Function at 0x403850
Capabilities:
Check mutex on windows
Create process on windows

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x408036
push eax
mov eax, 0x1238
mov dword fs:[0], esp
call fcn.004076e0
push ebx
push ebp
push esi
push edi
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push str.MODRegMODReg
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4044c5
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x768]
or ebx, 0xffffffff
rep stosd dword es:[edi], eax
mov ecx, 0xdf
lea edi, [esp + 0x788]
rep stosd dword es:[edi], eax
mov edi, str.Paraname
mov ecx, ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x768]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x768]
push ecx
call fcn.004016cd
mov ebp, dword [sym.imp.MSVCRT.dll__stricmp]
lea edx, [esp + 0x78c]
push str.autoreg
push edx
call ebp
neg eax
sbb eax, eax
push 0x24
inc eax
mov dword [0x40bbb4], eax
call sub.MFC42.DLL_operatornew
add esp, 0x10
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x1250], 0
je 0x403932
mov ecx, eax
call fcn.00401a24
jmp 0x403934
xor eax, eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x1250], ebx
push ecx
mov ecx, eax
mov dword [0x40bbac], eax
call fcn.00401dc5
push str.langlang.xml
lea ecx, [esp + 0x24]
mov dword [esp + 0x1254], 1
call sub.MFC42.DLL_CString::operator
mov edx, dword [esp + 0x20]
mov ecx, dword [0x40bbac]
push edx
call fcn.00401af1
test eax, eax
jne 0x403997
call fcn.00401882
mov ecx, dword [0x40bbac]
test ecx, ecx
je 0x4044b5
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x4044b5
lea ecx, [esp + 0x10]
push str.Shield__AllWindowsName__MAIN_WINDOW_NAME
push ecx
mov ecx, dword [0x40bbac]
call fcn.00401cc2
push eax
mov ecx, 0x40bb68
mov byte [esp + 0x1254], 2
call fcn.004074d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 1
call fcn.0040747c
mov ecx, dword [0x40bbac]
lea edx, [esp + 0x24]
push str.Shield__MainGuiName__MAIN_GUI_NAME
push edx
call fcn.00401cc2
mov ecx, dword [0x40bbac]
lea eax, [esp + 0x10]
push str.Shield__AllWindowsName__IFPLUSOFT
push eax
mov byte [esp + 0x1258], 3
call fcn.00401cc2
mov eax, dword [eax]
push 0x40b540
push eax
call ebp
add esp, 8
lea ecx, [esp + 0x10]
test eax, eax
sete bl
call fcn.0040747c
test bl, bl
je 0x403a35
push 0x40bb68
mov ecx, 0x40bb6c
call fcn.004074d0
jmp 0x403ad8
lea ecx, [esp + 0x10]
push str.Shield__magicfix_window_reg_name
push ecx
mov ecx, dword [0x40bbac]
call fcn.00401cc2
mov eax, dword [eax]
push 0x40b540
push eax
call ebp
add esp, 8
lea ecx, [esp + 0x10]
test eax, eax
sete bl
call fcn.0040747c
test bl, bl
je 0x403a9f
mov ecx, dword [0x40bbac]
lea edx, [esp + 0x10]
push str.Shield__AllWindowsName__ABOUT_WINDOW_NAME_magicfix
push edx
call fcn.00401cc2
push eax
mov ecx, 0x40bb6c
mov byte [esp + 0x1254], 4
call fcn.004074d0
mov byte [esp + 0x1250], 3
lea ecx, [esp + 0x10]
jmp 0x403ad3
mov ecx, dword [0x40bbac]
lea eax, [esp + 0x10]
push str.Shield__AllWindowsName__ABOUT_WINDOW_NAME
push eax
call fcn.00401cc2
push eax
mov ecx, 0x40bb6c
mov byte [esp + 0x1254], 5
call fcn.004074d0
mov byte [esp + 0x1250], 3
lea ecx, [esp + 0x10]
call fcn.0040747c
lea ecx, [esp + 0x10]
push str.Shield__AllWindowsName__STR_SHIELD_AUTOREG
push ecx
mov ecx, dword [0x40bbac]
call fcn.00401cc2
push eax
mov ecx, 0x40bb64
mov byte [esp + 0x1254], 6
call fcn.004074d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 3
call fcn.0040747c
call fcn.004064b0
mov eax, dword [0x40bbb4]
mov ecx, 8
test eax, eax
je 0x403c58
xor eax, eax
lea edi, [esp + 0x3c8]
rep stosd dword es:[edi], eax
mov ecx, 0xdf
lea edi, [esp + 0x3e8]
rep stosd dword es:[edi], eax
or ebx, 0xffffffff
mov edi, str.License
mov ecx, ebx
lea edx, [esp + 0x3c8]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x3c8]
push ecx
call fcn.004016cd
add esp, 4
mov ecx, 0x40bba8
lea edi, [esp + 0x3e8]
push 0x64
call sub.MFC42.DLL_CString::GetBuffer
mov edx, eax
mov ecx, ebx
xor eax, eax
push ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40bba8
call sub.MFC42.DLL_CString::ReleaseBuffer
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x28]
lea edx, [esp + 0x28]
rep stosd dword es:[edi], eax
mov ecx, 0xdf
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
mov edi, str.MachineNum
mov ecx, ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
push ecx
call fcn.004016cd
add esp, 4
mov ecx, 0x40bba4
lea edi, [esp + 0x48]
push 0x64
call sub.MFC42.DLL_CString::GetBuffer
mov edx, eax
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
push 0x28
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [0x40bba4]
mov ecx, 0x40bba4
call sub.MFC42.DLL_CString::GetBuffer
push eax
push esi
call fcn.00406630
add esp, 8
mov ecx, 0x40bba4
push ebx
call sub.MFC42.DLL_CString::ReleaseBuffer
jmp 0x403e1a
xor eax, eax
lea edi, [esp + 0x28]
rep stosd dword es:[edi], eax
mov ecx, 0xdf
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
mov edi, str.MODReg
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x28]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
push ecx
call fcn.004016cd
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.License
call sub.MFC42.DLL_CString::CString_1
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0x125c], 7
call sub.MFC42.DLL_CString::CString_1
lea eax, [esp + 0x18]
mov byte [esp + 0x1258], 3
push eax
call fcn.004018e5
add esp, 0xc
push eax
mov ecx, 0x40bba8
mov byte [esp + 0x1254], 8
call fcn.004074d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 3
call fcn.0040747c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.MachineNum
call sub.MFC42.DLL_CString::CString_1
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0x125c], 9
call sub.MFC42.DLL_CString::CString_1
lea eax, [esp + 0x18]
mov byte [esp + 0x1258], 3
push eax
call fcn.004018e5
add esp, 0xc
push eax
mov ecx, 0x40bba4
mov byte [esp + 0x1254], 0xa
call fcn.004074d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 3
call fcn.0040747c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.RegNum
call sub.MFC42.DLL_CString::CString_1
mov byte [esp + 0x1254], 0xb
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call sub.MFC42.DLL_CString::CString_1
lea eax, [esp + 0x18]
mov byte [esp + 0x1258], 3
push eax
call fcn.004018e5
add esp, 0xc
push eax
mov ecx, 0x40bba0
mov byte [esp + 0x1254], 0xc
call fcn.004074d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 3
call fcn.0040747c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.REG_ONLINE
call sub.MFC42.DLL_CString::CString_1
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0x125c], 0xd
call sub.MFC42.DLL_CString::CString_1
lea eax, [esp + 0x18]
mov byte [esp + 0x1258], 3
push eax
call fcn.004018e5
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [0x40bb9c], eax
call fcn.0040747c
or ebx, 0xffffffff
mov eax, dword [0x40bba4]
mov esi, dword [sym.imp.MSVCRT.dll__mbscmp]
push 0x40ba60
push eax
call esi
add esp, 8
test eax, eax
je 0x404454
mov eax, dword [0x40bba8]
push 0x40ba60
push eax
call esi
add esp, 8
test eax, eax
je 0x404454
call fcn.00406250
test eax, eax
je 0x403e8f
lea ecx, [esp + 0x10]
push str.Shield__MODReg__NO_LICENSE_DOM
push ecx
mov ecx, dword [0x40bbac]
call fcn.00401cc2
push eax
mov ecx, 0x40bb98
mov byte [esp + 0x1254], 0xf
call fcn.004074d0
mov byte [esp + 0x1250], 3
lea ecx, [esp + 0x10]
jmp 0x403ec3
mov ecx, dword [0x40bbac]
lea edx, [esp + 0x10]
push str.Shield__MODReg__NO_LICENSE_FULL
push edx
call fcn.00401cc2
push eax
mov ecx, 0x40bb98
mov byte [esp + 0x1254], 0x10
call fcn.004074d0
mov byte [esp + 0x1250], 3
lea ecx, [esp + 0x10]
call fcn.0040747c
cmp dword [0x40bb9c], 1
jne 0x403ef8
call fcn.004044e0
test eax, eax
jne 0x403ef8
call fcn.00401882
mov ecx, dword [0x40bbac]
test ecx, ecx
je 0x4044a4
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x4044a4
mov ecx, dword [0x40bba0]
mov eax, dword [ecx - 8]
test eax, eax
mov eax, dword [0x40bbb8]
jne 0x403f5e
test eax, eax
jne 0x403f62
mov ecx, dword [0x40bbac]
lea edx, [esp + 0x14]
push str.Shield__MODReg__REG_FAILED
push edx
call fcn.00401cc2
lea eax, [esp + 0x14]
mov byte [esp + 0x1250], 0x11
push eax
call fcn.004062d0
mov ecx, dword [0x40bbac]
add esp, 4
test ecx, ecx
je 0x403f48
mov edx, dword [ecx]
push 1
call dword [edx]
call fcn.00401882
mov byte [esp + 0x1250], 3
lea ecx, [esp + 0x14]
jmp 0x40449f
test eax, eax
je 0x403f69
call fcn.00407060
jmp 0x403f6e
call fcn.00404f30
test eax, eax
je 0x40443d
mov ecx, dword [0x40bbac]
lea eax, [esp + 0x10]
push str.Shield__MODReg__NETREG_REG_SUCCEED
push eax
call fcn.00401cc2
mov eax, dword [0x40bbb4]
mov byte [esp + 0x1250], 0x12
test eax, eax
je 0x40410b
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call sub.MFC42.DLL_CString::CString
lea eax, [esp + 0xeac]
push str.ErrorMsg
push eax
call fcn.00401725
mov ecx, 0xe8
mov esi, eax
lea edi, [esp + 0xeb4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0xe8
lea esi, [esp + 0xeb4]
lea edi, [esp + 0xb14]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xb14]
push ecx
call fcn.0040171a
add esp, 0x10
lea edx, [esp + 0x10]
push 0x40
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call sub.MFC42.DLL_CString::CString
push ecx
mov byte [esp + 0x125c], 0x13
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x40bb64
call sub.MFC42.DLL_CString::CString
mov byte [esp + 0x125c], 0x12
call fcn.00401890
mov ecx, dword [0x40bbac]
add esp, 0xc
lea eax, [esp + 0x14]
push str.Shield__MainGuiName__MAIN_GUI_NAME
push eax
call fcn.00401cc2
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x3c8]
push 0xa
rep stosd dword es:[edi], eax
mov ecx, 0xdf
lea edi, [esp + 0x3ec]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3cc]
mov byte [esp + 0x1254], 0x14
push ecx
push 0x67
call dword [sym.imp.MSVCRT.dll__itoa]
mov edx, dword [0x40bb64]
mov ecx, ebx
mov edi, edx
xor eax, eax
add esp, 0xc
lea ebp, [esp + 0x3e8]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 2
mov eax, ecx
mov esi, edi
mov edi, ebp
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [edx - 8]
mov ecx, 0x40bb64
mov dword [esp + 0x76c], edx
call sub.MFC42.DLL_CString::GetBuffer
lea ecx, [esp + 0x3cc]
push eax
push ecx
push 0
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.00401401
add esp, 0x10
lea ecx, [esp + 0x14]
mov byte [esp + 0x1250], 0x12
call fcn.0040747c
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 3
call fcn.0040747c
jmp 0x40443d
push 0x40
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call sub.MFC42.DLL_CString::CString
push ecx
mov byte [esp + 0x125c], 0x15
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x40bb6c
call sub.MFC42.DLL_CString::CString
mov byte [esp + 0x125c], 0x12
call fcn.00401890
mov ecx, dword [0x40bbac]
add esp, 0xc
lea eax, [esp + 0x14]
push str.Shield__MODReg__ShowAdvAfterReg
push eax
call fcn.00401cc2
mov eax, dword [eax]
push 0x40b540
push eax
call ebp
add esp, 8
lea ecx, [esp + 0x14]
test eax, eax
sete bl
call fcn.0040747c
test bl, bl
je 0x404282
lea ecx, [esp + 0x14]
push ecx
call fcn.00406140
add esp, 4
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x14]
mov byte [esp + 0x1250], 0x16
mov eax, dword [edx - 8]
add eax, 0xfffffff9
push eax
lea eax, [esp + 0x20]
push eax
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1254], 0x17
call fcn.004074d0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1250], 0x16
call fcn.0040747c
mov ecx, dword [esp + 0x14]
push 0
push ecx
push str.StartMainGui
push str.guide.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x40bbac]
lea edx, [esp + 0x18]
push str.Shield__AllWindowsName__MAIN_WINDOW_NAME
push edx
call fcn.00401cc2
mov eax, dword [eax]
mov byte [esp + 0x1250], 0x18
push eax
push 0
call esi
test eax, eax
jne 0x404254
mov ecx, dword [0x40bbac]
lea eax, [esp + 0x1c]
push str.Shield__AllWindowsName_LOGON_WINDOW_NAME
push eax
call fcn.00401cc2
mov eax, dword [eax]
push eax
push 0
call esi
test eax, eax
lea ecx, [esp + 0x1c]
sete bl
call fcn.0040747c
test bl, bl
je 0x404254
mov bl, 1
jmp 0x404256
xor bl, bl
lea ecx, [esp + 0x18]
mov byte [esp + 0x1250], 0x16
call fcn.0040747c
test bl, bl
je 0x404271
push 0x32
call edi
jmp 0x4041fa
lea ecx, [esp + 0x14]
mov byte [esp + 0x1250], 0x12
call fcn.0040747c
lea ecx, [esp + 0x18]
push str.Shield__MODReg__ShowDemoAfterReg
push ecx
mov ecx, dword [0x40bbac]
call fcn.00401cc2
mov eax, dword [eax]
push 0x40b540
push eax
call ebp
add esp, 8
lea ecx, [esp + 0x18]
test eax, eax
sete bl
call fcn.0040747c
test bl, bl
je 0x4042d3
push 5
push 0
push 0
push str.http:__www.njanyue.com_flash.php
push str.open
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x40ba60
lea edx, [esp + 0xb0c]
push str.RegisterNumber
push edx
call fcn.004017cb
mov ecx, 0xe8
mov esi, eax
lea edi, [esp + 0xb14]
lea eax, [esp + 0x34]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0xe8
lea esi, [esp + 0xb14]
lea edi, [esp + 0x34]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0040171a
lea ecx, [esp + 0x38]
push 0xa
push ecx
push 0x67
call dword [sym.imp.MSVCRT.dll__itoa]
mov edi, dword [0x40bb6c]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x1c
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x48]
mov eax, ecx
mov esi, edi
mov edi, edx
push 2
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push str.MODReg_Reg.html
and ecx, 3
mov ebp, 0x37c
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x30]
mov dword [esp + 0x3cc], ebp
push ecx
push 0
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.00401401
mov ecx, dword [0x40bbac]
add esp, 0x10
lea edx, [esp + 0x18]
push str.Shield__AllWindowsName__ABOUT_WINDOW_NAME
push edx
call fcn.00401cc2
mov eax, dword [eax]
push eax
mov eax, dword [0x40bb6c]
push eax
call dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 8
lea ecx, [esp + 0x18]
test eax, eax
setne bl
call fcn.0040747c
test bl, bl
je 0x40441e
lea ecx, [esp + 0x18]
push str.Shield__AllWindowsName__ABOUT_WINDOW_NAME
push ecx
mov ecx, dword [0x40bbac]
call fcn.00401cc2
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x48]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
call fcn.0040747c
push 2
lea ecx, [esp + 0x2c]
push str.MODReg_Reg.html
push ecx
push 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x3d4], ebp
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.00401401
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::ReleaseBuffer
lea ecx, [esp + 0x10]
mov byte [esp + 0x1250], 3
call fcn.0040747c
or ebx, 0xffffffff
call fcn.00401882
mov ecx, dword [0x40bbac]
test ecx, ecx
je 0x4044a4
mov edx, dword [ecx]
push 1
call dword [edx]
jmp 0x4044a4
mov ecx, dword [0x40bbac]
lea eax, [esp + 0x14]
push str.Shield__MODReg__GET_PARAMETER_FAILED
push eax
call fcn.00401cc2
lea ecx, [esp + 0x14]
mov byte [esp + 0x1250], 0xe
push ecx
call fcn.004062d0
mov ecx, dword [0x40bbac]
add esp, 4
test ecx, ecx
je 0x40448e
mov edx, dword [ecx]
push 1
call dword [edx]
call fcn.00401882
mov byte [esp + 0x1250], 3
lea ecx, [esp + 0x14]
call fcn.0040747c
lea ecx, [esp + 0x24]
mov byte [esp + 0x1250], 1
call fcn.0040747c
lea ecx, [esp + 0x20]
mov dword [esp + 0x1250], ebx
call fcn.0040747c
mov ecx, dword [esp + 0x1248]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1244
ret