Function at 0x401a3b
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x41382a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
push esi
mov esi, ecx
push 1
call sub.MFC42.DLL_CWnd::UpdateData
lea ecx, [esp + 0x104]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xfc]
mov dword [esp + 0x118], 0
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xf4]
mov byte [esp + 0x118], 1
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xec]
mov byte [esp + 0x118], 2
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xe4]
mov byte [esp + 0x118], 3
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xdc]
mov byte [esp + 0x118], 4
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xd4]
mov byte [esp + 0x118], 5
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xcc]
mov byte [esp + 0x118], 6
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x118], 7
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xbc]
mov byte [esp + 0x118], 8
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xb4]
mov byte [esp + 0x118], 9
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xac]
mov byte [esp + 0x118], 0xa
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xa4]
mov byte [esp + 0x118], 0xb
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x9c]
mov byte [esp + 0x118], 0xc
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x94]
mov byte [esp + 0x118], 0xd
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x118], 0xe
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x84]
mov byte [esp + 0x118], 0xf
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x7c]
mov byte [esp + 0x118], 0x10
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x74]
mov byte [esp + 0x118], 0x11
call sub.MFC42.DLL_CString::CString_1
mov byte [esp + 0x118], 0x12
lea ecx, [esp + 0x6c]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x64]
mov byte [esp + 0x118], 0x13
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x118], 0x14
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x54]
mov byte [esp + 0x118], 0x15
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x118], 0x16
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x44]
mov byte [esp + 0x118], 0x17
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x3c]
mov byte [esp + 0x118], 0x18
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x34]
mov byte [esp + 0x118], 0x19
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x118], 0x1a
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x24]
mov byte [esp + 0x118], 0x1b
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x118], 0x1c
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x14]
mov byte [esp + 0x118], 0x1d
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xc]
mov byte [esp + 0x118], 0x1e
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 8]
mov byte [esp + 0x118], 0x1f
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x88]
mov byte [esp + 0x118], 0x20
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x118], 0x21
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x80]
mov byte [esp + 0x118], 0x22
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xe8]
mov byte [esp + 0x118], 0x23
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x78]
mov byte [esp + 0x118], 0x24
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xc0]
mov byte [esp + 0x118], 0x25
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x70]
mov byte [esp + 0x118], 0x26
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xf8]
mov byte [esp + 0x118], 0x27
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x68]
mov byte [esp + 0x118], 0x28
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xb8]
mov byte [esp + 0x118], 0x29
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x60]
mov byte [esp + 0x118], 0x2a
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xe0]
mov byte [esp + 0x118], 0x2b
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x58]
mov byte [esp + 0x118], 0x2c
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xb0]
mov byte [esp + 0x118], 0x2d
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x50]
mov byte [esp + 0x118], 0x2e
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x100]
mov byte [esp + 0x118], 0x2f
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x48]
mov byte [esp + 0x118], 0x30
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xa8]
mov byte [esp + 0x118], 0x31
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x40]
mov byte [esp + 0x118], 0x32
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xd8]
mov byte [esp + 0x118], 0x33
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x38]
mov byte [esp + 0x118], 0x34
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xa0]
mov byte [esp + 0x118], 0x35
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x30]
mov byte [esp + 0x118], 0x36
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xf0]
mov byte [esp + 0x118], 0x37
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x28]
mov byte [esp + 0x118], 0x38
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x98]
mov byte [esp + 0x118], 0x39
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x20]
mov byte [esp + 0x118], 0x3a
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xd0]
mov byte [esp + 0x118], 0x3b
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x18]
mov byte [esp + 0x118], 0x3c
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x90]
mov byte [esp + 0x118], 0x3d
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x10]
mov byte [esp + 0x118], 0x3e
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x108]
mov byte [esp + 0x118], 0x3f
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x10c]
mov byte [esp + 0x118], 0x40
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [esp + 0x120]
lea ecx, [esp + 0x10c]
push eax
push 0x4191bc
push ecx
mov byte [esp + 0x124], 0x41
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 4]
push str..__country_show.ini
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x104]
mov ecx, esi
push edx
push 0x3e9
mov byte [esp + 0x120], 0x42
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xfc]
mov ecx, esi
push eax
push 0x401
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xf4]
push ecx
push 0x3ec
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xec]
mov ecx, esi
push edx
push 0x3ed
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xe4]
mov ecx, esi
push eax
push 0x3ee
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xdc]
push ecx
push 0x443
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xd4]
mov ecx, esi
push edx
push 0x444
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xcc]
mov ecx, esi
push eax
push 0x445
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xc4]
push ecx
push 0x446
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xbc]
mov ecx, esi
push edx
push 0x44b
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xb4]
mov ecx, esi
push eax
push 0x44c
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xac]
push ecx
push 0x44d
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xa4]
mov ecx, esi
push edx
push 0x44e
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x9c]
mov ecx, esi
push eax
push 0x453
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x94]
push ecx
push 0x454
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x8c]
mov ecx, esi
push edx
push 0x455
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x84]
mov ecx, esi
push eax
push 0x456
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x7c]
push ecx
push 0x45b
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x74]
mov ecx, esi
push edx
push 0x45c
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x6c]
mov ecx, esi
push eax
push 0x45d
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x64]
push ecx
push 0x45e
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x5c]
mov ecx, esi
push edx
push 0x463
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x54]
mov ecx, esi
push eax
push 0x464
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x4c]
push ecx
push 0x465
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x44]
mov ecx, esi
push edx
push 0x466
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x3c]
mov ecx, esi
push eax
push 0x46b
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x34]
push ecx
push 0x46c
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x2c]
mov ecx, esi
push edx
push 0x46d
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x24]
mov ecx, esi
push eax
push 0x46e
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x1c]
push ecx
push 0x473
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0x474
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xc]
mov ecx, esi
push eax
push 0x475
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 8]
push ecx
push 0x476
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x88]
mov ecx, esi
push edx
push 0x3f8
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xc8]
mov ecx, esi
push eax
push 0x437
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x80]
push ecx
push 0x3fa
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xe8]
mov ecx, esi
push edx
push 0x3fb
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x78]
mov ecx, esi
push eax
push 0x447
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xc0]
push ecx
push 0x44a
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x70]
mov ecx, esi
push edx
push 0x448
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xf8]
mov ecx, esi
push eax
push 0x449
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x68]
push ecx
push 0x44f
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xb8]
mov ecx, esi
push edx
push 0x452
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x60]
mov ecx, esi
push eax
push 0x450
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xe0]
push ecx
push 0x451
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x58]
mov ecx, esi
push edx
push 0x457
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xb0]
mov ecx, esi
push eax
push 0x45a
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x50]
push ecx
push 0x458
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x100]
mov ecx, esi
push edx
push 0x459
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x48]
mov ecx, esi
push eax
push 0x45f
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xa8]
push ecx
push 0x462
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x40]
mov ecx, esi
push edx
push 0x460
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0xd8]
mov ecx, esi
push eax
push 0x461
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x38]
push ecx
push 0x467
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xa0]
mov ecx, esi
push edx
push 0x46a
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x30]
mov ecx, esi
push eax
push 0x468
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0xf0]
push ecx
push 0x469
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x28]
push edx
push 0x46f
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x98]
mov ecx, esi
push eax
push 0x472
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x20]
push ecx
push 0x470
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0xd0]
mov ecx, esi
push edx
push 0x471
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x18]
mov ecx, esi
push eax
push 0x477
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea ecx, [esp + 0x90]
push ecx
push 0x47a
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea edx, [esp + 0x10]
mov ecx, esi
push edx
push 0x478
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
lea eax, [esp + 0x108]
mov ecx, esi
push eax
push 0x479
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
mov ecx, esi
call fcn.00401620
and eax, 0xff
lea ecx, [esp + 0x104]
push eax
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401730
push eax
lea edx, [esp + 0x100]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401630
and eax, 0xff
push eax
lea eax, [esp + 0xf8]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401830
push eax
lea ecx, [esp + 0xf0]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401920
push eax
lea edx, [esp + 0xe8]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401740
push eax
lea eax, [esp + 0xe0]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401640
and eax, 0xff
lea ecx, [esp + 0xd4]
push eax
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401840
push eax
lea edx, [esp + 0xd0]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401930
push eax
lea eax, [esp + 0xc8]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401750
push eax
lea ecx, [esp + 0xc0]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401650
and eax, 0xff
lea edx, [esp + 0xb4]
push eax
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401850
push eax
lea eax, [esp + 0xb0]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401940
push eax
lea ecx, [esp + 0xa8]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401760
push eax
lea edx, [esp + 0xa0]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401660
and eax, 0xff
push eax
lea eax, [esp + 0x98]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401860
push eax
lea ecx, [esp + 0x90]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401950
push eax
lea edx, [esp + 0x88]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401770
push eax
lea eax, [esp + 0x80]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401670
and eax, 0xff
lea ecx, [esp + 0x74]
push eax
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401870
push eax
lea edx, [esp + 0x70]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401960
push eax
lea eax, [esp + 0x68]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401780
push eax
lea ecx, [esp + 0x60]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401680
and eax, 0xff
lea edx, [esp + 0x54]
push eax
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401880
push eax
lea eax, [esp + 0x50]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401970
push eax
lea ecx, [esp + 0x48]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401790
push eax
lea edx, [esp + 0x40]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401690
and eax, 0xff
push eax
lea eax, [esp + 0x38]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401890
push eax
lea ecx, [esp + 0x30]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401980
push eax
lea edx, [esp + 0x28]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004017a0
push eax
lea eax, [esp + 0x20]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004016a0
and eax, 0xff
lea ecx, [esp + 0x14]
push eax
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004018a0
push eax
lea edx, [esp + 0x10]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401990
push eax
lea eax, [esp + 0xc]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004017b0
push eax
lea ecx, [esp + 0x8c]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004016b0
and eax, 0xff
push eax
push 0x4191bc
lea edx, [esp + 0xd0]
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004018b0
push eax
lea eax, [esp + 0x84]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004019a0
push eax
lea ecx, [esp + 0xec]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004017c0
push eax
lea edx, [esp + 0x7c]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004016c0
and eax, 0xff
push eax
lea eax, [esp + 0xc4]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004018c0
push eax
lea ecx, [esp + 0x74]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004019b0
push eax
lea edx, [esp + 0xfc]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004017d0
push eax
lea eax, [esp + 0x6c]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004016d0
and eax, 0xff
lea ecx, [esp + 0xb8]
push eax
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004018d0
push eax
lea edx, [esp + 0x64]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004019c0
push eax
lea eax, [esp + 0xe4]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004017e0
push eax
lea ecx, [esp + 0x5c]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004016e0
and eax, 0xff
lea edx, [esp + 0xb0]
push eax
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.0040b860
push eax
lea eax, [esp + 0x54]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004019d0
push eax
lea ecx, [esp + 0x104]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004017f0
push eax
lea edx, [esp + 0x4c]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004016f0
and eax, 0xff
push eax
lea eax, [esp + 0xac]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004018e0
push eax
lea ecx, [esp + 0x44]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004019e0
push eax
lea edx, [esp + 0xdc]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401800
push eax
lea eax, [esp + 0x3c]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401700
and eax, 0xff
lea ecx, [esp + 0xa0]
push eax
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004018f0
push eax
lea edx, [esp + 0x34]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.004019f0
push eax
lea eax, [esp + 0xf4]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401810
push eax
lea ecx, [esp + 0x2c]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401710
and eax, 0xff
lea edx, [esp + 0x98]
push eax
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401900
push eax
lea eax, [esp + 0x24]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401a00
push eax
lea ecx, [esp + 0xd4]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401820
push eax
lea edx, [esp + 0x1c]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401720
and eax, 0xff
push eax
lea eax, [esp + 0x94]
push 0x4191bc
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401910
push eax
lea ecx, [esp + 0x14]
push 0x4191bc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
call fcn.00401a10
push eax
lea edx, [esp + 0x10c]
push 0x4191bc
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x110]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
add esp, 0xc
push eax
push ecx
push 0x4191a4
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xfc]
push edx
push eax
push 0x419198
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xf4]
push ecx
push edx
push str.color1
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xec]
push eax
push ecx
push 0x41918c
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xe4]
push edx
push eax
push 0x419188
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xdc]
push ecx
push edx
push 0x419184
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
push eax
push ecx
push str.color2
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xcc]
push edx
push eax
push 0x419178
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc4]
push ecx
push edx
push 0x419174
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xbc]
push eax
push ecx
push 0x419170
push str.SHOW
call esi
mov edx, dword [esp + 4]
push edx
mov eax, dword [esp + 0xb8]
push eax
push str.color3
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xac]
push ecx
push edx
push 0x419164
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xa4]
push eax
push ecx
push 0x419160
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x9c]
push edx
push eax
push 0x41915c
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x94]
push ecx
push edx
push str.color4
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x8c]
push eax
push ecx
push 0x419150
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x84]
push edx
push eax
push 0x41914c
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x7c]
push ecx
push edx
push 0x419148
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x74]
push eax
push ecx
push str.color5
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x6c]
push edx
push eax
push 0x41913c
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x64]
push ecx
push edx
push 0x419138
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x5c]
push eax
push ecx
push 0x419134
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x54]
push edx
push eax
push str.color6
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x4c]
push ecx
push edx
push 0x419128
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x44]
push eax
push ecx
push 0x419124
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x3c]
push edx
push eax
push 0x419120
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x34]
push ecx
push edx
push str.color7
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
push 0x419114
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x24]
push edx
push eax
push 0x419110
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push 0x41910c
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push str.color8
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xc]
push edx
push eax
push 0x419100
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
push ecx
push edx
push 0x4190fc
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x88]
push eax
push ecx
push 0x4190f8
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xc8]
push edx
push eax
push str.color9
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x80]
push ecx
push edx
push 0x4190ec
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xe8]
push eax
push ecx
push 0x4190e8
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x78]
push edx
push eax
push str.wj10
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc0]
push ecx
push edx
push str.color10
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x70]
push eax
push ecx
push 0x4190d4
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xf8]
push edx
push eax
push 0x4190d0
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x68]
push ecx
push edx
push str.wj11
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb8]
push eax
push ecx
push str.color11
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x60]
push edx
push eax
push 0x4190bc
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xe0]
push ecx
push edx
push 0x4190b8
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x58]
push eax
push ecx
push str.wj12
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xb0]
push edx
push eax
push str.color12
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x50]
push ecx
push edx
push 0x4190a4
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x100]
push eax
push ecx
push 0x4190a0
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x48]
push edx
push eax
push str.wj13
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xa8]
push ecx
push edx
push str.color13
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
push eax
push ecx
push 0x41908c
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xd8]
push edx
push eax
push 0x419088
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x38]
push ecx
push edx
push str.wj14
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xa0]
push eax
push ecx
push str.color14
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x30]
push edx
push eax
push 0x419074
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xf0]
push ecx
push edx
push 0x419070
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x28]
push eax
push ecx
push str.wj15
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x98]
push edx
push eax
push str.color15
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x20]
push ecx
push edx
push 0x41905c
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd0]
push eax
push ecx
push 0x419058
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x18]
push edx
push eax
push str.wj16
push str.SHOW
call esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x90]
push ecx
push edx
push str.color16
push str.SHOW
call esi
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x10]
push eax
push ecx
push 0x419044
push str.SHOW
call esi
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x108]
push edx
push eax
push 0x419040
push str.SHOW
call esi
lea ecx, [esp + 4]
mov byte [esp + 0x118], 0x41
call fcn.00412de6
lea ecx, [esp + 0x10c]
mov byte [esp + 0x118], 0x40
call fcn.00412de6
lea ecx, [esp + 0x108]
mov byte [esp + 0x118], 0x3f
call fcn.00412de6
lea ecx, [esp + 0x10]
mov byte [esp + 0x118], 0x3e
call fcn.00412de6
lea ecx, [esp + 0x90]
mov byte [esp + 0x118], 0x3d
call fcn.00412de6
lea ecx, [esp + 0x18]
mov byte [esp + 0x118], 0x3c
call fcn.00412de6
lea ecx, [esp + 0xd0]
mov byte [esp + 0x118], 0x3b
call fcn.00412de6
mov byte [esp + 0x118], 0x3a
lea ecx, [esp + 0x20]
call fcn.00412de6
lea ecx, [esp + 0x98]
mov byte [esp + 0x118], 0x39
call fcn.00412de6
lea ecx, [esp + 0x28]
mov byte [esp + 0x118], 0x38
call fcn.00412de6
lea ecx, [esp + 0xf0]
mov byte [esp + 0x118], 0x37
call fcn.00412de6
lea ecx, [esp + 0x30]
mov byte [esp + 0x118], 0x36
call fcn.00412de6
lea ecx, [esp + 0xa0]
mov byte [esp + 0x118], 0x35
call fcn.00412de6
lea ecx, [esp + 0x38]
mov byte [esp + 0x118], 0x34
call fcn.00412de6
lea ecx, [esp + 0xd8]
mov byte [esp + 0x118], 0x33
call fcn.00412de6
lea ecx, [esp + 0x40]
mov byte [esp + 0x118], 0x32
call fcn.00412de6
lea ecx, [esp + 0xa8]
mov byte [esp + 0x118], 0x31
call fcn.00412de6
lea ecx, [esp + 0x48]
mov byte [esp + 0x118], 0x30
call fcn.00412de6
lea ecx, [esp + 0x100]
mov byte [esp + 0x118], 0x2f
call fcn.00412de6
lea ecx, [esp + 0x50]
mov byte [esp + 0x118], 0x2e
call fcn.00412de6
lea ecx, [esp + 0xb0]
mov byte [esp + 0x118], 0x2d
call fcn.00412de6
lea ecx, [esp + 0x58]
mov byte [esp + 0x118], 0x2c
call fcn.00412de6
lea ecx, [esp + 0xe0]
mov byte [esp + 0x118], 0x2b
call fcn.00412de6
lea ecx, [esp + 0x60]
mov byte [esp + 0x118], 0x2a
call fcn.00412de6
lea ecx, [esp + 0xb8]
mov byte [esp + 0x118], 0x29
call fcn.00412de6
lea ecx, [esp + 0x68]
mov byte [esp + 0x118], 0x28
call fcn.00412de6
lea ecx, [esp + 0xf8]
mov byte [esp + 0x118], 0x27
call fcn.00412de6
lea ecx, [esp + 0x70]
mov byte [esp + 0x118], 0x26
call fcn.00412de6
lea ecx, [esp + 0xc0]
mov byte [esp + 0x118], 0x25
call fcn.00412de6
lea ecx, [esp + 0x78]
mov byte [esp + 0x118], 0x24
call fcn.00412de6
lea ecx, [esp + 0xe8]
mov byte [esp + 0x118], 0x23
call fcn.00412de6
lea ecx, [esp + 0x80]
mov byte [esp + 0x118], 0x22
call fcn.00412de6
lea ecx, [esp + 0xc8]
mov byte [esp + 0x118], 0x21
call fcn.00412de6
lea ecx, [esp + 0x88]
mov byte [esp + 0x118], 0x20
call fcn.00412de6
mov byte [esp + 0x118], 0x1f
lea ecx, [esp + 8]
call fcn.00412de6
lea ecx, [esp + 0xc]
mov byte [esp + 0x118], 0x1e
call fcn.00412de6
lea ecx, [esp + 0x14]
mov byte [esp + 0x118], 0x1d
call fcn.00412de6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x118], 0x1c
call fcn.00412de6
lea ecx, [esp + 0x24]
mov byte [esp + 0x118], 0x1b
call fcn.00412de6
lea ecx, [esp + 0x2c]
mov byte [esp + 0x118], 0x1a
call fcn.00412de6
lea ecx, [esp + 0x34]
mov byte [esp + 0x118], 0x19
call fcn.00412de6
lea ecx, [esp + 0x3c]
mov byte [esp + 0x118], 0x18
call fcn.00412de6
lea ecx, [esp + 0x44]
mov byte [esp + 0x118], 0x17
call fcn.00412de6
lea ecx, [esp + 0x4c]
mov byte [esp + 0x118], 0x16
call fcn.00412de6
lea ecx, [esp + 0x54]
mov byte [esp + 0x118], 0x15
call fcn.00412de6
lea ecx, [esp + 0x5c]
mov byte [esp + 0x118], 0x14
call fcn.00412de6
lea ecx, [esp + 0x64]
mov byte [esp + 0x118], 0x13
call fcn.00412de6
lea ecx, [esp + 0x6c]
mov byte [esp + 0x118], 0x12
call fcn.00412de6
lea ecx, [esp + 0x74]
mov byte [esp + 0x118], 0x11
call fcn.00412de6
lea ecx, [esp + 0x7c]
mov byte [esp + 0x118], 0x10
call fcn.00412de6
lea ecx, [esp + 0x84]
mov byte [esp + 0x118], 0xf
call fcn.00412de6
lea ecx, [esp + 0x8c]
mov byte [esp + 0x118], 0xe
call fcn.00412de6
lea ecx, [esp + 0x94]
mov byte [esp + 0x118], 0xd
call fcn.00412de6
lea ecx, [esp + 0x9c]
mov byte [esp + 0x118], 0xc
call fcn.00412de6
lea ecx, [esp + 0xa4]
mov byte [esp + 0x118], 0xb
call fcn.00412de6
lea ecx, [esp + 0xac]
mov byte [esp + 0x118], 0xa
call fcn.00412de6
lea ecx, [esp + 0xb4]
mov byte [esp + 0x118], 9
call fcn.00412de6
lea ecx, [esp + 0xbc]
mov byte [esp + 0x118], 8
call fcn.00412de6
lea ecx, [esp + 0xc4]
mov byte [esp + 0x118], 7
call fcn.00412de6
lea ecx, [esp + 0xcc]
mov byte [esp + 0x118], 6
call fcn.00412de6
lea ecx, [esp + 0xd4]
mov byte [esp + 0x118], 5
call fcn.00412de6
mov byte [esp + 0x118], 4
lea ecx, [esp + 0xdc]
call fcn.00412de6
lea ecx, [esp + 0xe4]
mov byte [esp + 0x118], 3
call fcn.00412de6
lea ecx, [esp + 0xec]
mov byte [esp + 0x118], 2
call fcn.00412de6
lea ecx, [esp + 0xf4]
mov byte [esp + 0x118], 1
call fcn.00412de6
lea ecx, [esp + 0xfc]
mov byte [esp + 0x118], 0
call fcn.00412de6
lea ecx, [esp + 0x104]
mov dword [esp + 0x118], 0xffffffff
call fcn.00412de6
mov ecx, dword [esp + 0x110]
pop esi
mov dword fs:[0], ecx
add esp, 0x118
ret 4