Function at 0x4b4940
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x210]
sub esp, 0x210
push 0xffffffffffffffff
push 0x4bf610
mov eax, dword fs:[0]
push eax
sub esp, 0x1f0
mov eax, dword [0x51e12c]
xor eax, ebp
mov dword [ebp + 0x20c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
xor ebx, ebx
mov dword [ebp - 0x30], ebx
push 1
push str.SeRestorePrivilege
mov dword [ebp - 4], ebx
call fcn.004779e0
push 1
push str.SeBackupPrivilege
mov ecx, esi
call fcn.004779e0
push 0x48
call fcn.0046cf20
mov esi, eax
add esp, 4
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 1
test esi, esi
je 0x4b4a00
push 0x48
mov ecx, esi
call fcn.004535a0
push 0xfde9
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0044a980
add esp, 0xc
mov ebx, 1
mov byte [ebp - 4], 2
mov ecx, eax
mov dword [ebp - 0x30], ebx
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450675
mov edi, eax
mov dword [ebp - 0x30], eax
jmp 0x4b4a05
xor edi, edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 4], 0
test bl, 1
je 0x4b4a1c
lea ecx, [ebp - 0x154]
call fcn.004549b0
push 0
mov ecx, edi
call fcn.00450744
test al, al
je 0x4b5544
lea eax, [ebp]
push 0x4e6f00
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0044f665
lea ecx, [ebp]
mov byte [ebp - 4], 0
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x4b5538
lea eax, [ebp - 0x78]
push 0x4e6f10
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.0044f665
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x4b5538
lea ecx, [ebp - 0x1e4]
call fcn.00454970
lea ecx, [ebp - 0x1cc]
call fcn.00454970
lea ecx, [ebp - 0x1b4]
call fcn.00454970
lea ecx, [ebp - 0x19c]
call fcn.00454970
lea ecx, [ebp - 0x184]
call fcn.00454970
lea ecx, [ebp - 0x1fc]
call fcn.00454970
mov byte [ebp - 4], 0xb
nop dword [eax + eax]
push 0x4fbda8
lea ecx, [ebp - 0xf4]
call fcn.00455b30
push 0x4fbda8
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xc
call fcn.00455b30
push 0x4fbda8
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xd
call fcn.00455b30
push 0x4fbda8
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xe
call fcn.00455b30
push 0x4fbda8
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xf
call fcn.00455b30
push 0x4fbda8
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x10
call fcn.00455b30
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x11
push 0x4e6f1c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00450147
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x11
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4b4bde
lea eax, [ebp - 0x74]
push 0x4e6f1c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00450147
push eax
lea ecx, [ebp - 0xf4]
call fcn.00464ea0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x80]
push 0x4e6f28
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00450147
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4b4c5a
lea eax, [ebp - 0x84]
push 0x4e6f28
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00450147
push eax
lea ecx, [ebp - 0xdc]
call fcn.00464ea0
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x88]
push 0x4e2428
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00455b30
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450147
lea ecx, [ebp - 0xc4]
mov edi, eax
call fcn.004549b0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4b4d61
lea eax, [ebp - 0xa8]
push 0x4e2428
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450147
push eax
lea ecx, [ebp - 0xc4]
call fcn.00455b30
push 0
push 0xfde9
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004a3840
add esp, 0x10
lea ecx, [ebp - 0x124]
push eax
call fcn.00459ce0
lea ecx, [ebp - 0x16c]
call fcn.004549b0
lea ecx, [ebp - 0xc4]
call fcn.004549b0
lea ecx, [ebp - 0x2c]
call fcn.004549b0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0xac]
push 0x4e6f34
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00450147
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x11
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4b4e1a
lea eax, [ebp - 0x58]
push 0x4e6f34
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00450147
push eax
lea ecx, [ebp - 0xc4]
call fcn.00455b30
push 0
push 0xfde9
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004a3840
add esp, 0x10
lea ecx, [ebp - 0x10c]
push eax
call fcn.00459ce0
lea ecx, [ebp - 0x2c]
call fcn.004549b0
lea ecx, [ebp - 0xc4]
call fcn.004549b0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x5c]
push 0x4e614c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
mov ecx, eax
mov byte [ebp - 4], 0x1f
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450147
lea ecx, [ebp - 0x2c]
mov edi, eax
call fcn.004549b0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4b4ec8
lea eax, [ebp - 0x60]
push 0x4e614c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450147
push eax
lea ecx, [ebp - 0xa4]
call fcn.00464ea0
lea ecx, [ebp - 0x2c]
call fcn.004549b0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x64]
push 0x4e6f44
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450147
lea ecx, [ebp - 0x2c]
mov edi, eax
call fcn.004549b0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4b4f76
lea eax, [ebp - 0x68]
push 0x4e6f44
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.00454820
push eax
mov ecx, esi
call fcn.00450147
push eax
lea ecx, [ebp - 0x13c]
call fcn.00464ea0
lea ecx, [ebp - 0x2c]
call fcn.004549b0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x13c]
push 0x4fbdd0
push eax
call fcn.004625e0
mov bh, al
xor edi, edi
lea eax, [ebp - 0x6c]
push 0x4e6f50
push eax
call fcn.004251a0
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b4fe6
mov edi, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x4b509b
lea eax, [ebp - 0x8c]
push 0x4e6f5c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b5044
mov edi, SysReAllocString
jmp 0x4b509b
lea eax, [ebp - 0x70]
push 0x4e6f68
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
mov eax, SysReAllocString
cmovne edi, eax
lea eax, [ebp]
lea ecx, [ebp - 0xdc]
push eax
cmp bh, 1
jne 0x4b50b1
push 0xf013f
jmp 0x4b50b6
push 0xf003f
push 0
call fcn.00454820
push eax
push edi
call fcn.00482c30
add esp, 0x14
cmp eax, 2
jne 0x4b5104
cmp dword [0x520100], 1
lea eax, [ebp]
push 0
push eax
lea ecx, [ebp - 0xdc]
push 0
jne 0x4b50ea
push 0xf013f
jmp 0x4b50ef
push 0xf003f
push 4
push 0
push 0
call fcn.00454820
push eax
push edi
call fcn.0043b0b0
add esp, 0x24
test eax, eax
jne 0x4b5471
lea eax, [ebp - 0x34]
xor edi, edi
push 0x4e6f74
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b5169
mov edi, 3
jmp 0x4b5437
lea eax, [ebp - 0x38]
push 0x4e6f8c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b51c4
mov edi, 4
jmp 0x4b5437
lea eax, [ebp - 0x40]
push 0x4e6fa4
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b521f
mov edi, 5
jmp 0x4b5437
lea eax, [ebp - 0x44]
push 0x4e6fd0
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b527a
mov edi, 2
jmp 0x4b5437
lea eax, [ebp - 0x3c]
push 0x4e6ff0
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b52d5
mov edi, 6
jmp 0x4b5437
lea eax, [ebp - 0x48]
push 0x4e7004
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b5330
mov edi, 7
jmp 0x4b5437
lea eax, [ebp - 0x4c]
push 0x4e7020
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b5388
xor edi, edi
jmp 0x4b5437
lea eax, [ebp - 0x50]
push 0x4e7034
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4b53e0
mov edi, 0xb
jmp 0x4b5437
lea eax, [ebp - 0x54]
push 0x4e704c
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00455b30
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004625d0
add esp, 8
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.004549b0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
mov eax, 1
cmovne edi, eax
lea ecx, [ebp - 0x10c]
call fcn.00454890
push eax
lea ecx, [ebp - 0x10c]
call fcn.00454820
push eax
push edi
push 0
lea ecx, [ebp - 0x124]
call fcn.00454820
push eax
push dword [ebp]
call fcn.004acb20
push dword [ebp]
call fcn.00404780
add esp, 0x1c
lea eax, [ebp - 0x14]
push 0x4e6f10
push eax
call fcn.004251a0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.0044f657
lea ecx, [ebp - 0x14]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x13c]
call fcn.004549b0
lea ecx, [ebp - 0xa4]
call fcn.004549b0
lea ecx, [ebp - 0x10c]
call fcn.004549b0
lea ecx, [ebp - 0x124]
call fcn.004549b0
lea ecx, [ebp - 0xdc]
call fcn.004549b0
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xb
call fcn.004549b0
test esi, esi
jne 0x4b4af0
lea ecx, [ebp - 0x1fc]
call fcn.004549b0
lea ecx, [ebp - 0x184]
call fcn.004549b0
lea ecx, [ebp - 0x19c]
call fcn.004549b0
lea ecx, [ebp - 0x1b4]
call fcn.004549b0
lea ecx, [ebp - 0x1cc]
call fcn.004549b0
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0
call fcn.004549b0
mov edi, dword [ebp - 0x30]
test edi, edi
je 0x4b5544
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax]
mov ecx, dword [ebp - 0x10]
push 0
push str.SeRestorePrivilege
call fcn.004779e0
mov ecx, dword [ebp - 0x10]
push 0
push str.SeBackupPrivilege
call fcn.004779e0
push 0x200
lea eax, [ebp + 0xc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x10]
push 0x4e705c
push eax
call fcn.0041dc50
add esp, 0x14
push 0x100
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x33
push ecx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, 0x51ff84
call fcn.004ca990
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 4]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x34
push 0x4e707c
push eax
call fcn.0041dc50
add esp, 8
push 0x100
lea edx, [ebp + 0xc]
mov byte [ebp - 4], 0x35
push edx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, 0x51ff84
call fcn.004ca990
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
push 0x1040
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 4]
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push 0
call fcn.004aa3b0
add esp, 0x10
mov ecx, 0x51f9b0
call fcn.0040eed0
test al, al
jne 0x4b5929
mov ecx, 0x51fe60
call fcn.0041f350
push eax
lea ecx, [ebp - 0xc4]
call fcn.004538a0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x37
call fcn.004564e0
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x38
push 0x4e6af0
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x39
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4e6b30
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x54]
push 0x4e6b7c
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x3b
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x50]
push 0x4e6bb8
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x4e6c00
lea eax, [ebp - 0x4c]
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x48]
push 0x4e6c4c
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3c]
push 0x4e6c78
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x44]
push 0x4e6c9c
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x40]
push 0x4e6cd4
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x41
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x38]
push 0x4e697c
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x34]
push 0x4e69b4
push eax
call fcn.0041dc50
add esp, 8
push 0x4dadb0
mov ecx, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
sub esp, 0x18
lea ecx, [ebp]
mov esi, esp
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.004538a0
mov ecx, 0x51fe60
call fcn.0040cda0
mov ecx, 0x51fab8
call fcn.0041dc10
lea ecx, [ebp]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0xc4]
call fcn.004538e0
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 4]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x218]
call fcn.004538e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x20c]
xor ecx, ebp
call fcn.0046dcfd
lea esp, [ebp + 0x210]
pop ebp
ret 0x18