Function at 0x4329c0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4d0bdf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, dword [esp + 0x18]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push eax
push 0x66
mov dword [esp + 0x18], esi
call fcn.004b97da
mov ecx, dword [0x5317dc]
xor ebp, ebp
mov dword [esp + 0x20], ebp
mov dword [esi + 0x60], ecx
mov edx, dword [0x5317dc]
mov ebx, 1
mov byte [esp + 0x20], bl
mov dword [esi + 0x6c], edx
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 2
mov dword [esi + 0x70], eax
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 3
mov dword [esi + 0x74], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 4
mov dword [esi + 0x7c], edx
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 5
mov dword [esi + 0x80], eax
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 6
mov dword [esi + 0x8c], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 7
mov dword [esi + 0xa8], edx
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 8
mov dword [esi + 0xb0], eax
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 9
mov dword [esi + 0xb4], ecx
lea ecx, [esi + 0xb8]
mov byte [esp + 0x20], 0xa
call fcn.004081f0
lea ecx, [esi + 0x110]
mov byte [esp + 0x20], 0xb
call fcn.004081f0
push ebp
lea ecx, [esi + 0x168]
mov byte [esp + 0x24], 0xc
call fcn.00452790
lea edi, [esi + 0xb18]
mov byte [esp + 0x20], 0xd
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004977e2
mov byte [esp + 0x20], 0xe
mov dword [edi], 0x4e04a4
lea edi, [esi + 0xbd4]
mov byte [esp + 0x20], 0xf
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004977e2
mov byte [esp + 0x20], 0x10
mov dword [edi], 0x4e04a4
lea edi, [esi + 0xc90]
mov byte [esp + 0x20], 0x11
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004977e2
mov byte [esp + 0x20], 0x12
mov dword [edi], 0x4e04a4
lea edi, [esi + 0xd4c]
mov byte [esp + 0x20], 0x13
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004977e2
mov byte [esp + 0x20], 0x14
mov dword [edi], 0x4e04a4
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x15
mov dword [esi + 0xe18], edx
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 0x16
mov dword [esi + 0xe1c], eax
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x17
mov dword [esi + 0xe20], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x18
mov dword [esi + 0xe24], edx
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 0x19
mov dword [esi + 0xe28], eax
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x1a
mov dword [esi + 0xe3c], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x1b
mov dword [esi + 0xe40], edx
mov ecx, dword [0x5317dc]
lea eax, [esi + 0xe44]
mov byte [esp + 0x20], 0x1c
mov dword [esp + 0x28], eax
mov dword [eax], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x1d
mov dword [eax + 4], edx
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x1e
mov dword [eax + 8], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x1f
mov dword [eax + 0xc], edx
mov ecx, dword [0x5317dc]
lea eax, [esi + 0x2024]
mov byte [esp + 0x20], 0x21
mov dword [esp + 0x28], eax
mov dword [eax], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x22
mov dword [eax + 4], edx
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x23
mov dword [eax + 8], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x24
mov dword [eax + 0xc], edx
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x25
mov dword [eax + 0x10], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x26
mov dword [eax + 0x14], edx
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x27
mov dword [eax + 0x18], ecx
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x28
mov dword [eax + 0x1c], edx
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x29
mov dword [eax + 0x20], ecx
lea ecx, [esi + 0x2050]
mov byte [esp + 0x20], 0x2b
call fcn.004b1ed6
lea ecx, [esi + 0x2060]
mov byte [esp + 0x20], 0x2c
call fcn.004b1fe1
lea ecx, [esi + 0x20b8]
mov byte [esp + 0x20], 0x2d
call fcn.004b1fe1
lea ecx, [esi + 0x2110]
mov byte [esp + 0x20], 0x2e
call fcn.004b1fe1
lea ecx, [esi + 0x2168]
mov byte [esp + 0x20], 0x2f
call fcn.004b1fe1
lea ecx, [esi + 0x21c0]
mov byte [esp + 0x20], 0x30
call fcn.004b1fe1
lea ecx, [esi + 0x2218]
mov byte [esp + 0x20], 0x31
call fcn.004b1fe1
lea ecx, [esi + 0x2270]
mov byte [esp + 0x20], 0x32
call fcn.004b1fe1
lea ecx, [esi + 0x22c8]
mov byte [esp + 0x20], 0x33
call fcn.004b1fe1
lea ecx, [esi + 0x2320]
mov byte [esp + 0x20], 0x34
call fcn.004b1fe1
lea ecx, [esi + 0x2378]
mov byte [esp + 0x20], 0x35
call fcn.004b1fe1
lea ecx, [esi + 0x23d0]
mov byte [esp + 0x20], 0x36
call fcn.004b1fe1
lea ecx, [esi + 0x2428]
mov byte [esp + 0x20], 0x37
call fcn.004b1fe1
lea edi, [esi + 0x2488]
mov byte [esp + 0x20], 0x38
mov dword [esp + 0x28], edi
mov ecx, edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x39
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x24c4]
mov byte [esp + 0x20], 0x3a
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x3b
mov dword [edi], vtable.CListBox.0
lea edi, [esi + 0x2500]
mov byte [esp + 0x20], 0x3c
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x3d
mov dword [edi], vtable.CListBox.0
lea edi, [esi + 0x253c]
mov byte [esp + 0x20], 0x3e
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x3f
mov dword [edi], vtable.CListBox.0
lea edi, [esi + 0x2578]
mov byte [esp + 0x20], 0x40
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x41
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x25b4]
mov byte [esp + 0x20], 0x42
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x43
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x25f0]
mov byte [esp + 0x20], 0x44
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x45
mov dword [edi], vtable.CStatic.0
lea ecx, [esi + 0x262c]
mov byte [esp + 0x20], 0x46
call fcn.00405af0
lea ecx, [esi + 0x2700]
mov byte [esp + 0x20], 0x47
call fcn.00405af0
lea edi, [esi + 0x27d4]
mov byte [esp + 0x20], 0x48
mov ecx, edi
mov dword [esp + 0x14], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x49
mov dword [edi], vtable.CStatic.0
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x4a
mov dword [edi + 0x44], edx
lea ecx, [edi + 0x58]
mov byte [esp + 0x20], 0x4b
mov dword [esp + 0x28], ecx
call fcn.0040a870
mov eax, dword [esp + 0x28]
mov byte [esp + 0x20], 0x4c
mov dword [eax], vtable.CFont.0
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x4d
mov dword [edi + 0x70], ecx
mov byte [esp + 0x20], 0x4e
mov dword [edi], method.CStatic.virtual_0
lea edi, [esi + 0x2848]
mov byte [esp + 0x20], 0x4f
mov ecx, edi
mov dword [esp + 0x14], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x50
mov dword [edi], vtable.CStatic.0
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x51
mov dword [edi + 0x44], edx
lea ecx, [edi + 0x58]
mov byte [esp + 0x20], 0x52
mov dword [esp + 0x28], ecx
call fcn.0040a870
mov eax, dword [esp + 0x28]
mov byte [esp + 0x20], 0x53
mov dword [eax], vtable.CFont.0
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x54
mov dword [edi + 0x70], ecx
mov byte [esp + 0x20], 0x55
mov dword [edi], method.CStatic.virtual_0
lea edi, [esi + 0x28bc]
mov byte [esp + 0x20], 0x56
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x57
mov dword [edi], vtable.CStatic.0
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x58
mov dword [edi + 0x44], edx
lea ecx, [edi + 0x58]
mov byte [esp + 0x20], 0x59
call fcn.0040e340
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 0x5a
mov dword [edi + 0x70], eax
mov byte [esp + 0x20], 0x5b
mov dword [edi], method.CStatic.virtual_0
lea edi, [esi + 0x2930]
mov byte [esp + 0x20], 0x5c
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x5d
mov dword [edi], vtable.CStatic.0
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x5e
mov dword [edi + 0x44], ecx
lea ecx, [edi + 0x58]
mov byte [esp + 0x20], 0x5f
call fcn.0040e340
mov edx, dword [0x5317dc]
mov byte [esp + 0x20], 0x60
mov dword [edi + 0x70], edx
mov byte [esp + 0x20], 0x61
mov dword [edi], method.CStatic.virtual_0
lea edi, [esi + 0x29a4]
mov byte [esp + 0x20], 0x62
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x63
mov dword [edi], vtable.CStatic.0
mov eax, dword [0x5317dc]
mov byte [esp + 0x20], 0x64
mov dword [edi + 0x44], eax
lea ecx, [edi + 0x58]
mov byte [esp + 0x20], 0x65
call fcn.0040e340
mov ecx, dword [0x5317dc]
mov byte [esp + 0x20], 0x66
mov dword [edi + 0x70], ecx
mov byte [esp + 0x20], 0x67
mov dword [edi], method.CStatic.virtual_0
lea edi, [esi + 0x2a18]
mov byte [esp + 0x20], 0x68
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x69
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2a54]
mov byte [esp + 0x20], 0x6a
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x6b
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2a90]
mov byte [esp + 0x20], 0x6c
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x6d
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2acc]
mov byte [esp + 0x20], 0x6e
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x6f
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2b08]
mov byte [esp + 0x20], 0x70
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x71
mov dword [edi], vtable.CButton.0
lea ecx, [esi + 0x2b44]
mov byte [esp + 0x20], 0x72
call fcn.00407e10
lea edi, [esi + 0x2b84]
mov byte [esp + 0x20], 0x73
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x74
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x2bc0]
mov byte [esp + 0x20], 0x75
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x76
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x2bfc]
mov byte [esp + 0x20], 0x77
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x78
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x2c38]
mov byte [esp + 0x20], 0x79
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x7a
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x2c74]
mov byte [esp + 0x20], 0x7b
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x7c
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2cb0]
mov byte [esp + 0x20], 0x7d
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x7e
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2cec]
mov byte [esp + 0x20], 0x7f
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x80
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2d28]
mov byte [esp + 0x20], 0x81
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x82
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2d64]
mov byte [esp + 0x20], 0x83
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x84
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2da0]
mov byte [esp + 0x20], 0x85
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x86
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2ddc]
mov byte [esp + 0x20], 0x87
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x88
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2e18]
mov byte [esp + 0x20], 0x89
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x8a
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2e54]
mov byte [esp + 0x20], 0x8b
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x8c
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x2e90]
mov byte [esp + 0x20], 0x8d
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.004b3d9d
mov byte [esp + 0x20], 0x8e
mov dword [edi], vtable.CButton.0
push ebp
push ebp
push ebp
push ebp
lea ecx, [esi + 0x2f30]
mov byte [esp + 0x30], 0x8f
call fcn.00410270
push ebp
push ebp
push ebp
push ebp
lea ecx, [esi + 0x3330]
mov byte [esp + 0x30], 0x90
call fcn.00410270
lea ecx, [esi + 0x3738]
mov byte [esp + 0x20], 0x91
call fcn.0040d430
or eax, 0xffffffff
mov byte [esp + 0x20], 0x92
or ecx, 0xffffffff
mov dword [esi + 0x3730], eax
mov dword [esi], method.CDialog.virtual_0
mov dword [esi + 0x3734], ecx
mov dword [esi + 0x2480], ebx
mov dword [esi + 0x2484], ebp
mov dword [esi + 0x2edc], ebx
mov dword [esi + 0x2eec], ebx
mov dword [esi + 0x2f00], ebx
mov dword [esi + 0xb14], ebp
push str.Left
lea ecx, [esi + 0x74]
mov dword [esi + 0xb0c], ebx
mov dword [esi + 0xafc], ebp
mov dword [esi + 0xb04], ebx
mov dword [esi + 0xac], ebp
mov dword [esi + 0xb08], ebx
mov dword [esi + 0x94], ebp
mov dword [esi + 0x90], ebx
mov dword [esi + 0x84], ebp
mov dword [esi + 0x88], ebp
mov dword [esi + 0x64], ebp
mov dword [esi + 0xe0c], ebp
mov dword [esi + 0xe08], 8
mov dword [esi + 0x98], ebp
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ebp
call fcn.004b7b85
call fcn.004c2eea
call fcn.004c2eea
mov eax, dword [eax + 0xc]
push 0x84
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x3790], eax
mov eax, esi
pop edi
pop esi
mov dword [esp + 0x18], 0xffffffff
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret 4