Function at 0x40d250
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x417727
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push esi
mov esi, ecx
mov dword [esp + 0x18], 0
lea ecx, [esp + 8]
mov dword [esp + 0x30], 1
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0xc]
mov byte [esp + 0x30], 2
call sub.MFC42.DLL_CString::CString_1
push 0x17
push 0x5e
push 0xe
lea eax, [esp + 0x18]
mov bl, 3
push 0x423e44
push eax
mov byte [esp + 0x44], bl
mov dword [esp + 0x24], 0
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x20]
add esp, 0x14
push ecx
push 0x423e40
lea ecx, [esp + 0x44]
call sub.MFC42.DLL_CString::Replace_1
lea edx, [esp + 0x3c]
lea ecx, [esp + 8]
push edx
call fcn.0041529c
mov eax, dword [esp + 8]
lea edx, [esp + 0x10]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov ecx, esi
call fcn.0040d0d0
mov eax, dword [esp + 0x10]
lea ecx, [esp + 8]
push eax
push 0x421abc
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::MakeReverse
push 0x1a
lea edx, [esp + 0x10]
push 0x423e3c
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push eax
push 0x423e38
call sub.MFC42.DLL_CString::Replace_1
push 0x16
lea ecx, [esp + 0x10]
push 0x423e3c
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push edx
push 0x423e34
call sub.MFC42.DLL_CString::Replace_1
push 0x14
lea eax, [esp + 0x10]
push 0x423e3c
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x18]
add esp, 0xc
push ecx
push 0x423e30
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::Replace_1
push 0xf
lea edx, [esp + 0x10]
push 0x423e3c
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push eax
push 0x423e2c
call sub.MFC42.DLL_CString::Replace_1
push 0x13
lea ecx, [esp + 0x10]
push 0x423e3c
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push edx
push 0x423e28
call sub.MFC42.DLL_CString::Replace_1
push 0x15
lea eax, [esp + 0x10]
push 0x423e3c
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x18]
add esp, 0xc
push ecx
push 0x422250
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::Replace_1
push 0x10
lea edx, [esp + 0x10]
push 0x423e3c
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push eax
push 0x423e24
call sub.MFC42.DLL_CString::Replace_1
push 0x18
lea ecx, [esp + 0x10]
push 0x423e3c
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push edx
push 0x423e20
call sub.MFC42.DLL_CString::Replace_1
push 4
lea eax, [esp + 0x10]
push 0x423e3c
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x18]
add esp, 0xc
push ecx
push 0x421ac4
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::Replace_1
push 1
lea edx, [esp + 0x10]
push 0x423e3c
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push eax
push 0x421618
call sub.MFC42.DLL_CString::Replace_1
push 0x19
push 0x423e3c
lea ecx, [esp + 0x14]
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 8]
push edx
push 0x422030
call sub.MFC42.DLL_CString::Replace_1
push 2
lea eax, [esp + 0x10]
push 0x423e3c
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x18]
add esp, 0xc
push ecx
push 0x423e1c
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::Replace_1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x423e18
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 4
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423e14
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x40], 5
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x34], 6
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423e10
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 7
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423e0c
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x40], 8
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
mov byte [esp + 0x30], 9
push eax
lea ecx, [esp + 0xc]
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423e08
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 0xa
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423e04
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x40], 0xb
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x34], 0xc
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423e00
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 0xd
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423dfc
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x40], 0xe
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x34], 0xf
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423df8
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423df4
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x40], 0x11
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x34], 0x12
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423df0
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 0x13
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423dec
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x40], 0x14
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x34], 0x15
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x423de8
call fcn.0041528a
push ecx
mov byte [esp + 0x38], 0x16
mov ecx, esp
mov dword [esp + 0x28], esp
push str.MjfGBL9z725a1Y___
call fcn.0041528a
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x40], 0x17
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov byte [esp + 0x40], bl
call fcn.0040de80
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x34], 0x18
call fcn.0041529c
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], bl
call sub.MFC42.DLL_CString::CString
mov esi, dword [esp + 0x38]
lea ecx, [esp + 8]
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::CString_2
mov dword [esp + 0x18], 1
lea ecx, [esp + 0xc]
mov byte [esp + 0x30], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 8]
mov byte [esp + 0x30], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x3c]
mov byte [esp + 0x30], 0
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x28]
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x2c
ret 8