 0x84], ebx
call fcn.004ac2b2
jmp 0x409cbe
mov ebx, dword [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 4], 0x6d
mov edi, dword [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.004aca59
mov dword [ebp - 4], 0x6c
test bl, 4
je 0x409d03
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffffb
mov dword [ebp - 0x84], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409d03
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 2
je 0x409d20
lea eax, [ebp - 0xb8]
and ebx, 0xfffffffd
push eax
mov dword [ebp - 0x84], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x409d3e
lea eax, [ebp - 0xa0]
and ebx, 0xfffffffe
push eax
mov dword [ebp - 0x84], ebx
call esi
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0xbc], esi
mov dword [ebp - 4], 0x6e
test esi, esi
je 0x409e3e
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push str.Value_2
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40a15f
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x6f
or ebx, 8
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x84], ebx
call fcn.004b4a07
mov dword [ebp - 4], 0x70
or ebx, 0x10
mov dword [ebp - 0x84], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a169
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, str.Item_2
mov dword [ebp - 4], 0x71
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x409e01
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409e0d
push 6
push str.Item_2
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.This_is_a_description
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x84], ebx
call fcn.004ac2b2
jmp 0x409e40
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x75
call fcn.004aca59
mov dword [ebp - 4], 0x74
test bl, 0x20
je 0x409e7f
mov edx, dword [ebp - 0x7c]
and ebx, 0xffffffdf
mov dword [ebp - 0x84], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409e7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 0x10
je 0x409e9c
lea eax, [ebp - 0xb8]
and ebx, 0xffffffef
push eax
mov dword [ebp - 0x84], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 8
je 0x409eba
lea eax, [ebp - 0xa0]
and ebx, 0xfffffff7
push eax
mov dword [ebp - 0x84], ebx
call esi
push 0xe8
call fcn.0040a540
mov esi, eax
add esp, 4
mov dword [ebp - 0xbc], esi
mov dword [ebp - 4], 0x76
test esi, esi
je 0x409fc9
push 0xe8
push 0
push esi
call fcn.0056bb70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xd0], ax
push str.Value_3
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x40a173
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x77
or ebx, 0x40
lea ecx, [ebp - 0xe0]
push eax
mov dword [ebp - 0x84], ebx
call fcn.004b4a07
mov dword [ebp - 4], 0x78
or ebx, 0x80
mov dword [ebp - 0x84], ebx
call fcn.0044a392
mov ecx, eax
test ecx, ecx
je 0x40a17d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x8c], eax
mov eax, str.Item_3
mov dword [ebp - 4], 0x79
lea ecx, [ebp - 0x8c]
test eax, 0xffff0000
jne 0x409f86
movzx eax, ax
push eax
call fcn.00403890
jmp 0x409f92
push 6
push str.Item_3
call fcn.00403b10
push 0
push 0
push 0
push 0
push str.This_is_a_description
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x8c]
or ebx, 0x100
push eax
mov ecx, esi
mov dword [ebp - 0x84], ebx
call fcn.004ac2b2
jmp 0x409fcb
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x7d
call fcn.004aca59
mov dword [ebp - 4], 0x7c
test ebx, 0x100
je 0x40a013
mov edx, dword [ebp - 0x8c]
and ebx, 0xfffffeff
mov dword [ebp - 0x84], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a013
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40a02c
lea eax, [ebp - 0xe0]
and ebx, 0xffffff7f
push eax
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40a041
lea eax, [ebp - 0xd0]
push eax
call esi
mov ebx, dword [ebp - 0x80]
mov ecx, ebx
push 0
call fcn.004ad8db
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push ebx
call fcn.004ac9d5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00569b0f
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x8007000e
call fcn.0056aed0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x80004005
call fcn.00403fc0
push 0x8007000e
call fcn.0056aed0
push 0x80004005
call fcn.00403fc0
push 0x8007000e
call fcn.0056aed0
push 0x80004005
call fcn.00403fc0
push 0x8007000e
call fcn.0056aed0
push 0x80004005
call fcn.00403fc0
int3