Function at 0x405bc0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x440d11
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x14], esi
call sub.MFC42.DLL_CFrameWnd::CFrameWnd
lea ebp, [esi + 0xc0]
xor edi, edi
mov ecx, ebp
mov dword [esp + 0x30], edi
call dword [sym.imp.Zbf.dll_public:_void___thiscall_CBase::constructor_void_]
lea ecx, [esi + 0xe4]
mov byte [esp + 0x30], 1
call sub.MFC42.DLL_CStatusBar::CStatusBar
lea ecx, [esi + 0x164]
mov byte [esp + 0x30], 2
call sub.MFC42.DLL_CToolBar::CToolBar
lea ecx, [esi + 0x204]
mov byte [esp + 0x30], 3
call fcn.00404bc0
lea ecx, [esi + 0x2f0]
mov byte [esp + 0x30], 4
call fcn.0043f5d4
lea ecx, [esi + 0x2f4]
mov byte [esp + 0x30], 5
call fcn.0043f5d4
lea ecx, [esi + 0x2f8]
mov byte [esp + 0x30], 6
call fcn.0043f5d4
lea ecx, [esi + 0x2fc]
mov byte [esp + 0x30], 7
call fcn.0043f5d4
lea ecx, [esi + 0x300]
mov byte [esp + 0x30], 8
call fcn.0043f5d4
lea ecx, [esi + 0x304]
mov byte [esp + 0x30], 9
call fcn.0043f5d4
lea ecx, [esi + 0x31c]
mov byte [esp + 0x30], 0xa
call fcn.0043f5d4
lea ecx, [esi + 0x324]
mov byte [esp + 0x30], 0xb
call fcn.0043f5d4
lea ecx, [esi + 0x364]
mov byte [esp + 0x30], 0xc
call fcn.0043f5d4
mov dword [esi + 0x368], edi
lea ecx, [esi + 0x374]
mov byte [esp + 0x30], 0xd
mov dword [esi + 0x36c], edi
mov dword [esi + 0x370], edi
call sub.MFC42.DLL_CStringArray::CStringArray
lea ecx, [esi + 0x388]
mov byte [esp + 0x30], 0xe
call fcn.0043f5d4
lea ecx, [esi + 0x39c]
mov byte [esp + 0x30], 0xf
call fcn.0043f5d4
lea ecx, [esi + 0x3a0]
mov byte [esp + 0x30], 0x10
call fcn.0043f5d4
lea ecx, [esi + 0x3b4]
mov byte [esp + 0x30], 0x11
call fcn.0043f5d4
lea ecx, [esi + 0x3bc]
mov byte [esp + 0x30], 0x12
call fcn.0043f5d4
lea ecx, [esi + 0x3c0]
mov byte [esp + 0x30], 0x13
call fcn.0043f5d4
mov dword [esi + 0x3c4], edi
mov dword [esi + 0x3c8], 0x44b648
mov dword [esi + 0x3cc], edi
mov dword [esi + 0x3d8], edi
mov dword [esi + 0x3d4], edi
mov dword [esi + 0x3d0], edi
lea ecx, [esi + 0x3e8]
mov byte [esp + 0x30], 0x16
call fcn.0043f5d4
mov dword [esi + 0x3ec], edi
lea ecx, [esi + 0x3f8]
mov byte [esp + 0x30], 0x17
mov dword [esi + 0x3f0], edi
mov dword [esi + 0x3f4], edi
call fcn.0043f5d4
mov dword [esi + 0x3fc], edi
lea ecx, [esi + 0x430]
mov byte [esp + 0x30], 0x18
mov dword [esi + 0x400], edi
mov dword [esi + 0x404], edi
call fcn.00401600
lea ecx, [esi + 0x438]
mov byte [esp + 0x30], 0x19
call sub.MFC42.DLL_CStringArray::CStringArray
mov dword [esi + 0x454], 0x44b634
mov dword [esi + 0x458], edi
mov dword [esi + 0x464], edi
mov dword [esi + 0x460], edi
mov dword [esi + 0x45c], edi
lea ebx, [esi + 0x46c]
mov byte [esp + 0x30], 0x1b
mov dword [esp + 0x18], ebx
lea ecx, [ebx + 4]
call fcn.0043f5d4
lea ecx, [ebx + 8]
mov byte [esp + 0x30], 0x1c
call fcn.0043f5d4
lea ecx, [ebx + 0xc]
mov byte [esp + 0x30], 0x1d
call fcn.0043f5d4
lea ecx, [ebx + 0x10]
mov byte [esp + 0x30], 0x1e
call fcn.0043f5d4
lea ecx, [ebx + 0x14]
mov byte [esp + 0x30], 0x1f
call fcn.0043f5d4
lea ecx, [ebx + 0x1c]
mov byte [esp + 0x30], 0x20
call fcn.0043f5d4
lea ecx, [ebx + 0x38]
mov byte [esp + 0x30], 0x21
call fcn.0043f5d4
lea ecx, [ebx + 0x3c]
mov byte [esp + 0x30], 0x22
call fcn.0043f5d4
lea ecx, [ebx + 0x44]
mov byte [esp + 0x30], 0x23
call fcn.0043f5d4
lea ecx, [ebx + 0x48]
mov byte [esp + 0x30], 0x24
call fcn.0043f5d4
lea ecx, [ebx + 0x68]
mov byte [esp + 0x30], 0x25
call fcn.0043f5d4
lea ecx, [ebx + 0x70]
mov byte [esp + 0x30], 0x26
call fcn.0043f5d4
push 0x45c564
lea ecx, [ebx + 4]
mov byte [esp + 0x34], 0x27
mov dword [ebx], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 8]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x10]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x14]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0xc]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x1c]
mov dword [ebx + 0x18], edi
call sub.MFC42.DLL_CString::operator
or eax, 0xffffffff
push 0x45c564
lea ecx, [ebx + 0x38]
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], edi
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], eax
mov dword [ebx + 0x34], eax
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x3c]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x44]
mov dword [ebx + 0x40], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x48]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x4c], edi
mov dword [ebx + 0x50], edi
mov dword [ebx + 0x54], edi
mov dword [ebx + 0x58], edi
mov dword [ebx + 0x5c], edi
mov dword [ebx + 0x60], edi
mov dword [ebx + 0x64], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [ebx + 0x70]
call sub.MFC42.DLL_CString::operator
mov dword [ebx + 0x74], edi
mov dword [ebx + 0x78], edi
mov dword [ebx + 0x7c], edi
mov dword [ebx + 0x80], edi
mov dword [ebx + 0x84], edi
lea ecx, [esi + 0x4f4]
mov byte [esp + 0x30], 0x28
call fcn.0043f5d4
lea ecx, [esi + 0x4f8]
mov byte [esp + 0x30], 0x29
call sub.MFC42.DLL_CUIntArray::CUIntArray
lea ecx, [esi + 0x510]
mov byte [esp + 0x30], 0x2a
call sub.MFC42.DLL_CStringArray::CStringArray
lea ecx, [esi + 0x590]
mov byte [esp + 0x30], 0x2b
call fcn.0043f5d4
lea ebx, [esi + 0x594]
mov dword [esp + 0x18], ebx
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov dword [ebx + 0x18], 0x44b620
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x28], edi
mov dword [ebx + 0x24], edi
mov dword [ebx + 0x20], edi
lea ecx, [ebx + 0x30]
mov byte [esp + 0x30], 0x2d
call fcn.0043f5d4
push 0x45c564
lea ecx, [ebx + 0x30]
mov byte [esp + 0x34], 0x2e
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x2c], edi
call sub.MFC42.DLL_CString::operator
mov dword [ebx + 0x34], edi
mov dword [esi], 0x44b524
mov dword [ebp], 0x44b520
mov dword [esi + 0x2e0], edi
mov dword [esi + 0x2e4], edi
mov dword [esi + 0x2e8], edi
push 0x45c564
lea ecx, [esi + 0x2f0]
mov byte [esp + 0x34], 0x2f
mov dword [esi + 0x2ec], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x2f4]
mov dword [esi + 0x414], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x2f8]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x2fc]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x300]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x304]
call sub.MFC42.DLL_CString::operator
mov dword [esi + 0x308], edi
mov dword [esi + 0x30c], edi
mov dword [esi + 0x310], edi
mov dword [esi + 0x314], edi
mov dword [esi + 0x390], edi
