Function at 0x41915a
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x43c55d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x14], esi
call fcn.004396b4
xor ebp, ebp
lea ecx, [esi + 0x40]
mov dword [esp + 0x20], ebp
call fcn.00427cf0
lea ebx, [esi + 0x204]
mov byte [esp + 0x20], 1
mov ecx, ebx
call fcn.0043942c
lea edi, [esi + 0x26c]
mov byte [esp + 0x20], 2
mov dword [esp + 0x10], edi
lea ecx, [edi + 0x14]
call fcn.0043942c
lea ecx, [edi + 0x18]
mov byte [esp + 0x20], 3
call fcn.0043942c
lea ecx, [edi + 0x1c]
mov byte [esp + 0x20], 4
call fcn.0043942c
lea ecx, [edi + 0x24]
mov byte [esp + 0x20], 5
call fcn.0043942c
lea ecx, [edi + 0x28]
mov byte [esp + 0x20], 6
call fcn.0043942c
lea ecx, [edi + 0x2c]
mov byte [esp + 0x20], 7
call fcn.0043942c
lea ecx, [edi + 0x40]
mov byte [esp + 0x20], 8
call fcn.0043942c
lea ecx, [edi + 0x44]
mov byte [esp + 0x20], 9
call fcn.0043942c
lea ecx, [edi + 0x48]
mov byte [esp + 0x20], 0xa
call fcn.0043942c
lea ecx, [edi + 0x4c]
mov byte [esp + 0x20], 0xb
call fcn.0043942c
lea ecx, [edi + 0x50]
mov byte [esp + 0x20], 0xc
call fcn.0043942c
or eax, 0xffffffff
mov dword [edi], ebp
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], ebp
mov dword [edi + 0x20], ebp
mov dword [edi + 0x30], ebp
mov dword [edi + 0x34], ebp
mov dword [edi + 0x38], ebp
mov dword [edi + 0x3c], ebp
mov dword [edi + 0x54], ebp
mov dword [edi + 0x58], ebp
mov dword [edi + 0x5c], ebp
lea ecx, [esi + 0x2cc]
mov byte [esp + 0x20], 0xd
call fcn.0040d7c0
lea ecx, [esi + 0x3b4]
mov byte [esp + 0x20], 0xe
call fcn.0043942c
lea ecx, [esi + 0x3b8]
mov byte [esp + 0x20], 0xf
call fcn.0043942c
lea ecx, [esi + 0x3bc]
mov byte [esp + 0x20], 0x10
call fcn.0043942c
lea ecx, [esi + 0x3c0]
mov byte [esp + 0x20], 0x11
call fcn.0043942c
lea ecx, [esi + 0x834]
mov byte [esp + 0x20], 0x12
call fcn.0043942c
mov dword [esi + 0x3ffc], ebp
mov dword [esi + 0x3ef4], 0x440b1c
lea ecx, [esi + 0x4000]
mov byte [esp + 0x20], 0x14
call fcn.0043942c
lea ecx, [esi + 0x4008]
mov byte [esp + 0x20], 0x15
call fcn.0043942c
lea ecx, [esi + 0x400c]
mov byte [esp + 0x20], 0x16
call fcn.0043942c
lea ecx, [esi + 0x401c]
mov byte [esp + 0x20], 0x17
call fcn.00409ca0
lea ecx, [esi + 0x4068]
mov byte [esp + 0x20], 0x18
call fcn.0043942c
or eax, 0xffffffff
push 0x451f28
mov ecx, ebx
mov byte [esp + 0x24], 0x19
mov dword [esi], 0x4417f8
mov dword [esi + 0x1fc], eax
mov dword [esi + 0x200], eax
call fcn.00439426
mov dword [esi + 0x208], ebp
mov dword [esi + 0x20c], ebp
call dword [0x43f12c]
mov ecx, esi
mov dword [esi + 0x264], eax
mov dword [esi + 0x268], ebp
call fcn.00419610
mov ecx, 0x1aa
xor eax, eax
lea edi, [esi + 0x840]
mov dword [esi + 0x82c], ebp
mov dword [esi + 0x830], ebp
push 0x451f28
rep stosd dword es:[edi], eax
mov ecx, 0xc03
lea edi, [esi + 0xee8]
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x400c]
mov dword [esi + 0x3c4], ebp
call fcn.00439426
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.00420430
push eax
lea ecx, [esi + 0x4068]
mov byte [esp + 0x24], 0x1a
call fcn.0043944a
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0x19
call fcn.0043941a
mov ecx, dword [esp + 0x18]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret