Function at 0x401940
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x43205e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x20], 0
lea edi, [esi + 0x2cec]
mov dword [esp + 0x10], edi
lea ebp, [edi + 0xcd0]
mov dword [esp + 0x14], ebp
lea ecx, [ebp + 0x60]
mov byte [esp + 0x20], 0x3a
call fcn.00401770
mov ecx, ebp
mov byte [esp + 0x20], 0x39
call sub.MFC42.DLL_CDialog::CDialog
lea ecx, [edi + 0xc18]
mov byte [esp + 0x20], 0x38
call fcn.0041b2b0
lea ecx, [edi + 0xbd8]
mov byte [esp + 0x20], 0x37
call sub.MFC42.DLL_CStatic::CStatic
lea ecx, [edi + 0xb98]
mov byte [esp + 0x20], 0x36
call sub.MFC42.DLL_CStatic::CStatic
lea ecx, [edi + 0xa34]
mov byte [esp + 0x20], 0x35
call fcn.0041d7c0
lea ecx, [edi + 0x8d0]
mov byte [esp + 0x20], 0x34
call fcn.0041d7c0
lea ecx, [edi + 0x76c]
mov byte [esp + 0x20], 0x33
call fcn.0041d7c0
lea ecx, [edi + 0x608]
mov byte [esp + 0x20], 0x32
call fcn.0041d7c0
lea ecx, [edi + 0x4a4]
mov byte [esp + 0x20], 0x31
call fcn.0041d7c0
lea ecx, [edi + 0x340]
mov byte [esp + 0x20], 0x30
call fcn.0041d7c0
lea ecx, [edi + 0x1dc]
mov byte [esp + 0x20], 0x2f
call fcn.0041d7c0
lea ecx, [edi + 0x78]
mov byte [esp + 0x20], 0x2e
call fcn.0041d7c0
lea ecx, [edi + 0x70]
mov byte [esp + 0x20], 0x2d
call fcn.00401770
lea ecx, [edi + 0x68]
mov byte [esp + 0x20], 0x2c
call fcn.00401770
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x2b
call fcn.00401770
mov ecx, edi
mov byte [esp + 0x20], 0x2a
call sub.MFC42.DLL_CDialog::CDialog
lea edi, [esi + 0x226c]
mov dword [esp + 0x14], edi
lea ebp, [edi + 0xa08]
mov dword [esp + 0x10], ebp
lea ecx, [ebp + 0x60]
mov byte [esp + 0x20], 0x48
call fcn.00401770
mov ecx, ebp
mov byte [esp + 0x20], 0x47
call sub.MFC42.DLL_CDialog::CDialog
lea ecx, [edi + 0x950]
mov byte [esp + 0x20], 0x46
call fcn.0041b2b0
lea ecx, [edi + 0x910]
mov byte [esp + 0x20], 0x45
call sub.MFC42.DLL_CStatic::CStatic
lea ecx, [edi + 0x8d0]
mov byte [esp + 0x20], 0x44
call sub.MFC42.DLL_CStatic::CStatic
lea ecx, [edi + 0x76c]
mov byte [esp + 0x20], 0x43
call fcn.0041d7c0
lea ecx, [edi + 0x608]
mov byte [esp + 0x20], 0x42
call fcn.0041d7c0
lea ecx, [edi + 0x4a4]
mov byte [esp + 0x20], 0x41
call fcn.0041d7c0
lea ecx, [edi + 0x340]
mov byte [esp + 0x20], 0x40
call fcn.0041d7c0
lea ecx, [edi + 0x1dc]
mov byte [esp + 0x20], 0x3f
call fcn.0041d7c0
lea ecx, [edi + 0x78]
mov byte [esp + 0x20], 0x3e
call fcn.0041d7c0
lea ecx, [edi + 0x70]
mov byte [esp + 0x20], 0x3d
call fcn.00401770
lea ecx, [edi + 0x68]
mov byte [esp + 0x20], 0x3c
call fcn.00401770
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x3b
call fcn.00401770
mov ecx, edi
mov byte [esp + 0x20], 0x29
call sub.MFC42.DLL_CDialog::CDialog
lea ecx, [esi + 0x1f08]
mov byte [esp + 0x20], 0x28
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1f04]
mov byte [esp + 0x20], 0x27
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1f00]
mov byte [esp + 0x20], 0x26
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1efc]
mov byte [esp + 0x20], 0x25
call sub.MFC42.DLL_CString::CString
lea edi, [esi + 0x1e84]
mov dword [esp + 0x14], edi
lea ecx, [edi + 0x60]
mov byte [esp + 0x20], 0x49
mov dword [ecx], 0x436cd0
call fcn.00401810
mov ecx, edi
mov byte [esp + 0x20], 0x24
call sub.MFC42.DLL_CDialog::CDialog
lea edi, [esi + 0x1724]
mov dword [esp + 0x14], edi
lea ecx, [edi + 0x758]
mov byte [esp + 0x20], 0x4c
call sub.MFC42.DLL_CImageList::CImageList
lea ecx, [edi + 0x424]
mov byte [esp + 0x20], 0x4b
call fcn.004207b0
push sub.MFC42.DLL_CEdit::CEdit
push 0xf
lea eax, [edi + 0x64]
push 0x40
push eax
mov byte [esp + 0x30], 0x4a
call fcn.004312de
mov ecx, edi
mov byte [esp + 0x20], 0x23
call sub.MFC42.DLL_CDialog::CDialog
lea edi, [esi + 0x16dc]
mov dword [esp + 0x14], edi
mov dword [edi], 0x436b98
mov ecx, edi
mov byte [esp + 0x20], 0x4d
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x436b84
lea edi, [esi + 0x16d4]
mov dword [esp + 0x14], edi
mov dword [edi], 0x436b98
mov ecx, edi
mov byte [esp + 0x20], 0x4e
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [edi], 0x436b84
mov byte [esp + 0x20], 0x20
lea ecx, [esi + 0x16cc]
mov dword [ecx], 0x436cd0
call fcn.00401810
lea ecx, [esi + 0x16c4]
mov byte [esp + 0x20], 0x1f
mov dword [ecx], 0x436cd0
call fcn.00401810
lea ecx, [esi + 0x16bc]
mov byte [esp + 0x20], 0x1e
mov dword [ecx], 0x436cd0
call fcn.00401810
lea ecx, [esi + 0x16b4]
mov byte [esp + 0x20], 0x1d
mov dword [ecx], 0x436cd0
call fcn.00401810
lea edi, [esi + 0x16ac]
mov dword [esp + 0x14], edi
mov dword [edi], 0x436b98
mov ecx, edi
mov byte [esp + 0x20], 0x4f
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x16a4]
mov dword [edi], 0x436b84
mov byte [esp + 0x20], 0x1b
mov dword [ecx], 0x436cd0
call fcn.00401810
lea ecx, [esi + 0x169c]
mov byte [esp + 0x20], 0x1a
mov dword [ecx], 0x436cd0
call fcn.00401810
lea ecx, [esi + 0x1694]
mov byte [esp + 0x20], 0x19
mov dword [ecx], 0x436cd0
call fcn.00401810
lea ecx, [esi + 0x1654]
mov byte [esp + 0x20], 0x18
call sub.MFC42.DLL_CEdit::CEdit
lea ecx, [esi + 0x14f0]
mov byte [esp + 0x20], 0x17
call fcn.0041d7c0
lea ecx, [esi + 0x138c]
mov byte [esp + 0x20], 0x16
call fcn.0041d7c0
lea ecx, [esi + 0x1228]
mov byte [esp + 0x20], 0x15
call fcn.0041d7c0
lea ecx, [esi + 0x10c4]
mov byte [esp + 0x20], 0x14
call fcn.0041d7c0
lea ecx, [esi + 0xf60]
mov byte [esp + 0x20], 0x13
call fcn.0041d7c0
lea ecx, [esi + 0xdfc]
mov byte [esp + 0x20], 0x12
call fcn.0041d7c0
lea ecx, [esi + 0xc98]
mov byte [esp + 0x20], 0x11
call fcn.0041d7c0
lea ecx, [esi + 0xb34]
mov byte [esp + 0x20], 0x10
call fcn.0041d7c0
lea ecx, [esi + 0x9d0]
mov byte [esp + 0x20], 0xf
call fcn.0041d7c0
lea ecx, [esi + 0x86c]
mov byte [esp + 0x20], 0xe
call fcn.0041d7c0
lea ecx, [esi + 0x708]
mov byte [esp + 0x20], 0xd
call fcn.0041d7c0
lea ecx, [esi + 0x5a4]
mov byte [esp + 0x20], 0xc
call fcn.0041d7c0
lea ecx, [esi + 0x440]
mov byte [esp + 0x20], 0xb
call fcn.0041d7c0
lea ecx, [esi + 0x2dc]
mov byte [esp + 0x20], 0xa
call fcn.0041d7c0
mov byte [esp + 0x20], 9
lea ecx, [esi + 0x29c]
call sub.MFC42.DLL_CStatic::CStatic
lea ecx, [esi + 0xa8]
mov byte [esp + 0x20], 8
call fcn.0041d410
lea ecx, [esi + 0x9c]
mov byte [esp + 0x20], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x98]
mov byte [esp + 0x20], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x94]
mov byte [esp + 0x20], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x90]
mov byte [esp + 0x20], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x8c]
mov byte [esp + 0x20], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x84]
mov byte [esp + 0x20], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x78]
mov byte [esp + 0x20], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x74]
mov byte [esp + 0x20], 0
call sub.MFC42.DLL_CString::CString
mov ecx, esi
mov dword [esp + 0x20], 0xffffffff
call sub.MFC42.DLL_CDialog::CDialog
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x18
ret