Function at 0x4d7d7e
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x512f8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x344
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::CString_3
mov byte [ebp - 4], 1
push 0x595dec
lea eax, [ebp - 0x314]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x314]
push ecx
push 0x5b78a4
push 0x595e30
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x595e38
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push str.NoChangingWallpaper
lea edx, [ebp - 0x314]
push edx
push 0x80000002
call fcn.00402ed5
add esp, 0xc
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0
push 0x5b78a4
push str._sSoftwareMicrosoftInternet_ExplorerDesktopComponents
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x31c]
push ecx
push 0x20119
push 0
lea edx, [ebp - 0x314]
push edx
push 0x80000003
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4d8063
mov dword [ebp - 0x318], 0
push 0x100
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x318]
mov dword [ebp - 0x330], ecx
mov edx, dword [ebp - 0x330]
push edx
mov eax, dword [ebp - 0x31c]
push eax
mov ecx, dword [ebp - 0x318]
add ecx, 1
mov dword [ebp - 0x318], ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x4d7ec4
jmp 0x4d8056
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0x314]
push eax
push 0x595e9c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push str.FriendlyName
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x320]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x334], eax
mov edx, dword [ebp - 0x334]
mov dword [ebp - 0x338], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x338]
push eax
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x320]
call sub.MFC42.DLL_CString::CString
push str.Security
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4d7f91
push str.Security_v2
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4d7f91
push str.Security_info_v2
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x4d7fb2
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
mov ecx, dword [ebp - 0x318]
sub ecx, 1
mov dword [ebp - 0x318], ecx
push str.Source
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x324]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x340], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x340]
push ecx
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x324]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::MakeUpper
push str.WARNHP.HTML
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4d8051
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
mov edx, dword [ebp - 0x318]
sub edx, 1
mov dword [ebp - 0x318], edx
jmp 0x4d7e80
mov eax, dword [ebp - 0x31c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x5b78a4
push 0x595ef4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x595f10
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x328]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x344], eax
mov edx, dword [ebp - 0x344]
mov dword [ebp - 0x348], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x348]
push eax
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x328]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::MakeUpper
push 0x5b78a4
push str._sSoftwareMicrosoftInternet_ExplorerDesktopGeneral
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x595f54
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x32c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x34c], eax
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x350], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x350]
push eax
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x32c]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::MakeUpper
push 0x595f60
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.39B6FD42_8SKE_838D_9875_3YTA2897936Q.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str._HELP_INSTRUCTIONS.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str._HOWDO_TEXT.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str._INSTRUCTION.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str._LOCKY_RECOVER_INSTRUCTIONS.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str._WHAT_IS.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.BLACKHUNT_BG.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.TEMPTMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.8A0B51A0
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.9E1BBE88
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.AB2DA064
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596048
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.ASASIN.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596060
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.BACK.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.BAD_GOPHER.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x59608c
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x5960a4
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.CYBORG_DECRYPT.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x5960c4
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x5960c8
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.DECRYPT_ALL_FILES
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.DECRYPTION_INSTRUCTIONS.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x59610c
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596118
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.DIABLO6.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.GOOD_MORNING_DECRYPT_FILES.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.HELP_RESTORE_FILES.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.HELP_TO_SAVE_FILES.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.HELP_TO_SAVE_YOUR_FILES.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.HOWTO_RESTORE_FILES.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.LOPTR.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.LUKITUS.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.NEWSTYLE.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.OSIRIS.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.POPADALOVODESKTOP.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.RANSOM.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.READ_DECRYPT_DATA_INSTRUCTIONS.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.README.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.RONDOWALLPAPER.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596254
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.WALLPAPER.PNG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596270
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596280
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596290
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x59629c
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.WP.JPG
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x5962ac
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.YKCOL.BMP
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x5962c0
lea ecx, [ebp - 0x114]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.TMP.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.AHTN.HTM
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.AUTONOMIA.BMP
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.CRITICAL_WARNING.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.CTFMONB.BMP
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push 0x596314
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.DEFAULT.HTM
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.DESKTOP.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.SCREEN.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.WARNING.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.WARNINGS.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.WPPP.HTML
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.WP.BMP
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.BSW.BMP
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d8a07
push str.YOD.HTM
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4d8bc0
push 0x5b78a4
push str._sControl_PanelDesktop
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.ConvertedWallpaper
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push 0x5b8e58
push 0x54
push str.OriginalWallpaper
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x5b8e5c
push 0x54
push 0x5963c8
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push str.SoftwareMicrosoftInternet_ExplorerDesktopGeneral
lea ecx, [ebp - 0x314]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x314]
push edx
push 0x5b78a4
push 0x59640c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b8e60
push 0x54
push str.BackupWallpaper
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x596424
push 0x44
push str.ComponentsPositioned
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x5b8e64
push 0x54
push 0x596440
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x59644c
push 0x54
push str.WallpaperStyle
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
lea eax, [ebp - 0x314]
push eax
push 0x80000002
call fcn.00402a6b
add esp, 8
push 0x5b78a4
push str._sSoftwareMicrosoftInternet_ExplorerDesktopSafeModeGeneral
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b8e68
push 0x54
push str.Wallpaper
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktop
lea ecx, [ebp - 0x314]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x314]
push edx
push 0x5b78a4
push 0x5964f4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
lea eax, [ebp - 0x314]
push eax
push 0x80000002
call fcn.00402a6b
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::CString
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret