Function at 0x40a720
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49b7ef
mov eax, dword fs:[0]
push eax
sub esp, 0x1d4
mov eax, dword [0x636b1c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov ecx, dword [0x638840]
mov edi, eax
push 0
push 0
call fcn.004016f0
mov ecx, dword [0x638840]
push 0
push 0
push 0
push 3
push 1
push 0
push 0
push 0xffffffffffffffff
push 0
call fcn.00401790
mov eax, 0x635060
cmp eax, 0xffffffff
je 0x40a7b0
cmp dword [0x635060], 0
mov esi, eax
mov dword [0x6389cc], eax
je 0x40a7b0
lea esp, [esp]
mov eax, dword [esi + 0x20]
push 1
call eax
cmp dword [esi + 0x24], 0
lea esi, [esi + 0x24]
jne 0x40a7a0
mov esi, dword [0x6350b0]
mov ecx, dword [0x6350b4]
cmp esi, ecx
jae 0x40a7da
mov eax, dword [esi]
test eax, eax
je 0x40a7d3
mov eax, dword [eax + 0x1c]
push 1
call eax
mov ecx, dword [0x6350b4]
add esi, 4
cmp esi, ecx
jb 0x40a7c0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor ecx, ecx
mov dword [0x6389d0], eax
mov dword [ebp - 0x20], ecx
push edi
lea esi, [ecx + 1]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x30]
push edi
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_8601]
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
push 0
push str.UNREGSERVERASADMINISTRATOR
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
push 0
cmp eax, 0xffffffff
jle 0x40a848
call fcn.004165c0
mov ecx, eax
mov dword [ebp - 0x20], ecx
jmp 0x40a8f6
push str.UNREGSE
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40a86c
push 1
call fcn.004165c0
mov ecx, eax
mov dword [ebp - 0x20], ecx
jmp 0x40a8f6
push 0
push str.REGSERVERASADMINISTRATOR
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
push 0
cmp eax, 0xffffffff
jle 0x40a8dc
call fcn.00416290
mov ebx, eax
add esp, 4
mov dword [ebp - 0x20], ebx
test ebx, ebx
je 0x40a8f9
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 3
lea eax, [ebp - 0x28]
push ebx
push str.Register_Server_returned_0x_X
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_4772]
add esp, 0xc
lea ecx, [ebp - 0x28]
push 0
push 0x4b525c
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
jmp 0x40a8f9
push str.REGSE
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40a8fb
push 1
call fcn.00416290
add esp, 4
xor esi, esi
push str.CLONEEXCLUSIONLIST
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
push 0
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40aa27
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
push 0
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov edi, eax
cmp edi, 0xffffffff
jle 0x40a99a
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov esi, eax
lea ecx, [ebp - 0x34]
sub esi, edi
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub esi, eax
lea ecx, [ebp - 0x24]
push esi
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 6
test esi, esi
je 0x40a9d1
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov esi, eax
jmp 0x40a9d3
xor esi, esi
mov byte [ebp - 4], 4
test esi, esi
je 0x40aa18
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [esi]
push 0x4b542c
push 0x4b545c
push 0
push esi
call dword [eax + 0xc]
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.00432580
mov eax, dword [esi]
push esi
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push str.GENERATECONFIGCHECKSUMPARAMETERLIST
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
push 0
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40ab7c
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x34]
push 0
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov edi, eax
cmp edi, 0xffffffff
jle 0x40aac6
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov esi, eax
lea ecx, [ebp - 0x34]
sub esi, edi
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub esi, eax
lea ecx, [ebp - 0x24]
push esi
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x40aafd
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov edi, eax
jmp 0x40aaff
xor edi, edi
mov byte [ebp - 4], 8
mov eax, dword [edi]
push edi
call dword [eax + 4]
push 0x4b542c
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 0xb
mov ecx, eax
mov esi, dword [edi]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
push 0x4b545c
push 0
push edi
call dword [esi + 0xc]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 8
mov ecx, edi
call fcn.00433200
xor ebx, ebx
test al, al
mov eax, dword [edi]
sete bl
push edi
mov dword [ebp - 0x20], ebx
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0
push str.__GTEST_OUTPUT
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40ae1d
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x24]
push 0
push str.__GTEST_OUTPUT
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40ad85
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov ecx, 0xfffffff2
sub ecx, esi
add eax, ecx
lea ecx, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jle 0x40ac59
push 0
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1648]
cmp ax, 0x20
jne 0x40ac59
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
dec eax
lea ecx, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jg 0x40ac05
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jle 0x40acc3
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
dec eax
lea ecx, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1648]
cmp ax, 0x20
jne 0x40acc3
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
dec eax
lea ecx, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jg 0x40ac66
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jle 0x40ad24
push 0
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1648]
cmp ax, 0x3d
jne 0x40ad24
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
dec eax
lea ecx, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jg 0x40acd0
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jle 0x40ad85
push 0
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1648]
cmp ax, 0x20
jne 0x40ad85
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
dec eax
lea ecx, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
test eax, eax
jg 0x40ad31
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x13
test esi, esi
je 0x40adbc
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov esi, eax
jmp 0x40adbe
xor esi, esi
mov byte [ebp - 4], 0xd
test esi, esi
je 0x40ae0e
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [esi]
push 0x4b542c
push 0x4b545c
push 0
push esi
call dword [eax + 0xc]
push esi
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0xd
mov ecx, esi
call fcn.00446550
xor ecx, ecx
test al, al
mov eax, dword [esi]
sete cl
push esi
mov dword [ebp - 0x20], ecx
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0
push str.__MODBUSTCPSERVICEANDIDM
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
cmp eax, 0xffffffff
jle 0x40ae80
xor eax, eax
push 0x18e
push eax
mov word [ebp - 0x1e0], ax
lea eax, [ebp - 0x1de]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [ebp - 0x1e0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x40ae76
call fcn.0045eea0
call fcn.0040bb80
mov esi, 1
jmp 0x40af62
push 0
push str.__MODBUSTCPSERVICE
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40af62
xor eax, eax
push 0x18e
push eax
mov word [ebp - 0x1e0], ax
lea eax, [ebp - 0x1de]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [ebp - 0x1e0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x40af60
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x15
test esi, esi
je 0x40af08
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov esi, eax
jmp 0x40af0a
xor esi, esi
mov byte [ebp - 4], 2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [esi]
push 0x4b542c
push 0x4b545c
push 0
push esi
call dword [eax + 0xc]
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x34]
call fcn.0040bb80
call fcn.0040bb70
test al, al
je 0x40af4d
lea esp, [esp]
push 0x64
call ebx
call fcn.0040bb70
test al, al
jne 0x40af40
call fcn.0040bc30
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x38]
mov eax, dword [esi]
push esi
call dword [eax + 8]
xor esi, esi
push 0
push str.COLDSTARTCLONEFILE
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b152
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x24]
push 0
push str.COLDSTARTCLONEFILE
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b056
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov ecx, 0xffffffed
sub ecx, esi
add eax, ecx
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b049
push esi
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x28]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, esi
lea ecx, [ebp - 0x14]
dec eax
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2c]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x40b090
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov edi, eax
mov dword [ebp - 0x18], eax
jmp 0x40b095
xor edi, edi
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 0x17
mov eax, dword [edi]
push edi
call dword [eax + 4]
push 0x4b542c
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov ebx, eax
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov esi, eax
mov byte [ebp - 4], 0x1d
mov ecx, ebx
mov edi, dword [edi]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov ecx, esi
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
mov esi, dword [ebp - 0x18]
push eax
push 0
push esi
call dword [edi + 0xc]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push ecx
lea eax, [ebp - 0x28]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x17
mov ecx, esi
call fcn.00433c10
mov eax, dword [esi]
push esi
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0
push 0x4b5560
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b3f8
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x24]
push 0
push 0x4b5560
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b2d2
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov ecx, 0xffffffef
sub ecx, esi
add eax, ecx
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x14]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b2c5
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x28]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, esi
lea ecx, [ebp - 0x14]
dec eax
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x20]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b2b8
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x26
mov ecx, eax
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, esi
lea ecx, [ebp - 0x20]
dec eax
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x27
mov ecx, eax
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x28
test esi, esi
je 0x40b30c
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov edi, eax
mov dword [ebp - 0x20], eax
jmp 0x40b311
xor edi, edi
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 0x22
mov eax, dword [edi]
push edi
call dword [eax + 4]
push 0x4b542c
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov ebx, eax
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov esi, eax
mov byte [ebp - 4], 0x2a
mov ecx, ebx
mov edi, dword [edi]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov ecx, esi
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
mov esi, dword [ebp - 0x20]
push eax
push 0
push esi
call dword [edi + 0xc]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x28]
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x18]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x22
mov ecx, esi
call fcn.00434250
xor ebx, ebx
test al, al
mov eax, dword [esi]
push esi
sete bl
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
jmp 0x40b3fb
mov ebx, dword [ebp - 0x20]
push 0
push str.GENERATECUSTOMESIXMLFILE
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b6a0
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x24]
push 0
push str.GENERATECUSTOMESIXMLFILE
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b57b
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov ecx, 0xffffffe7
sub ecx, esi
add eax, ecx
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x14]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b56e
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x28]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, esi
lea ecx, [ebp - 0x14]
dec eax
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x20]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b561
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x34
mov ecx, eax
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, esi
lea ecx, [ebp - 0x20]
dec eax
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x35
mov ecx, eax
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x36
test esi, esi
je 0x40b5b5
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov edi, eax
mov dword [ebp - 0x20], eax
jmp 0x40b5ba
xor edi, edi
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 0x30
mov eax, dword [edi]
push edi
call dword [eax + 4]
push 0x4b542c
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov ebx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1c]
push str.Device
call dword [sym.imp.mfc120u.dll_Ordinal_290]
mov esi, eax
mov byte [ebp - 4], 0x38
mov ecx, ebx
mov edi, dword [edi]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov ecx, esi
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
mov esi, dword [ebp - 0x20]
push eax
push 0
push esi
call dword [edi + 0xc]
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x28]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x30
mov ecx, esi
call fcn.00433df0
xor ebx, ebx
test al, al
mov eax, dword [esi]
push esi
sete bl
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0
push str.GENERATESTREAMLINEDESIXMLFILES
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b8ef
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x24]
push 0
push str.GENERATESTREAMLINEDESIXMLFILES
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b7eb
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov ecx, 0xffffffe1
sub ecx, esi
add eax, ecx
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x20]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov esi, eax
cmp esi, 0xffffffff
jle 0x40b7de
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x3f
mov ecx, eax
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, esi
lea ecx, [ebp - 0x20]
dec eax
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x28]
push 0
push 0x4b555c
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b7c4
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov byte [ebp - 4], 0x41
mov ecx, eax
call dword [sym.imp.mfc120u.dll_Ordinal_14265]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
jmp 0x40b7d1
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0x600
call sub.mfc120u.dll_Ordinal_1506
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x42
test esi, esi
je 0x40b825
push 0x600
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, esi
push 0
call fcn.00405a00
mov edi, eax
mov dword [ebp - 0x2c], eax
jmp 0x40b82a
xor edi, edi
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x3d
mov eax, dword [edi]
push edi
call dword [eax + 4]
push 0x4b542c
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov ebx, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1c]
push str.Device
call dword [sym.imp.mfc120u.dll_Ordinal_290]
mov esi, eax
mov byte [ebp - 4], 0x44
mov ecx, ebx
mov edi, dword [edi]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov ecx, esi
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
mov esi, dword [ebp - 0x2c]
push eax
push 0
push esi
call dword [edi + 0xc]
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x18]
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x3d
mov ecx, esi
call fcn.004340d0
xor ebx, ebx
test al, al
mov eax, dword [esi]
push esi
sete bl
call dword [eax + 8]
xor esi, esi
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0
push str.IDMGENERATEITOOLSWIXINSTALLERFILES
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b90b
call fcn.004108a0
xor esi, esi
push 0
push str.IDMGENERATEINNOSETUPINSTALLERFILES
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
cmp eax, 0xffffffff
jle 0x40b927
call fcn.0040cf20
xor esi, esi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
test esi, esi
je 0x40b9ef
mov ecx, dword [0x638840]
call fcn.004019f0
push 0
test al, al
jne 0x40b960
push 0x10
push str.The_IDM_is_unable_to_run_unless_DCOM_is_installed.__The_IDM_will_terminate
call sub.mfc120u.dll_Ordinal_2262
xor ebx, ebx
jmp 0x40ba04
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x6389d4], eax
test eax, eax
je 0x40b98f
lea eax, [ebp - 0x1c]
push eax
push 0
push 0x6389a0
push 0x4080a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 4
push 4
mov ecx, 0x6389a0
call fcn.00408ba0
mov ecx, dword [0x638840]
call fcn.00401840
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
lea eax, [ebp - 0x50]
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x40b9da
mov edi, dword [sym.imp.USER32.dll_DispatchMessageW]
lea eax, [ebp - 0x50]
push eax
call edi
push 0
push 0
push 0
lea eax, [ebp - 0x50]
push eax
call esi
test eax, eax
jne 0x40b9c4
mov ecx, 0x6389a0
call fcn.004099e0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x6389a0
call fcn.00409d00
mov ecx, dword [0x638840]
call fcn.00401960
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004743e6
mov esp, ebp
pop ebp
ret 0x10