Function at 0x41d400
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x541539
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x575494]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x10], ebx
mov dword [esi + 4], 0x552944
mov dword [esi + 0x2c], 0x55294c
mov dword [esi + 0x33bd0], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], ebx
mov byte [esi + 0x1c], bl
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov byte [esi + 0x38], bl
mov dword [ebp - 4], ebx
mov dword [esi], vtable.CAdvTabPageWnd.0
mov dword [esi + 0x40], ebx
mov dword [esi + 0x3c], vtable.CMemDc.0
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov byte [esi + 0x4c], bl
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov byte [esi + 0x58], bl
mov dword [esi + 0x60], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x68], vtable.CDibInfo.0
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x80], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0x5c], vtable.CImgBltEx.0
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
push 1
lea ecx, [esi + 0xac]
call fcn.00508f00
push 1
lea ecx, [esi + 0x13c]
call fcn.00508f00
push 1
lea ecx, [esi + 0x1cc]
call fcn.00508f00
push 1
lea ecx, [esi + 0x25c]
call fcn.00508f00
push 1
lea ecx, [esi + 0x2ec]
call fcn.00508f00
push 1
lea ecx, [esi + 0x37c]
call fcn.00508f00
lea edi, [esi + 0x40c]
call fcn.004bf660
add edi, 0xe88
call fcn.004c1d50
lea edi, [esi + 0x4a00]
mov dword [ebp - 0x10], edi
call fcn.00418500
add edi, 0x1314
push edi
mov byte [ebp - 4], 0xb
call fcn.004ad770
lea edi, [esi + 0x18638]
mov dword [ebp - 0x10], edi
call fcn.00418500
add edi, 0x1314
push edi
mov byte [ebp - 4], 0xd
call fcn.0048f7c0
lea edi, [esi + 0x223f0]
mov dword [ebp - 0x10], edi
call fcn.00418500
add edi, 0x1314
push edi
mov byte [ebp - 4], 0xf
call fcn.0048b490
lea eax, [esi + 0x32094]
call fcn.004bdc40
lea eax, [esi + 0x32138]
call fcn.004b4350
lea eax, [esi + 0x32200]
call fcn.0043a9a0
lea eax, [esi + 0x322ec]
call fcn.004d4680
lea eax, [esi + 0x324d4]
call fcn.004765e0
lea eax, [esi + 0x325a0]
call fcn.004343f0
push 0x409530
push 0x43d3e0
push 6
push 0x2ac
lea eax, [esi + 0x326bc]
push eax
mov byte [ebp - 4], 0x16
call fcn.0051f8e5
push 0x409520
push fcn.00508f00
push 6
push 0x90
lea ecx, [esi + 0x336c4]
push ecx
mov byte [ebp - 4], 0x17
call fcn.0051f8e5
push fcn.00507320
push 0x507280
push 6
push 0xc
lea edx, [esi + 0x33a24]
push edx
mov byte [ebp - 4], 0x18
call fcn.0051f880
push fcn.00507320
push 0x507280
push 6
push 0xc
lea eax, [esi + 0x33a6c]
push eax
mov byte [ebp - 4], 0x19
call fcn.0051f880
mov byte [ebp - 4], 0x1a
push 0x42ec30
push 0x42ec10
push 6
push 0x18
lea ecx, [esi + 0x33ab4]
push ecx
call fcn.0051f880
mov dword [esi + 0x33bc4], ebx
mov dword [esi + 0x33bc8], ebx
mov dword [esi + 0x33bcc], ebx
mov dword [esi + 0x32690], ebx
mov dword [esi + 0x32694], ebx
mov dword [esi + 0x33b9c], ebx
mov dword [esi + 0x33b7c], ebx
mov dword [esi + 0x33b98], ebx
mov ecx, 0x18
lea eax, [esi + 0x32698]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d6c7
mov ecx, 0xc
lea eax, [esi + 0x326b0]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d6d8
mov ecx, 6
lea eax, [esi + 0x33b44]
lea esp, [esp]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d6f0
mov ecx, 0x18
lea eax, [esi + 0x33b64]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d701
mov ecx, 0x18
lea eax, [esi + 0x33b4c]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d712
mov ecx, 0x18
lea eax, [esi + 0x33b80]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d723
mov byte [esi + 0x33ba0], bl
mov ecx, 0x20
lea eax, [esi + 0x33ba4]
lea ebx, [ebx]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41d740
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4