Function at 0x43f4f8
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
mov ecx, 0x497248
jmp 0x43f4e0
push 0xffffffffffffffff
push 0x45b433
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call sub.MFC42.DLL_CString::CString_1
lea edi, [esi + 4]
xor ebx, ebx
mov ecx, edi
mov dword [esp + 0x1c], ebx
call sub.MFC42.DLL_CString::CString_1
lea ebp, [esi + 0x1c]
mov byte [esp + 0x1c], 1
mov ecx, ebp
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x48]
mov byte [esp + 0x1c], 2
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xd8]
mov byte [esp + 0x1c], 3
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xe8]
mov byte [esp + 0x1c], 4
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xec]
mov byte [esp + 0x1c], 5
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xf0]
mov byte [esp + 0x1c], 6
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xf4]
mov byte [esp + 0x1c], 7
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xf8]
mov byte [esp + 0x1c], 8
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0xfc]
mov byte [esp + 0x1c], 9
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x104]
mov byte [esp + 0x1c], 0xa
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x108]
mov byte [esp + 0x1c], 0xb
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x118]
mov byte [esp + 0x1c], 0xc
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x11c]
mov byte [esp + 0x1c], 0xd
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x124]
mov byte [esp + 0x1c], 0xe
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x134]
mov byte [esp + 0x1c], 0xf
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x144]
mov byte [esp + 0x1c], 0x10
call sub.MFC42.DLL_CString::CString_1
mov byte [esp + 0x1c], 0x11
lea ecx, [esi + 0x150]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x154]
mov byte [esp + 0x1c], 0x12
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x168]
mov byte [esp + 0x1c], 0x13
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x16c]
mov byte [esp + 0x1c], 0x14
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x170]
mov byte [esp + 0x1c], 0x15
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x174]
mov byte [esp + 0x1c], 0x16
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x178]
mov byte [esp + 0x1c], 0x17
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x17c]
mov byte [esp + 0x1c], 0x18
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x180]
mov byte [esp + 0x1c], 0x19
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x184]
mov byte [esp + 0x1c], 0x1a
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x18c]
mov byte [esp + 0x1c], 0x1b
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x190]
mov byte [esp + 0x1c], 0x1c
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x1a8]
mov byte [esp + 0x1c], 0x1d
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x1ac]
mov byte [esp + 0x1c], 0x1e
call sub.MFC42.DLL_CString::CString_1
push sub.MFC42.DLL_CString::CString
push sub.MFC42.DLL_CString::CString_1
push 0x14
lea eax, [esi + 0x2ac]
push 4
push eax
mov byte [esp + 0x30], 0x1f
call fcn.004585bf
lea ecx, [esi + 0x3b0]
mov byte [esp + 0x1c], 0x20
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x3dc]
mov byte [esp + 0x1c], 0x21
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esi + 0x3e8]
mov byte [esp + 0x1c], 0x22
call sub.MFC42.DLL_CString::CString_1
push 0x4970cc
mov ecx, esi
mov byte [esp + 0x20], 0x23
call fcn.004581ae
push 0x4970cc
mov ecx, edi
call fcn.004581ae
push 0x4970cc
mov ecx, ebp
call fcn.004581ae
lea edx, [esi + 0xa]
mov byte [esi + 8], bl
xor ecx, ecx
mov byte [esi + 9], bl
mov dword [edx], ecx
xor eax, eax
mov edi, 1
or ebp, 0xffffffff
mov byte [edx + 4], cl
lea ecx, [esi + 0xf]
mov dword [esi + 0xf], eax
mov dword [ecx + 4], eax
mov word [ecx + 8], ax
mov byte [esi + 0x19], bl
mov dword [esi + 0x20], ebx
mov byte [esi + 0x24], bl
mov dword [esi + 0x28], edi
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov byte [esi + 0x40], 2
mov dword [esi + 0x44], ebp
mov dword [esi + 0x4c], ebx
mov byte [esi + 0x50], bl
mov byte [esi + 0x51], bl
mov byte [esi + 0x52], 4
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], 0x64
mov byte [esi + 0x64], bl
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov byte [esi + 0x78], bl
mov byte [esi + 0x79], 0xff
mov byte [esi + 0x7b], bl
mov byte [esi + 0x7c], 4
mov byte [esi + 0x7d], 2
mov byte [esi + 0x7e], 3
mov byte [esi + 0x7f], 6
mov byte [esi + 0x80], bl
mov byte [esi + 0x81], bl
mov byte [esi + 0x82], bl
mov byte [esi + 0x83], bl
mov byte [esi + 0x84], bl
mov byte [esi + 0x85], 0x10
mov byte [esi + 0x86], bl
mov dword [esi + 0x88], ebx
mov byte [esi + 0x96], bl
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], 0x42200000
mov word [esi + 0x94], di
mov byte [esi + 0x97], bl
mov byte [esi + 0x98], bl
mov word [esi + 0x9a], bx
mov byte [esi + 0x9c], bl
mov dword [esi + 0xa0], ebx
mov byte [esi + 0xa4], 1
mov byte [esi + 0xa5], bl
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xbc], ebx
mov byte [esi + 0xc0], bl
mov byte [esi + 0xc1], bl
mov byte [esi + 0xc2], bl
mov byte [esi + 0xc3], bl
mov byte [esi + 0xa6], 2
mov eax, 0x8000
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], eax
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], eax
mov dword [esi + 0xc4], ebx
mov dword [esi + 0xc8], ebx
mov byte [esi + 0xcc], 1
mov byte [esi + 0xcd], 0x64
mov dword [esi + 0xd0], ebx
push 0x4970cc
lea ecx, [esi + 0xd8]
mov dword [esi + 0xd4], ebx
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0xe8]
mov byte [esi + 0xdc], bl
mov byte [esi + 0xdd], 1
mov dword [esi + 0xe0], ebx
mov byte [esi + 0xe4], bl
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0xec]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0xf0]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0xf4]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0xf8]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0xfc]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x104]
mov dword [esi + 0x100], ebx
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x108]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x118]
mov dword [esi + 0x110], ebx
mov byte [esi + 0x114], bl
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x11c]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x134]
mov byte [esi + 0x120], bl
mov dword [esi + 0x130], ebx
call fcn.004581ae
push str.Alcor
lea ecx, [esi + 0x144]
mov dword [esi + 0x13c], ebx
mov dword [esi + 0x140], ebx
mov dword [esi + 0x148], ebx
mov byte [esi + 0x14c], bl
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x158], ebx
mov dword [esi + 0x15c], ebx
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x150]
mov dword [esi + 0x148], ebx
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x154]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x168]
mov dword [esi + 0x160], ebx
mov dword [esi + 0x164], ebx
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x16c]
mov byte [esi + 0x121], bl
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x170]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x174]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x178]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x17c]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x180]
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x184]
call fcn.004581ae
push str.12345678
lea ecx, [esi + 0x18c]
mov byte [esi + 0x188], bl
mov byte [esi + 0x189], 8
call fcn.004581ae
push 0x494608
lea ecx, [esi + 0x190]
call fcn.004581ae
mov dword [esi + 0x198], ebx
mov dword [esi + 0x1a0], ebx
push 0x494608
lea ecx, [esi + 0x1a8]
mov dword [esi + 0x19c], ebx
mov dword [esi + 0x1a4], ebx
call fcn.004581ae
push 0x4970cc
lea ecx, [esi + 0x1ac]
call fcn.004581ae
mov eax, 4
mov byte [esi + 0x1b0], bl
mov dword [esi + 0x1b4], eax
mov dword [esi + 0x1b8], eax
mov dword [esi + 0x1bc], ebx
mov dword [esi + 0x1c0], ebx
mov dword [esi + 0x1c4], ebx
mov byte [esi + 0x1c8], bl
mov byte [esi + 0x1c9], bl
mov dword [esi + 0x1cc], ebx
mov dword [esi + 0x1d0], ebx
mov byte [esi + 0x1d4], bl
mov dword [esi + 0x1d8], ebx
mov dword [esi + 0x3a8], ebx
mov byte [esi + 0x3ac], bl
mov byte [esi + 0x3ad], bl
push 0x4970cc
lea ecx, [esi + 0x3b0]
mov byte [esi + 0x3ae], 0x64
call fcn.004581ae
mov byte [esi + 0x1dc], bl
mov dword [esi + 0x3b8], ebx
lea eax, [esi + 0x3c4]
mov dword [esi + 0x3bc], ebp
xor edx, edx
mov dword [esi + 0x3c0], ebx
mov dword [eax], edx
push 0x4970cc
lea ecx, [esi + 0x3dc]
mov word [eax + 4], dx
mov byte [esi + 0x3ca], 1
mov byte [esi + 0x3d0], bl
mov dword [esi + 0x3b4], edi
mov dword [esi + 0x3d8], ebx
call fcn.004581ae
mov dword [esi + 0x3e0], ebx
mov dword [esi + 0x418], ebx
mov dword [esi + 0x41c], ebx
mov dword [esi + 0x3ec], ebx
mov dword [esi + 0x3f0], 0x1ea
mov dword [esi + 0x3f4], 0x3d4
mov dword [esi + 0x3f8], 0x7a8
mov dword [esi + 0x3fc], 0xf50
mov dword [esi + 0x400], 0x1ea0
mov dword [esi + 0x404], 0x3d40
mov dword [esi + 0x408], 0x7a80
mov dword [esi + 0x40c], 0xf500
mov dword [esi + 0x410], 0x1ea00
mov dword [esi + 0x414], 0x3d400
mov dword [esi + 0x60], ebx
mov byte [esi + 0x424], bl
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0xc]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret