Function at 0x401df0
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x42761e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi], 0x42ab68
lea ecx, [esi + 0x23c]
mov dword [esp + 0x20], 0x24
call fcn.00414ec0
lea ebx, [esi + 0x270]
mov ecx, ebx
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ebp, [esi + 0x278]
mov ecx, ebp
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x288]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x2a8]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x2c8]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x2e8]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x308]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x328]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x348]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x368]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x388]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x3a8]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x3c8]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x3e8]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x408]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x428]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x448]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x468]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov eax, dword [esi + 0x48c]
test eax, eax
je 0x401f0a
lea ecx, [esi + 0x488]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea edi, [esi + 0x490]
mov ecx, edi
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x7d4]
mov byte [esp + 0x20], 0x23
call fcn.0041bb20
lea ecx, [esi + 0x778]
mov byte [esp + 0x20], 0x22
call fcn.00415830
lea ecx, [esi + 0x708]
mov byte [esp + 0x20], 0x21
call fcn.00411280
lea ecx, [esi + 0x5dc]
mov byte [esp + 0x20], 0x20
call fcn.0041ac10
lea ecx, [esi + 0x4b0]
mov byte [esp + 0x20], 0x1f
call fcn.0041ac10
lea ecx, [esi + 0x4ac]
mov byte [esp + 0x20], 0x1e
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x4a8]
mov byte [esp + 0x20], 0x1d
call sub.MFC42.DLL_CString::CString
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x25
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x488]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x26
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x468]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x27
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x448]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x28
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x428]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x29
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x408]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x2a
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x3e8]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x2b
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x3c8]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x2c
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x3a8]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x2d
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x388]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x2e
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x368]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x2f
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x348]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x30
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x328]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x31
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x308]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x32
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x42ac90
lea edi, [esi + 0x2e8]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x33
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x2c8]
mov dword [edi], 0x42ac90
mov byte [esp + 0x20], 0xd
mov dword [ecx], 0x42ac68
call fcn.00404660
lea ecx, [esi + 0x2a8]
mov byte [esp + 0x20], 0xc
mov dword [ecx], 0x42ac68
call fcn.00404660
lea edi, [esi + 0x288]
mov dword [esp + 0x14], edi
mov dword [edi], 0x42aca4
mov ecx, edi
mov byte [esp + 0x20], 0x34
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x280]
mov dword [edi], 0x42ac90
mov byte [esp + 0x20], 0xa
call fcn.00426968
mov ecx, ebp
mov byte [esp + 0x20], 9
mov dword [ebp], 0x42ac7c
call fcn.00404660
mov ecx, ebx
mov byte [esp + 0x20], 8
mov dword [ebx], 0x42ac7c
call fcn.00404660
lea ecx, [esi + 0x23c]
mov byte [esp + 0x20], 7
call fcn.00411b50
push 0x401de0
push 0x10
lea eax, [esi + 0xb4]
push 0x18
push eax
mov byte [esp + 0x30], 6
call fcn.00426cde
lea ecx, [esi + 0xb0]
mov byte [esp + 0x20], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x84]
mov byte [esp + 0x20], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x78]
mov byte [esp + 0x20], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x70]
mov byte [esp + 0x20], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x68]
mov byte [esp + 0x20], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x64]
mov byte [esp + 0x20], 0
call sub.MFC42.DLL_CString::CString
mov ecx, esi
mov dword [esp + 0x20], 0xffffffff
call sub.MFC42.DLL_CDialog::CDialog
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret