Function at 0x41d4f0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x45bf17
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x28], 1
mov eax, dword [0x473e34]
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
lea eax, [esp + 0x10]
mov bl, 4
push 0x801d
push eax
mov byte [esp + 0x30], bl
call fcn.00420b20
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
push 0x473644
push 0x47363c
push edx
mov byte [esp + 0x40], 5
call fcn.0044949e
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.0044b0ed
lea eax, [esp + 8]
lea ecx, [esp + 0xc]
push eax
call fcn.0044b226
lea ecx, [esp + 0x10]
push 0x801f
push ecx
call fcn.00420b20
mov edx, dword [eax]
lea eax, [esp + 0x10]
push edx
push 0x47362c
push 0x473624
push eax
mov byte [esp + 0x40], 6
call fcn.0044949e
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.0044b0ed
lea ecx, [esp + 8]
push ecx
lea ecx, [esp + 0x10]
call fcn.0044b505
lea edx, [esp + 0x10]
push 0x801e
push edx
call fcn.00420b20
mov eax, dword [eax]
lea ecx, [esp + 0x10]
push eax
push 0x473610
push 0x473624
push ecx
mov byte [esp + 0x40], 7
call fcn.0044949e
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.0044b0ed
lea edx, [esp + 8]
lea ecx, [esp + 0xc]
push edx
call fcn.0044b505
mov eax, dword [esp + 0x34]
lea ecx, [esp + 8]
push eax
push 0x4735fc
push 0x4735f4
push ecx
call fcn.0044949e
add esp, 0x10
lea edx, [esp + 8]
lea ecx, [esp + 0xc]
push edx
call fcn.0044b505
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.0044ae62
lea ecx, [esp + 0x38]
push ecx
call fcn.0041faa0
mov edx, dword [eax]
lea eax, [esp + 0x10]
push edx
push 0x4735e8
push 0x473624
push eax
mov byte [esp + 0x40], 8
call fcn.0044949e
add esp, 0x18
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], bl
call fcn.0044b0ed
lea ecx, [esp + 8]
push ecx
lea ecx, [esp + 0x10]
call fcn.0044b505
push ecx
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.0044ae62
lea eax, [esp + 0x38]
push eax
call fcn.0041faa0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
push 0x4735d8
push 0x473624
push edx
mov byte [esp + 0x40], 9
call fcn.0044949e
add esp, 0x18
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], bl
call fcn.0044b0ed
lea eax, [esp + 8]
lea ecx, [esp + 0xc]
push eax
call fcn.0044b505
push 0x4735cc
lea ecx, [esp + 0xc]
push 0x4735c8
push ecx
call fcn.0044949e
add esp, 0xc
lea edx, [esp + 8]
lea ecx, [esp + 0xc]
push edx
call fcn.0044b505
mov eax, dword [esp + 0xc]
push 0
lea ecx, [esp + 0x10]
mov esi, dword [eax - 8]
call fcn.0044b51d
push eax
push esi
call fcn.00408e70
mov ecx, eax
add esp, 8
and eax, 0xff
xor edx, edx
mov esi, 0x3e
push 1
div esi
xor eax, eax
mov al, ch
mov ecx, esi
and eax, 0xff
mov byte [esp + 0x14], dl
xor edx, edx
div ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], dl
mov edx, dword [esp + 0x38]
and edx, 0xff
mov al, byte [edx + 0x473588]
push eax
call fcn.00448e1a
mov esi, eax
mov ecx, dword [esp + 0x10]
push 1
and ecx, 0xff
mov byte [esp + 0x2c], 0xa
mov dl, byte [ecx + 0x473588]
lea ecx, [esp + 0x18]
push edx
call fcn.00448e1a
push esi
push eax
lea eax, [esp + 0x3c]
mov byte [esp + 0x30], 0xb
push eax
call fcn.0044b31c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0xc
call fcn.0044b505
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], 0xb
call fcn.0044b0ed
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0xa
call fcn.0044b0ed
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], bl
call fcn.0044b0ed
mov esi, dword [esp + 0x30]
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
call fcn.0044ae62
mov dword [esp + 0x1c], 1
lea ecx, [esp + 8]
mov byte [esp + 0x28], 3
call fcn.0044b0ed
lea ecx, [esp + 0xc]
mov byte [esp + 0x28], 2
call fcn.0044b0ed
lea ecx, [esp + 0x38]
mov byte [esp + 0x28], 1
call fcn.0044b0ed
lea ecx, [esp + 0x3c]
mov byte [esp + 0x28], 0
call fcn.0044b0ed
mov ecx, dword [esp + 0x20]
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret