Function at 0x418800
Capabilities:
Create process on windows
Read .ini file
Terminate thread

Disassembly:
push 0xffffffffffffffff
push 0x499428
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe10
mov eax, dword [0x4bc410]
xor eax, esp
push ebx
push ebp
mov dword [esp + 0xe14], eax
mov eax, dword [esp + 0xe28]
push esi
mov ebx, 1
cmp eax, ebx
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
jne 0x4188f4
cmp dword [0x4bcdc8], 3
jge 0x419449
mov ecx, 0x4bc8f0
call dword [sym.imp.MSVCP71.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_3]
mov ecx, 0x4bca90
mov dword [esp + 0xe28], 0
call dword [sym.imp.MSVCP71.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_3]
mov eax, dword [0x4bc8ec]
test eax, eax
mov byte [esp + 0xe28], bl
jbe 0x4188db
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov byte [esp + 0xe34], 2
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
mov eax, dword [0x4bc8ec]
push eax
mov ecx, esi
mov byte [esp + 0xe34], bl
call fcn.0040ee90
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
jmp 0x419449
cmp eax, 0x458
jne 0x41898b
mov ecx, dword [esi + 0x524]
test ecx, ecx
je 0x419449
call fcn.0042fe30
test eax, eax
je 0x419449
mov ecx, dword [esi + 0x524]
mov edx, dword [ecx + 0x2c]
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov ecx, dword [esi + 0x524]
test ecx, ecx
je 0x41893c
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
push 0x8c
call sub.MFC71.DLL_operator_new_1
add esp, 4
mov dword [esp + 0x24], eax
test eax, eax
mov dword [esp + 0xe28], 3
je 0x418966
push esi
mov ecx, eax
call fcn.0042fdc0
jmp 0x418968
xor eax, eax
push 0
push 0
push 0
mov ecx, eax
mov dword [esp + 0xe34], 0xffffffff
mov dword [esi + 0x524], eax
call sub.MFC71.DLL_CWinThread::CreateThread
jmp 0x419449
cmp eax, 2
jne 0x418a77
mov eax, dword [esi + 0x174]
xor edi, edi
cmp eax, edi
jne 0x418a0b
lea ecx, [esp + 0x10]
mov dword [esi + 0x174], ebx
call dword [0x49f754]
mov ecx, dword [0x4bc8ec]
mov edx, dword [0x4bc618]
push ecx
push edx
lea eax, [esp + 0x18]
push str._sconfig_transmit_d.xml
push eax
mov dword [esp + 0xe38], 4
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Format]
add esp, 0x10
push edi
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetBuffer]
push eax
mov ecx, esi
call fcn.004126c0
mov ecx, esi
call fcn.00416df0
lea ecx, [esp + 0x10]
mov dword [esp + 0xe28], 0xffffffff
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov ecx, 0x4bd028
call fcn.0042e1f0
cmp eax, 0xffffffff
je 0x419449
cmp dword [esi + 0x178], edi
je 0x418a6c
mov ecx, dword [esi + 0x17c]
inc ecx
mov eax, ecx
mov dword [esi + 0x17c], ecx
cdq
mov ecx, 0x1e
idiv ecx
test edx, edx
jne 0x418a55
mov ecx, esi
call fcn.0040b130
mov ecx, esi
mov dword [esi + 0x178], eax
call fcn.00416110
cmp dword [esi + 0x17c], 0xe10
jne 0x419449
mov ecx, esi
call fcn.00417d20
mov dword [esi + 0x17c], edi
jmp 0x419449
cmp eax, 3
jne 0x418ac2
mov eax, dword [esi + 0x394]
test eax, eax
je 0x418ab1
cmp dword [eax + 0x23c], ebx
jne 0x418ab1
push 2
push eax
mov ecx, esi
call fcn.00416220
test eax, eax
je 0x419449
mov edx, dword [esi + 0x20]
push 3
push edx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x419449
mov eax, dword [esi + 0x20]
push 3
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x419449
cmp eax, 6
jne 0x418baa
mov eax, dword [0x4bc4a0]
test eax, eax
mov edi, dword [sym.imp.USER32.dll_IsWindow]
je 0x418ae1
push eax
call edi
test eax, eax
jne 0x418af9
mov eax, dword [0x4bc4a4]
test eax, eax
je 0x419449
push eax
call edi
test eax, eax
je 0x419449
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
cmp edi, dword [esi + 0x4b4]
jb 0x419449
mov eax, dword [esi + 0x394]
test eax, eax
je 0x418b6d
cmp dword [eax + 0x24], 4
jne 0x418b6d
mov ecx, dword [esi + 0x160]