push 0x45c564
lea ecx, [esi + 0x31c]
mov dword [esi + 0x318], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x324]
mov dword [esi + 0x320], edi
call sub.MFC42.DLL_CString::operator
mov dword [esi + 0x328], edi
mov dword [esi + 0x32c], edi
mov dword [esi + 0x330], edi
mov dword [esi + 0x334], edi
mov dword [esi + 0x338], edi
push 0x45c564
lea ecx, [esi + 0x364]
mov dword [esi + 0x33c], edi
mov dword [esi + 0x340], edi
mov dword [esi + 0x344], edi
mov dword [esi + 0x348], edi
mov dword [esi + 0x34c], edi
mov dword [esi + 0x350], edi
mov dword [esi + 0x354], edi
mov dword [esi + 0x358], edi
mov dword [esi + 0x35c], edi
mov dword [esi + 0x394], edi
mov dword [esi + 0x360], edi
call sub.MFC42.DLL_CString::operator
lea eax, [esp + 0x1c]
push eax
call sub.MFC42.DLL_COleDateTime::GetTickCount
mov ecx, dword [eax]
push 0xffffffffffffffff
mov dword [esi + 0x368], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x36c], edx
mov eax, dword [eax + 8]
push edi
lea ecx, [esi + 0x374]
mov dword [esi + 0x370], eax
call sub.MFC42.DLL_CStringArray::SetSize
push 0x45c564
lea ecx, [esi + 0x388]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x39c]
mov dword [esi + 0x38c], edi
mov dword [esi + 0x398], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x3a0]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x3b4]
mov dword [esi + 0x3a4], edi
mov dword [esi + 0x3a8], edi
mov dword [esi + 0x3ac], edi
mov dword [esi + 0x3b0], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x3bc]
mov dword [esi + 0x3b8], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x3c0]
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x3e8]
mov dword [esi + 0x3dc], edi
mov dword [esi + 0x3e0], edi
mov dword [esi + 0x3e4], edi
call sub.MFC42.DLL_CString::operator
push 0x45c564
lea ecx, [esi + 0x3f8]
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x1c]
push ecx
call sub.MFC42.DLL_COleDateTime::GetTickCount
mov edx, dword [eax]
mov dword [esi + 0x3fc], edx
mov ecx, dword [eax + 4]
mov dword [esi + 0x400], ecx
mov edx, dword [eax + 8]
lea eax, [esp + 0x18]
mov dword [esi + 0x404], edx
push eax
mov dword [esi + 0x408], edi
mov dword [esi + 0x468], edi
call sub.MFC42.DLL_CTime::GetTickCount
mov ecx, dword [eax]
mov dword [esi + 0x40c], ecx
mov eax, dword [esi + 0x3c4]
cmp eax, edi
je 0x4062a2
mov dword [esi + 0x3c4], edi
mov edx, dword [eax]
push eax
call dword [edx + 8]
push 0x45c564
lea ecx, [esi + 0x4f4]
mov dword [esi + 0x410], edi
call sub.MFC42.DLL_CString::operator
lea eax, [esp + 0x1c]
mov dword [esi + 0x50c], edi
push eax
call sub.MFC42.DLL_COleDateTime::GetTickCount
mov ecx, dword [eax]
push 0x45c564
mov dword [esi + 0x3ec], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x3f0], edx
mov eax, dword [eax + 8]
mov dword [esi + 0x3f4], eax
mov dword [esi + 0x580], edi
mov dword [esi + 0x588], edi
lea ecx, [esi + 0x590]
mov dword [esi + 0x434], edi
mov dword [esi + 0x584], edi
mov dword [esi + 0x58c], edi
call sub.MFC42.DLL_CString::operator
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x44c], edi
mov dword [esi + 0x450], edi
mov dword [esi + 0x5cc], edi
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret