Started @ 0x00401254 Pushed 0x401690 on the stack. 401259 - Calling 40124c 40124C - Jump to MSVBVM60.dll:ThunRTMain (0x6A9DDDA2) 6A9DDDDB - ThunRTMain + 0x0039 Called GetStartupInfoA( lpStartupInfo = 12FF58 ) lpStartupInfo is a pointer to a STARTUPINFO structure (located in this instance on the stack).