push eax
call fcn.00404ad0
mov ecx, dword [esi + 0x394]
push eax
lea edx, [ecx + 0x244]
push edx
push ecx
mov ecx, 0x4bc600
call fcn.0045a040
mov eax, dword [esi + 0x4b4]
test eax, eax
jne 0x418b5d
add edi, 0x1b7740
mov dword [esi + 0x4b4], edi
jmp 0x419449
add eax, 0x1b7740
mov dword [esi + 0x4b4], eax
jmp 0x419449
xor eax, eax
push 3
mov ecx, 0x103
lea edi, [esp + 0x204]
rep stosd dword es:[edi], eax
push eax
lea eax, [esp + 0x208]
push eax
mov ecx, esi
mov dword [esp + 0x610], 0x40c
mov dword [esp + 0x20c], 0x13
call fcn.0040ac30
jmp 0x419449
cmp eax, 5
jne 0x418bf6
call fcn.00407180
call fcn.004071c0
mov eax, dword [0x4bc4a0]
test eax, eax
mov edi, dword [sym.imp.USER32.dll_IsWindow]
je 0x418bd3
push eax
call edi
test eax, eax
jne 0x419449
mov eax, dword [0x4bc4a4]
test eax, eax
je 0x418be7
push eax
call edi
test eax, eax
jne 0x419449
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x158]
jmp 0x419449
cmp eax, 7
jne 0x418c07
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x68]
jmp 0x419449
cmp eax, 8
jne 0x418c37
lea ecx, [esp + 0x200]
push ecx
mov ecx, dword [esi + 0x160]
call fcn.00404f00
push 0
lea edx, [esp + 0x204]
push edx
push 0
mov ecx, esi
call fcn.004094e0
jmp 0x419449
cmp eax, 0xa
jne 0x418cac
call fcn.00407180
call fcn.004071c0
mov eax, dword [0x4bc4a0]
mov esi, dword [sym.imp.USER32.dll_IsWindow]
xor edi, edi
cmp eax, edi
je 0x418c5e
push eax
call esi
test eax, eax
jne 0x418c90
mov eax, dword [0x4bc4a4]
cmp eax, edi
je 0x418c6e
push eax
call esi
test eax, eax
jne 0x418c90
mov ecx, dword [0x4bd2c0]
mov eax, 0x1e
mov dword [ecx + 0x6a4], eax
mov edx, dword [0x4bd2c0]
mov dword [edx + 0x6a8], eax
jmp 0x419449
mov eax, dword [0x4bd2c0]
mov dword [eax + 0x6a4], edi
mov ecx, dword [0x4bd2c0]
mov dword [ecx + 0x6a8], edi
jmp 0x419449
cmp eax, 9
jne 0x418da1
mov eax, dword [esi + 0x3a4]
xor ebp, ebp
test eax, eax
jle 0x418d83
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
add edx, 0x39c
mov dword [esp + 0x20], edx
xor edi, edi
lea esp, [esp]
fld qword [0x4a27f0]
mov ecx, dword [esp + 0x20]
push ebp
fstp qword [esp + 0x34]
mov dword [esp + 0x18], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x1c], edi
call fcn.00408c20
mov esi, eax
cmp esi, edi
je 0x418d74
cmp dword [esi + 0x24], 4
jne 0x418d74
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [ebx + 0x160]
lea edx, [esp + 0x44]
push edx
push esi
call fcn.004043d0
test eax, eax
je 0x418d74
fld qword [esp + 0x30]
xor ebx, ebx
mov bh, byte [esi + 1]
push edi
mov bl, byte [esi]
shl ebx, 0x10
call fcn.00496c6c
mov ecx, dword [esi + 0x22c]
movzx eax, ax
or ebx, eax
push ebx
push ecx
push 0x7e7
call fcn.00408180
mov ebx, dword [esp + 0x20]
add esp, 0x10
mov eax, dword [ebx + 0x3a4]
inc ebp
cmp ebp, eax
jl 0x418ce0
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x20]
push 3
push 0
push eax
push 0x71e
call fcn.00408180
add esp, 0x10
jmp 0x419449
cmp eax, 0xb
jne 0x418db2
mov ecx, esi
call fcn.00416df0
jmp 0x419449
cmp eax, 0xd
jne 0x418e4c
call fcn.00407180
call fcn.004071c0
mov eax, dword [0x4bc4a0]
test eax, eax
mov edi, dword [sym.imp.USER32.dll_IsWindow]
je 0x418ddf
push eax
call edi
test eax, eax
jne 0x419449
mov eax, dword [0x4bc4a4]
test eax, eax
je 0x418df3
push eax
call edi
test eax, eax
jne 0x419449
mov ecx, dword [esi + 0x20]
push 0xd
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0
lea ecx, [esp + 0x98]
call fcn.00441050
lea ecx, [esp + 0x94]
mov dword [esp + 0xe28], 5
call sub.MFC71.DLL_CDialog::DoModal
cmp eax, ebx
jne 0x418e30
push ebx
mov ecx, esi
call fcn.0040bba0
lea ecx, [esp + 0x94]
mov dword [esp + 0xe28], 0xffffffff
call fcn.00440f30
jmp 0x419449
cmp eax, 0xe
jne 0x419123
mov edx, dword [esi + 0x20]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [esi + 0x4dc]
xor edi, edi
cmp eax, edi
je 0x419449
cmp dword [esi + 0x160], edi
je 0x419449
push 0x407110
push 0x32
push 0x28
lea eax, [esp + 0x618]
push eax
mov dword [esp + 0x30], edi
call fcn.00408140
mov eax, dword [esi + 0x4dc]
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 0x160]
push 0x32
lea edx, [esp + 0x614]
push edx
push eax
call fcn.00406340
cmp eax, edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edi
jle 0x419449
mov ebp, dword [sym.imp.MSVCR71.dll_sprintf]
jmp 0x418ee0
mov esi, dword [esp + 0x10]
jmp 0x418ee0
xor eax, eax
mov ecx, 0x103
lea edi, [esp + 0x200]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x4dc]
push ecx
lea edx, [esp + 0x208]
push 0x4a0ee0
push edx
mov dword [esp + 0x610], 0x40c
mov dword [esp + 0x20c], 0x12
call ebp
mov eax, dword [esi + 0x4dc]
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x418f28
mov esi, dword [esp + 0x1c]
lea esi, [esi + esi*4]
shl esi, 3
lea edi, [esp + esi + 0x60c]
sub eax, ecx
push edi
lea ebx, [esp + eax + 0x209]
push 0x4a0ee0
push ebx
call ebp
mov eax, edi
add esp, 0xc
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418f60
sub eax, edi
lea edi, [ebx + eax + 1]
mov eax, dword [esp + esi + 0x620]
push eax
push str._ld__
push edi
call ebp
mov eax, edi
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x418f85
mov edx, dword [esp + esi + 0x624]
sub eax, ecx
push 0x4a0f30
lea ecx, [esp + 0xdec]
push ecx
push edx
lea edi, [edi + eax + 1]
call fcn.0043f1f0
lea eax, [esp + 0xdf4]
push eax
push str._s_S
push edi
call ebp
mov eax, edi
add esp, 0x18
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x418fc4
mov edx, dword [esp + esi + 0x628]
sub eax, ecx
push 0x4a0f30
lea ecx, [esp + 0xdec]
push ecx
push edx
lea edi, [edi + eax + 1]
call fcn.0043f1f0
lea eax, [esp + 0xdf4]
push eax
push 0x4a0ee0
push edi
call ebp
mov eax, edi
add esp, 0x18
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x419003
mov edx, dword [esp + esi + 0x62c]
sub eax, ecx
push 0x4a0f30
lea ecx, [esp + 0xdec]
push ecx
push edx
lea edi, [edi + eax + 1]
call fcn.0043f1f0
lea eax, [esp + 0xdf4]
push eax
push 0x4a0ee0
push edi
call ebp
mov eax, edi
add esp, 0x18
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x419042
sub eax, ecx
mov ecx, dword [esp + esi + 0x630]
push ecx
lea edi, [edi + eax + 1]
push 0x4a0ea0
push edi
call ebp
mov eax, edi
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x419067
mov ebx, dword [esp + 0x1c]
sub eax, ecx
test ebx, ebx
lea esi, [edi + eax + 1]
jne 0x4190cf
mov eax, dword [esp + 0x20]
push 0x4a0f30
lea edx, [esp + 0xdec]
push edx
push eax
call fcn.0043f1f0
lea ecx, [esp + 0xdf4]
push ecx
push str._s_S
push esi
call ebp
mov eax, esi
add esp, 0x18
lea edx, [eax + 1]
jmp 0x4190b0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4190b0
mov edi, dword [esp + 0x18]
sub eax, edx
push edi
lea esi, [esi + eax + 1]
push 0x4a0ea0
push esi
call ebp
add esp, 0xc
jmp 0x4190d3
mov edi, dword [esp + 0x18]
lea eax, [edi - 1]
cmp ebx, eax
jne 0x4190fc
cmp edi, 1
jne 0x4190f1
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4190e4
sub eax, edx
lea esi, [esi + eax + 1]
push 0x4a27d8
push esi
call ebp
add esp, 8
mov ecx, dword [esp + 0x10]
push 0
push 0
lea edx, [esp + 0x208]
push edx
call fcn.0040ac30
inc ebx
cmp ebx, edi
mov dword [esp + 0x1c], ebx
jl 0x418ecf
jmp 0x419449
cmp eax, 0x14
jne 0x41917b
mov eax, dword [0x4bd2c0]
cmp dword [eax + 0x7c8], 4
jne 0x41916a
mov ecx, dword [esi + 0x160]
test ecx, ecx
je 0x41916a
push 0
call fcn.00405920
test eax, eax
jl 0x419449
mov ecx, 0x4bd1c8
call fcn.00431d50
mov ecx, dword [esi + 0x20]
push 0x14
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x419449
mov edx, dword [esi + 0x20]
push 0x14
push edx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x419449
cmp eax, 0x15
jne 0x419442
push eax
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push str.configconfig.ini
lea ecx, [esp + 0x2c]
push 0x4bc618
push ecx
call fcn.00401050
add esp, 0xc
lea ecx, [esp + 0x28]
mov dword [esp + 0xe28], 6
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
push 0xc
lea edx, [esp + 0xde4]
push edx
push 0x4a095c
push str.LASTUPDATE
push str.ADVISE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0xddc]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_3]
lea ecx, [esp + 0x10]
mov byte [esp + 0xe28], 7
xor edi, edi
xor ebx, ebx
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::IsEmpty]
test al, al
mov esi, dword [sym.imp.MSVCR71.dll_atoi]
jne 0x4192df
push 4
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Left]
mov ecx, eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
call esi
add esp, 4
lea ecx, [esp + 0x14]
mov edi, eax
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
push 2
push 4
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Mid]
mov ecx, eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
call esi
add esp, 4
lea ecx, [esp + 0x14]
mov ebx, eax
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
push 2
push 6
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Mid]
mov ecx, eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
call esi
add esp, 4
lea ecx, [esp + 0x14]
mov ebp, eax
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
push 2
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Right]
mov ecx, eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
call esi
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x2c], eax
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov edx, dword [esp + 0x2c]
push 0xffffffffffffffff
push 0
push 0
push edx
push ebp
push ebx
push edi
lea ecx, [esp + 0x4c]
call fcn.00407270
mov edi, dword [eax]
mov ebx, dword [eax + 4]
lea ecx, [esp + 0x28]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
push 0xa
lea eax, [esp + 0xde4]
push eax
push 0x4a27c8
push str.NEXTUPDATE
push str.ADVISE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0xddc]
push ecx
call esi
add esp, 4
lea edx, [esp + 0x30]
push edx
mov esi, eax
call fcn.004093e0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
push 0
sub eax, edi
push 0xe10
sbb ecx, ebx
push ecx
push eax
call fcn.00496bc0
cmp eax, esi
jge 0x41934f
cmp eax, 0xa8
jge 0x41934f
test eax, eax
jge 0x41942c
call fcn.00407180
mov eax, dword [0x4bc4a0]
test eax, eax
je 0x41936c
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x41942c
xor eax, eax
mov ecx, 0x11
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x50], 0x44
mov dword [esp + 0x4c], eax
call dword [0x49f754]
lea ecx, [esp + 0x24]
call dword [0x49f754]
mov ecx, dword [0x4bd0ec]
mov edx, dword [0x4bc618]
push ecx
push edx
lea eax, [esp + 0x24]
push str._s_s.exe___update_
push eax
mov byte [esp + 0xe38], 9
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Format]
add esp, 0x10
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x54]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push 0x400
lea ecx, [esp + 0x40]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetBuffer]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [esp + 0x44]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x41940d
push eax
call esi
mov eax, dword [esp + 0x40]
test eax, eax
je 0x419418
push eax
call esi
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0x28]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
jmp 0x419449
mov ecx, esi
call sub.MFC71.DLL_CWnd::Default
mov ecx, dword [esp + 0xe20]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xe14]
pop ebp
pop ebx
xor ecx, esp
call fcn.00496ace
add esp, 0xe1c
ret 4