Function at 0x402000
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4429ce
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x20], 0
lea edi, [esi + 0x4d64]
mov dword [esp + 0x10], edi
mov dword [edi], 0x448df4
mov ecx, edi
mov byte [esp + 0x20], 0x31
call fcn.00403210
mov dword [edi], 0x448bc0
lea edi, [esi + 0x4c48]
mov dword [esp + 0x10], edi
lea ecx, [edi + 0xc8]
mov byte [esp + 0x20], 0x34
call sub.MFC42.DLL_CString::CString
lea ecx, [edi + 0x68]
mov byte [esp + 0x20], 0x33
call fcn.0042f180
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x32
mov dword [ecx], 0x448d00
call fcn.004011b0
mov ecx, edi
mov byte [esp + 0x20], 0x2f
call fcn.004412fa
lea edi, [esi + 0x44e8]
mov dword [esp + 0x10], edi
lea ecx, [edi + 0x758]
mov byte [esp + 0x20], 0x37
call fcn.0044153a
lea ecx, [edi + 0x424]
mov byte [esp + 0x20], 0x36
call fcn.0042f820
push sub.MFC42.DLL_CEdit::CEdit
push 0xf
lea eax, [edi + 0x64]
push 0x40
push eax
mov byte [esp + 0x30], 0x35
call fcn.00441aaf
mov ecx, edi
mov byte [esp + 0x20], 0x2e
call fcn.004412fa
lea ebp, [esi + 0x4384]
mov dword [esp + 0x10], ebp
lea edi, [ebp + 0x94]
mov dword [esp + 0x14], edi
lea ecx, [edi + 0xc4]
mov byte [esp + 0x20], 0x3b
call fcn.00401220
lea ecx, [edi + 0xc0]
mov byte [esp + 0x20], 0x3a
call sub.MFC42.DLL_CString::CString
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x39
call fcn.00426260
mov ecx, edi
mov byte [esp + 0x20], 0x38
call fcn.004412fa
mov ecx, ebp
mov byte [esp + 0x20], 0x2d
call fcn.004412fa
lea edi, [esi + 0x430c]
mov dword [esp + 0x14], edi
lea ecx, [edi + 0x70]
mov byte [esp + 0x20], 0x3e
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [edi + 0x68]
mov byte [esp + 0x20], 0x3d
call fcn.00401760
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x3c
call fcn.00401760
mov ecx, edi
mov byte [esp + 0x20], 0x2c
call fcn.004412fa
lea edi, [esi + 0x2d50]
mov dword [esp + 0x14], edi
lea ecx, [edi + 0x14b4]
mov byte [esp + 0x20], 0x52
call fcn.00402ca0
lea ecx, [edi + 0x1430]
mov byte [esp + 0x20], 0x51
call fcn.0042d090
lea ecx, [edi + 0x12cc]
mov byte [esp + 0x20], 0x50
call fcn.0042dc90
lea ecx, [edi + 0x1168]
mov byte [esp + 0x20], 0x4f
call fcn.0042dc90
lea ecx, [edi + 0x1004]
mov byte [esp + 0x20], 0x4e
call fcn.0042dc90
lea ecx, [edi + 0xea0]
mov byte [esp + 0x20], 0x4d
call fcn.0042dc90
lea ecx, [edi + 0xd3c]
mov byte [esp + 0x20], 0x4c
call fcn.0042dc90
lea ecx, [edi + 0xcfc]
mov byte [esp + 0x20], 0x4b
call fcn.00441438
lea ecx, [edi + 0xb98]
mov byte [esp + 0x20], 0x4a
call fcn.0042dc90
lea ecx, [edi + 0xa34]
mov byte [esp + 0x20], 0x49
call fcn.0042dc90
lea ecx, [edi + 0x8d0]
mov byte [esp + 0x20], 0x48
call fcn.0042dc90
lea ecx, [edi + 0x76c]
mov byte [esp + 0x20], 0x47
call fcn.0042dc90
lea ecx, [edi + 0x608]
mov byte [esp + 0x20], 0x46
call fcn.0042dc90
lea ecx, [edi + 0x4a4]
mov byte [esp + 0x20], 0x45
call fcn.0042dc90
lea ecx, [edi + 0x340]
mov byte [esp + 0x20], 0x44
call fcn.0042dc90
lea ecx, [edi + 0x1dc]
mov byte [esp + 0x20], 0x43
call fcn.0042dc90
lea ecx, [edi + 0x78]
mov byte [esp + 0x20], 0x42
call fcn.0042dc90
lea ecx, [edi + 0x70]
mov byte [esp + 0x20], 0x41
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [edi + 0x68]
mov byte [esp + 0x20], 0x40
call fcn.00401760
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x3f
call fcn.00401760
mov ecx, edi
mov byte [esp + 0x20], 0x2b
call fcn.004412fa
lea edi, [esi + 0x1a8c]
mov dword [esp + 0x14], edi
lea ecx, [edi + 0x11ec]
mov byte [esp + 0x20], 0x64
call fcn.00402ca0
lea ecx, [edi + 0x1168]
mov byte [esp + 0x20], 0x63
call fcn.0042d090
lea ecx, [edi + 0x1004]
mov byte [esp + 0x20], 0x62
call fcn.0042dc90
lea ecx, [edi + 0xea0]
mov byte [esp + 0x20], 0x61
call fcn.0042dc90
lea ecx, [edi + 0xd3c]
mov byte [esp + 0x20], 0x60
call fcn.0042dc90
lea ecx, [edi + 0xbd8]
mov byte [esp + 0x20], 0x5f
call fcn.0042dc90
lea ecx, [edi + 0xa74]
mov byte [esp + 0x20], 0x5e
call fcn.0042dc90
lea ecx, [edi + 0xa34]
mov byte [esp + 0x20], 0x5d
call fcn.00441438
lea ecx, [edi + 0x8d0]
mov byte [esp + 0x20], 0x5c
call fcn.0042dc90
lea ecx, [edi + 0x76c]
mov byte [esp + 0x20], 0x5b
call fcn.0042dc90
lea ecx, [edi + 0x608]
mov byte [esp + 0x20], 0x5a
call fcn.0042dc90
lea ecx, [edi + 0x4a4]
mov byte [esp + 0x20], 0x59
call fcn.0042dc90
lea ecx, [edi + 0x340]
mov byte [esp + 0x20], 0x58
call fcn.0042dc90
lea ecx, [edi + 0x1dc]
mov byte [esp + 0x20], 0x57
call fcn.0042dc90
lea ecx, [edi + 0x78]
mov byte [esp + 0x20], 0x56
call fcn.0042dc90
lea ecx, [edi + 0x70]
mov byte [esp + 0x20], 0x55
call fcn.00401760
lea ecx, [edi + 0x68]
mov byte [esp + 0x20], 0x54
call fcn.00401760
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x53
call fcn.00401760
mov ecx, edi
mov byte [esp + 0x20], 0x2a
call fcn.004412fa
lea ecx, [esi + 0x1a6c]
mov byte [esp + 0x20], 0x29
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1a68]
mov byte [esp + 0x20], 0x28
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1a64]
mov byte [esp + 0x20], 0x27
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1a48]
mov byte [esp + 0x20], 0x26
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1a24]
mov byte [esp + 0x20], 0x25
mov dword [ecx], 0x448d00
call fcn.004011b0
mov byte [esp + 0x20], 0x24
lea ecx, [esi + 0x1a1c]
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x1a14]
mov byte [esp + 0x20], 0x23
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x1a0c]
mov byte [esp + 0x20], 0x22
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x1a04]
mov byte [esp + 0x20], 0x21
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x19fc]
mov byte [esp + 0x20], 0x20
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x19f4]
mov byte [esp + 0x20], 0x1f
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x19ec]
mov byte [esp + 0x20], 0x1e
mov dword [ecx], 0x448d00
call fcn.004011b0
lea ecx, [esi + 0x19e4]
mov byte [esp + 0x20], 0x1d
call fcn.00401760
lea ecx, [esi + 0x19dc]
mov byte [esp + 0x20], 0x1c
call fcn.00401760
lea ecx, [esi + 0x1878]
mov byte [esp + 0x20], 0x1b
call fcn.0042dc90
lea ecx, [esi + 0x1714]
mov byte [esp + 0x20], 0x1a
call fcn.0042dc90
lea ecx, [esi + 0x15b0]
mov byte [esp + 0x20], 0x19
call fcn.0042dc90
lea ecx, [esi + 0x144c]
mov byte [esp + 0x20], 0x18
call fcn.0042dc90
lea ecx, [esi + 0x12e8]
mov byte [esp + 0x20], 0x17
call fcn.0042dc90
lea ecx, [esi + 0x12a8]
mov byte [esp + 0x20], 0x16
call sub.MFC42.DLL_CEdit::CEdit
lea ecx, [esi + 0x1144]
mov byte [esp + 0x20], 0x15
call fcn.0042dc90
lea ecx, [esi + 0xfe0]
mov byte [esp + 0x20], 0x14
call fcn.0042dc90
lea ecx, [esi + 0xe7c]
mov byte [esp + 0x20], 0x13
call fcn.0042dc90
lea ecx, [esi + 0xd18]
mov byte [esp + 0x20], 0x12
call fcn.0042dc90
lea ecx, [esi + 0xbb4]
mov byte [esp + 0x20], 0x11
call fcn.0042dc90
lea ecx, [esi + 0xa50]
mov byte [esp + 0x20], 0x10
call fcn.0042dc90
lea ecx, [esi + 0x8ec]
mov byte [esp + 0x20], 0xf
call fcn.0042dc90
lea ecx, [esi + 0x788]
mov byte [esp + 0x20], 0xe
call fcn.0042dc90
lea ecx, [esi + 0x624]
mov byte [esp + 0x20], 0xd
call fcn.0042dc90
lea ecx, [esi + 0x4c0]
mov byte [esp + 0x20], 0xc
call fcn.0042dc90
mov byte [esp + 0x20], 0xb
lea ecx, [esi + 0x35c]
call fcn.0042dc90
lea ecx, [esi + 0x31c]
mov byte [esp + 0x20], 0xa
call fcn.00441438
lea ecx, [esi + 0x128]
mov byte [esp + 0x20], 9
call fcn.0042cd60
lea ecx, [esi + 0x104]
mov byte [esp + 0x20], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x100]
mov byte [esp + 0x20], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0xfc]
mov byte [esp + 0x20], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0xf8]
mov byte [esp + 0x20], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0xf4]
mov byte [esp + 0x20], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0xec]
mov byte [esp + 0x20], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0xdc]
mov byte [esp + 0x20], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0xd8]
mov byte [esp + 0x20], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x70]
mov byte [esp + 0x20], 0
call fcn.004412fa
mov ecx, esi
mov dword [esp + 0x20], 0xffffffff
call fcn.004412fa
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x18
ret